PRIVACY POLICY

The data controller is the Company, a company MARBELLA CLUB HOTEL, S.A. («MARBELLA CLUB HOTEL») incorporated under Spanish law, with its registered office at Avenida Bulevar Príncipe Alfonso de Hohenlohe, s/n, 29602 Marbella, Málaga, and provided with NIF A29054251.

MARBELLA CLUB HOTEL has appointed a Data Protection Officer (DPO) in accordance with Article 37 of Regulation (EU) 2016/679.

You may contact the Data Protection Officer through:
-    Email: rgpd@marbellaclub.com.
-    Postal address: As indicated in the previous section, stating the reference “Data Protection.”
 

Your personal data will be used, as applicable depending on whether you act as a guest, external customer or non-customer user, the type of personal data you expressly consent to provide by ticking the relevant box, what you may reasonably expect from us in this regard, or the service and/or product contracted, for one or more of the following specific purposes:

-    To manage the registration, reservation, cancellation and payment of your room and the services directly associated with it.
-    To manage and provide during your stay the services related to your reservation, such as housekeeping, catering, preference management and handling of special requests.
-    To manage the reservation, requests and cancellation of other services offered by MARBELLA CLUB HOTEL which, either through our Website or in person, you may contract to enjoy during your stay or as an external customer, such as restaurant and “SPA WELLNESS” bookings.
-    To send you commercial communications, promotions, service offers and newsletters exclusively related to MARBELLA CLUB HOTEL, provided you have given your express consent.
-    To manage your application in the relevant recruitment process, if you have submitted your CV through the “Careers” section.
-    To use your image for promotional purposes on our social media accounts or other platforms, solely where you have given your express consent.
-    To manage enquiries, complaints, information requests or communications submitted through contact forms, corporate email addresses or social media.
-    To manage incidents reported during your stay.
-    To ensure security within the hotel’s common areas, both indoor and outdoor, through video surveillance systems.
-    To carry out non-invasive internal statistical analyses, based on aggregated or pseudonymised data, in order to improve our technological services.

Your personal data will only be processed for as long as necessary to fulfil the purposes described above. Once these purposes have been completed, the personal data will be duly blocked, applying the legally required security measures, solely for the purpose of addressing potential legal liabilities, for the following periods:: thirty (30) days in the case of video surveillance recordings, one (1) year in the case of managing your application to work with us, two (2) years in the case of managing housekeeping services, four (4) years in the case of contracting additional services, six (6) years for payment and invoicing purposes, and five (5) years in all other cases.

After these periods have elapsed, the data will be deleted from our information processing systems.

Yes. For certain purposes, such as statistical analysis or the sending of personalised communications, MARBELLA CLUB HOTEL may rely on automated processing, including profiling.

In such cases, only strictly necessary data will be used, and the processing will not produce legal effects or significantly affect the data subject.

The data subject has the right to request human intervention, to express his or her point of view and to object to this type of processing.
 

MARBELLA CLUB HOTEL has implemented the necessary technical and organisational measures to ensure the security of the personal data processed and to prevent alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the stored data and the risks involved.

The processing of your personal data is based on:

-    The performance of a contract or the implementation of pre-contractual measures, where the data are necessary for managing reservations and contracted services.
-    Legitimate interest, in the case of video surveillance processing for security purposes.
-    Express consent, in cases of commercial communications, recruitment processes, use of image and other processing activities not covered by the above legal bases.

Where processing involves health-related data, it will be carried out in accordance with Article 9 of the GDPR, based on the explicit consent of the data subject and exclusively for the provision of wellness services.

The provision of certain personal data is necessary to manage your contact request or to contract the services offered by MARBELLA CLUB HOTEL.

If the strictly necessary data for these purposes are not provided, it will not be possible to process your request or formalise the relevant contract.

The provision of personal data for other purposes, such as sending commercial communications, participation in recruitment processes or the use of your image, is voluntary, and you may withdraw your consent at any time.

Personal data will not be disclosed to third parties, except where required by law or where necessary for the proper provision of services. In such cases, those third parties will act as data processors under a contract in accordance with Article 28 of the GDPR.

If, for the proper provision of services, international data transfers are necessary, they will be carried out with the appropriate safeguards provided for in Articles 44 et seq. of the GDPR.

The Website may contain links to other websites or platforms that may be of interest to users. MARBELLA CLUB HOTEL assumes no responsibility for the content or the privacy policies applicable to such websites. Access to them is at the user’s own risk and subject to the terms of use and privacy policies established by those third parties.

This Privacy Policy does not apply to the processing of personal data carried out by third parties through websites accessed via links from this Website.

The inclusion of links on this Website does not imply any relationship, recommendation or approval by MARBELLA CLUB HOTEL of the content or services offered on the linked sites.
 

We remind you that you may exercise the following rights regarding your personal data at any time:

a) Access. You have the right to access your information in order to know exactly which personal data we are processing.

b) Rectification. Under certain circumstances, you have the right to rectify those personal data that are inaccurate or incomplete.

c) Erasure. Under certain circumstances, you have the right to request the deletion of personal data that you no longer wish us to process.

d) Objection. Under certain circumstances, and on grounds relating to your particular situation, you have the right to object to the processing of your personal data, in which case we will keep them restricted for the period described in section 4 above.

e) Data Portability. Under certain circumstances, you have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format, and to have those data transmitted to another controller other than MARBELLA CLUB HOTEL.

f) Right not to be subject to automated decision-making. Under certain circumstances, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you.

To exercise any of these rights, you must send a written communication to MARBELLA CLUB HOTEL. Such communication may be sent by:

-    Email: rgpd@marbellaclub.com.
-    Postal address: As indicated in the previous section, stating the reference “Data Protection.”
 

Yes. You may withdraw the consent you have given to us at any time without affecting the lawfulness of the processing carried out prior to its withdrawal. 
To do so, you need only submit a communication using either of the two methods described in the previous section.

If you are not satisfied or believe that we have not processed your personal data in accordance with the applicable regulations, you may contact us via the email address rgpd@marbellaclub.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

The personal data you provide through this form will be processed by MARBELLA CLUB HOTEL for the purpose of handling and managing any enquiries submitted by customers. MARBELLA CLUB HOTEL undertakes to respect and facilitate the exercise of the rights of access, rectification, erasure, objection, restriction of processing, and data portability, as recognised under Regulation (EU) 2016/679 and Organic Law 3/2018. To exercise these rights, the data subject may contact us at any time by writing to our address Avenida Bulevar Príncipe Alfonso de Hohenlohe, s/n, 29602 Marbella, Málaga or by email at rgpd@marbellaclub.com, indicating “Data Protection” as the reference.

Proof of identity documentation will only be requested where it is strictly necessary for the proper processing of the request.