Last updated: 18/07/17
Who is responsible for processing your personal data?
Responsible party: Iberostar Hoteles & Apartamentos, S.L.
Postal address: Calle General Riera, 154, 07010 Palma de Mallorca, Spain
Telephone: (+34) 971 07 70 00
Email address: firstname.lastname@example.org
Data Protection Representative: email@example.com
What personal information do we collect?
The data we process are data we collect from:
- The registration form on our website.
- Your social profile and the data generated by your use of the social network account with which you register on our website, in accordance with the authorisation you have granted.
We will collect data of the following categories:
- Identifying data and email address.
- Social profile data that you have chosen to share, for example, other contact details, photos, personal characteristics, social statuses, academic and professional details, employment details, etc.
- Data generated by your use of the social network, which you have chosen to share with us (for example likes and comments).
Why do we process your data?
We process the data we collect in order to manage the registration process and the relationship with users of our website.
The social data you have chosen to share with us will also be processed to develop and debug commercial profiles and to enrich our customer database. The purpose of this is to collect better and more detailed information from a commercial point of view about individual Users and Users as a group (needs, likes, preferences, etc.), in order to design, plan and personalise our products and services and our commercial and marketing activities.
How long will we store your data?
We generally store personal data for the duration of your relationship with us and always in accordance with the terms set forth in applicable legal regulations and for the duration necessary to handle any possible liabilities that arise as a result of data processing. We will cancel your data once they are no longer relevant to or necessary for the purposes for which they were collected.
Data processed for commercial purposes will be stored and considered valid insofar as you do not request their cancellation.
Legal grounds for processing
The legal grounds for the processing of your data to register on our website require the performance of a contract.
Your consent is requested with a view to create commercial profiles, to personalise our services and to send commercial communication. If said consent is withdrawn, the performance of the contract will not be affected.
Generally speaking, we inform you that the fields on our forms that are marked as mandatory must be filled out in order for us to process your requests.
Who can we share your data with?
Your data will not be shared unless we are obliged to do so by law.
What are your rights?
You have the right to receive confirmation of whether or not we are processing your personal data, and, in such case, to access them. Likewise you can request for any incorrect data to be rectified or for incomplete data to be completed, as well as request removal of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances, you can request for the processing of your data to be limited. In such case, we will only process the affected data for the filing, processing or response to complaints, or with a view to protect the rights of other parties.
In certain situations and for reasons related to your specific circumstances, you may object to the processing of your data. In this case, we will stop processing the data unless legitimate compelling grounds are given that prevail over your interests, rights and liberties, or in order to file, process or respond to complaints.
You have the right to oppose, at any given time, the processing of your data for the purposes of direct marketing, including for the creation of commercial profiles. In said case, we will cease to process your personal data for such purposes.
You can revoke the consent you have granted for certain purposes without this affecting the lawfulness of the processing undertaken before consent was withdrawn, and file a claim before the Agencia Española de Protección de Datos [Spanish Data Protection Agency].
We inform you that the European Data Protection Regulation also recognises your right to data portability.
In order to exercise your rights, you must send us a request together with a copy of your national identification document or another valid form of identification by post or by email to the addresses indicated in the section “Who is responsible for processing your data?”.
In order to revoke consent to the receiving of our commercial communications, simply send an email to:
For further information about your rights and how to exercise them visit the Agencia Española de Protección de Datos website at http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/derechos/index-iden-idphp.php