Your data, your rules

PRIVACY POLICY – ROOM00 CASA GRACIA BARCELONA

Casa Gracia, S.L. (hereinafter “Room00 Group”) is the Data Controller of the personal data of the clients of each of the hotels (hereinafter the “Users”).

Through this Privacy Policy, and in compliance with Articles 12 and 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”) and Article 11 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDPGDD”), Room00 Group informs Users who use the Website about the processing of their personal data that may be collected through this and processed by Room00 Group.

• INFORMATION ABOUT THE DATA CONTROLLER

Responsable del Tratamiento: Casa Gracia S.L.
NIF: B12089496
Domicilio social: Paseo de Gracia, nº 116 Planta Principal Primera, 08012 Barcelona, España
Contacto: DPO@room00group.com

• DATA PROCESSED, LEGAL BASIS, PURPOSES AND RETENTION PERIOD
  
  

DATA PROCESSED	LEGAL BASIS	PURPOSES	RETENTION PERIOD
Datos de Reserva. Nombre, apellidos, correo electrónico, número de teléfono y DNI.	Execution of the contractual relationship in which the interested party is a party.	Reservation management. In relation to the reservation made, process payments, and manage any modification or cancellation of the reservation.	Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. This data will be blocked to comply with Room00 Group’s legal obligations and, after this period, will be permanently deleted.
Registration Data. Name, surname, gender, ID number, nationality, date of birth, usual place of residence, full address, city/town, country, home phone number, mobile phone number, email address, relationship between travelers (if any are minors).	Compliance with a legal obligation.	Registration in the files of the State Secretariat for Security. Processing of personal data for the prevention, detection, and investigation of crimes.	The personal data processed by Room00 Group will be kept for a period of three years from the end of the contracted service or benefit.
Bank details.	Execution of the contractual relationship in which the interested party is a party.	Payment for the reservation or to guarantee it. As well as to pay for the stay or services associated with it.	Personal data will be processed by Room00 Group Group during the contractual relationship between Room00 Group Group and the User. This data will be blocked to comply with Room00 Group Group’s legal obligations and, after this period, will be permanently deleted.
Contact information. Name, surname, email address, phone number.	consent	To attend to and respond to requests, comments, and suggestions, as well as to provide support to the User during the use of the Website.	Personal data will be processed by Room00 Group to answer the question and/or resolve the issue reported by the User. This data will be blocked to comply with Room00 Group’s legal obligations and, after this period, will be permanently deleted.
Promotional communications. Name, surname, email address and telephone number.	Legitimate interest (when a contractual relationship exists) consent	To inform you about promotions and advertising campaigns from Room00 Group.	Your data will be processed by Room00 Group until you withdraw your consent. Once you withdraw your consent, Room00 Group will block your data for the time necessary to comply with legal obligations. After that period, your data will be permanently deleted.
Surveys and/or evaluations related to the quality of services. Name, surname, email address and telephone number.	consent	Expand and improve the quality of Room00 Group’s products and services.	The data will be processed by Room00 Group until the User withdraws their consent. Once consent is withdrawn, Room00 Group will block the data for the time necessary to comply with legal obligations. After this period, the data will be permanently deleted.
Video Surveillance:	Legitimate Interest.	Security of people, property, and facilities located on the premises.	The images captured will be stored by Room00 Group for a maximum period of one month from the date of capture, after which they will be deleted. When a crime or administrative offense is recorded that must be reported to the authorities, the images will be included with the report and must be stored solely for the purpose of making them available to said authorities, and may not be used for any other purpose.

• TO WHOM WILL YOUR DATA BE COMMUNICATED?
  
  

Room00 Group informs you that, for the purposes described above, it will not transfer your personal data to third parties. However, Room00 Group may grant access to such personal data to technology service providers with whom it has entered into a data processing agreement; in particular, to:

Analytics service providers.
Hosting service providers.
Email service providers.
Booking management providers.
Customer service providers.
Promotional and/or marketing service providers.

The aforementioned providers may be located in jurisdictions that generally do not offer adequate safeguards regarding the processing of personal data. For all entities outside the European Economic Area (EEA), Room00 Group has signed contracts with those entities that include such safeguards, including the European Commission’s standard contractual clauses.

Users can obtain more information about technology service providers by requesting it from Room00 Group through the contact means provided in this privacy policy.

Room00 Group may also share your data with:

Companies interested in purchasing or acquiring the company or a part of its business and, consequently, granting access to any national or international auditor to conduct due diligence.
Subsidiary companies of the Room00 group and, elsewhere, establishments operating under one of the Room00 group brands.
Authorities to investigate suspected fraud, harassment, or other violations of any law, rule, or regulation, or of the website policies.

• SECURITY AND CONFIDENTIALITY
  
  

Room00 Group undertakes to adopt the necessary physical, technical, and organizational measures, in accordance with applicable regulations, to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or the unauthorized disclosure of or access to such data. Room00 Group will treat personal data confidentially and undertakes to inform and ensure, as required by law or contract, that this confidentiality is respected by its employees, partners, and any other person who must have access to the User’s personal data.

• USER RIGHTS
  
  

The User may exercise the rights of access, rectification, erasure, objection and, where applicable, limitation of processing and data portability by sending an email to DPO@room00group.com

The User may also file a complaint with a supervisory authority and, in particular, with the Spanish Data Protection Agency (www.aepd.es) if they believe that the rights set out above in this Privacy Policy have been violated or if they believe that the processing of their personal data violates applicable regulations.

• CHANGES TO THE PRIVACY POLICY
  
  

Room00 Group reserves the right to modify this Privacy Policy at any time. Changes or updates to the Privacy Policy will be explicitly notified to the User through a notice on the Website, along with the updated version of the Privacy Policy.