Privacy Policy

Privacy Policy

Identification of the Data Controllers:

The data controllers responsible for processing your personal data, depending on where the reservation is made, may be:

• Prinz Hoteles, S.A., with registered office at Calle Ter, 27, Polígono Son Fuster, 07009, Palma de Mallorca, CIF A-07190309.
• Hotel Mal Pas, S.L., with registered office at Camino Vell de la Victoria, 1, 07400 Alcudia, CIF B-07754781.
• Caleta Club, S.A., with registered office at Calle Ter, 27, Polígono Son Fuster, 07009, Palma de Mallorca, CIF A-07190291.
• Apartamentos Zenit, S.A., with registered office at Calle Ter, 27, Polígono Son Fuster, 07009, Palma de Mallorca, CIF A-07123441.

Each entity will act individually as the data controller depending on where you make your reservation (hereinafter referred to as the "Controllers" or "Prinsotel Group").

For more information on the services offered, please refer to our Terms and Conditions of Service.

Identification of Prinsotel’s Data Protection Officer

Prinsotel Group has appointed a Data Protection Officer (DPO) responsible for overseeing data protection measures for all companies within the Group. For any questions or inquiries related to data protection, you may contact our DPO via email at dataprotection@prinsotel.com.

Purpose and Legal Basis for Data Processing

Under this Privacy Policy, "personal data" is defined as any information that identifies you or can be used to identify you, such as your name, address, phone number, or email address.

The Controllers will have access to any personal data you provide during your relationship with us (via reservations, commercial communications, customer service, etc.).

The Controllers will process your personal data for the purposes detailed below and according to the channel through which you provided your personal data:

• Online user registration on "Prinsotel Advantages"
  Your personal data will be processed to manage your personal space on the Controllers' website, as well as to manage any reservations made at any of the hotels.

  Legal Basis: Consent.
  Categories of Personal Data: Name, surname, country of residence, email, phone, payment details.

• Reservation and contracted service management, as well as modification or cancellation requests
  Your personal data will be processed to manage reservations at any of the hotels, handle payments, and send confirmation and receipts via email.

  If reservations are made over the phone, the Controllers will record the call to verify the user’s reservation. You will be informed of the recording, and any refusal to consent will prevent us from processing your reservation request.

  Legal Basis: Execution of the service contract with our customers.
  Categories of Personal Data: Name, surname, country of residence, email, mobile phone, payment information related to the reservation, billing information.

• Compliance with accounting, legal, tax, and administrative obligations
  Personal data will be processed to comply with legal obligations arising from the relationship with you as a customer and the processing of your personal data in accordance with EU law and/or applicable national law.

  Legal Basis: Compliance with legal obligations applicable to the Controllers under EU law and/or applicable national law.
  Categories of Personal Data: Name, surname, phone number, email, transactional information related to your reservation, or any other information necessary to meet legal obligations as required by competent supervisory authorities.

• Sending commercial communications with offers related to products and/or services you have contracted in the past or might be of interest to you
  For customers who choose to receive newsletters and exclusive promotions, their data will be processed for these purposes. Specifically, your personal data may be used to create profiles based on internal sources, which allows for the design and analysis of personalized products through segmentation into different groups according to common patterns. These profiles are only used to send you personalized communications about products and/or services offered by the Controllers.

  Legal Basis: Express consent.
  Categories of Personal Data: Name and surname, reservation data, dates, destination, and email address.

  Users wishing to unsubscribe from commercial communications can do so at any time and free of charge by sending an email to dataprotection@prinsotel.com.

• Customer service and complaint management
  Controllers may use customer information to handle requests, queries, or complaints submitted through customer service channels (phone and/or email) and to manage any incidents that may arise.

  Legal Basis: Execution of the contract or pre-contract.
  Categories of Personal Data: Name, surname, phone number, email, transactional information, country, voice (in case of a phone call), and any other information provided for handling your request.

• Conducting surveys and/or evaluations related to the quality of services provided by Prinsotel Group
  To assess the level of satisfaction of users with the contracted products and/or services, the Controllers will send quality surveys to obtain your feedback, assess your satisfaction level, experience, and suggestions, thereby allowing us to continually improve our services.

  Legal Basis: Legitimate interest of Prinsotel Group to assess service quality and improve based on survey insights.
  Categories of Personal Data: Email, phone number, transactional information related to the reservation, and any other non-personal information you provide in response to the surveys.

• Prevention and detection of fraudulent activities
  To monitor and follow up on actions that may constitute fraud in present or future transactions, the Controllers conduct an analysis of transactions to identify and scrutinize those suspected of being fraudulent during the contracting period, and, where appropriate, temporarily create exclusion lists for future contracting.

  Legal Basis: Overriding legitimate interest of Prinsotel Group in fraud detection.
  Categories of Personal Data: Transactional information, payment information, and contact details provided during potentially fraudulent booking processes.

• Use of cookies and similar technologies
  The Controllers use cookies and similar technologies (HTTP Cookies, Pixel Tracker, and Local Shared) on this website, resulting in the processing, storage, and sharing of user information and personal data as users navigate the site. Users can obtain all the information about cookies and similar technologies used on this website and manage their consent through our Cookie Policy.

Recipients of Personal Data

Generally, and only if necessary to meet legal responsibilities or comply with legal retention periods, your personal data may be disclosed to competent Public Authorities, particularly the Data Protection Authority, as well as to Judges, Courts, or the Public Prosecutor's Office in compliance with EU law and/or national law.

Additionally, to correctly provide services offered by Prinsotel Group and to comply with applicable regulations and purposes indicated in this Privacy Policy, we may need to share and disclose your personal data to other entities that form part of the Prinsotel Group. Furthermore, certain entities within the Prinsotel Group provide services to others within the Group, involving access to personal data on behalf of the other entities.

Similarly, the Controllers have providers who may process your personal data to deliver services related to the purposes about which you are informed (including but not limited to car rental services, excursion organizing companies, insurance brokers, etc.), and different service providers, including those in technology, legal, audit, or administrative services, may access customer personal data as a result of providing these services. In all cases, Prinsotel Group has confidentiality and data protection agreements that meet regulatory requirements.

Data Retention

Depending on the purpose of processing your personal data, the applicable retention criteria will be as follows:

• Online user registration on "Prinsotel Advantages": as long as the user does not deactivate their account using the provided means.
• Reservation and contracted services management, and modification or cancellation requests: strictly for the time necessary to manage the reservation and contracted services.
• Compliance with accounting, legal, tax, and administrative obligations: personal data will be blocked while legal responsibilities may arise for the Controllers due to compliance with their legal obligations.
• Sending commercial communications with offers related to products and/or services contracted in the past or that may be of interest to the user: as long as you do not withdraw your express and informed consent previously given, request to unsubscribe, exercise your right to deletion, objection, or right to not be subject to automated decisions, including profiling.
• Customer service and complaint management: for the time necessary to manage and respond to your request, complaint, or claim. However, in the case of phone services, call recordings will be retained for one (1) month from the date of the call.
• Conducting surveys and/or evaluations regarding the quality of services provided by Prinsotel Group: for up to 12 months unless you request the deletion of your personal data or object to this processing before the end of this period.
• Prevention and detection of fraudulent activities: until any detected fraudulent actions are resolved, and then they will be blocked while legal responsibilities for the Controllers may arise.
• Use of cookies and similar technologies: the information will be processed while user consent for installing cookies on their device remains in effect.

In any case, when personal data is no longer necessary for the purposes for which it was collected, or you withdraw your consent, or exercise your right to deletion or objection, the Controllers may retain it duly blocked to make it available to competent Public Authorities, Judges, Courts, or the Public Prosecutor's Office during the legal limitation periods of any actions that could arise from the relationship between the Parties or the processing of your personal data and/or legally provided retention periods under EU law and/or applicable national law.

Once these periods have expired, your personal data will be physically deleted with no possibility of recovery.

Exercise of Rights

You can exercise your right of access, rectification, objection, deletion, restriction, portability, and, where applicable, the right not to be subject to automated decisions, including profiling, by sending your request to dataprotection@prinsotel.com.

Regarding data processing based on your consent, the Controllers inform you that you may withdraw it or object to the processing at any time.

You may also file a complaint with the Spanish Data Protection Agency to safeguard your rights whenever deemed appropriate, www.aepd.es.

Confidentiality

Employees of the Controllers and their suppliers with access to your personal data commit to not disclose or use any accessed information. The information you provide will always be considered confidential and will not be used for other purposes.

Social Media

The Controllers are present on certain major social networks, acting as data controllers regarding the published data. Data will be processed on each social network in accordance with its respective policies. Therefore, the Controllers may inform followers on the corresponding social network about activities, offers, events, and other related topics. The Controllers will not collect personal data from social networks unless users provide express consent.

Links to Other Websites

On the Controllers' website, there are links to other websites deemed potentially useful and informative. However, please note that the Controller does not endorse or recommend the content or services of these sites, nor is it responsible for their privacy policies.

We recommend that you take into account and read the privacy policies of all sites you visit.

Modifications and Integrity of the Privacy Policy

The Controllers will only use your personal data as stipulated in the Privacy Policy in effect at the time your personal data is collected.

The Controllers reserve the right to modify this Privacy Policy at any time, publishing such changes on our website, so we recommend visiting it each time you access the Privacy Policy. If, at any time, it is decided to use personal data in a manner different from what was stated at the time of collection, we will inform you via email, if available.

If any clause of this Privacy Policy is annulled or considered null, the other conditions will not be affected, retaining full validity and effect under the applicable regulations in effect at each time.

Last updated: October 16, 2024