Room00 Hostels & Hotels S.L.U (hereinafter “Room00 Group”) is the Data Controller responsible for the processing of the personal data of the customers of each of the hotels (hereinafter the “Users”).
Through this Privacy Policy, and in compliance with Articles 12 and 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”) and Article 11 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights (“LOPDPGDD”), Room00 Group informs Users who use the Website about the processing of their personal data that may be collected through it and processed by Room00 Group.
INFORMATION ABOUT THE DATA CONTROLLER
Data Controller: Room00 Hostels & Hotels S.L.U
Tax ID: B87637575
Registered office: CALLE PALERMO, 44. 28043, MADRID, MADRID
Contact: [DPO@room00group.com](mailto:DPO@room00group.com)
PROCESSED DATA, LEGAL BASIS, PURPOSES AND RETENTION PERIOD.
| PROCESSED DATA | LEGAL BASIS | PURPOSES | RETENTION PERIOD |
Booking Data. First name, last name, email address, phone number and ID number Registration Data. First name, last name, gender, ID number, nationality, date of birth, place of habitual residence, full address, city, country, landline phone, mobile phone, email address, relationship between travelers (in the event that any of them is a minor). | Performance of the contractual relationship to which the data subject is a party. Compliance with a legal obligation | Booking management. In relation to the booking made, processing payments, and managing any modification or cancellation of the booking. Registration of records with the Secretary of State for Security. Processing of personal data for the prevention, detection, and investigation of crimes. | Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. Such data will be blocked in order to comply with Room00 Group’s legal obligations and, once such period has elapsed, will be permanently deleted. Personal data processed by Room00 Group will be retained for a period of three years from the end of the contracted service or provision. |
| Banking details | Performance of the contractual relationship to which the data subject is a party. | Payment of the booking or guarantee thereof. As well as payment for the stay or services associated with it. | Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. Such data will be blocked in order to comply with Room00 Group’s legal obligations and, once such period has elapsed, will be permanently deleted. |
| Contact data. First name, last name, email address, phone number. | Consent | Handling and responding to requests, comments, and suggestions. As well as providing support to the User during use of the Website. | Personal data will be processed by Room00 Group for the time necessary to respond to the query and/or resolve the issue indicated by the User. Such data will be blocked in order to comply with Room00 Group’s legal obligations and, once such period has elapsed, will be permanently deleted. |
| Promotional communications. First name, last name, email address and phone number. | Legitimate interest (where there is a contractual relationship) Consent | Informing about promotions and advertising actions of Room00 Group. | The data will be processed by Room00 Group until the User withdraws their consent. Once consent is withdrawn, Room00 Group will block the data for the time necessary to comply with legal obligations. Once this period has ended, the data will be permanently deleted. |
| Surveys and/or evaluations relating to service quality. First name, last name, email address and phone number. | Consent | Expanding and improving the quality of Room00 Group’s products and services. | The data will be processed by Room00 Group until the User withdraws their consent. Once consent is withdrawn, Room00 Group will block the data for the time necessary to comply with legal obligations. Once this period has ended, the data will be permanently deleted. |
| Video surveillance | Public Interest | Security of persons, property and facilities located within the establishments | The recorded images will be retained by Room00 Group for a maximum period of one month from their capture, after which they will be deleted. Where the recording of a crime or administrative offense occurs that must be reported to an authority, the images will be attached to the complaint and retained solely for the purpose of making them available to the relevant authority and may not be used for any other purpose. |
1. TO WHOM WILL YOUR DATA BE DISCLOSED?
Room00 Group informs that, for the fulfillment of the purposes described above, it will not disclose Users’ personal data to third parties. Notwithstanding the foregoing, Room00 Group may grant access to such personal data to technology service providers with whom it has entered into a data processing agreement; in particular:
The aforementioned providers may be located in jurisdictions that generally do not offer adequate safeguards with respect to the processing of personal data. For all entities that are not part of the European Economic Area (EEA), Room00 Group has signed agreements with such entities that include such safeguards, including the European Commission’s standard contractual clauses.
Users may obtain more information about the technology service providers by requesting it from Room00 Group through the contact details provided in this Privacy Policy.
Likewise, Room00 Group may disclose data to:
2. SECURITY AND CONFIDENTIALITY
Room00 Group undertakes to adopt the necessary physical, technical and organizational measures, in accordance with applicable regulations, to ensure the security of personal data and to prevent accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorized disclosure of or access to such data. Personal data will be processed confidentially by Room00 Group, which undertakes to inform and enforce such confidentiality, by legal or contractual obligation, on its employees, partners, and any person who must have access to the User’s personal data.
3. USERS’ RIGHTS
Users may exercise their rights of access, rectification, erasure, objection and, where applicable, restriction of processing and data portability by sending an email to DPO@room00group.com
Users may also lodge a complaint with a supervisory authority and, in particular, with the Spanish Data Protection Agency (www.aepd.es) if they consider that the rights set out above in this Privacy Policy have been violated or if they believe that the processing of their personal data infringes applicable regulations.
4. CHANGES TO THE PRIVACY POLICY
Room00 Group reserves the right to modify this Privacy Policy at any time. Changes or updates to the Privacy Policy will be explicitly notified to Users by means of a notice on the Website, together with the updated version of the Privacy Policy.
También protegemos tus datos.
