PRIVACY POLICY

1. Identification and contact details of the Data Controller

The following entities will process your personal data as Co-Responsible for the Treatment:
• Hesperia World SLU, (hereinafter “Hesperia”), with NIF B-67301242, and with address at Avenida Mare de Déu de Bellvitge, number 3, 08907 L'Hospitalet de Llobregat (Barcelona).
• La Manga Club, SL (hereinafter, “LMC”), with NIF B-30,630,511 and domiciled at La Manga Club, Los Belones, 30389 Cartagena (Murcia).
Likewise, we inform you that the Group to which Hesperia and LMC belong has a Data Protection Delegate, with whom you can contact through the following address: DPO@hesperiaworld.com.

2. Necessary and updated information

All the fields that appear in the forms that are provided with an asterisk [*] must be completed, in such a way that the omission of any of them could lead to the impossibility of properly meeting your request, providing the requested services or proceed to send the requested or authorised communications. You must provide truthful information, being prohibited the use of aliases or means to hide your identity.

So that the information provided is always up-to-date and does not contain errors, you must notify Hesperia and LMC, as soon as possible, of the modifications and rectifications of your personal data that may occur, through the reception of our facilities or the following email: protecciondedatos@hesperiaworld.com.

Likewise, you declare that the information and data you have provided are accurate and truthful.

3. Origin and provenance of your data

For the management of reservations, we may contract with service providers that will be the ones that communicate your personal data to us. The categories of data that will be communicated to us and that, therefore, we will treat are those corresponding to identification and banking data necessary for the correct management of your reservation.

4. Detailed information on the treatments carried out

The following describes the different purposes for which Hesperia and LMC will process your personal data, the bases that legitimize said treatments and the period of conservation of said data.

Hesperia and LMC may jointly process your personal data to:

- Manage the reservation of any of our services that you make through any channel. Said treatment is based on the pre-contractual measure requested by you when formalizing said reservation requesting our services.

Your data will be kept until the date for which you make the reservation and, in the event that you finally make use of the services of LMC, during the term of our contractual relationship, being able to keep them subsequently blocked during the periods that arise. of the prescription of legal actions related to this treatment.

- Attend, by telephone or email, the requests, queries, complaints and / or claims transferred when contacting us by email or by phone, based on the consent that, where appropriate, you give when sending the request, query , complaint or corresponding claim.
Your data will be kept until the resolution of the query, request, complaint and / or claim raised, being able to keep them later blocked during the periods that derive from the prescription of legal actions related to this treatment.

- Manage check-in, accommodation and check-out, as well as process the payment of the contracted services. This processing of personal data will be carried out based on the contractual relationship you have with us.

Your data will be kept for the duration of our contractual relationship, being able to keep them later blocked during the periods that derive from the prescription of legal actions related to this treatment.

- Manage your registration in LMC in order to create a global database of the entities that make up the Hesperia Group to facilitate the check-in processes, based on the legitimate interest in transmitting intra-group personal data for internal administrative purposes.
The data processed for this purpose will be kept throughout our contractual relationship, being able to keep them later blocked during the periods that derive from the prescription of legal actions related to this treatment.

- Manage the registration of your data in the LMC database of partners, founding partners, and their beneficiaries, in order to give you access credentials to the online sports reservation portal, and manage the reservations you make through of the same.

In relation to the data of the partners and founding partners, said treatment is based on the contractual relationship they have with us.

Regarding the data of the beneficiaries, their name and surname and their email will be processed. Said data has been provided by one of the partners or founding partners of LMC. The processing of this data is based on the legitimate interest of Hesperia and LMC in complying with the contractual relationship that it maintains with the partners and founding partners of LMC.

The partner or founding partner that communicates to Hesperia and LMC the data of a beneficiary / ies guarantees to Hesperia and LMC that he / she has the consent of said beneficiary / ies to carry out this data communication.

The data processed for this purpose will be kept until the end of the period during which the interested party can make reservations through the LMC sports online reservation portal. However, also in this case, the personal data may be kept later blocked during the periods that derive from the prescription of the legal actions related to this treatment.
For its part, LMC may process your personal data to:

- Manage the sending, by any means, of communications related to the services you have reserved, as well as informational communications related to the opportunities offered by the city / region in which LMC is located. Said communications are based on LMC's legitimate interest in keeping our guests and clients informed about matters that we consider may be of interest to them because they are relative or related to the contracted services.

The data processed for this purpose will be kept until you unsubscribe from said shipments or after 2 years have elapsed since your last interaction with us. However, also in this case, your personal data may be kept subsequently blocked during the periods that derive from the prescription of legal actions related to this treatment.

- In the event that you book an accommodation service, manage the provision of extra services to the accommodation, such as request for flowers, excursions, restaurant services, special attention on designated dates, which you may request at the time of check -in; as well as managing the payment thereof. This data processing is based on the contractual relationship you have with us.

Regarding the treatment of health data for the provision of restaurant services, these will be treated based on the consent given by you when providing them to LMC.

The data processed for this purpose will be kept throughout our contractual relationship, or, in the case of health data, until the revocation of your consent. However, the data may be kept subsequently blocked during the periods that derive from the prescription of legal actions related to this treatment.

- Contact the medical-assistance services when required. In those cases in which it is a medical emergency, your data will be processed for the protection of your vital interests. In those cases in which it is not a medical emergency, the data will be processed based on the contractual relationship you have with us.

Your data will be kept during our contractual relationship. However, the data may be kept subsequently blocked during the periods that derive from the prescription of legal actions related to this treatment.

- Carry out satisfaction surveys, based on the legitimate interest of LMC in knowing your degree of satisfaction with the services provided.

Your data will be kept until you object to their processing, or after 2 years have elapsed since your last interaction with us. Subsequently, your data may be kept blocked during the periods that derive from the prescription of legal actions related to this treatment.

For its part, Hesperia may process your personal data to:

- Manage the sending, by any means, of offers and promotions of the services offered by the hotels that make up the Hesperia Group, as well as information about events organized by said hotels or news offered by them. Said communications are made based on the consent that, where appropriate, it provides for such purposes.

In the event that you have given us your consent, your data will be kept until you revoke the consent, where appropriate, given, or after 2 years have elapsed since your last interaction with us, being able to keep them subsequently blocked during the periods that arise. of the prescription of legal actions related to this treatment.

- Manage the sending of commercial communications through social networks based on the consent that, where appropriate, you have given us by being a "follower" or "friend" of our profiles.

Your data will be kept until you revoke the consent, where appropriate, given, or after 2 years have elapsed since your last interaction with us, being able to keep them later blocked during the periods that derive from the prescription of legal actions related to this treatment.

- Manage the sending, by any means, of commercial communications related to news and / or offers related to the catering, insurance, entertainment, wellness and travel sectors. Said communications are made based on the consent that, where appropriate, it provides for such purposes.

- Prepare commercial profiles based on the consent that, where appropriate, you give us.
Your data will be kept until you revoke the consent, where appropriate, given, or after 2 years have elapsed since your last interaction with us, being able to keep them later blocked during the periods that derive from the prescription of legal actions related to this treatment.

5. Exercise of your rights

We inform you that you may exercise the following rights:

i. right of access to your personal data to know which ones are being processed and the processing operations carried out with them;

ii. right to rectify any inaccurate personal data;

iii. right to delete your personal data, when this is possible;

iv. right of opposition, when this is possible;

v. Right to request the limitation of the processing of your personal data when the accuracy, legality or necessity of the data processing is doubtful, in which case, we may keep the blocked data for the exercise or defense of claims.

vii. Right to the portability of your personal data, when the legal basis that enables us to process it is the existence of a contractual relationship or your consent.

vii. Right to revoke the consent, where appropriate, given to Hesperia for the processing of your data.

You can exercise your rights at any time and free of charge by sending an email to protecciondedatos@hesperiaworld.com, indicating the right you wish to exercise and your identifying data.

On the other hand, we inform you that you have the right to file a claim with the Spanish Data Protection Agency if you consider that an infringement of data protection legislation has been committed with respect to the processing of your personal data.

6. Recipients of your personal data

Your data may be transferred to the Public Administrations determined by the applicable legislation in force at all times, such as Public Finance, Judges and Courts, and Security Forces and Bodies.

The personal data that you provide us for the purpose of managing your reservation, or for contracting extra services, may in turn be communicated to the bank with which Hesperia and LMC work.

Regarding the data that you provide us to manage your registration in Hesperia in order to create a global database of the entities that make up the Hesperia Group to facilitate the check-in processes, they may be communicated to companies of the Hesperia Group based on our legitimate interest in transmitting intra-group personal data for internal administrative purposes.

Likewise, your data may be transferred to the healthcare company with which LMC works when you require medical-assistance services. In those cases in which it is a medical emergency, said data communication will be made to protect your vital interests. In those cases in which it is not a medical emergency, the communication of data to the health care company will be carried out for the management of our contractual relationship.

7. International transfers

Your data will be transferred to countries located outside the European Economic Area and, specifically to:
• Philippines; as a result of the back office management services related to billing that Accenture Outsourcing Services, SA provides to Hesperia. These international transfers are regularized by means of the standard contractual clauses approved by the European Commission.
• U.S; as a consequence of the following services:
• Booking engine services that TravelClick, Inc. provides in relation to the location and selection of the specific payment gateways or providers that authorize payments related to the services provided by Hesperia. These international transfers are regularized by means of the standard contractual clauses approved by the European Commission.
• Andorra; as a result of the communication of data to the Hesperia Group companies that are in said territory for the provision of the administrative management services of said group. Andorra has been declared by the European Commission with an adequate level of protection, in accordance with the provisions of Decision 2010/625 / EU, of October 19, 2010.

8. Security

Hesperia has implemented and maintains the security levels required by the GDPR to protect your personal data against accidental los, unauthorized access, treatment or disclosure, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed to. However, despite the fact that Hesperia makes its best efforts to protect the data they process, it cannot guarantee in any case the process of communication of personal data from the users' network to that of Hesperia. Therefore, once your data is received, Hesperia will use rigorous procedures and security features to prevent any unauthorized access.

9. Confidentiality

The personal data that we may collect will be treated with confidentiality, committing ourselves to keep them secret in accordance with the provisions of the applicable legislation..

10. Actualización de la política de privacidad

This Privacy Policy may need to be updated; For this reason, it is necessary that you review this policy periodically and if possible each time you make a reservation, or contact us in order to be adequately informed about the type of information collected and its treatment. We will notify you of any modification to this privacy policy that substantially affects the processing of your personal data.

Last update: 15 April 2021.