In compliance with the General Data Protection Regulation (EU) 2016/679 and Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights, we inform you that the data controller is DERBY HOTELS COLLECTION, S.L., with registered office at C/Valencia, 284, 08007, Barcelona.

Your data will be processed for one or several of the following purposes: 

1. 
   

   MANAGING AN ESTIMATE OR AN INDIVIDUAL BOOKING: When you request a price estimate in relation to celebrating an event or booking a room in one of our hotels, apartments or aparthotels – as an individual – using the online forms “Offers” or “Request an estimate”, your data will be processed for the purpose of providing you with the information you need to formalise your booking or request, as well as managing the commercial/contractual relationship and the payment collection and accounting processes for the services you contract. 

   
   

2. 
   

   MANAGING RELATIONSHIPS WITH AGENCIES AND COMPANIES: Should you wish to access professional rates and conditions (via the form “Agencies and Companies”) when booking accommodation or organising meetings and events, your data will be processed for the purpose of providing you with the information you need to enter into contracts for the desired services, as well as managing the commercial/contractual relationship and the payment collection and accounting processes for the services you contract, and/or payment of commissions and fees. 

   
   

3. 
   

   PROVIDING INFORMATION, PARTICIPATING IN PROMOTIONAL EVENTS OR IN THE BLOG: Should you request specific or general information, whether or not on a regular basis, or wish to participate in a promotional event or in the blog, using one of the following forms – “Contact”, “Newsletter”, “Blog”, or “Private/Press Login Area” – your data will be processed to provide you with information, via electronic and other media, about any services offered by the DERBY HOTELS COLLECTION group (including the Egyptian Museum and the Clos Archaeological Foundation) which may be of interest to you, as well as enable you to participate in promotional events or in the blog. 

   
   

4. 
   

   MANAGING YOUR APPLICATION FOR A JOB VACANCY: Should you wish to apply for a job vacancy within the DERBY HOTELS COLLECTION group (including the Egyptian Museum and the Clos Archaeological Foundation) and submit your CV via the form "Job Vacancies", your data will be processed as part of our management of the selection process.

   
   

Your data may be communicated and/or transferred internationally to Public Administrations and Authorities, as well as to other third parties by legal obligation, in addition to any company or entity belonging to or collaborating with the DERBY HOTELS COLLECTION group (including the Egyptian Museum and the Clos Archaeological Foundation) and to other third parties when necessary for the fulfillment of the specified purposes.

In case you attend a promotional event, it is possible that your personal image will be captured through photography and/or video for promotional purposes and disseminated on the web or through media, for which we will need your express authorization for its timeless use, without geographical limits and free of charge, or otherwise we cannot guarantee your attendance at the events.

1. 
   

   Where data is processed for the purpose of MANAGING AN ESTIMATE OR AN INDIVIDUAL BOOKING, the legal basis that renders lawful this processing, communications and any international data transfer is the contract or precontract to which you are a party; in addition to your express, informed consent, freely and clearly given upon accepting the present Privacy Policy and filling in the form, with respect to any other purpose not legitimised by the contract or precontract. 

   
   

2. 
   

   Where data is processed for the purpose of MANAGING RELATIONSHIPS WITH AGENCIES AND COMPANIES, the legal basis that renders lawful this processing, communications and any international data transfer is the contract or precontract to which you are a party; in addition to your express, informed consent, freely and clearly given upon accepting the present Privacy Policy and filling in the form, with respect to any other purpose not legitimised by the contract or precontract. 

   
   

3. 
   

   Where data is processed for the purpose of PROVIDING YOU WITH INFORMATION OR ENABLING YOU TO PARTICIPATE IN PROMOTIONAL EVENTS OR IN THE BLOG, the legal basis that renders lawful this processing, communications and any international data transfer is your express, informed consent, freely and clearly given upon accepting the present Privacy Policy and completing the corresponding form. When you apply to attend a promotional event, you also give your express, informed consent, freely and clearly given, to the possible use of your personal image, captured in a photograph or video, upon completing the corresponding form. 

   
   

4. 
   

   Where data is processed for the purpose of MANAGING YOUR APPLICATION FOR A JOB VACANCY, the legal basis that renders lawful this processing, communications and any international data transfer is your express, informed consent, freely and clearly given upon accepting the present Privacy Policy, completing the corresponding form and supplying your CV. 

   
   

If you do not provide all the requested data in the corresponding form, we may not be able to fulfill your request. In any case, no profiles will be created, and no individual decisions will be made automatically based on your data.

In cases where the treatment is legitimized through your express consent, your data will be retained until you request its deletion or revoke this consent, except in the case of candidates who provide their resumes, in which case the information will be securely destroyed within a maximum of 1 year after the selection process has ended.

If the legal basis is a contract or pre-contract, your data will be kept as long as necessary to maintain it and for up to 5 years after its expiration or until any legal obligation to retain it expires.

You have the right to revoke any consent you have given and to access the information we hold about you, to correct it, to delete it, to object to its processing, to request the limitation of processing, or to ask for the portability of your data. To do so, you just need to communicate it in writing, signed, attaching a photocopy of any valid official document verifying your identity (ID, passport) addressed to: DATA PROTECTION - DERBY HOTELS COLLECTION, S.L., C/Valencia, 284, 08007, Barcelona. Tel. +34 93 366 88 00. E-mail: marketing@derbyhotels.com.

You also have the right to file a complaint with a Supervisory Authority.

In case of exercising rights through a representative, it will be necessary that the request is accompanied by explicit authorization and a copy of the ID, passport, or equivalent official document of both the representative and the represented.