Your data, your rules
PRIVACY POLICY
PRIVACY POLICY – ROOM00 HOSTEL
Room00 Hostels & Hotels S.L.U (hereinafter “Room00 Group”) is the Data Controller of the personal data of the clients of each of the hotels (hereinafter the “Users”).
Through this Privacy Policy, and in compliance with Articles 12 and 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”) and Article 11 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDPGDD”), Room00 Group informs Users who use the Website about the processing of their personal data that may be collected through this and processed by Room00 Group.
1. INFORMATION ABOUT THE DATA CONTROLLER
Data Controller: Room00 Hostels & Hotels S.L.U.
Tax ID: B87637575
Registered Address: Calle Palermo, 44, 28043 Madrid, Spain
Contact: DPO@room00group.com
2. DATA PROCESSED, LEGAL BASIS, PURPOSES AND RETENTION PERIOD.
| DATA PROCESSED | LEGAL BASIS | PURPOSES | RETENTION PERIOD |
|---|---|---|---|
| Datos de Reserva. Nombre, apellidos, correo electrónico, número de teléfono y DNI. | Execution of the contractual relationship in which the interested party is a party. | Reservation management. In relation to the reservation made, process payments, and manage any modification or cancellation of the reservation. | Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. This data will be blocked to comply with Room00 Group’s legal obligations and, after this period, will be permanently deleted. |
| Registration Details. Name, surname, sex, ID number, Nationality, Date of birth, Place of usual residence, Full address, Town/City, Country, Home telephone number, Mobile telephone number, Email address, Relationship between travelers (if any of them are minors). | Compliance with a legal obligation. | Registration of files of the State Secretariat for Security. Processing of personal data for the prevention, detection, and investigation of crimes. | Personal data processed by Room00 Group will be kept for a period of three years from the end of the service or contracted benefit. |
| Bank details. | Execution of the contractual relationship in which the interested party is a party. | Payment for the reservation or to guarantee it. As well as to pay for the stay or services associated with it. | Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. This data will be blocked to comply with Room00 Group’s legal obligations and, after this period, will be permanently deleted. |
| Contact information. Name, surname, email address, phone number. | consent | To attend to and respond to requests, comments, and suggestions, as well as to provide support to the User during the use of the Website. | Personal data will be processed by Room00 Group for the time necessary to answer the question and/or resolve the issue reported by the User. This data will be blocked to comply with Room00 Group’s legal obligations and, after this period, will be permanently deleted. |
| Promotional communications. Name, surname, email address and telephone number. |
Legitimate interest (when a contractual relationship exists) consent |
Report on promotions and advertising actions of Room00 Group. | The data will be processed by Room00 Group until the User withdraws their consent. Once consent is withdrawn, Room00 Group will block the data for the time necessary to comply with legal obligations. After this period, the data will be permanently deleted. |
| Surveys and/or evaluations related to the quality of services. Name, surname, email address and telephone number. | consent | Expand and improve the quality of Room00 Group’s products and services. | The data will be processed by Room00 Group until the User withdraws their consent. Once consent is withdrawn, Room00 Group will block the data for the time necessary to comply with legal obligations. After this period, the data will be permanently deleted. |
| Video Surveillance | Legitimate Interest | Security of people, property, and facilities located on the premises | The images captured will be stored by Room00 Group for a maximum period of one month from the date of capture, after which they will be deleted. When a crime or administrative offense is recorded that must be reported to the authorities, the images will be included with the report and must be stored solely for the purpose of making them available to said authorities, without being used for any other purpose. |
3. TO WHOM WILL YOUR DATA BE COMMUNICATED?
Room00 Group informs you that, for the purposes described above, it will not transfer your personal data to third parties. However, Room00 Group may grant access to this personal data to technology service providers with whom it has entered into a data processing agreement; in particular, to:
Analytics service providers.
Hosting service providers.
Email service providers.
Booking management providers.
Customer service providers.
Promotional and/or marketing service providers.
The aforementioned providers may be located in jurisdictions that generally do not offer adequate safeguards regarding the processing of personal data. For all entities outside the European Economic Area (EEA), Room00 Group has signed contracts with those entities that include such safeguards, including the European Commission’s standard contractual clauses.
Users can obtain more information about technology service providers by requesting it from Room00 Group Group through the contact means provided in this privacy policy.
Room00 Group may also share your data with:
Companies interested in purchasing or acquiring the company or a part of its business and, consequently, granting access to any national or international auditor to conduct due diligence.
Other companies within the Room00 Group.
Authorities to investigate suspected fraud, harassment, or other violations of any law, rule, or regulation, or of the website’s policies.
4. SECURITY AND CONFIDENTIALITY
Room00 Group is committed to adopting the necessary physical, technical, and organizational measures, in accordance with applicable regulations, to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or the unauthorized disclosure of or access to such data. Personal data will be treated confidentially by Room00 Group, which undertakes to inform and ensure, as required by law or contract, that this confidentiality is respected by its employees, partners, and any other person who needs access to the User’s personal data.
5. USER RIGHTS
The User may exercise the rights of access, rectification, erasure, objection and, where applicable, limitation of processing and data portability by sending an email to dpo@room00group.com
The User may also file a complaint with a supervisory authority and, in particular, with the Spanish Data Protection Agency (www.aepd.es) if they believe that the rights set out above in this Privacy Policy have been violated or if they believe that the processing of their personal data violates applicable regulations.
6. CHANGES TO THE PRIVACY POLICY
Room00 Group reserves the right to modify this Privacy Policy at any time. Changes or updates to the Privacy Policy will be explicitly notified to the User through a notice on the Website, along with the updated version of the Privacy Policy.
PRIVACY POLICY – ROOM00 CASA GRACIA BARCELONA
Casa Gracia, S.L. (hereinafter “Room00 Group”) is the Data Controller of the personal data of the clients of each of the hotels (hereinafter the “Users”).
Through this Privacy Policy, and in compliance with Articles 12 and 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”) and Article 11 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDPGDD”), Room00 Group informs Users who use the Website about the processing of their personal data that may be collected through this and processed by Room00 Group.
1. INFORMATION ABOUT THE DATA CONTROLLER
Responsable del Tratamiento: Casa Gracia S.L.
NIF: B12089496
Domicilio social: Paseo de Gracia, nº 116 Planta Principal Primera, 08012 Barcelona, España
Contacto: DPO@room00group.com
2. DATA PROCESSED, LEGAL BASIS, PURPOSES AND RETENTION PERIOD.
| DATA PROCESSED | LEGAL BASIS | PURPOSES | RETENTION PERIOD |
|---|---|---|---|
| Datos de Reserva. Nombre, apellidos, correo electrónico, número de teléfono y DNI. | Execution of the contractual relationship in which the interested party is a party. | Reservation management. In relation to the reservation made, process payments, and manage any modification or cancellation of the reservation. | Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. This data will be blocked to comply with Room00 Group’s legal obligations and, after this period, will be permanently deleted. |
| Registration Data. Name, surname, gender, ID number, nationality, date of birth, usual place of residence, full address, city/town, country, home phone number, mobile phone number, email address, relationship between travelers (if any are minors). | Compliance with a legal obligation. | Registration in the files of the State Secretariat for Security. Processing of personal data for the prevention, detection, and investigation of crimes. | The personal data processed by Room00 Group will be kept for a period of three years from the end of the contracted service or benefit. |
| Bank details. | Execution of the contractual relationship in which the interested party is a party. | Payment for the reservation or to guarantee it. As well as to pay for the stay or services associated with it. | Personal data will be processed by Room00 Group Group during the contractual relationship between Room00 Group Group and the User. This data will be blocked to comply with Room00 Group Group’s legal obligations and, after this period, will be permanently deleted. |
| Contact information. Name, surname, email address, phone number. | consent | To attend to and respond to requests, comments, and suggestions, as well as to provide support to the User during the use of the Website. | Personal data will be processed by Room00 Group to answer the question and/or resolve the issue reported by the User. This data will be blocked to comply with Room00 Group’s legal obligations and, after this period, will be permanently deleted. |
| Promotional communications. Name, surname, email address and telephone number. | Legitimate interest (when a contractual relationship exists) consent | To inform you about promotions and advertising campaigns from Room00 Group. | Your data will be processed by Room00 Group until you withdraw your consent. Once you withdraw your consent, Room00 Group will block your data for the time necessary to comply with legal obligations. After that period, your data will be permanently deleted. |
| Surveys and/or evaluations related to the quality of services. Name, surname, email address and telephone number. | consent | Expand and improve the quality of Room00 Group’s products and services. | The data will be processed by Room00 Group until the User withdraws their consent. Once consent is withdrawn, Room00 Group will block the data for the time necessary to comply with legal obligations. After this period, the data will be permanently deleted. |
| Video Surveillance: | Legitimate Interest. | Security of people, property, and facilities located on the premises. | The images captured will be stored by Room00 Group for a maximum period of one month from the date of capture, after which they will be deleted. When a crime or administrative offense is recorded that must be reported to the authorities, the images will be included with the report and must be stored solely for the purpose of making them available to said authorities, and may not be used for any other purpose. |
3. TO WHOM WILL YOUR DATA BE COMMUNICATED?
Room00 Group informs you that, for the purposes described above, it will not transfer your personal data to third parties. However, Room00 Group may grant access to such personal data to technology service providers with whom it has entered into a data processing agreement; in particular, to:
Analytics service providers.
Hosting service providers.
Email service providers.
Booking management providers.
Customer service providers.
Promotional and/or marketing service providers.
The aforementioned providers may be located in jurisdictions that generally do not offer adequate safeguards regarding the processing of personal data. For all entities outside the European Economic Area (EEA), Room00 Group has signed contracts with those entities that include such safeguards, including the European Commission’s standard contractual clauses.
Users can obtain more information about technology service providers by requesting it from Room00 Group through the contact means provided in this privacy policy.
Room00 Group may also share your data with:
Companies interested in purchasing or acquiring the company or a part of its business and, consequently, granting access to any national or international auditor to conduct due diligence.
Subsidiary companies of the Room00 group and, elsewhere, establishments operating under one of the Room00 group brands.
Authorities to investigate suspected fraud, harassment, or other violations of any law, rule, or regulation, or of the website policies.
4. SECURITY AND CONFIDENTIALITY
Room00 Group undertakes to adopt the necessary physical, technical, and organizational measures, in accordance with applicable regulations, to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or the unauthorized disclosure of or access to such data. Room00 Group will treat personal data confidentially and undertakes to inform and ensure, as required by law or contract, that this confidentiality is respected by its employees, partners, and any other person who must have access to the User’s personal data.
5. USER RIGHTS
The User may exercise the rights of access, rectification, erasure, objection and, where applicable, limitation of processing and data portability by sending an email to DPO@room00group.com
The User may also file a complaint with a supervisory authority and, in particular, with the Spanish Data Protection Agency (www.aepd.es) if they believe that the rights set out above in this Privacy Policy have been violated or if they believe that the processing of their personal data violates applicable regulations.
6. CHANGES TO THE PRIVACY POLICY
Room00 Group reserves the right to modify this Privacy Policy at any time. Changes or updates to the Privacy Policy will be explicitly notified to the User through a notice on the Website, along with the updated version of the Privacy Policy.