Privacy policy

This privacy policy applies to Please read this policy carefully. This document contains important information about how your personal data will be processed, the rights you are entitled to under current legislation on the matter, and your corresponding obligations. We reserve the right to update this privacy policy at any time due to business decisions and to comply with possible changes to legislation or case law. If you have any doubts or need further clarification with regards to this privacy policy or your rights, please contact us through the channels indicated below.

In case that you provide personal data, you declare that the information you provide, now and in the future, is correct and truthful and undertake to inform us of any changes to said information. When providing the personal data of a third party, you agree to obtain prior consent from the party in question and to inform them of the content of this policy.

1. Who is responsible for processing your personal data?

The entity responsible for processing your data is IBEROSTAR HOTELES Y APARTAMENTOS, S.L., with registered address at C/ General Riera 154, 07010, Palma de Mallorca, Balearic Islands, (hereinafter IBEROSTAR). You can contact the Data Protection Representative of the Iberostar group at

2. What personal information do we collect?

The data we process are data we collect from Information generated through your navigation and a contractual relationship.

The type of data we process usually consist of personal data, such as language spoken.

3. Why do we process your data?

User data will be processed in order to process your requests and enquiries, administer and manage Website security and to fulfil our legal obligations, statistical analysis and quality control.

4. Who can we share your data with?

User data will only be disclosed to third parties under legal obligation, with your consent, or when it is deemed necessary for the operation of the web.

5. Legal grounds for processing

The grounds for processing your data include the administration of the legal relationship established with you and the fulfilment of legal obligations.

The management of Website security is based on the premise of legitimate interest. The statistical analysis and quality control are based on legitimate interest for the purpose of internal administration, as well as the evaluation of our services.

6. How long will we store your data?

We generally store personal data for the duration of your relationship with us and always in accordance with the terms set forth in applicable legal regulations. We will delete your data once they are no longer relevant to, or necessary for, the purposes for which they were collected. Browsing information will be deleted once connection to the website has been finalised and the corresponding statistical analysis completed.

7. What are your rights?

You have the right to receive confirmation of whether or not we are processing your personal data, and, in such case, to access them. Likewise you can request for any incorrect data to be rectified or for incomplete data to be completed, as well as request removal of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you can request for the processing of your data to be limited. In such case, we will only process the affected data for the filing, processing or response to complaints, or with a view to protect the rights of other parties. In certain situations and for reasons related to your specific circumstances, you may object to the processing of your data. In this case, we will stop processing the data unless legitimate compelling grounds are given that prevail over your interests, rights and liberties, or in order to file, process or respond to complaints. Additionally, under certain circumstances, you may ask for your data to be transferred to another responsible party for its processing.

You can revoke the consent you have granted for certain purposes without this affecting the lawfulness of the processing undertaken before consent was withdrawn, and file a claim before the Agencia Española de Protección de Datos [Spanish Data Protection Agency].

In order to exercise your rights, you must send the person responsible for processing data a request together with a copy of your national identification document or another valid form of identification by post or by email to the addresses given in the “Who is responsible for processing your data?” section.

For further information about your rights and how to exercise them visit the Agencia Española de Protección de Datos website at