Privacy Policy
Room00 Hostels & Hotels S.L.U (hereinafter “Room00 Group”) is the Data Controller responsible for the processing of the personal data of the customers of each of the hotels (hereinafter the “Users”).
Through this Privacy Policy, and in compliance with Articles 12 and 13 of Regulation (EU) 2016/679 (hereinafter the “GDPR”) and Article 11 of Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDPGDD”), Room00 Group informs Users who use the Website about the processing of their personal data that may be collected through it and processed by Room00 Group.
1. INFORMATION ABOUT THE DATA CONTROLLER
Data Controller: Room00 Hostels & Hotels S.L.U
• VAT No.: B87637575
• Registered office: 44 Palermo Street, 28043 Madrid, Spain
• Contact: DPO@room00group.com
2. PROCESSED DATA, LEGAL BASES, PURPOSES AND RETENTION PERIOD.
3. TO WHICH RECIPIENTS WILL YOUR DATA BE DISCLOSED?
Room00 Group informs that, for the fulfilment of the purposes described above, it will not transfer the User’s personal data to third parties. Notwithstanding the foregoing, Room00 Group may grant access to such personal data to technology service providers with whom it has entered into a data processing agreement; in particular:
Analytics service providers.
Hosting service providers.
Email service providers.
Booking management service providers.
Customer service providers.
Promotional and/or commercial activity service providers.
The aforementioned providers may be located in jurisdictions that generally do not provide adequate guarantees regarding the processing of personal data. For all entities that are not part of the European Economic Area (EEA), Room00 Group has entered into agreements with such entities that include these safeguards, including the European Commission’s Standard Contractual Clauses.
Users may obtain further information about the technology service providers by requesting it from Room00 Group through the contact methods provided in this Privacy Policy.
Likewise, Room00 Group may disclose your data to:
Companies interested in purchasing or acquiring the company or part of its business and, consequently, granting access to any national or international auditor to carry out their due diligence.
Other companies within the Room00 Group business group and establishments operating under the Select brand.
Authorities to investigate suspected fraud, harassment, or other violations of any law, rule, regulation, or Website policies.
4. SECURITY AND CONFIDENTIALITY
Room00 Group undertakes to adopt the necessary physical, technical, and organizational measures, in accordance with the applicable regulations, to ensure the security of personal data and prevent the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, as well as the unauthorized communication or access to such data. Personal data will be processed confidentially by Room00 Group, which undertakes to inform and ensure compliance with this confidentiality obligation, whether by legal or contractual obligation, among its employees, partners, and any person who must have access to the User’s personal data.
5. USERS’ RIGHTS
The User may exercise the rights of access, rectification, erasure, objection and, where applicable, restriction of processing and data portability by sending an email to dpo@room00group.com
Likewise, the User may lodge a complaint with a supervisory authority and, in particular, with the Spanish Data Protection Agency (www.aepd.es) if they consider that the rights set out above in this Privacy Policy have been infringed or if they believe that the processing of their personal data violates the applicable regulations.
6. CHANGES TO THE PRIVACY POLICY
Room00 Group reserves the right to modify these Conditions at any time. Changes or updates to the Conditions, as well as to the Privacy Policy, will be explicitly notified to the Customer through a notice on its Websites.
PROCESSED DATA
LEGAL BASES
PURPOSES
RETENTION PERIOD
Booking data. Name, surname, email address, telephone number, and ID card number.
Performance of the contractual relationship to which the data subject is a party.
Management of the booking. In relation to the booking made, processing payments and managing any modifications or cancellations of the booking.
Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. Such data will be blocked in order to comply with Room00 Group’s legal obligations and, once this period has elapsed, they will be permanently deleted.
Registration Data.
Name, surname, gender, ID card number, nationality, date of birth, place of habitual residence, full address, town/city, country, landline telephone number, mobile telephone number, email address, family relationship between travellers (in the event that any of them is a minor).
Compliance with a legal obligation.
Registration in the files of the State Secretariat for Security.
Processing of personal data for the prevention, detection and investigation of crimes.
The personal data processed by Room00 Group Group will be retained for a period of three years from the end of the contracted service or provision.
Bank details.
Performance of the contractual relationship to which the data subject is a party.
Payment of the reservation or guaranteeing it. As well as for paying for the stay or the services associated with it.
Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. Such data will be blocked in order to comply with Room00 Group’s legal obligations and, once this period has elapsed, they will be permanently deleted.
Booking data. Name, surname, email address, telephone number, and ID card number.
Consent
Handle and respond to requests, comments and suggestions. As well as provide support to the User during the use of the Website.
Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. Such data will be blocked in order to comply with Room00 Group’s legal obligations and, once this period has elapsed, they will be permanently deleted.
Promotional communications. Name, surname, email address and telephone number.
Legitimate interest (when a contractual relationship exists).
Consent
Inform about promotions and advertising campaigns of Room00 Group.
The data will be processed by Room00 Group Group until the User withdraws their consent. Once consent has been withdrawn, Room00 Group Group will block the User’s data for the time necessary to comply with legal obligations. Once this period has expired, the data will be permanently deleted.
Surveys and/or evaluations relating to the quality of the services. Name, surname, email address and telephone number.
Consent
Expand and improve the quality of Room00 Group’s products and services.
The data will be processed by Room00 Group Group until the User withdraws their consent. Once consent has been withdrawn, Room00 Group Group will block the User’s data for the time necessary to comply with legal obligations. Once this period has expired, the data will be permanently deleted.
Video surveillance.
Legitimate interest.
Security of people, property and facilities located in the establishments.
The images captured will be retained by Room00 Group for a maximum period of one month from the date of capture, after which they will be deleted.
When a crime or administrative offence is recorded and must be reported to an authority, the images will be attached to the complaint and must be retained solely for the purpose of making them available to the aforementioned authority, without being used for any other purpose.
También cuidamos tus datos
