Privacy policy

The purpose of this privacy policy (hereinafter the «Privacy Policy») is to comply with the duty of transparency in the processing of your personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the «GDPR»).

BASIC INFORMATION ABOUT DATA PROTECTION

DATA CONTROLLER

MARE NOSTRUM RESORT, S.L.U.

PURPOSES

CATEGORIES OF DATA SUBJECTS	PURPOSES	LEGAL BASIS
Users	Enable browsing	Consent
Customers	Booking requests Sending commercial communications Sending quality surveys Sending BAUCIS PROJECTS S.L., marca comercial SPRING HOTELS GROUP communications and, where applicable, creating a commercial profile	Execution of a contract Legitimate interest Legitimate interest Consent
Information requesters	Respond to information requests, resolve doubts or inquiries, or process claims	Execution of pre-contractual measures
Others	Video surveillance	Public interest

RECIPIENTS

Public administrations and organizations.
BAUCIS PROJECTS S.L., marca comercial SPRING HOTELS GROUP entities for internal administrative purposes. If consent has been given, your data may also be shared with other BAUCIS PROJECTS S.L., marca comercial SPRING HOTELS GROUP companies for sending commercial information and, where applicable, creating a commercial profile to personalize communications.
Third-party collaborators when necessary for providing certain contracted services or those requested by the data subject.
Third parties who have access to personal information associated with your browsing through third-party cookies.

RIGHTS

Access, rectification, portability, opposition, restriction of processing, and erasure.

ADDITIONAL INFORMATION

If you believe any of your rights have been violated, you can file a complaint with the AEPD (Spanish Data Protection Agency).

The information contained in this Privacy Policy allows users to see details about the various types of processing that are carried out as a result of accessing and using the www.mediterraneanpalacehotel.com website (hereinafter, the «Website») and in relation to the services accessible or offered therein.

1. IDENTIFICATION OF THE DATA CONTROLLER

The data controller is MARE NOSTRUM RESORT, S.L.U. (hereinafter, «MARE NOSTRUM RESORT» or the «Data Controller»), with registered office at Av. de las Américas s/n – 38660 Arona (Tenerife), Spain, and tax ID (NIF) B38356374.

2. PURPOSES OF THE PROCESSING OF PERSONAL DATA AND LEGAL GROUNDS

The Data Controller may process your personal data for the purposes and on the legal grounds detailed below:

USERS:

To enable browsing of the Website. Although visiting the Website does not oblige users to provide personal information, certain features depend on the use of cookies, as described in the Cookies Policy. Legal basis: consent, where applicable.

CUSTOMERS:

To manage booking requests made through the channels provided on the Website. Legal basis: performance of a contract.
To provide the contracted services. Some services may require information about allergies or medical conditions; in such cases, explicit consent will be requested (Art. 9.2(a) GDPR). Legal basis: performance of a contract and, for special categories, explicit consent.
To send commercial communications about products or services similar to those previously contracted. Legal basis: legitimate interest of MARE NOSTRUM RESORT pursuant to Spanish Law 34/2002.
To send commercial communications about products and services provided by BAUCIS PROJECTS S.L., marca comercial SPRING HOTELS GROUP entities and, where applicable, to create a commercial profile to personalize communications. Legal basis: consent.
To send quality surveys after your stay. Legal basis: legitimate interest in quality control and service improvement.

INFORMATION REQUESTERS:

To manage and respond to requests for information, doubts, inquiries, or claims received through the contact channels provided. Legal basis: application of pre-contractual measures.

OTHERS:

Video surveillance in accesses and facilities, duly signposted. Legal basis: task carried out in the public interest (Art. 6.1(e) GDPR).

3. NEED TO PROVIDE PERSONAL DATA

Processing your requests for information and managing service reservations requires you to provide at least the data marked as mandatory in the forms. Refusal to provide such data means your request cannot be processed.

Additionally, you may provide other non-mandatory data through the forms or contact channels, and allow data collection through the use of non-necessary cookies.

4. RETENTION PERIOD OF YOUR PERSONAL DATA

Users: data related to browsing and cookies will be retained for the periods indicated in the Cookies Policy.

Customers: data for managing reservations and providing services will be retained for as long as the contractual relationship lasts. Data for commercial communications and quality surveys will be processed until you object or, where applicable, revoke your consent.

Information requesters: data will be processed for the time strictly necessary to properly handle each request.

Video surveillance: images will be retained for a maximum of one month, unless longer retention is necessary to determine liabilities.

THIRD-PARTY RECIPIENTS OF THE DATA

Your personal data may be communicated to competent public administrations and bodies as required by law.

Your data may also be disclosed to third-party processors that provide services to BAUCIS PROJECTS S.L., marca comercial SPRING HOTELS GROUP entities, under agreements that ensure compliance with data protection regulations.

Additionally, your data may be shared with partner companies to provide certain complementary services managed at other establishments.

Finally, your data may be shared with BAUCIS PROJECTS S.L., marca comercial SPRING HOTELS GROUP entities for internal administrative purposes. If you have consented, your data may also be shared with other BAUCIS PROJECTS S.L., marca comercial SPRING HOTELS GROUP companies for sending commercial information and, where appropriate, to create a commercial profile to personalize communications.

Some third parties may access your personal information associated with your browsing through third-party cookies, as indicated in the Cookies Policy.

5. INTERNATIONAL TRANSFERS

Processing may involve international transfers outside the European Economic Area; where necessary, the Data Controller will implement appropriate safeguards in accordance with Articles 44 et seq. GDPR.

Use of third-party cookies may involve international transfers under the terms set out in the Cookies Policy.

6. EXERCISE OF RIGHTS

You may exercise your rights of access, rectification, erasure, objection, restriction and portability, free of charge and at any time, by writing to spring@springhoteles.com or by post to Av. de las Américas s/n – 38660 Arona (Tenerife), Spain, including proof of identity.

You may also file a claim with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid) if you believe your rights have been infringed.

7. SECURITY MEASURES

MARE NOSTRUM RESORT will treat your personal data in strict confidence and maintain the duty of secrecy, adopting technical and organizational measures to ensure their security and prevent alteration, loss, processing or unauthorized access, taking into account the state of the art, the nature of the stored data and the risks to which they are exposed.

8. PRIVACY POLICY UPDATE

MARE NOSTRUM RESORT reserves the right to amend this Privacy Policy to adapt it to its needs or to legal developments. Any updates will be announced and published on this Website for easy access at all times.

Last updated: November 2024