PRIVACY - EXTENDED INFORMATION

The Privacy Policy forms part of the General Conditions governing this website.
Who is responsible for the processing of your data?
SERVATUR, S.A.
VAT NUMBER: A35032200
Address: C/ DORAMAS, 4, 35129, MOGAN.
Tel: 928 15 27 77 EXT. 50
Data Protection Delegate: dataprotection@servatur.com

You may contact us by any available means.
We reserve the right to modify or adapt this Privacy Policy at any time. We encourage you to review it, and if you have registered and are logged in to your account or profile, you will be informed of any changes.

If you belong to one of the following groups, please consult the information below:

GUESTS

For what purposes will we process your personal data?

Your data will be processed for the purpose of managing your booking, your stay at the hotel and to ensure payment of the expenses derived from said stay.

Your data will be communicated to the law enforcement agencies in compliance with the provisions of current legislation, as well as to the travel agencies or operators involved.

The data will be stored for at least 6 years in compliance with tax, mercantile, consumer and travellers’ register regulations.

What is the legal basis for processing your data?

The legal basis is your consent, and as they are necessary for the execution of a contract or for the application at its request of pre-contractual measures.

CUSTOMERS

For what purposes will we process your personal data?

 

  • Preparation of the estimate and follow-up of the same by means of communications between both parties.
  • Electronic information relating to your request.
  • Electronic commercial or event information, providing express authorisation has been given.
  • We will contact you to help you with the management of your reservation through the web, if you have included your details and you have not been able to finalise it.
  • The management of administrative, communications and logistics services carried out by the responsible party.
  • Invoicing and declaration of the appropriate taxes.
  • Carrying out the corresponding transactions.
  • In the event it were necessary to contact customers for the management of reserved and/or contracted services.
  • Control and recovery management.
  • During the card payment process, the following personal data will be collected by the bank that owns the Virtual POS: type of connection, date and time, IP address, device information, email address, mobile phone, browsing data, transaction data and data required by 3D Secure security protocols, for the sole purpose of detecting and preventing unauthorised payment transactions.

 

What is the legitimacy for the processing of your data?

The existence of a contractual relationship or pre-contractual measures, and in your consent for all purposes that require your express consent such as sending commercial communications.

 

COMMERCIAL AND COURTESY COMMUNICATIONS:

 

For what purposes will we process your personal data?

Providing you have given us your consent, we will send you communications to keep you up to date with our exclusive offers and promotions, news, special dates, destination, and to congratulate you on your birthday and other special occasions. We will process your data for the following purposes:

  • Exclusive offers and promotions
    Special dates (Carnival, Easter, Halloween, Christmas, New Year’s Eve, local and international festivals).
    Servatur News (new hotels, facilities and services)
    Destination (activities and places of interest to inspire you and make the most of your stay)

    Greetings (birthdays and other special occasions)

 

What is the legitimacy for the processing of your data?

The acceptance and consent of the interested person.

You give us your consent when you subscribe through our data colletion forms (reservation channel, pre-check-in, registration for captive Wi-Fi, etc), marking the check boxes of your preferences.

We remind you that “at any time and in a super simple way you can unsubscribe or choose your communication preferences”

It will always be necessary, prior to communication, for the client or User to accept the check box(es) and click on the accept button.  This will necessarily imply that the person has been informed and has expressly given their consent to receive commercial and courtesy communications.

At any time, people may unsubscribe from commercial and courtesy communications, without affecting the legality of the treatment based on consent prior to its withdrawal.

CLUB SERVATUR

Register​
You may join Club Servatur at any time through the Club Servatur members area or while making a reservation through our website by activating the discount code and selecting the option “Yes, I want to join Club Servatur and I accept the conditions” before finalising your reservation.
​

 

Membership status
Membership is granted on a personal and non-transferable basis, in the name of a natural person over 18 years of age and must be accredited when requested.
Servatur reserves the right to cancel membership status at any time in the event of improper use of said status or inappropriate conduct at any of the Servatur Hotels & Resorts establishments.

Operating rules
Offers, discounts and news will be sent by e-mail, provided that you have given us your express consent. You can rest assured that you can unsubscribe at any time with just one click, although we are sure that you will en joy hearing abou tour offers.

If the booking is made through the Servatur website, you will need to log in with your username and password to obtain the rate and the special discounts of the Servatur Club or you can register in the Servatur Club during the same booking process.

If the booking is made by e-mail, by telephone or at the reception desk of any of our establishments, you must provide the identity details that allow you to verify your membership status. This information may include the identification number of a valid and current ID document, date of birth, e-mail address and even references to any previous stays, such as the hotel where you last stayed and the approximate dates of stay.
​

Validity
Servatur reserves the right to cancel or change the conditions of Club Servatur in whole or in part at any time. The company shall inform its Club Servatur members as soon as possible of the cancellation or changes to the same and, in any case, shall publish the same on the Servatur website. The company shall not be liable for any damages or possible losses caused to the holder as a result of the change of conditions or cancellation of membership of Club Servatur.

Unsubscribe
Although we would be very sorry if you decide to stop being part of Club Servatur, you can unsubscribe at any time and in just a couple of clicks from your account in the members’ area.

Conditions of Club Servatur
For what purposes will we process your personal data?

Your data as a member of Club Servatur will be processed in order to carry out the appropriate management of the loyalty programme and to carry out advertising and marketing activities in accordance with the preferences that you have indicated to us.

 

What is the legal basis for processing your data?
The legal basis for the processing of your data is your consent as a data subject. By ticking the corresponding box you consent to the sending of courtesy and commercial communications about products and experiences that may be of interest to you.

QUALITY SURVEYS

For what purposes will we process your personal data?

To assess the quality of the service provided.

To improve the services offered, in accordance with ISO standards.

What is the legal basis for processing your data?

The legal basis is the express, free and voluntary consent of the person surveyed.

WEB OR EMAIL CONTACTS

What data do we collect through the Website?
We may process your IP address, what operating system or browser you use, and even the duration of your visit, anonymously.

If you provide us with data in the contact form, it will be identified so that we can contact you if necessary.

For what purposes will we process your personal data?

  • To answer your queries, requests or petitions.
  • To manage the requested service, answer your request, or process your request.
  • Information by electronic means, related to your request.
  • Commercial or event information by electronic means, provided that express authorisation has been given.
  • To carry out analyses and improvements on the Web, on our products and services. To improve our commercial strategy.

p> 

What is the legitimacy for the processing of your data?

The acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill in a form and click on the send button, the completion of the same will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to the form or acceptance of the privacy policy.
All our forms have the symbol * in the obligatory data. If you do not provide these fields, or do not check the checkbox for acceptance of the privacy policy, the information will not be allowed to be sent. It usually has the following formula: “□ I have read and accept the Privacy Policy”.

NEWSLETTER CONTACTS

What data do we collect through the newsletter?
On the website, you can subscribe to the newsletter if you provide us with an email address, to which the newsletter will be sent.

We will only store your email address in our database and will send you periodic emails until you unsubscribe or we stop sending emails.

You will always have the option to unsubscribe, in any communication.

For what purposes will we process your personal data?

  • To manage the requested service.
  • Information by electronic means, related to your request.
  • Commercial or event information by electronic means, as long as there is express authorisation.
  • To carry out analyses and improvements in the sending of mailings, in order to improve our commercial strategy.

 

What is the legitimacy for the processing of your data?
Acceptance and consent of the interested party: In those cases where you subscribe, it will be necessary to accept a checkbox and click on the send button. This necessarily implies that you have been informed and have expressly given your consent to receive the newsletter.

If you do not tick the checkbox to accept the privacy policy, the information will not be sent. It usually has the following formula: “□ I have read and accept the Privacy Policy”.

SOCIAL NETWORK CONTACTS

For what purposes will we process your personal data?

  • To answer your queries, requests or petitions.
  • To manage the requested service, answer your request, or process your request.
  • To get in touch with you and create a community of followers.

What is the legitimacy for the processing of your data?

The acceptance of a contractual relationship in the corresponding social network environment, and in accordance with their privacy policies:

Facebook
Instagram
LinkedIn

For how long will we store personal data?
We can only consult or remove your data in a restricted way by having a specific profile. We will process it for as long as you allow us to do so by following us, being a friend or by “liking”, “following” or similar buttons.

Any rectification of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.

SUPPLIERS

For what purposes will we process your personal data?

  • Information by electronic means, regarding your application.
  • Commercial or event information by electronic means, provided there is express authorization.
  • Manage the administrative, communications and logistics services performed by the Responsible.
  • Billing.
  • Make the appropiate transactions.
  • Invoicing and reporting  appropiate taxes.
  • Control and collections management.

What is the legitimacy for the processing of your data?

The legal basis is the acceptance of a contractual relationship, or failing that your consent to contact us or offer us your products in any way.

JOB SEEKERS

For what purposes will we process your personal data?

  • Organization of selection processes for the recruiment of employees.
  • To call you for job interviews and evaluate your application.
  • If you have given us your consent, we may pass it on to partner or related companies for the sole purpose of helping you to find a job.

How long will we keep the personal data?

We also inform you that one year after receiving your curriculum vitae, we will proceed to its secure destruction.

What is the legal basis for processing your data?
The legal basis is your unequivocal consent when you send us your CV./p>

ETHICAL CHANNEL

What data do we collect through the Ethical Channel?

If you identify yourself, we may collect: name, surname, email, telephone number and the personal data of the third party you provide in the communication.

 

For what purposes we will process your personal data?

  • Manage communications
  • Take appropiate corrective action and,
  • If necessary, inform you about the outcome of the procedure.

What is the legitimacy for the processing of your data?

The legal basis is legal obligation or, failing that, public interest.

Law 2/2023, of February 20, regulating the protection of persons reporting on regulatory and anti-corruption violations.

 

How long will we keep your personal data?

The data will be kept for the period strictly necessary to clarify the facts communicated. In any case, after six (6) months, the data provided will be anonymiased unless they are investigated in a different legal environment.

 

Do we include personal data of third parties?

No, as a general rule we only process the data provided to us by the holders. If you provide us with data of third parties, you must inform and request their consent beforehand, otherwise we will not be held liable for any failure to comply with this requirement.
What about data on minors?
We do not process data of children under 14 years of age without the consent of the parent or legal guardian. Therefore, please refrain from providing them if you are not of that age or, if applicable, from providing data of third parties who are not of that age. SERVATUR, S.A. disclaims any liability for failure to comply with this provision.
Will we communicate electronically?
They will only be used to process your request, if it is one of the means of contact you have provided us with. If we send you commercial communications, you will have given your express prior consent.
What security measures do we apply?
For your peace of mind: We have adopted an optimal level of protection for the Personal Data we handle, and we have installed all the technical means and measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorised access and theft of Personal Data.
To which recipients will your data be communicated?
Your data will not be passed on to third parties, unless legally obliged to do so. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial institutions for the collection of the service provided or product purchased, as well as to the persons or entities in charge of the processing necessary for the execution of the agreement.
In case of purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed in its environment, always with maximum security. During the card payment process, data will be collected by the bank that owns the Virtual POS.
When we order it, the web development and maintenance company, or the hosting company, will have access to our website. They will have signed a service contract that obliges them to maintain the same level of privacy as we do.
International data transfers may be made when using American applications, however, such transfers will be made to entities that have demonstrated that they comply with the level of protection and guarantees in accordance with the parameters and requirements set out in current data protection regulations, such as the European Regulation, or when there is a legal authorisation to make the international transfer.
What rights do you have?
  • To know whether we are processing your data or not.
  • To access your personal data.
  • To request the rectification of your data if inaccurate.
  • To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
  • To request the limitation of the processing of your data, in certain cases, in which case we will only keep them in accordance with the regulations in force.
  • To submit your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new person in charge that you designate. It is only valid in certain cases.
  • To file a complaint with the Spanish Data Protection Agency or competent supervisory authority if you believe that we have not assisted you correctly.
To withdraw consent to any processing for which you have consented, at any time.
Do you want a form for exercising your rights?
We have forms for the exercise of your rights, request them by email, or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
These forms must be electronically signed or be accompanied by a photocopy of the ID card. If you are represented by someone else, you must attach a copy of their ID card, or also signed with their electronic signature.
Forms can be submitted in person, by letter or by mail to the address of the responsible person or entity at the beginning of this text.
How long does it take to get back to you on the Exercise of Rights?
It depends on the law, but at most within one month of your application, and two months if the issue is very complex. We will notify you if we need more time.
Do we process cookies?
If we use other types of cookies that are not necessary, you can consult the cookie policy in the corresponding link at the top of our website.
How long will we keep your personal data?
Personal data will be kept for as long as you continue to have a relationship with us. Once you unsubscribe, the personal data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them in accordance with the statute of limitations for legal actions.
The data processed will be kept until the aforementioned legal periods expire, if there is a legal obligation to keep them, or, if there is no such legal period, until the data subject requests their deletion or revokes the consent granted.
We will retain all information and communications relating to your purchase or the provision of our service, for the duration of product or service warranties, to address potential claims.