Privacy policy

PROTECTION OF PERSONAL DATA

Both data privacy and information confidentiality are important aspects for our company. Therefore, and in accordance with current data protection regulations (GDPR, LOPDGDD), we inform users of the policy regarding the processing and protection of their personal data.

This data protection policy may change over time due to possible legislative or jurisprudential changes, or changes in the criteria followed by the Spanish Data Protection Agency and/or the competent authority at any given time. Therefore, we reserve the right to modify this legal notice to adapt it to new legislation or case law in force at the time of access to the website.

Last updated: September 20, 2021

Who is the data controller responsible for processing your data?

OBA S.L. (hereinafter ATRIUMHOTELS)
CIF: B-58008780
Aribau Street, 185, 5, 08021 Barcelona
Contact email: protecciondatos@atriumhotels.com

For what purposes do we process your data? What is the legal basis and retention period?

At ATRIUMHOTELS, we process your personal data lawfully, fairly, and transparently. Data is collected for specific, explicit, and legitimate purposes as explained below and will not be further processed in a manner incompatible with those purposes. The data processed is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed. We ensure that it is accurate and kept up to date at all times.

PROCESSING PURPOSES:

1. CONTACT FORMS

We process any request you submit through the forms available on the website or any other contact method.

Legal basis: consent provided by voluntarily submitting your data.
Retention period: data will be deleted once your request has been processed.

2. RESERVATION MANAGEMENT

Processing your data for managing reservation requests at the various establishments listed on the website.

Legal basis: existence of a contractual relationship.
Retention period: data will be retained for the duration of the contractual relationship and, once it ends, for the legally required limitation periods.

Information on Commercial Communications

If ATRIUMHOTELS uses your data for commercial communications, prior consent will be requested to send information, advertising, and commercial communications via email, post, SMS, or any other means. Users may withdraw consent at any time.

Who do we share your data with?

ATRIUMHOTELS may share your data with third parties in the following cases:

• Legal obligation to tax authorities for tax payments.
• Transfer required in the context of judicial and/or police requests.
• Transfer necessary for service provision: suppliers, financial institutions, insurance companies, or debt collection agencies.

International data transfers are not planned.

Your data protection rights and how to exercise them

Right of access, rectification, and erasure: You may access your personal data, request correction of inaccurate data, or request deletion when data is no longer necessary.

Restriction of processing: In certain circumstances, you may request restriction of processing; data will then only be retained for legal claims.

Right to object: You may object to processing based on your particular situation, unless there are compelling legitimate grounds.

Right to data portability: You may receive your personal data in a structured, commonly used, machine-readable format when processing is based on consent or contract and is automated.

You have the right to lodge a complaint with the supervisory authority (AEPD: www.aepd.es).

To exercise your rights, you may send an email to protecciondatos@carbonell.com, including:

1. Your full name
2. Contact address
3. The right you wish to exercise
4. Specific data related to your request

We will respond within one month using the same method of contact.

Security in processing

Taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of processing, as well as risks of varying likelihood and severity for individuals’ rights and freedoms, ATRIUMHOTELS implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, preventing accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data.