Room00 Hostels & Hotels S.L.U (hereinafter “Room00 Group”) is the Data Controller of the personal data of the clients of each of the hotels (hereinafter the “Users”). 

Through this Privacy Policy, and in compliance with Articles 12 and 13 of Regulation (EU) 2016/679 (hereinafter "GDPR") and Article 11 of Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights ("LOPDGDD"), Room00 Group informs Users who use the Website about the processing of their personal data that may be collected through it and processed by Room00 Group.

 

1. INFORMATION ABOUT THE DATA CONTROLLER

    

   Data Controller: Room00 Hostels & Hotels S.L.U

   Tax ID: B87637575

   Registered office: CALLE PALERMO, 44. 28043, MADRID, MADRID

   Contact:  DPO@room00group.com

    

2. DATA PROCESSED, LEGAL BASIS, PURPOSES AND RETENTION PERIOD. 

    

   Data processed	Legal basis	Purposes	Retention period
   Booking Data. Name, surname, email address, phone number and ID.	Performance of the contractual relationship in which the data subject is a party.	Booking management. In relation to the booking made, process payments, and manage any modification or cancellation of the booking.	Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. Said data will be blocked to comply with the legal obligations of Room00 Group and, once said period has elapsed, will be permanently deleted.
   Registration Data.  Name, surname, gender, ID, nationality. Date of birth, place of habitual residence, full address, city, country, landline phone, mobile phone, email address, relationship between travelers (in the event that any are minors).	Compliance with a legal obligation.	Registration of files of the State Security Secretariat. Processing of personal data for the prevention, detection, investigation of crimes.	Personal data processed by Room00 Group will be retained for a period of three years from the end of the contracted service or provision.
   Banking data.	Performance of the contractual relationship in which the data subject is a party.	Payment of the booking or guarantee thereof. As well as to pay for the stay or services associated with it.	Personal data will be processed by Room00 Group during the contractual relationship between Room00 Group and the User. Said data will be blocked to comply with the legal obligations of Room00 Group and, once said period has elapsed, will be permanently deleted.
   Contact data. Name, surname, email address, phone number.	Consent	Handle and respond to requests, comments, suggestions. As well as provide support to the User during the use of the Website.	Personal data will be processed by Room00 Group for the time necessary to respond to the query and/or resolve the issue indicated by the User. Said data will be blocked to comply with the legal obligations of Room00 Group and, once said period has elapsed, will be permanently deleted.
   Promotional communications. Name, surname, email address and phone number.	Legitimate interest (when there is a contractual relationship) Consent	Inform about promotions and advertising actions of Room00 Group.	Data will be processed by Room00 Group until the User withdraws their consent. Once consent is withdrawn, Room00 Group will block the data for the time necessary to comply with legal obligations. After that period, the data will be permanently deleted.
   Surveys and/or evaluations relating to service quality. Name, surname, email address and phone number.	Consent	Expand and improve the quality of Room00 Group's products and services.	Data will be processed by Room00 Group until the User withdraws their consent. Once consent is withdrawn, Room00 Group will block the data for the time necessary to comply with legal obligations. After that period, the data will be permanently deleted.
   Video surveillance	Legitimate interest	Security of persons, property and facilities located in the establishments	The images captured will be retained by Room00 Group for a maximum period of one month from their capture, after which they will be deleted. In the event that a crime or administrative offense is recorded that must be reported to an authority, the images will be attached to the complaint and must be retained solely for the purpose of making them available to said authority and may not be used for any other purpose.

   
   
   
   

3. TO WHICH RECIPIENTS WILL YOUR DATA BE DISCLOSED? 

    

   Room00 Group informs that, for the purposes described above, it will not transfer the User’s personal data to third parties. However, Room00 Group may grant access to such personal data to technology service providers with whom it has signed a data processing agreement; in particular to:  

   • Analytics service providers. 
   • Hosting service providers. 
   • Email service providers. 
   • Booking management providers
   • Customer support service providers.
   • Promotional and/or commercial activity service providers.

   The aforementioned providers may be located in jurisdictions that generally do not provide adequate guarantees regarding the processing of personal data. For all entities that are not part of the European Economic Area (EEA), Room00 Group has signed contracts with such entities that include appropriate safeguards, including the European Commission's standard contractual clauses. 

   Users can obtain more information about technology service providers by requesting it from Room00 Group through the contact details provided in this privacy policy. 

   Likewise, Room00 Group may disclose your data to: 

   • Companies interested in acquiring the company or part of its business and, consequently, granting access to any national or international auditor to carry out their "due diligence" (Due Diligence)
   • Subsidiaries of Room00 Group and establishments operating under one of the brands of Room00 group.
   • Authorities to investigate suspected fraud, harassment or other violations of any law, rule or regulation, or of the website policies.

    

4. SECURITY AND CONFIDENTIALITY 

    

   Room00 Group undertakes to adopt the necessary physical, technical and organizational measures, in accordance with applicable regulations, to guarantee the security of personal data and prevent the accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorized disclosure or access to such data. Personal data will be treated confidentially by Room00 Group, which undertakes to inform and ensure, by legal or contractual obligation, that such confidentiality is respected by its employees, partners and any person who must have access to the User’s personal data.  

    

5. USER RIGHTS

    

   The User may exercise the rights of access, rectification, erasure, objection and, where applicable, restriction of processing and data portability by sending an email to DPO@room00group.com

   Likewise, the User may file a complaint with a supervisory authority and, in particular, with the Spanish Data Protection Agency (www.aepd.es) if they consider that the rights set out above in this Privacy Policy have been violated or if they believe that the processing of personal data concerning them infringes applicable regulations.

    

6. CHANGES TO THE PRIVACY POLICY

    

   Room00 Group reserves the right to modify this Privacy Policy at any time. Changes or updates to the Privacy Policy will be explicitly notified to the User through a notice on the Website, together with the updated version of the Privacy Policy.