1. Personal data collected
When you make a reservation through our website, we collect the following personal data in order to correctly manage your request and comply with the legal obligations established:
- First and last name.
- Date of birth.
- Nationality.
- Identity document number (ID card or passport).
- Type of document.
- Date of issue (if applicable).
- Contact telephone number.
- E-mail address.
- Date of check-in and check-out.
- Apartment booked.
- Number of guests.
In addition, a digital copy of each guest’s identity document will be requested, in accordance with the requirements of the national regulations on travelers’ registration.
2. Purpose of treatment
The processing of your data is based on the following legal bases:
- Manage and formalize the reservation requested by the user.
- Verify the identity of guests and comply with the obligation to communicate the data to the forces and law enforcement agencies.
- Provide useful information related to the reserved accommodation.
- Facilitate communication with the guest before, during and after their stay.
- Maintain a history of preferences for future reservations.
3. Legal basis for processing
The processing of your data is based on the following legal bases:
- Execution of a contract: The management of the reservation implies the formalization of a tourist accommodation contract.
- Fulfillment of a legal obligation: The Law obliges tourist service providers to register and notify guests’ data.
- Legitimate interest: To ensure security, improve the service provided and personalize attention in future stays.
4. Recipient of the data
Your personal data may be communicated only to:
- State security forces and corps, in accordance with the regulations in force regarding citizen security and control of travelers.
- Electronic payment entities (e.g. Stripe), for the sole purpose of processing transactions securely, in compliance with PCI-DSS and other applicable regulations.
No data will be disclosed to third parties for commercial or advertising purposes.
5. Data retention
The data collected will be retained for the following periods:
- Guest identity data: up to 1 year from the date of departure from the accommodation.
- Contact data and preferences of the reservation holder: up to 4 years, based on the legitimate interest of offering future personalized reservations, facilitating management and responding to incidents.
6. User’s rights
As the owner of the personal data, the user may exercise the following rights:
- Access: Know what data we are processing.
- Rectification: Request the correction of incorrect data.
- Deletion: Request the deletion of data when possible.
- Opposition: Refuse processing in certain circumstances.
- Limitation: Temporarily restrict the use of your data in certain cases.
To exercise these rights, you can send us a written request to info@poloapartments.com. It will be necessary to attach a copy of your identity document to verify your identity.
7. Safety measures
Personal information is transmitted and stored using secure encryption techniques (SSL and AES), in compliance with European regulations RGPD and LOPDGDD. All data are treated under measures that guarantee their integrity, confidentiality and availability.
8. Policy Update
Nos reservamos el derecho de modificar esta política para adaptarla a novedades legislativas o cambios en nuestros procedimientos. Las actualizaciones serán publicadas en nuestro sitio web.