Privacy Policy
Your privacy is important to us. That is why we want to be transparent about what we intend to do with the information you provide to us or that we learn about you, i.e. your personal data (hereinafter Data), not only because data protection laws require it, but also because we believe in honesty towards our users and customers. Please read this Privacy Policy carefully. We will notify you in advance of any changes made to this Privacy Policy and we will not make retroactive changes that reduce your privacy rights unless legally required and, in the event of changes, your consent will always be necessary. However, you may at any time request to unsubscribe from the services offered on the Website if you do not agree with the modifications made.In accordance with the provisions of EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR); RAFAELHOTELES informs you that by accepting this Privacy Policy, you give your informed, express, free and unambiguous consent for the Data you provide through the website
www.rafaelhoteles.com and any other data you may provide in the future to RAFAELHOTELES through the Accommodation Contract or any other enabled means, to be processed by RAFAELHOTELES, as the data controller, and to which the security, technical and organisational measures provided for in current legislation apply.In this regard and, in accordance with the provisions of the GDPR, below we provide you with information on the processing that RAFAELHOTELES carries out on your data.
Who is the data controller of your data?
- H71 HOTELS S.L.U.
- Address: Calle Méndez Álvaro, 30, 28045 Madrid
- Tax ID (NIF): B05334115
- Telephone: +34 914 688 100
- Email: calidad@rafaelhoteles.com
For what purpose do we process your data?
Depending on the User’s requests, the purpose for which we will process your personal data will be as follows:
- To manage bookings made, including payment management (where applicable) and the management of your requests and preferences
- To manage subscription to our Newsletter for the sending of periodic information
- To manage the sending of commercial communications with offers and promotions from RAFAELHOTELES by electronic and/or conventional means, in cases where the User expressly consents to this
- To manage your requests for information and contact with RAFAELHOTELES through the means provided for this purpose
- To manage the provision of accommodation services and/or other possible contracted services
- To manage the carrying out of surveys and/or evaluations relating to the quality of the services provided by RAFAELHOTELES
- In the event that you send us your CV, we will process your data in order to assess and manage your job application, and where appropriate, carry out the necessary actions to participate in the different recruitment processes in the different hotels of the chain.
What is the legal basis for the processing of your data?
The legal basis for the processing of your data is your consent. The processing of your data will be carried out based on the different purposes detailed in the previous section and is based on the consent requested from you.Likewise, in cases where it is necessary to process the User’s data for compliance with a legal obligation or for the execution of the contractual relationship between RAFAELHOTELES and the User, the processing will be legitimised as it is necessary for compliance with said purposes.
To which recipients will your data be disclosed?
For the fulfilment of the purposes described and for organisational, operational, administrative reasons, etc., RAFAELHOTELES may contract the services of advisors, professionals or similar to carry out the processing of your personal data on behalf of RAFAELHOTELES. This processing on behalf of third parties is regulated by a contract that is in writing or in some other form that allows its conclusion and content to be evidenced, expressly specifying that the data processor will process the data in accordance with the instructions of RAFAELHOTELES and will not apply or use it for a purpose other than that set out in said contract, nor will it disclose it, even for storage, to other persons.There will be no assignment, transmission or transfer of personal data, except by legal obligation, or by requirement of the Public Administration or Regional Institutions and carried out within the scope of the functions that the law expressly assigns to them.If there is an assignment, transmission or transfer of personal data outside of the cases provided for, the owner of the personal data will be informed in advance, giving their consent if applicable.
What are your rights when you provide us with your data?
Any person has the right to obtain confirmation as to whether or not RAFAELHOTELES is processing personal data concerning them.They may also exercise the rights conferred by current legislation: right of access, rectification, erasure and objection, restriction of processing, data portability and the right not to be subject to automated individualised decisions.Likewise, you have the right to withdraw your consent at any time.You may exercise your rights by any means that allows proof of sending and receiving your request. The request must be addressed to RAFAELHOTELES, through the details included in the ‘Data Controller’ section, indicating the reference ‘Data Protection’. The request must include: Name, surname and a copy of your ID, request specifying your request and address for notification purposes.If you are not satisfied with RAFAELHOTELES’s response to the exercise of your rights, you have the right to lodge a complaint with the Supervisory Authority for their protection.
How have we obtained your data?
The personal data processed by RAFAELHOTELES have been provided by you yourself by completing the booking request, sending your CV in the work with us section, registering for the newsletter through our website, as well as signing the corresponding Accommodation Contract and other types of Services.
What categories of data do we process?
RAFAELHOTELES informs you of the processing of the following categories of data:
- Identification data (Name and Surname)
- Contact details (postal and email address, mobile phone)
- Personal characteristics data (nationality, date of birth, gender)
- Credit card data, necessary for payment of the booking or as a guarantee thereof
- In the Work with us section: academic and professional data (work experience)
In no case are specially protected data processed.
OTHER DATA WE PROCESS (VIDEO SURVEILLANCE):
We also inform you that our establishments have a video surveillance system, whose function is to guarantee the safety of people and facilities. We remind you that current legislation legitimises the processing carried out on the basis of RAFAELHOTELES’s legitimate interest in guaranteeing the security of the facilities, so your image may be recorded simply by accessing the building.This data may be disclosed to the State Security Forces and Bodies if necessary. The images will be kept for a maximum period of one (1) month from their capture.
How long will we store your data?
The User’s data will be kept for the period necessary to fulfil the purpose for which they were collected or until the User requests their cancellation from RAFAELHOTELES, objects or revokes their consent.In the case of CVs received, they will be kept for a maximum period of 6 months from receipt.We also retain your data to comply with the requirements of applicable law, prevent unlawful actions, resolve disputes, solve problems, and other actions permitted by law. Once the processing of your data is no longer necessary, we will delete and/or block it in accordance with our data retention and deletion policy and the legal limitation periods in accordance with current legislation.At RAFAELHOTELES, we are concerned about security and guaranteeing and protecting your privacy. For that reason, we guarantee that the processing of your data is carried out under high levels of security.In accordance with industry standards, we maintain technical and organisational measures against accidental or unlawful destruction, loss or accidental alteration, unauthorised disclosure or access and other unlawful forms or procedures.