I.- Who is responsible for handling your data?
The party responsible for processing your data is Barceló Gestión Hotelera, S.L. (hereinafter referred to as BGH or Barceló) with a registered office at c/ Josep Rover Motta, 27, 07006, Palma de Mallorca. If you have any questions regarding data protection, please contact the Barceló Group's Data Protection Office at dpo@barcelo.com.
II.- Why are we handling your data?
BGH hereby informs the interested party that their data will be handled by Barceló for the following purposes:
1. Managing user requests.
Barceló will process the data required to answer the user's request for information. We will therefore process data like your name, surname(s), email, and telephone number. This data processing will be carried out in the same way in the event that the request is made by a journalist or similar, in which case Barceló will also capture information relating to the media represented and the information request directed by the interested party.
Legal standing: This processing of data will only be carried out if BGH has the consent of the user.
2. Analysis and study of web user interactions with the site.
Barceló may process personal user data on the website, through their IP or MAC address, or in the event that the user is a member of my Barceló, linking said IP or MAC to identity data provided by the user, with the purpose of analyzing interactions, movements, scrolls, visits, and product consultations that the user may carry out on the website.
Legitimization: Such processing is necessary to satisfy the legitimate interests of BGH. At any time the customer may object to their data being processed for this purpose by following the instructions set out in section V.
3. Sending commercial communications about Barceló products and services.
BGH, with the consent of the interested party, may send promotional offers about its products and services, such as offers and promotions in certain hotels, products that can be purchased at the hotel itself, package tours...
Legal standing: This processing of data will only be carried out if BGH has the consent of the interested party. The interested party may withdraw his/her consent by following the instructions in section V.
4. Website monitoring.
Barceló will monitor and control website use in order to prevent and detect any fraudulent use, unauthorized access, alteration or loss of personal or non-personal data.
Legitimization: Such processing is necessary to comply with the obligations under the Law on Information Society Services and Electronic Commerce, as well as to satisfy Barceló’s legitimate interest in guaranteeing internet and information security.
5. Attending to user rights requests.
Based on the forms provided by Barceló on its website regarding the rights of the user and/or customer, BGH will process your personal information in order to attend to the request, and may require certain information from those hotels where the user has stayed or other information that Barceló may have transmitted based on its privacy policy (for example, to an insurance company if the customer has suffered a compensable loss).
Legal standing: Such data processing is necessary to fulfill user rights obligations under data protection regulations.
6. Processing of cookie data: information relating to the policy regarding cookies is located at the following link
III.- How long will we keep your data for?
Any personal data that BGH has access to will be handled for the necessary time for which they were collected. Once the purpose of the processing has expired, BGH will retain the personal data, duly blocked, for the provision of the relevant Public Administrations, Judges and Courts or the Tax Ministry during the term of prescribing the actions that may arise from the relationship maintained with the customer and/or the timings for legally authorized conservation. Once said time frames have passed, BGH shall proceed with the physical deletion of the data.
IV.- Who will we share your data with?
BGH may disclose data to:
- Companies owning hotels, to respond to the user's request, including the exercise of a particular right.
- Third parties that have been able to receive user information at the user’s request.
- Competent Public Bodies, Judges and Courts.
- Beside the aforementioned data sharing, BGH works with third parties who provide services and have access to the personal data of the customers, which they process in representation and on behalf of BGH as a result of providing said services. To this end, BGH will contract the provision of services by third parties that make use of their activity, for example, and not limited, in the following sectors: legal advice, multidisciplinary professional services, tech services, IT services. Suppliers include Salesforce Inc., a company located in the United States and covered by the Privacy Shield.
V.- What rights do you require when providing us with your data?
The Interested Parties may, if they wish, exercise their rights to access, amend and delete their data, request that the processing of their personal data is limited, oppose, request the portability of their data, and to not be the object of automated individual decisions, by means of the following:
- By writing to the postal address indicated above.
- By sending an emailed request to dpo@barcelo.com.
The Interested Parties may, in relation to those treatments that are based on the obtaining of their consent, withdraw their consent through the procedure described in the previous paragraph.
VI.- I have detected an abnormality regarding my personal data or a third party, how can I give notice of this?
The interested party who, by any means, has become aware of a possible breach or security incident that has caused unauthorized access, alteration, modification or deletion of personal data concerning him/her or that is owned by a third party, has at his/her disposal on the website www.barcelo.com a series of forms with which you can inform Barceló of the incident detected.
In any case, the user can send this incident via email to dpo@barcelo.com.
VII.- How have we obtained your data?
The personal data that BGH processes are the personal data collected through the forms provided on the website.
In the event that this is necessary to care for the request or exercise application of a right, BGH may request information to the hotels where the customer user has been registered, in their case, or to third parties who may have received their information, as a customer, based on the corresponding privacy policy (bookings, check-in, etc.).
VIII.- With which authority can you exercise your right to claim?
The interested parties may file a claim with the Spanish Data Protection Agency in relation to the response they have received from BGH in dealing with their rights.
In any case, the user is informed that the management of complaints regarding the processing of personal data will be handled by the Data Protection Officer of Barceló Hotel Group, located at c/ Josep Rover Motta, 27, 07006, in Palma de Mallorca, or by sending an email to dpo@barcelo.com, attaching in both cases to the request a copy of your DNI, NIF or official document that identifies you.
