Privacy Policy

In this space, you will find O7 Hotels' privacy policies. Our website is committed to protecting the privacy of our users, and to this end, we have developed different privacy policies tailored to the needs of each type of user. Depending on the user profile using our website, one of the following privacy policies will apply:
We encourage you to carefully read the privacy policy corresponding to your user profile to understand how we collect, use, and protect your personal information on our website.

PRIVACY POLICY FOR CLIENTS

This privacy policy applies to the processing of customer and guest data at hotels within the O7 Hotels chain, which are part of the World2Meet (W2M) tourism group. Please read it carefully; it contains important information about the processing of your personal data and your rights under current regulations. This policy is published at www.o7hotels.com and can be viewed at the hotel reception, where you can request a copy for your records.

Generally speaking, the fields on our forms that are marked as mandatory must be completed in order to process your requests.

1. Who is responsible for processing your data?

Your data is processed by: The scope of the respective responsibilities of the HOTEL and O7 HOTELS is as follows:
The HOTEL is responsible for processing customer and guest data necessary for the hotel's operational management, such as administrative and accounting management, reservation and stay management, provision of contracted services, and handling customer complaints.
O7 HOTELS is responsible for the processing of personal data affecting hotel management at the chain level, including: The hotels within the chain and O7 Hotels have entered into a contract governing the processing of customer and guest data to ensure an adequate level of protection of personal data, regardless of the location of the hotels. The essential aspects of this contract, in relation to the respective roles and relationships of the Hotel and O7 Hotels with customers and guests, are consistent with the information provided in this policy.

For more information about the processing of your data or how to exercise your rights under current regulations, you can send an email to dataprotection@w2m.com or contact the W2M Group Data Protection Officer at dpo@w2m.com.

2. Why will we process your data and on what legal basis?

2.1. Management of reservations and provision of requested services. The HOTEL will process the data provided in reservation or service requests to manage said reservations and provide the requested services.

What data is processed for this purpose and how was it obtained? The categories of data the HOTEL will process for these purposes are as follows: This data is obtained either directly from you or from third parties who processed the reservation or requested the service on your behalf, for example, the reservation center or travel agency through which you booked your stay. The processing of this data is necessary for the execution of the accommodation contract, the provision of the requested services, or for the implementation of pre-contractual measures at your request.

The financial data and transaction information for goods and services generated during your stay will be processed for accounting and administrative purposes and to comply with the hotel's legal accounting and tax obligations.

The data collected at the time of your check-in at the hotel, along with the data generated during your stay, will be consolidated in World2Meet group databases (more information in the section “Data consolidation for internal administrative purposes of the W2M group”).

2.2. Traveler registration and control: In compliance with the Convention implementing the Schengen Agreement and Organic Law 4/2015, of March 30, on the protection of citizen security, the hotel is required to register all guests' information. This information is entered into an entry form, which is used to establish the traveler registration book required by law and which the hotel is required to communicate to the State Security Forces.

2.3. Data consolidation for internal administrative purposes of the W2M Group . Personal data, financial data, reservations, and, more generally, transaction data for goods and services generated by the businesses carried out by the group companies are consolidated in centralized databases for internal administrative purposes within the group. Below, you will find an overview of these processes. For further information, particularly to learn about the companies that comprise the group, please consult the Privacy Policy Applicable to the Consolidation of Personal Data for Internal Administrative PURPOSES of the W2M Group.

The entity W2M SERVICIOS CORPORATIVOS, SLU, with registered office at C/ General Riera 154, 07010 Palma (Balearic Islands), Spain (hereinafter W2M) is responsible for the administration and security of the consolidated databases; each of the companies in the group is responsible for the data communications it makes to W2M for consolidation and for its use of the consolidated group data. These processing operations are based on the legitimate interest of the W2M group in transmitting personal data within the business group for internal administrative purposes and to have a consolidated view of its businesses for business decision-making.

Creation of a group-level personal data record : The identification and contact information you have provided, along with information regarding your ID (type and number), gender, and language, will be consolidated into a unified group-level database. The purpose is to have a single personal data record to optimize operational processes common to group companies where identification is required, for example, for payments or billing of services, or for integration with reservation systems. This unified database will be synchronized with the systems of the group companies with which you maintain an active relationship.

Management control and business data analysis : We also process information obtained from consolidated economic data, reservations, and, more generally, transaction data for goods and services generated by the businesses developed by the group companies to generate reports and analyze business data for business intelligence and management control purposes. These analyses and reports provide results in the form of aggregated data and are used to compile statistics and forecasts to facilitate business decision-making, optimize processes, measure the performance of the tourism products offered by the group, and establish commercial strategies.

2.4. Data Consolidation for Advertising and Commercial Profiling . O7 HOTELS' customer and potential customer data is consolidated into a commercial database for direct marketing purposes and commercial profiling.

The person responsible for processing the data included in the O7 HOTELS commercial database is GANAS DE VIAJAR, SLU, with registered office at C/ General Riera 154, 07010 Palma (Balearic Islands), Spain (hereinafter O7 HOTELS).

Your inclusion in this database is based on the consent you have been requested to provide. Withholding or withdrawing your consent does not affect the execution of reservations or the provision of the services you have contracted. The scope of your personal data that will be consolidated in the O7 HOTELS database and the specific use that will be made of it will depend on the consent you gave at the time you provided your data. You may revoke this consent or change your preferences at any time.

Sending non-personalised commercial communications and management of distribution lists (segmentation) : O7 HOTELS processes the identification and contact data that you have provided together with the data relating to your status as a customer, language and market/origin of the data, for the sending, by any means, of non-personalised commercial communications relating to the tourist products and services offered by O7 HOTELS.

To manage our distribution lists, we segment the recipients of our communications based on data source, market, and language. This processing consists of simple classification according to objective criteria and is not intended to create commercial profiles, make predictions, or perform behavioral analysis.

The service we use to send our commercial communications is located outside the European Economic Area. The service has been configured to store data in a data center located in the EU. As a supplementary measure, the contractual terms applicable to this service include the standard clauses approved by the European Commission to ensure an adequate level of protection for the personal data transferred to this data processor.

Creation of a commercial profile for the personalization of O7 HOTELS commercial communications and services : The data consolidated in the O7 HOTELS commercial database is used to perform behavioral analysis and predictive models with the aim of understanding and predicting the desires and needs of our customers, the actions related to the purchase of our products and services and the factors that influence them. If you have authorized the personalization of O7 HOTELS services and communications, O7 HOTELS will access the data generated by your reservations to include them in your commercial profile. This profile will be enriched with information generated from your interactions with O7 HOTELS hotels and digital media, for example, your requests for information or quotes or data generated by your browsing on our websites.

Your profile will allow us to determine when to send you marketing communications and personalize our offers based on the type of product that may interest you, based on the results of behavioral analyses and the application of predictive models.

We will also use the data included in your profile to personalize the treatment and services provided by the group companies with which you interact, for example, to wish you a happy birthday or to take into account the preferences you have expressed when making your reservations or during your use or enjoyment of the contracted tourism products. For this purpose, the hotels managed by O7 Hotels with which you interact in the future will access your profile.

3. To whom can we communicate your data?

Your data will only be shared between hotels managed by O7 HOTELS in the situations described in the previous sections or with third parties due to legal obligations, with your prior consent, or when necessary to provide the requested services.

If your reservation is for a hotel operated by O7 HOTELS under a management agreement, O7 HOTELS must share guest data with the hotel's owner to ensure proper processing of reservations. These communications are necessary to provide the requested services or to implement pre-contractual measures at your request.

If your reservation includes additional services provided by third-party providers, or if your requests relate to such services, the personal data necessary for processing your reservation/service request will be shared with the corresponding providers for this purpose only. These communications are necessary for the provision of the requested services or for the implementation of pre-contractual measures in response to your request.

4. How long will we retain your data?

Generally speaking, customer and guest data will be retained for the duration of their relationship with the HOTEL and O7 HOTELS and, in any case, for the periods provided for in applicable legal provisions and for the time necessary to address any potential liabilities arising from the processing. Your data will be deleted when it is no longer necessary or relevant for the purposes for which it was collected.

The HOTEL will retain the financial data and transaction data for goods and services generated by your stay for the time required by current accounting and tax regulations and the guest registration books for the periods provided for by security and traveler control regulations (3 years).

Customer data consolidated for internal group administrative purposes will be retained according to the criteria set out in the PRIVACY POLICY APPLICABLE TO DATA CONSOLIDATION FOR INTERNAL GROUP ADMINISTRATIVE PURPOSES OF THE W2M GROUP.

Data processed by O7 HOTELES for commercial purposes, including commercial profiles, will be retained as long as you do not object to the processing or request its deletion.

What are your rights?

You have the right to obtain confirmation as to whether or not we are processing your personal data and, if so, to access it. You may also request that your data be corrected if it is inaccurate or that incomplete data be completed, as well as request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under certain circumstances, you may request that the processing of your data be restricted. In such cases, we will only process the affected data for the establishment, exercise, or defense of legal claims or for the protection of the rights of others. Under certain conditions and for reasons related to your particular situation, you may also object to the processing of your data. In this case, we will cease processing the data except for compelling legitimate reasons that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Likewise, and under certain conditions, you may request the portability of your data so that it can be transmitted to another data controller.

You also have the right to object to automated individual decision-making that produces legal effects concerning you or significantly affects you in a similar way, where this right applies in accordance with Article 22 of Regulation (EU) 2016/679.

You may revoke your consent to the processing of your data for marketing purposes, including commercial profiling, or modify your preferences at any time by using the link provided in our marketing communications.

To request your withdrawal as a customer or exercise your data protection rights, you can send a request by post or email, indicating the right(s) you wish to exercise, to: Grupo W2M – Attn. GDPR Rights Controller, C/General Riera 154, 07010 Palma (Balearic Islands), Spain. Email: dataprotection@w2m.com

You can find more information about your rights and how to exercise them on the W2M Group's privacy portal, on the Spanish Data Protection Agency's website, or by contacting the W2M Group's Data Protection Officer at dpo@w2m.com.

PRIVACY POLICY FOR WEB USERS OR VISITORS

This privacy policy applies to the website www.o7hotels.com (hereinafter the website).

Please read it carefully. It contains important information about the processing of your personal data and the rights you have under current regulations.

We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with potential legislative or jurisprudential changes. If you have any questions or need clarification regarding our Privacy Policy or your rights, you can contact us through the channels indicated below.

You declare that the information you provide to us, now or in the future, is correct and truthful, and you agree to notify us of any changes. If you provide personal data of third parties, you agree to obtain the prior consent of those affected and to inform them of the content of this policy.

The fields on our forms marked as mandatory must be completed in order to process your requests.

Who is responsible for the processing of your data?

The party responsible for processing your personal data is GANAS DE VIAJAR, SLU (hereinafter O7 Hotels), with registered address at Calle General Riera 154, 07010 Palma (Balearic Islands), Spain. O7 Hotels is part of the World2Meet tourism group. Learn more about the group here.

For more information about the processing of your data or how to exercise your rights under current regulations, you can send an email to dataprotection@w2m.com or contact the W2M Group Data Protection Officer at dpo@w2m.com.

Why will we process your data and on what legal basis?

User relationship management : We process the data our users provide in their inquiries to respond to their requests. This processing is necessary for the execution of the legal relationship with website users or to implement pre-contractual measures in response to their requests.

Administration and management of website security : We process browsing data (IP addresses or logs) to administer and manage the security of the website. This processing is based on our legitimate interest in ensuring the security of the website. This interest is expressly recognized by Recital 49 of the GDPR. In weighing this interest against your rights and freedoms, we have taken into account that this processing corresponds to general security practices and does not pose significant threats to the data subjects.

Statistical and quality management purposes : In order to evaluate and manage the quality of our services, we compile statistics based on aggregated data obtained from transaction data and website browsing data, e.g., IP address, weblogs, pages visited, or actions performed on the website (more information in our cookie policy). These processing operations are based on our legitimate interest in evaluating and managing the quality of our services. In order to weigh this interest against your rights and freedoms, it has been determined that the processing has a limited impact on the data subject's privacy, corresponds to their reasonable expectations, and does not pose significant threats.

Consolidation of data for internal administrative purposes of the W2M Group . Personal data, financial data, reservations, and, more generally, transaction data for goods and services generated by the businesses carried out by the group companies are consolidated in centralized databases for internal administrative purposes within the group. Below, you will find an overview of these processes. For further information, particularly to learn about the companies that comprise the group, please consult the Privacy Policy Applicable to the Consolidation of Personal Data for Internal Administrative PURPOSES of the W2M Group.

The entity W2M SERVICIOS CORPORATIVOS, SLU, with registered office at C/ General Riera 154, 07010 Palma (Balearic Islands), Spain (hereinafter W2M) is responsible for the administration and security of the consolidated databases; each of the companies in the group is responsible for the data communications it makes to W2M for consolidation and for its use of the consolidated group data. These processing operations are based on the legitimate interest of the W2M group in transmitting personal data within the business group for internal administrative purposes and to have a consolidated view of its businesses for business decision-making.

Creation of a group-level personal data record : The identification and contact information you have provided, along with information regarding your ID (type and number), gender, and language, will be consolidated into a unified group-level database. The purpose is to have a single personal data record to optimize operational processes common to group companies where identification is required, for example, for payments or billing of services, or for integration with reservation systems. This unified database will be synchronized with the systems of the group companies with which you maintain an active relationship.

Management control and business data analysis : We also process information obtained from consolidated economic data, reservations, and, more generally, transaction data for goods and services generated by the businesses developed by the group companies to generate reports and analyze business data for business intelligence and management control purposes. These analyses and reports provide results in the form of aggregated data and are used to compile statistics and forecasts to facilitate business decision-making, optimize processes, measure the performance of the tourism products offered by the group, and establish commercial strategies.

Data consolidation for advertising purposes and commercial profiling . O7 HOTELS' customer and potential customer data is consolidated into a commercial database for direct marketing purposes and commercial profiling.

The person responsible for processing the data included in the commercial database of the O7 HOTELS chain is GANAS DE VIAJAR, SLU, with registered office at C/ General Riera 154, 07010 Palma (Balearic Islands), Spain (hereinafter O7 HOTELS).

Your inclusion in this database is based on the consent you have been requested to provide. Withholding or withdrawing your consent does not affect the execution of reservations or the provision of the services you have contracted. The scope of your personal data that will be consolidated in the O7 HOTELS database and the specific use that will be made of it will depend on the consent you gave at the time you provided your data. You may revoke this consent or change your preferences at any time.

Sending non-personalised commercial communications and management of distribution lists (segmentation) : O7 HOTELS processes the identification and contact data that you have provided together with the data relating to your status as a customer, language and market/origin of the data, for the sending, by any means, of non-personalised commercial communications relating to the tourist products and services offered by O7 HOTELS.

To manage our distribution lists, we segment the recipients of our communications based on data source, market, and language. This processing consists of simple classification according to objective criteria and is not intended to create commercial profiles, make predictions, or perform behavioral analysis.

The service we use to send our commercial communications is located outside the European Economic Area. The service has been configured to store data in a data center located in the EU. As a supplementary measure, the contractual terms applicable to this service include the standard clauses approved by the European Commission to ensure an adequate level of protection for the personal data transferred to this data processor.

Creation of a commercial profile for the personalization of commercial communications and group services : The data consolidated in the O7 HOTELS commercial database is used to perform behavioral analysis and predictive models with the aim of understanding and predicting the desires and needs of our customers, the actions related to the purchase of our products and services, and the factors that influence them. If you have authorized the personalization of services and communications, O7 HOTELS will access the data generated by your reservations to include them in your commercial profile. This profile will be enriched with information generated from your interactions with O7 HOTELS hotels and digital media, for example, your requests for information or quotes or data generated by your browsing on our websites.

Your profile will allow us to determine when to send you marketing communications and personalize our offers based on the type of product that may interest you, based on the results of behavioral analyses and the application of predictive models.

We will also use the data included in your profile to personalize the treatment and services provided by the O7 HOTELS chain hotels with which you interact, for example, to wish you a happy birthday or to take into account the preferences you have expressed when making your reservations or during your use or enjoyment of the contracted tourism products. For this purpose, the O7 HOTELS chain hotels with which you interact in the future will access your profile.

How long will we retain your data?

Generally, we retain your data for the duration of your relationship with us and, in any case, for the periods provided for in applicable legal provisions and for the time necessary to address any potential liabilities arising from the processing. We will delete your data when it is no longer necessary or relevant for the purposes for which it was collected. Browsing information will be deleted once the website connection has ended and statistics have been compiled.

Customer data consolidated for internal group administrative purposes will be retained according to the criteria set out in the PRIVACY POLICY APPLICABLE TO DATA CONSOLIDATION FOR INTERNAL GROUP ADMINISTRATIVE PURPOSES OF THE W2M GROUP.

Data processed by O7 HOTELS for commercial purposes, including commercial profiles, will be retained as long as you do not object to the processing or request its deletion.

To whom can we communicate your data?

Your data will only be disclosed to third parties by legal obligation, with your consent, or when your request requires such disclosure.

If your reservation is for a hotel operated by O7 HOTELS under a management agreement, O7 HOTELS must share guest data with the hotel's owner to ensure proper processing of reservations. These communications are necessary to provide the requested services or to implement pre-contractual measures at your request.

If your reservation includes additional services provided by third-party providers, or if your requests relate to such services, the personal data necessary for processing your reservation/service request will be shared with the corresponding providers for this purpose only. These communications are necessary for the provision of the requested services or for the implementation of pre-contractual measures in response to your request.

What are your rights?

You have the right to obtain confirmation as to whether or not we are processing your personal data and, if so, to access it. You may also request that your data be corrected if it is inaccurate or that incomplete data be completed, as well as request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Under certain circumstances, you may request that the processing of your data be restricted. In such cases, we will only process the affected data for the establishment, exercise, or defense of legal claims or for the protection of the rights of others. Under certain conditions and for reasons related to your particular situation, you may also object to the processing of your data. In this case, we will stop processing the data except for compelling legitimate reasons that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. Likewise, and under certain conditions, you may request the portability of your data so that it may be transmitted to another data controller. You may at any time revoke the consent you have given for the processing of your data for marketing purposes, including commercial profiling, or change your preferences in this regard by using the link provided for this purpose in our marketing communications.

To request your withdrawal as a customer or exercise your data protection rights, you can send a request by post or email, indicating the right(s) you wish to exercise, to: Grupo W2M – Attn. GDPR Rights Controller, C/General Riera 154, 07010 Palma (Balearic Islands), Spain. Email: dataprotection@w2m.com

You can find more information about your rights and how to exercise them on the W2M Group's privacy portal, on the Spanish Data Protection Agency's website, or by contacting the W2M Group's Data Protection Officer at dpo@w2m.com.