myBarceló Privacy Policy

I.- Who is the data controller?  

The entity in charge of your data is Barceló Gestión Hotelera, S.L. (hereinafter, for the purposes of this document, 'BGH' or 'Barceló') with registered office at c/ Josep Rover Motta, 27, Palma de Mallorca, 07006. If you have any queries regarding data protection, please get in touch with the Barceló Group Data Protection Office by sending an email to dpo@barcelo.com.

II.- Why do we process your data?

BGH hereby informs the Interested Party that their personal data will be processed by Barceló for the following purposes:

1. Signing up to the my Barceló platform. Barceló will process any identifying information necessary to facilitate user registration on the my Barceló platform, in order for the user to view information related to hotels available for booking and/or request services that are received directly from the reception of the hotel where the user is staying at the time of making the request. In this way, BGH will receive identifying data such as your full name, date of birth, country of residence, email, contact telephone number and postcode. 

If the user chooses to verify their identity through Facebook or Twitter, please be aware that in such cases said entity will provide us with information relating to your identity (name, surname(s) and/or the network ID in question).

2. Managing requests made by users through the platform. Barceló will process the data required to answer user requests for information or hotel services. To do this, BGH may share your data with the holding company of the hotel, depending on the hotel chosen by the customer. This data transfer may involve an international transfer to a country that does not provide the same personal data protection offered within the European Union. As established in data protection regulations, the international transfer will be made to process the service requested by the customer. The only data shared with said entities shall be information essential for processing the hotel booking chosen by the user and shall only be used for this purpose.

Legitimacy: this processing is necessary for the execution of the contract.

3. Analysis and study of users’ interactions on the platform. Barceló may process website users’ personal data through their IP or MAC address, or, if the user is a member of my Barceló, by linking their IP or MAC address to the ID information provided, in order to analyse their interactions, movements, scrolls, visits and the products viewed on the website. 

Legitimacy: this data processing is required to satisfy the legitimate interests of BGH. Customers can oppose the processing of their data for such purposes by following the instructions set out in section V.

4. Sending communications. Barceló may send personalised or commercial communications regarding its products based on the information generated by the user with BGH, whether they were using the platform or not, for the purpose of carrying out the service requested by the user.

Legitimacy: for completing the service for which the user requested registration.

5. Platform IT monitoring. Barceló will monitor and control website use in order to prevent and detect any fraudulent use, unauthorised access, alterations or loss of personal or other data. 

Legitimacy: this data processing is necessary to comply with the obligations under the Law on Information Society Services and Electronic Commerce, as well as to satisfy Barceló’s legitimate interest in guaranteeing internet and data security. 

6. Reporting system and system management incidents. BGH will process the user information needed to manage any incident reported or detected by its own means. Such data processing will only be carried out in order to solve the incident and resolve any problems derived from it. 

Legitimacy: this data processing is required to satisfy the legitimate interests of BGH. Customers can oppose the processing of their data for such purposes by following the instructions set out in section V. 

7. Scope of informed data processing and, if applicable, processing that has been accepted by the guest. BGH will include informed data processing in the privacy policy regarding customer bookings, as well as the privacy policy accepted by the guest upon checking in to the hotel.

III.- How long will we keep your data for?

Any personal data BGH has access to will be processed for the necessary amount of time to achieve the purpose for which they were collected. Following this time, BGH will store your personal data, in a duly blocked manner, even when they are no longer relevant for the purpose for which they were collected, in order to make them available to any competent Public Administration services, Judges and Courts, or the Prosecution Service during the statutory time limit for personal actions that may have arisen from the relationship held with the guest and/or legally established storage periods. Once said time frames have elapsed, BGH will proceed with the physical deletion of your data.

IV.- Who will we share your data with?

BGH may share data with: 

• Hotel holding companies, to accommodate user requests. 

• Competent Public Bodies, Judges and Courts. 

• Besides the aforementioned data sharing, BGH works with third parties who provide services and have access to the customers' personal data, which they process in representation and on behalf of BGH as a result of providing said services. Specifically, BGH hires third parties to supply, for example, and not limited to, services in the following sectors: legal advice, multidisciplinary professional services, tech services, IT services. Providers include Salesforce Inc., a company located in the United States that complies with the Privacy Shield.

V.- What rights do you have when providing us with your data?

The Interested Party may, if they so wish, exercise their right to access, amend and delete their data, as well as request that the processing of their data be limited, oppose it, request the portability of their data, and request not to be subject to individual decisions based on automated processing, by doing the following: 

• By writing to the postal address provided above. 

• By emailing your request to dpo@barcelo.com. 

The Interested Party may withdraw their consent for the data processing carried out based on their consent by following the steps described in the previous paragraph.

VI.- How have we obtained your data?

The personal data processed by BGH are the personal data collected using online forms. Where appropriate, and if this is necessary in order to respond to the request or application when exercising a right, BGH may request information from the hotels where the guest has stayed, or from third parties who may have received guest information, in accordance with the corresponding privacy policy (bookings, check-in, etc.).

VII.- With which authority can you exercise your right to claim?

The Interested Party may lodge a complaint with the Agencia Española de Protección de Datos [Spanish Data Protection Agency] regarding any response they have received from BGH in supporting their rights. In any event, users are hereby informed that any complaints relating to the processing of personal data shall be managed and processed by the Data Protection Officer of Barceló Hotel Group, located at c/ Josep Rover Motta, 27, 07006, in Palma de Mallorca, or by sending an email to: dpo@barcelo.com, attaching to this request, in both cases, a copy of their National Identity Document, Tax ID number or an official identifying document.