Privacy Policy

1. Data Controller

The data controllers of your personal data may vary according to the data processed in each case.

The details are given below of the different companies that may process your data and that will be identified every time your data are processed. 

A) Catalonia Hotels & Resorts (“Catalonia”) 

Company name: Promotora Kasde, S.A.

Postal address: Calle Castellnou 61, Barcelona.

Telephone no.: +34 93 236 00 00

B) Hotels or Hotel

The hotels in which you stay may process your personal data in different ways. You can find information about the companies that manage the Hotels that act as the data controllers of your personal data here

C) Catalonia Rewards 

Company name: Duques de Bergara, S.L.U.

Postal address: Calle Bergara, 11, Barcelona.

Telephone no.: +34 93 236 00 00.

In any event, whenever you have questions about the processing of your data, you may contact us by email at dpo.cataloniahotels@lener.es

2. Data processing

3. Data retention period

Your personal data may be processed in accordance with what is described in each of the data processing sections set forth in this privacy policy.

Notwithstanding these retention periods, your personal data may be kept on record anonymised for statistical or market research purposes, whenever possible, or duly locked to comply with any legal obligation that may apply in each case.

For example, for the exercise or defence of legal actions related to consumer and user regulations, any relevant personal information may be processed for a period of 3 years. As mentioned above, in cases of fraud your personal data may be processed in certain cases for a period of up to 10 years, pursuant to the Spanish Criminal Code. There may be additional legal obligations in the different countries in which we operate that may require us to retain data for longer periods.

4. International transfers

As a general rule, we always endeavour to process personal data in Europe or the European Economic Area, thus ensuring compliance with the GDPR by both us and our service providers that process data on our behalf under our instructions.

However, we provide our services globally, so we may need to process your data in other countries, which may or may not provide the same safeguards as the GDPR. Should it be necessary to make international transfers from the EU to countries outside the EU that do not provide such safeguards, we undertake to always carry them out by ensuring that they are protected by appropriate safeguards, which may include (i) standard clauses approved by the EU; (ii) third-party certifications; (iii) binding corporate rules; and (iv) any other valid mechanism in accordance with the laws in force or regulations passed by the competent authorities.

5. Rights

What rights do you have when you provide us with personal data?

You are entitled to obtain confirmation about whether or not the data controller is processing your personal data. 

You also have the right to access your personal data and to request the rectification of inaccurate data or, where applicable, request their erasure when, among other reasons, the data are no longer required for the purposes for which they were collected.

In certain circumstances, you may request that the processing of your data be restricted, in which case we will only keep them on record to exercise or defend ourselves against claims.

Furthermore, under certain circumstances and for reasons related to your personal circumstances, you may object to the processing of your data. The data controller will no longer process your data, unless there are compelling legitimate grounds for doing so, or to lodge or defend itself against potential claims. 

You may likewise exercise your right to data portability in accordance with the regulations in force. 

Should you wish to exercise any of your rights, you may contact us by sending an email to dpo.cataloniahotels@lener.es. Alternatively, you can write to us at the following postal address: Atención al Cliente, Bergara 323, 08037 Barcelona, and writing “Protección de Datos” on the envelope. Remember to supply as much information as possible about your request: your full name, email address used for your account and the website your request concerns.

Finally, we hereby inform you that you can address the Spanish Data Protection Agency and other competent public organisations for any claim arising from the processing of your personal data.

All our destinations

Spain