PRIVACY POLICY
About Us
The controller is the company MARBELLA CLUB HOTEL, S.A. ("MARBELLA CLUB HOTEL"), a Spanish company with registered offices at Avenida Bulevar Príncipe Alfonso de Hohenlohe, s/n, 29602 Marbella, Malaga, and holder of Tax Identification Number A 29054251.
MARBELLA CLUB HOTEL has appointed a Data Protection Officer (DPO) in accordance with Article 37 of Regulation (EU) 2016/679.
You may contact the Data Protection Officer via:
- Email: rgpd@marbellaclub.com
- Postal address: As indicated above, stating the reference “Data Protection”.
About how we process your personal data
Your personal data will be used, as applicable depending on whether you act as a guest, external customer or non-customer user, the type of personal data you expressly consent to provide by ticking the relevant box, what you may reasonably expect from us in this regard, or the service and/or product contracted, for one or more of the following specific purposes:
- To manage the registration, reservation, cancellation and payment of your room and the services directly associated with it.
- To manage and provide during your stay the services related to your reservation, such as housekeeping, catering, preference management and handling of special requests.
- To manage the reservation, requests and cancellation of other services offered by MARBELLA CLUB HOTEL which, either through our Website or in person, you may contract to enjoy during your stay or as an external customer, such as restaurant and “SPA WELLNESS” bookings.
- To send you commercial communications, promotions, service offers and newsletters exclusively related to MARBELLA CLUB HOTEL, provided you have given your express consent.
- To manage your application in the relevant recruitment process, if you have submitted your CV through the “Careers” section.
- To use your image for promotional purposes on our social media accounts or other platforms, solely where you have given your express consent.
- To manage enquiries, complaints, information requests or communications submitted through contact forms, corporate email addresses or social media.
- To manage incidents reported during your stay.
- To ensure security within the hotel’s common areas, both indoor and outdoor, through video surveillance systems.
- To carry out non-invasive internal statistical analyses, based on aggregated or pseudonymised data, in order to improve our technological services.
Your personal data will only be processed for as long as necessary to fulfil the purposes described above. Once these purposes have been completed, the personal data will be duly blocked, applying the legally required security measures, solely for the purpose of addressing potential legal liabilities, for the following periods:
- Thirty (30) days in the case of video surveillance recordings.
- One (1) year in the case of recruitment process management.
- Two (2) years for housekeeping service management.
- Four (4) years for additional service contracting.
- Six (6) years for payment and invoicing purposes.
- Five (5) years in all other cases.
After these periods have elapsed, the data will be deleted from our information processing systems.
Yes. For certain purposes, such as statistical analysis or the sending of personalised communications, MARBELLA CLUB HOTEL may rely on automated processing, including profiling.
In such cases, only strictly necessary data will be used and the processing will not produce legal effects or significantly affect the data subject.
The data subject has the right to request human intervention, to express his or her point of view and to object to this type of processing.
MARBELLA CLUB HOTEL has implemented the necessary technical and organisational measures to ensure the security of the personal data processed and to prevent alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the stored data and the risks involved.
About why we process your personal data
The processing of your personal data is based on:
- The performance of a contract or the implementation of pre-contractual measures, where the data are necessary for managing reservations and contracted services.
- Legitimate interest, in the case of video surveillance processing for security purposes.
- Express consent, in cases of commercial communications, recruitment processes, use of image and other processing activities not covered by the above legal bases.
Where processing involves health-related data, it will be carried out in accordance with Article 9 of the GDPR, based on the explicit consent of the data subject and exclusively for the provision of wellness services.
The provision of certain personal data is necessary to manage your contact request or to contract the services offered by MARBELLA CLUB HOTEL.
If the strictly necessary data for these purposes are not provided, it will not be possible to process your request or formalise the relevant contract.
The provision of personal data for other purposes, such as sending commercial communications, participation in recruitment processes or the use of your image, is voluntary, and you may withdraw your consent at any time.
About who we share your personal information with
Personal data will not be disclosed to third parties, except where required by law or where necessary for the proper provision of services. In such cases, those third parties will act as data processors under a contract in accordance with Article 28 of the GDPR.
If, for the proper provision of services, international data transfers are necessary, they will be carried out with the appropriate safeguards provided for in Articles 44 et seq. of the GDPR.
The Website may contain links to other websites or platforms that may be of interest to users. MARBELLA CLUB HOTEL assumes no responsibility for the content or the privacy policies applicable to such websites. Access to them is at the user’s own risk and subject to the terms of use and privacy policies established by those third parties.
This Privacy Policy does not apply to the processing of personal data carried out by third parties through websites accessed via links from this Website.
The inclusion of links on this Website does not imply any relationship, recommendation or approval by MARBELLA CLUB HOTEL of the content or services offered on the linked sites.
Your rights regarding your personal data
You may exercise the following rights at any time:
- Access: The right to obtain confirmation as to whether we are processing your personal data and to access such data.
- Rectification: The right to request the correction of inaccurate personal data.
- Erasure: The right to request the deletion of personal data in certain circumstances.
- Objection: The right, in certain circumstances and on grounds relating to your particular situation, to object to the processing of your personal data, in which case the data will remain blocked for the period described above.
- Restriction of processing: The right, in certain circumstances, to request the restriction of processing.
- Data portability: The right to receive the personal data you have provided in a structured, commonly used and machine-readable format and to transmit those data to another controller.
To exercise any of these rights, you must send a written communication to MARBELLA CLUB HOTEL via:
- Email: rgpd@marbellaclub.com
- Postal address: As indicated above, stating the reference “Data Protection”.
Yes. You may withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.
To do so, you only need to send a communication using either of the methods described above.
If you are not satisfied or believe that your personal data have not been processed in accordance with applicable regulations, you may contact us at rgpd@marbellaclub.com.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
The personal data you provide through this form will be processed by MARBELLA CLUB HOTEL, S.A. for the purpose of managing and responding to customer enquiries. MARBELLA CLUB HOTEL, S.A. undertakes to respect and facilitate the exercise of the rights of access, rectification, erasure, objection, restriction of processing and data portability, as recognised in Regulation (EU) 2016/679 and Organic Law 3/2018.
To exercise these rights, you may contact us at any time in writing at Bulevar Príncipe Alfonso von Hohenlohe, s/n, 29602 Marbella, Málaga, Spain, or by email at rgpd@marbellaclub.com, stating the reference “Data Protection”.
Proof of identity will only be requested where strictly necessary for the proper handling of the request.