Privacy policy
Casa Gracia, S.L. (hereinafter ‘Room00 Group’) is the Data Controller of the personal data of customers of each of the hotels (hereinafter ‘Users’).
Through this Privacy Policy, and in compliance with Articles 12 and 13 of Regulation (EU) 2016/679 (hereinafter ‘GDPR’) and Article 11 of Organic Law 3/2018, of December 5, on Personal Data Protection and the guarantee of digital rights (‘LOPDPGDD’), Room00 Group informs Users using the Website about the processing of their personal data that may be collected through it and processed by Room00 Group.
INFORMATION ON THE DATA CONTROLLER
Data Controller: Casa Gracia S.L.
NIF: B12089496
Registered office: Paseo de Gracia, no. 116 First Floor, 08012 Barcelona, Spain
Contact: DPO@room00group.com
PROCESSED DATA, LEGAL BASES, PURPOSES, AND RETENTION PERIOD.
| PROCESSED DATA | LEGAL BASES | PURPOSES | RETENTION PERIOD |
| Reservation data. First name, last name, email, phone number, and ID number.
Registration Data. Name, surname, gender, ID number, nationality. Date of birth, place of usual residence, full address, locality, country, landline phone, mobile phone, email, relationship between travelers (in case any of them is a minor). |
Execution of the contractual relationship in which the interested party is involved.
Compliance with a legal obligation |
Reservation management. In relation to the reservation made, process payments, and manage any modifications or cancellations of the reservation.
File records of the Secretary of State for Security. Processing of personal data for the prevention, detection, and investigation of crimes. |
Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. Such data will be blocked to comply with the legal obligations of Room00 Group and, after that period, will be definitively deleted.
The personal data processed by Room00 Group will be retained for a period of three years from the end of the contracted service or provision. |
| Banking data | Execution of the contractual relationship in which the interested party is involved. | Payment of the reservation or to guarantee it. As well as to pay for the stay or the services associated with it. | Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. Such data will be blocked to comply with Room00 Group’s legal obligations and, after that period, will be definitively deleted. |
| Contact details. Name, surname, email, phone number. | Consent | Attend to and respond to requests, comments, suggestions. As well as provide support to the User during the use of the Website. | Personal data will be processed by Room00 Group for the duration necessary to respond to the question and/or resolve the incident indicated by the User. Such data will be blocked to comply with the legal obligations of Room00 Group and, after this period, will be definitively deleted. |
| Promotional communications. Name, surname, email address, and phone number. | Legitimate interest (when there is a contractual relationship)
Consent |
Inform about promotions and advertising actions of Room00 Group. | The data will be processed by Room00 Group until the User withdraws their consent. Once the consent is withdrawn, Room00 Group will block their data for the time necessary to comply with legal obligations. After that period, the data will be permanently deleted. |
| Surveys and/or evaluations related to the quality of services. First name, last name, email address, and phone number. | Consent | Expand and improve the quality of the products and services of Room00 Group. | The data will be processed by Room00 Group until the User withdraws their consent. Once the consent is withdrawn, Room00 Group will block their data for the time necessary to comply with legal obligations. After that period, the data will be permanently deleted. |
| Video surveillance | Public interest | Safety of people, property, and facilities located in the establishments | The captured images will be kept by Room00 Group for a maximum period of one month from their capture, after which they will be deleted. When a crime or administrative infraction is recorded that must be reported to an authority, the images will be attached to the complaint and must be kept solely for the purpose of making them available to the aforementioned authority, and cannot be used for any other purpose. |
- ¿WHO WILL YOUR DATA BE SHARED WITH? Room00 Group informs that, for the fulfillment of the purposes described above, it will not transfer the User’s personal data to third parties. Notwithstanding the above, Room00 Group may give access to such personal data to technology service providers with whom it has signed a data processing agreement; in particular:
- Analytics service providers.
- Hosting service providers.
- Email service providers.
- Booking management service providers.
- Customer service providers.
- Promotional and/or commercial activity service providers.
The mentioned providers may be located in jurisdictions that generally do not offer adequate guarantees regarding the handling of personal data. For all entities that are not part of the European Economic Area (EEA), Room00 Group has signed contracts with such entities that include these safeguards, including the European Commission’s standard contractual clauses. Users can obtain more information about the technology service providers by requesting it from Room00 Group through the contact methods provided in this privacy policy. Furthermore, Room00 Group may disclose your data to:
- Companies interested in buying or acquiring the company or part of its business and, consequently, granting access to any national or international auditor to carry out its ‘due diligence.’
- Other companies within the Room00 Group.
- The authorities to investigate suspicions of fraud, harassment, or other violations of any law, rule, or regulation, or of the policies of the website.
- SECURITY AND CONFIDENTIALITY Room00 Group is committed to adopting the necessary physical, technical, and organizational measures, in accordance with the applicable regulations, to ensure the security of personal data and to prevent the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorized communication or access to such data. Personal data will be treated confidentially by Room00 Group, which commits to inform and ensure that this confidentiality is respected, by legal or contractual obligation, by its employees, partners, and anyone who needs to have access to the User’s personal data.
- USER RIGHTS The User may exercise the rights of access, rectification, deletion, opposition and, where applicable, limitation of processing and data portability by sending an email to DPO@room00group.com. Furthermore, the User may file a complaint with a supervisory authority, particularly with the Spanish Data Protection Agency (www.aepd.es) if they believe that the rights outlined in this Privacy Policy have been violated or if they consider that the processing of their personal data infringes applicable regulations.
- CHANGES TO THE PRIVACY POLICY Room00 Group reserves the right to modify this Privacy Policy at any time. Changes or updates to the Privacy Policy will be explicitly notified to the User through a notice on the Website, along with the updated version of the Privacy Policy.