Privacy policy

Data controllers

CAS MIOT SL (Tax ID B07790512, registered office at Ctra. Manacor 272, Palma) is the data controller for personal data collected through the websites of Mon Port Hotel & Spa and Hotel Es Princep.

ENIX SL (Tax ID B07018781, registered office at Ctra. Manacor 272, Palma) is the data controller for personal data collected through the Aparthotel La Pérgola website.

For any query relating to data protection, please contact us at lopd@monhotels.com or by phone at 971 200 222.

Data we collect

While browsing our website, certain data is automatically collected, including IP address, browser version, operating system and duration of the visit, through the use of Google Analytics.

Through the forms available on the website, we collect the personal data strictly necessary to manage the registration, booking or enquiry made by the user. This data may be linked to the user's browsing history in order to personalise the offers displayed.

Purposes of processing

Managing access to and use of the website.
Processing purchases and bookings made by users.
Responding to requests, enquiries and information requests.
Sending commercial communications, subject to the user's express consent.
Sending the newsletter to users who have actively subscribed.

Legal basis

The processing of personal data is based on the following legal grounds:

Performance of a contract, in the case of customers and suppliers.
Consent of the data subject, for sending the newsletter and commercial communications.
Compliance with a legal obligation, in relation to invoicing and taxation.
The existing contractual relationship, in the case of social media management.

Data retention periods

Personal data will be retained for the following periods:

Customer and supplier invoices: 10 years.
Human Resources payroll records: 10 years.
CVs received: 1 year from the end of the selection process.
CCTV recordings: 30-day blocking period, destroyed after 3 years.
Guest registration records (check-in): 3 years.
Transactional data: 10 years after account deletion.

Data recipients

Personal data is disclosed only to the Spanish Tax Agency, financial institutions and data processors necessary for the provision of the service. No data is disclosed to third parties except where required by law.

Where international data transfers take place (for example, when using tools such as Dropbox, Google Drive or OneDrive), these are carried out under Article 49(c) of the General Data Protection Regulation or equivalent safeguard mechanisms.

User rights

Users may exercise their rights of access, rectification, erasure ("right to be forgotten"), restriction of processing and data portability at any time, as well as withdraw any consent given, by contacting lopd@monhotels.com.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that their rights have not been properly addressed.

The maximum response time for these requests is one month.

Other relevant processing activities

Minors

We do not process personal data belonging to children under the age of fourteen.

Cookies

The website uses its own and third-party cookies. Full information is available in the Cookie Policy, on a separate page.

CCTV

Access to premises marked with CCTV signage implies the user's tacit consent to being recorded, for the purposes and retention periods indicated above.

Security measures

Optimal technical and organisational measures are applied in accordance with the current state of technology, in order to guarantee the security and integrity of the personal data processed.