The entity in charge of your data is Barceló Gestión Hotelera, S.L. (hereinafter referred to as “BGH” or "Barceló") with registered office at c/ Josep Rover Motta, 27, 07006, Palma de Mallorca. If you have any questions regarding data protection, please contact the Barceló Group's Data Protection Office at dpo@barcelo.com.

BGH would like to inform you that Barceló will process your data for the following purposes: 

1. Processing of your bank card data by the payment service provider. If the user books his accommodation through the channels indicated in paragraph 1, his card details will be automatically provided to the payment service provider to make the corresponding charges within the framework of this booking. The payment service provider will keep the card data for a limited period, only to collect any additional charges that may be incurred as indicated in the Terms and Conditions of the reservation (possible reservation extensions, charges for modifications or cancellations, etc.).

BGH will not retain the user's card information, but it will be stored in a secure environment by the payment service provider per applicable regulations. Therefore, BGH will only process the confirmation of whether the user has paid the reservation or additional charges, as well as the bank card token (a specific code linked to the card but which does not allow it to be used) to request the supplier to collect the additional charges..

Legitimation: This data processing is necessary for the exercise of the contract.

2. Booking and contracted services management. To manage and carry out the purchase of products and provide the services offered by BGH, the user has two direct channels available: the website (Barcelo.com) or our Customer Service.

In the event that the booking is made by telephone, BGH will record the call so that the customer can validate and verify the booking. BGH shall always inform the user that they may record the call, with the understanding that the user who continues the call gives consent for that recording, taking into account that non-consent shall mean that it will be impossible to manage the booking request which the user intends to make.

To manage the booking requested by the user, BGH will process the personal data the user provides through the data collection forms.

For the same reason, BGH will transfer user information to the hotel owner of the hotel selected during the booking process. This data transfer may involve an international transfer of data to a country that does not offer the same level of personal data protection as the European Union. In accordance with data protection regulations, the international transfer will be made in order to fulfill the contract requested by the user. The data communicated to said entities shall be those essential to the processing of the hotel booking selected by the user and shall be used solely for this purpose.
Additionally, BGH shall process the information necessary to manage the change or cancellation requests requested by the user.

If, in the free writing fields or by a request to the call center agent, the user provides data related to their health to manage specific services, BGH understands that the data is expressly sent voluntarily by the user, which shall only be used to manage the user request (for example, rooms that are adapted based on special needs).

Legitimation: This processing is necessary to carry out the booking. 

3. Reminders sent that the booking has not been completed (abandoned shopping cart). On user-specific requests, BGH may send reminders to the user about the failure to complete a booking that the user has begun, taking into account the information that the user has been able to include on the website payment form, and only as long as the user has expressly authorized receiving the receipt mentioned during the booking that was not finalized.

Legitimation: This processing shall only be carried out if BGH has received user consent through affirmatively marking the consent request which shall be displayed during the booking process. However, if the user has been identified as a my Barceló user, BGH shall perform this data processing based on a legitimate interest since the user is already part of my Barceló, the sole purpose being to be reminded of an incomplete booking.  

4. To fulfill accounting, legal, tax, and administrative obligations.

Legitimation: This processing is necessary to carry out the booking. 4. Electronic sending of information about offers and promotions on products and services offered by BGH. 1. In order to provide the user with products and services that may be of interest to them, they will be sent offers on products and services related to those purchased with BGH.If applicable, any user who has registered with my Barceló in accordance with paragraph 10, may receive special commercial offers with discounts or exclusive deals aimed solely at such users.

Legitimation: Such processing is necessary to comply with the obligations under the Law on Information Society Services and Electronic Commerce, as well as to meet Barceló’s legitimate interests in guaranteeing the Internet and information security. 

6. Sending business communication with offers related to products and/or services that already have bookings or have been booked in the past with BGH, which may be attractive to the user. personal data may be processed for the creation of profiles based on internal sources (for example, browser information from cookies, history, and BGH product booking statistics) whose results allow for the development and analysis of personalized products, by dividing different groups related to common patterns. Such profiles shall be solely used to send personalized communication about products and/or services offered by BGH.

BGH informs that, to fulfill its marketing purposes and continue improving its products, it uses a server located in the United States called Salesforce Inc., which produces an International transfer of the data related to its users. Said supplier is affiliated with the Privacy Shield agreement, which regulates the international transfers between managers located in the European Union and those located in the United States, guaranteeing that the transfer shall be made in the terms of the agreement content and that the supplier shall process their data in accordance with the stipulations set out in this agreement. 

Legitimation: This processing is necessary to meet the legitimate interests of BGH. 

7. Sending business communication about offers related to the services and/or products booked. BGH may send promotional offers about certain products that the user may enjoy at the hotel (for example, p.ej., furniture for the reserved room, SPA, Golf, Barceló Experience). Likewise, BGH may send information on activities related to tourism and leisure, such as cultural activities, excursions, sporting events, etc. which may or may not be offered along with our accommodation services at our hotels. 

Legitimation: This processing shall only be carried out if BGH has received user consent. 

8. Transfer of your personal data to companies owning Barceló hotels to personalize user services at the hotel. BGH may transfer your data to the owner of the Barceló brand hotel in which the user had made the booking to improve the user experience once they are located at the hotel. Similarly, BGH shall send the hotel owner the information taken from the relationship between BGH and the user and that which is obtained from other sources according to what is stipulated in paragraph 8. 

This information may include the international transfer of data when the data destination hotel is located outside the European Union. In any case, the user’s information shall only be transferred under the user's express consent and to the hotel selected by the user in order to personalize the service at the reservation's hotel destination. 

Legitimation: This processing shall only be carried out if BGH has received user consent. 

9. Implementation of market analysis. For the purpose of providing its users with more personalized services, BGH shall prepare profiles based on data taken from its users' sales, as well as catering to their tourism preferences, travel history, and financial ability. The information used in these profiles may have been obtained from the information generated by the user at the hotel, where they have been registered from external sources (for example: the Internet, social media). This information is very useful for BGH to offer its users personalized products according to the commercial interests shown in the use of the services offered at the hotels, so that the user experience may be improved for the service offering requested as well as future bookings. 

BGH informs that, in order to fulfill this purpose, it shall also use its provider located in the United States, called Salesforce Inc. The user may check the information regarding the international transfer in paragraph 5 and section IV.

Legitimation: This processing shall only be carried out if BGH has the user's consent. 

10. Newsletter registration for remittance, by electronic means, of information about offers and promotions on products and services offered by BGH. The user may request their registration in the BGH newsletter by clicking on the “I want to subscribe” button. From that time forward, BGH may occasionally send said newsletter that contains information about products and services offered by BGH.

Legitimation: This processing shall only be carried out if BGH has the user's consent to mark the newsletter subscription option. 

11. User registration in the my Barceló loyalty program. BGH shall process the identity information needed to enable user registration in the my Barceló loyalty program, so that the user may enjoy certain discounts when booking BGH products, check information on the hotels or enjoy services or benefits that are only for my Barceló users. 

If applicable, my Barceló users may:

• Receive exclusive commercial communications from the Program through the contact channels provided by the user during registration (email, mail, or telephone number).
• Receive special gifts as a reward for using the benefits and special promotions offered by my Barceló.If the user would like to identify themselves through Facebook, Google + or Twitter, they must know that in such cases such entities shall provide us with the information related to their identity (name, last name(s) and/or the network ID in question), as well as the information that the user would like to share at the time they confirm their registration through this means. 
  
  Legitimation: this processing shall only be carried out if BGH has received user consent in one of the following ways: 
  
  
• Through voluntary registration in the Program by the user via the registration form on the website. 
• By marking the consent box when registering as a user in the my Barceló Program during the process of contracting a BGH product. 

Through the proactive action of identifying via Facebook or Twitter.

Notwithstanding the aforementioned, BGH may send or offer special gifts to my Barceló users based on a legitimate interest, considering the link between BGH and the user.

If the my Barceló user provides personal data from a third party, that user guarantees the truthfulness of the information sent to BGH, and was informed of this third party and obtained, in their case, their express consent for the aforementioned transfer. 

12. SMS alert program for my Barceló users. By registering in the my Barceló Loyalty Program, the user shall receive an SMS with the option of subscribing to the BGH text alerts program, BGH Alerts. The Program sends subscribed users SMS alerts with updates related to their stays and alerts regarding promotions and cart abandonment. To subscribe to the BGH Alerts Program, the user must have registered in the my Barceló loyalty program and respond with YES to the received text to confirm the subscription to the BGH Alerts Program. To request help from the Program, send an SMS with the word HELP. To request Unsubscribe from the program, they must send an SMS with the word STOP. The frequency of messages that the user shall receive to the BGH Alerts Program is two messages per month. The data rate and/or messages established by their operator may be applied. 

Legitimation: This processing shall only be carried out if BGH has received user consent when sending YES, confirming their subscription to the Program. 

13. Complaint management. In order to centrally manage any complaints that the user may have regarding services booked by the user, BGH shall receive the information related to the complaint filed at the hotel, in order to process that claim and be able to offer the user a viable solution. Therefore, BGH requests access to the information generated by the user at the hotel in order to adequately deal with the complaint.

If the complaint warrants compensation for damages experienced by the user, BGH shall send this information to the insurance company contracted by BGH in order to manage the incident the user incurred.

Authentication: Such processing is necessary for the execution of the contract.

14. Managing questions and other requests. BGH shall carry out the processing of the necessary data to be dealt with regarding the question or the request sent by the user through the different website contact forms and through the chat contact form. 

Likewise, the user may ask these questions or request them via telephone, in which case BGH informs them that they may be recorded to reply to their request correctly as well as for safety reasons. 

Legitimation: This processing shall only be carried out if BGH has received consent from the user by marking the enabled boxes in the contact forms or by voluntarily consenting to the questions by telephone. 

15. Online reputation surveillance. BGH may carry out checks on the evaluations that users perform on websites such as TripAdvisor and others, in order to monitor their online reputation and be able to make business decisions to continuously improve their services, being able to make contact if there are negative experiences to offer possible solutions. BGH understands that it has a legitimate interest in improving its services and protecting its brand. 

Legitimation: This processing is based on BGH's legitimate interest in monitoring its brand's online reputation and resolving claims and complaints made on websites such as those mentioned. 

16. Legal or administrative procedures. If possible legal or administrative procedures arise due to the services BGH offers or provides, BGH shall process the necessary information to present the relevant allegations, exercise its right to defense or file any complaint it deems necessary according to the facts. 

Authentication: This data processing is based on legal obligations, marked by administrative regulations (mainly, the Law of Common Administrative Procedure), or is necessary for BGH to exercise its legitimate right to effective judicial protection, both in its right of defense and in the filing of legal claims that it deems appropriate, based on the Law of Civil Procedure or the Law of Criminal Procedure. 

17. Submission of quality surveys. To assess the level of satisfaction of users with the products and/or services booked, BGH will send quality surveys in order to obtain their opinion about them and thus improve the presentation of its services on a continued basis. 

Legitimation: This processing is based on BGH's legitimate interest. 

18. Implementation of controls for detecting fraudulent activities. In order to control and monitor actions that may constitute fraud in current or future contracts, BGH informs the user that it carries out an analysis of the transactions carried out in order to identify and analyze in more detail those that it detects as suspicious, producing when appropriate, a temporary exclusion list. 

Legitimation: This data processing is based on BGH's legitimate interest since it involves controlling and monitoring the transactions carried out by its users to detect possible fraudulent behavior in the transactions performed during the booking process.

19. Processing data from cookies: information related to cookies policies is found in the following link

Personal data that may be accessed shall be processed and kept as long as the contractual relationship exists or for the purposes for which they were gathered. After that, BGH shall keep the personal data once the contractual relationship has ended or when they are no longer relevant for the collected purposes, duly blocked, for making them available to the competent Public Administrations, Judges and Courts or the Attorney General's office during the limitation period of the actions that may arise from the relationship maintained with the user and/or the legally stipulated retention periods. Once those periods have elapsed, BGH shall proceed with the physical deletion of the data.

If the user has provided their consent for the purposes of the processing informed in this clause, BGH shall maintain its information as long as the user does not withdraw their initial consent, via the means indicated in section V.

BGH may disclose data to: 

• Online payment service providers whose systems are connected to the Barceló website, in order to collect the reservation and possible additional charges.
• Companies owning hotels under the Barceló brand. This may entail an international transfer of data. You will receive the personal data necessary to manage the booking or manage the user’s request.
• Insurance brokers and the BGH insurance company in the event that the user should suffer compensable damage.
• Competent Public Bodies, Judges and Courts. 
• Beside the aforementioned data sharing, BGH works with third parties who provide services and have access to the personal data of the customers, which they process in representation and on behalf of BGH as a result of providing said services. To this end, BGH will contract the provision of services by third parties that make use of their activity, for example, and not limited, in the following sectors: legal advice, multidisciplinary professional services, tech services, IT services. Suppliers include Salesforce Inc., a company located in the United States and covered by the Privacy Shield.

Users may, if they wish, exercise their rights to access, amend and delete their data, and request that the processing of their personal data be limited, oppose them, request the portability of their data, and not be the subject of automated individual decisions, by means of the following:
 

• By sending a written request to the postal address above. 
• By sending an email request to dpo@barcelo.com. 

Users may, in relation to that processing that is based on getting their consent, withdraw their consent through the procedure described in the previous paragraph.

Users may request the opposition to that processing based on BGH's legitimate interest, especially when it comes to receiving commercial communication, the creation of commercial profiles, and receiving surveys.

The personal data that BGH gathered through: 

- Our direct channels:
 

• Website (www.barcelo.com). 
• Customer service for telephone requests.

- Companies owning the hotels, as long as the user gives their consent. 

- Internet and social media, in the event of user consent.

Users may file a claim with the Spanish Data Protection Agency regarding the response they have received from BGH in supporting their rights. 

In any case, the user is informed that the management of complaints regarding processing personal data will be handled by the Data Protection Officer of Barceló Hotel Group, located at c/ Josep Rover Motta, 27, 07006, in Palma de Mallorca or by sending an email to dpo@barcelo.com, attaching in both cases to the request a copy of your DNI, NIF or official document that identifies you.