Privacy policy

This privacy policy is applicable to the website www.olehotels.com (hereinafter the Website). Please read this policy carefully. Here, you will find important information about how your personal data will be processed and what your rights are under the relevant legislation in force. Generally speaking, the fields In our forms that are marked as mandatory must be completed in order for us to process your requests.

WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA? The company responsible for processing your data collected via the Website is Portal Interactiv, S.L., registered address: C/ General Riera 154, 07010, Palma de Mallorca, Balearic Islands, Spain (hereinafter OLÉ HOTELS). For more information on how your personal data are protected, please contact our Data Protection Officer at privacy.dpd@grupoiberostar.com

WHY WILL YOUR DATA BE PROCESSED? Your data will be processed for the following purposes:

To manage bookings and provide requested services.OLÉ HOTELS will process the data you provide during the booking or service request process and to provide requested services. This data must be processed to finalise the booking and accommodation contract and to implement precontractual measures requested by you.

Identifying data, date of birth, contact information (telephone number, email), country of residence and post code of the holder of the booking;
Booking or service request data (hotel, stay dates, number and age of guests and services requested);
Data relating to payment methods;
Data on goods and services transactions.

The data is provided either directly by you through forms available on the Website or by requests you make through our call centre, or by third parties who process requests on your behalf, for example, a travel agency you used to book your stay.

Financial and transaction data relating to goods and services are processed to manage accounting and administration tasks and to fulfil the legal obligations held by OLÉ HOTELS with regard to accounting and tax.

To service requests. Data provided in contact forms or in requests you make to our call centre will be processed to service your requests. This processing is necessary for the implementation of precontractual measures at your request.
Business data metrics and analysis. We compile statistics from aggregate data obtained from browsing data (i.e. IP address, pages visited or actions performed) and transactions performed on the Website to understand how our users interact with it so we can improve its content and performance, and analyse business data. The grounds for processing your data are to serve our legitimate interest in evaluating and managing Website quality and to measure the performance of our tourism services and products. I want to know more. View more

our cookie policy

Browsing profile. If you have authorised the use of advertising cookies, we will process the information generated by your browsing (i.e. IP address, pages visited and actions performed on the Website) to analyse your actions in order to create your browsing profile and customise our content and advertising. This processing is based on your consent to cookies being installed, which you may revoke at any time through the configuration panel for the website or by modifying the privacy options on your internet browser or device. The withdrawal of your consent does not affect the processing of your bookings or the provision of the services you have purchased.More info about the use of cookies and similar technologies can be found in our cookie policy

TO WHOM IS YOUR DATA COMMUNICATED? Your data will be communicated to the providers of the services you have requested and to the competent authorities when required by law.

Booking data will be shared with the destination hotel. Please note that when the services requested are to be provided outside the European Economic Area, these communications may involve the transfer of your data to countries that do not offer the same level of protection as the EU in terms of personal data. These communications and, if applicable, international data transfers, are required to finalise the booking and implement precontractual measures at the user’s request.

The destination hotel will notify the competent authorities of guests checking in when required by health, safety or traveller control regulations in force in the country where the hotel is located.

In the event that your reservation contains accessory services provided by third party suppliers or that your requests affect such services, the personal data necessary to process said booking/service request will be shared with the corresponding suppliers, for this purpose only. These communications are required to provide the services requested and to implement precontractual measures at your request.

Bookings (i.e. destination hotel, stay dates, number and age of guests and services included in the bookings) and Website transaction data are consolidated in a database at corporate group headquarters for business intelligence and management control purposes at group level.

Our group leader and the company responsible for your data is Iberostar Hoteles & Apartamentos, S.L., registered address: C/ General Riera 154, 07010, Palma de Mallorca, Balearic Islands, Spain. The consolidated information is processed to generate reports and analyse business data. These analyses and reports provide results in the form of aggregate data and are used to produce statistics, patterns and forecasts to facilitate business decision-making, optimise processes, measure the performance of the tourism products offered by the group and establish commercial strategies.

This consolidation is based on the legitimate interest of the group in having a consolidated view of its businesses for business decision-making and for internal administrative purposes. In order to weigh up this interest against your rights and freedoms, it has been determined that:

Recital 48 of the GDPR recognises the legitimate interest in transmitting customer personal data within a corporate group for internal administrative purposes.
Processing has a limited impact on the privacy of data subjects, as technical and organisational measures have been adopted to make it impossible to identify individuals and carry out profiling without the user’s consent. These measures include the pseudonymisation of customer data that have not consented to be profiled, the separation of systems used for management/business intelligence control purposes and the execution of commercial campaigns, on the one hand, and profiling, on the other, as well as the separation of functions between the persons accessing each of these systems.

HOW LONG WILL WE STORE YOUR DATA? We will store your personal data as long as is necessary to process your requests and bookings, in accordance at all times with the terms set out in applicable legal regulations and for the duration necessary to handle any possible liabilities arising as a result of data processing. Your data will be deleted when no longer relevant to, or necessary for, the purposes for which they were collected.

The data provided in the “Save quote” form will be deleted after 24 hours if the booking is not finalised within this period.

Booking and transaction data processed for group business data analysis purposes are retained for an unlimited period of time.

WHAT ARE YOUR RIGHTS? You have the right to receive confirmation as to whether or not we are processing your personal data, and, in such cases, to access these data. Likewise, you may request that any incorrect data be rectified or for incomplete data to be completed, and you may request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, you may request that the processing of your data be limited. In this case, we will only process the affected data for the filing or processing of, or for responding to, complaints, or with a view to protect the rights of other parties. In certain situations and for reasons relating to your specific circumstances, you may object to the processing of your data. In this case, we will stop processing the data unless legitimate compelling grounds are given that prevail over your interests, rights and liberties, or in order to file, process or respond to complaints.

Additionally, under certain circumstances, you may ask for your data to be transferred to another responsible party for its processing.

You may revoke the consent you have granted for certain purposes without this affecting the lawfulness of the processing undertaken before consent was withdrawn.

At any given time, you have the right to revoke consent or object to the processing of your data for purposes of direct marketing, including for the creation of commercial profiles. In this case, we will cease to process your personal data for such purposes. You also have the right to object to individualised automated decision-making, which would give rise to legal effects over you or would significantly affect you in a similar way, where this right exists in accordance with the stipulations of Article 22 of Regulation (EU) 2016/679.

You also have the right to file a complaint with a data protection authority. You can find the list and the contact information for European data protection agencies on the European Commission website at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.

In order to exercise your rights, you must send us a request by post or by email to the addresses indicated in the section entitled “Who is responsible for processing your personal data?”

For further information on your rights and how to exercise them, visit the Agencia Española de Protección de Datos [Spanish Data Protection Agency] website (https://www.aepd.es).

Privacy policy

OLE10DISC