The following privacy policy applies to the “Iberostar.com” personalised loyalty programme in the booking process by registered users at Iberostar.com (hereinafter the Programme) and supplements the general privacy policy applicable to data collected via such website, which can be reviewed at https://www.iberostar.com/en/privacy-policy/ and the General Terms and Conditions of the Iberostar.com Loyalty Programme.
The present Programme intends to reward our most loyal customers, who through Iberostar.com wish to enjoy exclusive benefits such as access to their booking history, favourite hotels, points with each booking that can be redeemed for gifts and being the first to receive personalised deals with the best prices and a more personalised service.
Please read this policy carefully. Here you will find important information about how your personal data will be processed and your rights under the relevant legislation in force.
We reserve the right to update this privacy policy at any time due to business decisions and to comply with possible changes to legislation or case law. If you have any doubts or need further clarification with regards to this privacy policy or your rights, please contact us through the channels indicated below.
You declare that the information you provide, now and in the future, is correct and truthful and undertake to inform us of any changes to said information. When providing the personal data of a third party, you agree to obtain prior consent from the party in question and to inform them of the content of this policy.
Generally speaking, the fields on our forms that are marked as mandatory must be completed in order for us to process your requests.
1. Who is responsible for processing your personal data?
The party responsible for the processing of Iberostar.com Loyalty Programme user data is IBEROSTAR HOTELES Y APARTAMENTOS, S.L., with tax ID code B28049344 and with registered offices at C/ General Riera, 154, 07010 Palma de Mallorca, Balearic Islands, Spain.
You can contact the Data Protection Representative of the Iberostar group at privacy.dpd@grupoiberostar.com.
2. Why do we process your data?
User data from the Programme will be processed to manage said programme or to fulfil our legal obligations relating to accounting and tax.
The Programme entails obtaining a series of benefits and advantages, such as gifts, along with, subject to your consent, the creation of a commercial profile to personalise our services and communications (i.e., to wish you a happy birthday if you have given us that information or to send you information and offers based on your preferences or interests).
This profile will be created through the data you generate by using the Programme and your interaction with the Group, which may include your bookings or stays at our hotels or an analysis of the way you browse our digital platforms through the use of browser tracking technologies (remarketing tags).
We will not make automated decisions based on the commercial profiles of our customers and users. Data processing relating to commercial profiles is subject to the Privacy Policy applicable to the creation and use of Iberostar Group customer and user profiles. You can read that policy at https://www.grupoiberostar.com/en/privacy-portal.
Data of users that sign up to the Programme through their Google account, through the ONE TAP feature, will not be processed to create a commercial profile and the personalisation of our services or communications, unless they have authorised such processing.
This registration implies the full acceptance of the conditions applicable to the Programme and the current benefits appearing on the website at all times.
You may request your removal from the programme and/or withdrawal from receiving our communications at any time.
3. Who can we share your data with?
We will only share your data in the case of a legal obligation, with your consent or when it is essential for managing the Programme. For example, the operation of the gift allocation system makes it necessary to forward the data necessary for the management of your account, such as booking data, confirmations of your stay, managing of gifts, etc., to participating entities (companies operating the booking platform, destination hotels etc.) and Iberostar Hoteles & Apartamentos, S.L.
4. Legal grounds for processing.
The grounds for processing Programme user data are the existence of a contractual relationship and fulfilment of legal obligations relating to accounting and tax.
The creation of the commercial profile, the browsing analysis on our digital platforms through the use of browsing trackers, and the personalisation of our services and communications are based on the consent requested from you. Withdrawal of your consent does not affect the provision of contracted services.
5. For how long will we store your data?
Your data will be retained while you are a registered user of the Programme and, when applicable, during the time periods set forth in the relevant legal regulations and for the duration necessary to handle any liabilities that may arise as a result of data processing. We wish to remind you that profiles and data processed for commercial purposes shall be actively stored as long as you have not revoked your consent or requested their erasure.
6. What are your rights?
You have the right to receive confirmation of whether or not we are processing your personal data, and, in such case, to access the data. Likewise, you can request for any incorrect data to be rectified or for incomplete data to be completed, as well as requesting removal of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, you can request for the processing of your data to be limited. In such case, we will only process the affected data for the filing, processing or response to complaints, or with a view to protect the rights of other parties. In certain situations and for reasons related to your specific circumstances, you may object to the processing of your data. In this case, we will stop processing the data unless legitimate compelling grounds are given that prevail over your interests, rights and liberties, or in order to file, process or respond to complaints.
You also have the right to object to individualised automated decision-making that would produce legal effects over you or would significantly affect you in a similar way, when this right exists in accordance with the stipulations of Article22 of Regulation (EU) 2016/679.
Additionally, under certain circumstances, you may ask for your data to be transferred to another data controller.
You can revoke the consent you have granted for certain purposes without this affecting the lawfulness of the processing undertaken before consent was withdrawn, and file a claim before a data protection agency. You can find the list and the contact information for European data protection agencies on the European Commission website at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
In order to exercise your rights, you must send us a request by post or by email to the addresses indicated in the section “Who is responsible for processing your personal data?”
Account holders can terminate their Programme membership at any time by notifying the LOPD department in writing (lopd@iberostar.com). Ten days after receiving notification, the account holder will no longer receive any type of information regarding the Programme and their account will be cancelled.
To revoke your consent to receiving our personalised promotional messages and services based on your commercial profile, simply send an email to: lopd@iberostar.com.
For further information about your rights and how to exercise them, visit the Spanish Data Protection Agency website at http://www.aepd.es and our privacy portal at https://www.grupoiberostar.com/en/privacy-portal.
Last Rev: Nov. 2020:
