PROTECTION OF PERSONAL DATA
The General Data Protection Regulation (Regulation (EU) 2016/679) harmonises Data Protection legislation across the European Union, increasing the protection of individuals and giving them greater control over their personal data.
At CLARIDGE HOTEL, we have always been concerned about the protection of personal data. Therefore, we have updated our Privacy Policy in order to adjust it to the new regulation and inform you about the changes that affect your rights:
Who is responsible for the processing of your personal data?
HOTEL CLARIDGE, SL, with address at Plza. Conde Casal 6, 28007 Madrid and CIF: B82886144.
The Data Protection Delegate of HOTEL CLARIDGE is the person in charge of assisting you in any question that may arise regarding the protection of your personal data and to ensure compliance with the legislation on data protection.
You can contact him at the following email address: reservas@hotelclaridge.com
For what purpose do we process your personal data?
- To maintain the commercial and contractual relationship with your customers/suppliers.
- Sending information about our services.
- Sending bulletins and newsletters.
- Booking management.
- Conducting customer satisfaction surveys.
- Recruitment and selection of personnel.
- Video surveillance and security of the facilities.
- For compliance with current regulations and laws (Organic Law 4/2015 on the Protection of Citizen Security).
- Royal Decree 933/2021, of 26 October, which establishes the documentary registration and information obligations of natural or legal persons who carry out accommodation and motor vehicle rental activities.
How long do we keep your data?
- In the case of suppliers, customers, partners and staff, we keep the data for the duration of the contractual relationship with us and thereafter for the legally required period.
- In relation to personnel selection processes, the data will be kept for the duration of the process and, in the event that the CV is of interest to the company, it will be kept for a period not exceeding one year, after which time it will be deleted or destroyed.
- In relation to actions aimed at commercial prospecting, the data will be kept until the data subject shows his/her opposition to the processing or withdraws his/her consent.
- In relation to video recording through security cameras and access control to the facilities, the data will be kept for a maximum of 30 days.
Why do we use your personal data?
- Your consent or if they have been provided voluntarily by you by any means (paper forms, web forms, e-mail), the inclusion of personal data in files is absolutely voluntary and their collection is duly announced.
- The maintenance, development and execution of a contractual relationship that we maintain with you, in the case of: (i) provision of services; (ii) labour, commercial, administrative relationship, among others.
- For legitimate interest, always respecting your right to the protection of personal data, honour and privacy, for the development and dissemination of our services.
- In compliance with a legal obligation.
To whom will we disclose your data?
Your data will be kept under strict security measures that guarantee their confidentiality and security. Similarly, they will only be disclosed to the following entities and for the following purposes:
- Entities and suppliers that provide services to HOTEL CLARIDGE for the correct execution of our activities and projects. These entities and suppliers are duly accredited and sign the corresponding data processing contract with us in compliance with current data protection regulations.
By way of example of the services provided to us and which may involve the processing of your personal data on behalf of HOTEL CLARIDGE, we can cite, by way of example and without limitation: multidisciplinary professional services, logistics, legal advice, technological services, computer services, courier and delivery, maintenance, security and surveillance, advertising and marketing, call centre etc…
- Public bodies and authorities and Courts and Tribunals, when there is a legal obligation to provide the data.
What security measures do we apply to personal data?
We implement security measures necessary to prevent theft, alteration or unauthorised access to data, taking into account the state of the art, the costs of implementation, and the nature, scope, context and purposes of the processing, as well as risks of varying likelihood and severity to the rights and freedoms of natural persons. In the case of outsourced services, we require and ensure that the processor implements appropriate technical and organisational measures to ensure a level of security appropriate to the risks involved, as set out in art. 32 of the General Data Protection Regulation.
We also carry out Impact Assessments on those processing operations that we consider may pose a risk to the rights and freedoms of individuals, in order to implement the necessary and appropriate measures to prevent a breach of confidentiality.
What categories of data do we process?
We process the following categories of data, depending on the circumstances of your relationship with us:
- Identification data, including image data.
- Postal address and e-mail addresses.
- Telephone numbers
- General characteristics data.
- Academic and professional data.
- Financial data for billing and payment of services.
- Specially protected data (Arts. 9 and 10 of the General Data Protection
- Regulation (EU Regulation 2016/679).
What are your rights?
Everyone has the right to know if the CLARIDGE HOTEL processes their personal data. You also have the right to:
- Access your personal data,
- Request the rectification of inaccurate data.
- Request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected,
- Oppose the processing of your data, for reasons related to your particular situation, requesting that they not be processed by the CLARIDGE HOTEL.
- In certain circumstances, you may request the limitation of the processing of your data, in which case we will only keep them for the exercise or defence of claims.
- Withdraw, whenever you wish, the consent given, without affecting the lawfulness of the processing that we have carried out prior to such withdrawal.
When you exercise your rights of deletion, opposition, limitation or withdrawal of your
consent, the CLARIDGE HOTEL will stop processing your data, except for compelling legitimate reasons or the exercise or defence of possible claims.
You may exercise all these rights by contacting HOTEL CLARIDGE, Plza. Conde Casal 6, 28007 Madrid (Att. Delegado de Protección de Datos”) or by sending an email to: reservas@hotelclaridge.com
Please remember that whenever you exercise any of the rights we have set out above, you must enclose with your request a copy of your ID card or equivalent document that allows us to verify your identity.
Likewise, if you are not satisfied with how we have dealt with your rights, you may file a complaint with the Spanish Data Protection Agency, through the website www.aepd.es.
