Privacy Policy
The data controllers responsible for processing your personal data, depending on where the reservation is made, may be:
Each entity will act individually as the data controller depending on where you make your reservation (hereinafter referred to as the "Controllers" or "Prinsotel Group").
For more information on the services offered, please refer to our Terms and Conditions of Service.
Prinsotel Group has appointed a Data Protection Officer (DPO) responsible for overseeing data protection measures for all companies within the Group. For any questions or inquiries related to data protection, you may contact our DPO via email at dataprotection@prinsotel.com.
Under this Privacy Policy, "personal data" is defined as any information that identifies you or can be used to identify you, such as your name, address, phone number, or email address.
The Controllers will have access to any personal data you provide during your relationship with us (via reservations, commercial communications, customer service, etc.).
The Controllers will process your personal data for the purposes detailed below and according to the channel through which you provided your personal data:
Online user registration on "Prinsotel Advantages"
Your personal data will be processed to manage your personal space on the Controllers' website, as well as to manage any reservations made at any of the hotels.
Legal Basis: Consent.
Categories of Personal Data: Name, surname, country of residence, email, phone, payment details.
Reservation and contracted service management, as well as modification or cancellation requests
Your personal data will be processed to manage reservations at any of the hotels, handle payments, and send confirmation and receipts via email.
If reservations are made over the phone, the Controllers will record the call to verify the user’s reservation. You will be informed of the recording, and any refusal to consent will prevent us from processing your reservation request.
Legal Basis: Execution of the service contract with our customers.
Categories of Personal Data: Name, surname, country of residence, email, mobile phone, payment information related to the reservation, billing information.
Compliance with accounting, legal, tax, and administrative obligations
Personal data will be processed to comply with legal obligations arising from the relationship with you as a customer and the processing of your personal data in accordance with EU law and/or applicable national law.
Legal Basis: Compliance with legal obligations applicable to the Controllers under EU law and/or applicable national law.
Categories of Personal Data: Name, surname, phone number, email, transactional information related to your reservation, or any other information necessary to meet legal obligations as required by competent supervisory authorities.
Sending commercial communications with offers related to products and/or services you have contracted in the past or might be of interest to you
For customers who choose to receive newsletters and exclusive promotions, their data will be processed for these purposes. Specifically, your personal data may be used to create profiles based on internal sources, which allows for the design and analysis of personalized products through segmentation into different groups according to common patterns. These profiles are only used to send you personalized communications about products and/or services offered by the Controllers.
Legal Basis: Express consent.
Categories of Personal Data: Name and surname, reservation data, dates, destination, and email address.
Users wishing to unsubscribe from commercial communications can do so at any time and free of charge by sending an email to dataprotection@prinsotel.com.
Customer service and complaint management
Controllers may use customer information to handle requests, queries, or complaints submitted through customer service channels (phone and/or email) and to manage any incidents that may arise.
Legal Basis: Execution of the contract or pre-contract.
Categories of Personal Data: Name, surname, phone number, email, transactional information, country, voice (in case of a phone call), and any other information provided for handling your request.
Conducting surveys and/or evaluations related to the quality of services provided by Prinsotel Group
To assess the level of satisfaction of users with the contracted products and/or services, the Controllers will send quality surveys to obtain your feedback, assess your satisfaction level, experience, and suggestions, thereby allowing us to continually improve our services.
Legal Basis: Legitimate interest of Prinsotel Group to assess service quality and improve based on survey insights.
Categories of Personal Data: Email, phone number, transactional information related to the reservation, and any other non-personal information you provide in response to the surveys.
Prevention and detection of fraudulent activities
To monitor and follow up on actions that may constitute fraud in present or future transactions, the Controllers conduct an analysis of transactions to identify and scrutinize those suspected of being fraudulent during the contracting period, and, where appropriate, temporarily create exclusion lists for future contracting.
Legal Basis: Overriding legitimate interest of Prinsotel Group in fraud detection.
Categories of Personal Data: Transactional information, payment information, and contact details provided during potentially fraudulent booking processes.
Use of cookies and similar technologies
The Controllers use cookies and similar technologies (HTTP Cookies, Pixel Tracker, and Local Shared) on this website, resulting in the processing, storage, and sharing of user information and personal data as users navigate the site. Users can obtain all the information about cookies and similar technologies used on this website and manage their consent through our Cookie Policy.
Generally, and only if necessary to meet legal responsibilities or comply with legal retention periods, your personal data may be disclosed to competent Public Authorities, particularly the Data Protection Authority, as well as to Judges, Courts, or the Public Prosecutor's Office in compliance with EU law and/or national law.
Additionally, to correctly provide services offered by Prinsotel Group and to comply with applicable regulations and purposes indicated in this Privacy Policy, we may need to share and disclose your personal data to other entities that form part of the Prinsotel Group. Furthermore, certain entities within the Prinsotel Group provide services to others within the Group, involving access to personal data on behalf of the other entities.
Similarly, the Controllers have providers who may process your personal data to deliver services related to the purposes about which you are informed (including but not limited to car rental services, excursion organizing companies, insurance brokers, etc.), and different service providers, including those in technology, legal, audit, or administrative services, may access customer personal data as a result of providing these services. In all cases, Prinsotel Group has confidentiality and data protection agreements that meet regulatory requirements.
Depending on the purpose of processing your personal data, the applicable retention criteria will be as follows:
In any case, when personal data is no longer necessary for the purposes for which it was collected, or you withdraw your consent, or exercise your right to deletion or objection, the Controllers may retain it duly blocked to make it available to competent Public Authorities, Judges, Courts, or the Public Prosecutor's Office during the legal limitation periods of any actions that could arise from the relationship between the Parties or the processing of your personal data and/or legally provided retention periods under EU law and/or applicable national law.
Once these periods have expired, your personal data will be physically deleted with no possibility of recovery.
You can exercise your right of access, rectification, objection, deletion, restriction, portability, and, where applicable, the right not to be subject to automated decisions, including profiling, by sending your request to dataprotection@prinsotel.com.
Regarding data processing based on your consent, the Controllers inform you that you may withdraw it or object to the processing at any time.
You may also file a complaint with the Spanish Data Protection Agency to safeguard your rights whenever deemed appropriate, www.aepd.es.
Employees of the Controllers and their suppliers with access to your personal data commit to not disclose or use any accessed information. The information you provide will always be considered confidential and will not be used for other purposes.
The Controllers are present on certain major social networks, acting as data controllers regarding the published data. Data will be processed on each social network in accordance with its respective policies. Therefore, the Controllers may inform followers on the corresponding social network about activities, offers, events, and other related topics. The Controllers will not collect personal data from social networks unless users provide express consent.
On the Controllers' website, there are links to other websites deemed potentially useful and informative. However, please note that the Controller does not endorse or recommend the content or services of these sites, nor is it responsible for their privacy policies.
We recommend that you take into account and read the privacy policies of all sites you visit.
The Controllers will only use your personal data as stipulated in the Privacy Policy in effect at the time your personal data is collected.
The Controllers reserve the right to modify this Privacy Policy at any time, publishing such changes on our website, so we recommend visiting it each time you access the Privacy Policy. If, at any time, it is decided to use personal data in a manner different from what was stated at the time of collection, we will inform you via email, if available.
If any clause of this Privacy Policy is annulled or considered null, the other conditions will not be affected, retaining full validity and effect under the applicable regulations in effect at each time.
Last updated: October 16, 2024