1. DATA CONTROLLER AND POLICY INFORMATION
The owner of this website is Servigroup Travel S.L., with tax identification No. (NIF) B-03039120, with registered offices at Avenida Europa, 6, 03503 Benidorm, Alicante, and registered in the Companies Register, in Book 86, Page 184, Section 3, Sheet 1,281, (hereinafter SERVIGROUP).
The company is part of a hotel chain known as HOTELES SERVIGROUP. Find out more about the companies in the hotel chain.
SERVIGROUP has appointed a Data Protection Officer, who users can contact via the following e-mail address: dpo@servigroup.es
The purpose of this Privacy Policy is to provide website users with information on all types of data processing that may be carried out through the website, as well as information on how they can exercise their data protection rights. Users can access all our privacy information through the different tabs included in this policy.
2. PERSONAL DATA PROCESSED BY SIMPLY ACCESSING THE WEBSITE
2.1. Personal data processed
By simply accessing the website, SERVIGROUP collects the IP address and other data relating to the connection and its origin.
The IP address is a code that identifies the user’s internet connection at a given moment.
Only the user’s internet access provider can identify the subscriber assigned to a particular IP address at a given moment.
Due to the nature of the server supporting the website, the user’s IP address is automatically registered, together with the date and time of access.
2.2. Use of data
Data will only be used to manage the normal use of the website and to perform statistical analyses of the use of the website.
2.3. Recipients of the data
SERVIGROUP shall not provide this information to any third party, except where required to by law (for example, an official request as part of a police investigation).
2.4. Lawful processing
The legal basis legitimising the processing of the IP address is the technological need to enable the provision of the website.
2.5. Data processing retention period
IP addresses are retained for a period of one (1) month.
3. USER RIGHTS AND HOW TO EXERCISE THEM
Current data protection regulations guarantee the user the following rights:
• Access: The user is able to find out what information is held about them, from where it was obtained, who provided it and what it has been used for.
• Rectification: The user is able to rectify erroneous or outdated information.
• Erasure: The user is able to stop their data being processed.
• Objection: The user is able to stop their data being processed for a specific purpose.
• Restriction: The user is able to restrict the processing of their data, but in such a way that retains it for subsequent purposes.
• Portability: The user is able to obtain a copy of their data in electronic format and, in certain circumstances, request that they be sent to other service providers. This only applies to computerised processing carried out with the consent of the user or for the fulfilment of a contract.
• Withdrawal of consent: The user is able to withdraw any consent that, where applicable, was granted for the processing of their data.
These rights require the ability to identify the user making the request and to link their identity with data being processed by SERVIGROUP.
Users are informed that they may exercise the aforementioned rights with SERVIGROUP, by sending a letter to the address provided above or by sending an e-mail to dpo@servigroup.es.
Nevertheless, SERVIGROUP cannot establish this link with any data processed as a result of simply accessing the website (IP address and cookies), unless the user can provide the appropriate documentation enabling their identification (for example, a certificate from their Internet access provider indicating the IP address assigned to the user on specific dates and times).
Users requiring more information or those who consider that their data protection rights have been infringed may contact the Spanish Data Protection Agency https://www.aepd.es/es or the SERVIGROUP Data Protection Officer (dpo@servigroup.es).
4. USE OF COOKIES AND SIMILAR TECHNOLOGIES
SERVIGROUP uses cookies and other similar data storage and retrieval technologies in computers (hereinafter, cookies).
Cookies are files downloaded to the user’s browser and that can subsequently be read by SERVIGROUP. This means that cookies enable certain functionalities, such as recognising a user who has previously visited the website and analysing the use of web-based services to help improve them.
However, it is impossible to establish the identity of the user from the cookies used by SERVIGROUP, unless the user provides additional information via other means and this is used to link it to the cookies they have downloaded.
For more information on cookies, see our [Cookies Policy].
5. BOOKING FORM
SERVIGROUP will process the data provided via the booking form, in order to manage and fulfil bookings made by users, undertake the necessary communications with the user and in cases where the user has not objected by checking the box on the form, send a booking confirmation message via SMS.
• Legal basis: The legal basis legitimising the processing is the need to fulfil and implement a contractual relationship, comply with SERVIGROUP’s legal obligations, as well as the legitimate interest of SERVIGROUP in sending out the booking confirmation via SMS.
• Retention period: Data will be processed for the duration of the contractual relationship and will subsequently be retained for a period of 15 years for possible liabilities arising from the processing.
• Recipients: Data may be forwarded to other entities forming part of HOTELES SERVIGROUP (details available in the Data Controller tab of this Policy), as well as other entities involved in the proper processing of the booking, such as the company managing the payment gateway, banks, financial institutions and the tax authorities in compliance with legal requirements.
Furthermore, in cases where no objection has been expressed by checking the box on the booking form, your personal data will be used to send you commercial communications via the contact methods provided, including electronic methods, in relation to SERVIGROUP products, services, offers, latest news and events relating to the hotel and tourism sector. The legal basis legitimising this processing is the legitimate interest of SERVIGROUP derived from the existing relationship. Your data will be processed in this way indefinitely until they are objected to or the erasure of the data is requested. For more information relating to commercial communications, see the “GENERAL INFORMATION ON SENDING COMMERCIAL COMMUNICATIONS” section of this Privacy Policy.
You may exercise your rights at any time, as indicated in the “USER RIGHTS AND HOW TO EXERCISE THEM” section of this Privacy Policy.
6. CONTACT FORM:
SERVIGROUP will process the data provided via the contact form, in order to fulfil the contact request.
• Legal basis: The legal basis legitimising the processing is the consent expressed when submitting your contact request.
• Retention period: Data will be processed for the time period necessary to fulfil the user’s contact request. Data will subsequently be blocked and stored for three (3) years for possible liabilities arising from processing.
• Recipients: Data may be forwarded to other entities forming part of HOTELES SERVIGROUP (details available in the Data Controller tab of this Policy) in order to manage the request from the user.
You may withdraw granted consent at any time, as well as exercising your rights as indicated in the “USER RIGHTS AND HOW TO EXERCISE THEM” section of this Privacy Policy.
7. NEWSLETTER SUBSCRIPTION FORM
SERVIGROUP will process the data provided via the newsletter subscription form, in order to enable SERVIGROUP to send you the newsletter and thus keep you informed about products, services, latest developments, events, news and information through the blog of entities forming part of HOTELES SERVIGROUP relating to the hotel and tourism sector.
• Legal basis: The legal basis legitimising this processing is the consent expressed when you subscribe to the newsletter.
• Retention period: Your data will be processed indefinitely until you withdraw your consent or request the erasure of your data, and will subsequently be blocked for three (3) years for possible liabilities arising from the processing.
SERVIGROUP informs the user that in order to verify the data provided, they will be sent an initial e-mail free from commercial content in which the user will be asked to verify the data provided.
You may withdraw granted consent at any time, as well as exercising your rights as indicated in the “USER RIGHTS AND HOW TO EXERCISE THEM” section of this Privacy Policy.
8. TELL US WHAT YOU THINK FORM
If the user chooses to provide personal data in the tell us what you think form, SERVIGROUP will process the data in order to manage the quality survey and its subsequent sending, as well as handling any suggestions.
• Legal basis: The legal basis legitimising this processing is the consent expressed when you submit your suggestions and complete the survey.
• Retention period: Data will be processed for the time period necessary to inform the user about the survey and respond to any suggestions. Data will subsequently be blocked and stored for three (3) years for possible liabilities arising from processing.
In addition, SERVIGROUP may send commercial communications using the contact details provided by the user, including via electronic means, containing information on products, services, latest developments, events, news and information from the blog of entities forming part of HOTELES SERVIGROUP relating to the hotel and tourism sector.
• Legal basis: The legal basis legitimising this action is the consent expressed when the corresponding box on the form is checked.
• Retention period: Your data will be processed indefinitely until you withdraw your consent or request the erasure of your data, and will subsequently be blocked for three (3) years for possible liabilities arising from the processing.
SERVIGROUP informs the user that in order to verify the data provided, they will be sent an initial e-mail free from commercial content in which the user will be asked to verify the data provided.
You may withdraw granted consent at any time, as well as exercising your rights as indicated in the “USER RIGHTS AND HOW TO EXERCISE THEM” section of this Privacy Policy.
9. AGENCY REGISTRATION FORM
SERVIGROUP will process the data provided via the agency registration form in order to manage registration and access to the platform.
• Legal basis: The legal basis legitimising the processing is the need to manage the registration and access to the website, deriving from a contractual relationship.
• Retention period: The data will be processed in this way indefinitely until the user decides to unsubscribe on the website or by exercising their rights to objection or to be forgotten, and will subsequently be blocked for fifteen (15) years for possible liabilities arising from processing.
In addition, SERVIGROUP may send out commercial communications using the contact details provided by the user, including via electronic means, containing information on products, services, latest developments, events, news and information from the SERVIGROUP blog relating to the hotel and tourism sector.
• Legal basis: The legal basis legitimising this action is legitimate interest for SERVIGROUP based on the existing relationship.
• Retention period: Your data will be processed indefinitely until you request the erasure of your data or object to their processing, and will subsequently be blocked for three (3) years for possible liabilities arising from processing.
SERVIGROUP informs the user that in order to verify the data provided, they will be sent an initial e-mail free from commercial content in which the user will be asked to verify the data provided.
You may exercise your rights at any time, as indicated in the “USER RIGHTS AND HOW TO EXERCISE THEM” section of this Privacy Policy.
10. WORK WITH US FORM
SERVIGROUP will process the data provided via the work with us form in order to manage the applications as part of present and/or future selection procedures for jobs with SERVIGROUP and the entities forming part of HOTELES SERVIGROUP.
• Legal basis: The legal basis legitimising this action is the user’s consent expressed when submitting their application.
• Retention period: Data will be processed for one (1) year, and will subsequently be retained for a period of three (3) years for possible liabilities arising from processing.
• Recipients: Data may be forwarded to other entities forming part of HOTELES SERVIGROUP to which the user wishes to apply.
In addition, SERVIGROUP may send commercial communications using the contact details provided by the user, including via electronic means, containing information on products, services, latest developments, events, news and information from the blog of entities forming part of HOTELES SERVIGROUP relating to the hotel and tourism sector.
• Legal basis: The legal basis legitimising this action is the consent expressed when the corresponding box on the form is checked.
• Retention period: Data will be processed in this way indefinitely until consent is withdrawn or erasure of the data is requested.
SERVIGROUP informs the user that in order to verify the data provided, they will be sent an initial e-mail free from commercial content in which the user will be asked to verify the data provided.
You may withdraw granted consent at any time, as well as exercising your rights as indicated in the “USER RIGHTS AND HOW TO EXERCISE THEM” section of this Privacy Policy.
11. SERVIGROUP CHAT
Where the user provides personal data via the website chat window, SERVIGROUP will process the data in order to deal with their enquiry.
• Legal basis: The legal basis legitimising the processing is the consent expressed by the user when the contact request is submitted.
• Retention period: Data will be processed for the time period necessary to fulfil the user’s contact request. Data will subsequently be blocked and stored for three (3) years for possible liabilities arising from processing.
You may withdraw granted consent at any time, as well as exercising your rights as indicated in the “USER RIGHTS AND HOW TO EXERCISE THEM” section of this Privacy Policy.
SERVIGROUP informs the user that the supplier hosting the chat system’s data is located in the United States, a country that does not provide data protection guarantees equivalent to European regulations. Nevertheless, the entity tawk.to provides appropriate data protection guarantees through their participation in the Privacy Shield system (more info. https://www.privacyshield.gov/participant?id=a2zt00000008SblAAE&status=Active).
12. ONLINE CHECK IN
All the data of individuals provided and obtained during this contractual relationship shall be recorded in a file controlled by Servigroup Travel, S.L., with registered office at Av. Europa, 6, 03503 Benidorm, Alicante, (Spain) (hereinafter, SERVIGROUP), in order to manage the check in, as well as the proper provision of the requested services. The legal basis legitimising this processing is the management of the contract between the client and the company. Accordingly, data shall be retained for a period of five (5) years for possible legal liabilities arising from the processing. Consequently, your data may be forwarded to other entities in the SERVIHOTEL, S.L. business group for the purpose of managing the requested services, as well as to institutions and/or public authorities in compliance with legal requirements.
Furthermore, in cases where no objection has been expressed by checking the box on the form, your personal data will be used to send you commercial communications via the contact methods provided, including electronic methods, in relation to Servigroup products, services, offers, latest news and events relating to the hotel and tourism sector. The tool used to send e-mail communications will include small transparent links and images that will be associated with your e-mail address. This means that when you download one of these images or click on a link in the e-mail, Servigroup can find out, for statistical purposes, if the e-mail has been opened and if any link has been followed directly from the aforementioned e-mail. These uses may be blocked by configuring your e-mail manager or program to prevent the automatic downloading of images, as well as by not clicking on the links included in the e-mails received. In each communication, you can opt out of receiving this type of information through the contact method indicated to process your deregistration. The legal basis legitimising this processing is the legitimate interest of SERVIGROUP derived from the existing relationship. Your data will be processed in this way indefinitely until they are objected to or the erasure of the data is requested.
We inform you that at any time you may exercise your right to access, rectify, and erase the data, to object to and restrict the processing and to the portability of the data, as applicable, by writing to the above address or to the e-mail address of our Data Protection Officer (dpo@servigroup.es), providing a photocopy of your national identity or equivalent document to demonstrate that you are a client and giving details of your request. Furthermore, if you consider that your data have been processed inappropriately, you have the right to lodge a complaint with the Spanish Data Protection Agency https://www.aepd.es/es or with our Data Protection Officer (dpo@servigroup.es).
13. AUTOMATED TELEPHONE BOOKING
In cases where the user or any person makes a phone call to SERVIGROUP to manage a booking and provides personal data during the call, SERVIGROUP will process this data to provide the requested service.
• Legal basis: The legal basis legitimising this processing is a need for the implementation of pre-contractual measures, the execution of the contractual relationship and the provision of the requested services.
• Retention period: Data will be processed for the time period necessary to fulfil the request. Subsequently, data will be retained for a period of fifteen (15) years for possible liabilities arising from processing.
• Recipients: Data may be forwarded to other entities forming part of HOTELES SERVIGROUP (details of the entities are available in the Data Controller tab of this Policy) as part of a booking request by the user, banks, financial institutions and the tax authorities in compliance with legal requirements or for the implementation of pre-contractual measures and the execution of the contractual relationship.
You may exercise your rights at any time, as indicated in the “USER RIGHTS AND HOW TO EXERCISE THEM” section of this Privacy Policy.
14. GENERAL INFORMATION ON SENDING COMMERCIAL COMMUNICATIONS
SERVIGROUP informs the user that the commercial communications requested by the user, or received due to the latter not objecting to receiving them by checking the corresponding boxes on the forms, use a tool to send commercial communications by e-mail that includes small transparent links and images that will be associated with your e-mail address. This means that when you download one of these images or click on a link in the e-mail, SERVIGROUP can find out, for statistical purposes, if the e-mail has been opened and if any link has been followed directly from the aforementioned e-mail. These uses may be blocked by configuring your e-mail manager or program to prevent the automatic downloading of images, as well as by not clicking on the links included in the e-mails received.
In each communication, the user can opt out of receiving this type of information through the specific mechanisms provided to process their deregistration, in addition to being able to request, if appropriate, their right to withdraw consent, object to processing or be forgotten.
15. PERSONAL INFORMATION FROM THIRD PARTIES
In cases where the user provides personal data from third parties, the user confirms that it has, and is responsible for having, properly informed the third party in accordance with the provisions in this Privacy Policy and has obtained, where appropriate, the corresponding consent for the processing by SERVIGROUP.
