1. Initial information
2. ¿Who processes your data?
The user is informed that the following group of companies come under the Ona Vacation Club brand, with CLUBOTEL LA DORADA, S.L being the main establishment where the data are stored and managed, which has the following identification data:
Company Name: CLUBOTEL LA DORADA, SL
Tax ID (NIF): B61502035
Address: C/ Calabria, 129, entresuelo, 08015-Barcelona
Email: gdpr@onahotels.com
Likewise, the data of the data subjects will be processed by the company that owns the hotel where they are staying and for which Ona Vacation Club acts as the data processor. In this regard, you can find the details of the Data Controller, depending on the accommodation, by clicking here.
Data Protection Officer:
Company Name: TARINAS VILADRICH ADVOCATS I PROCURADORS, S.L.P.
Contact: gdpr@onahotels.com
3. Data processing in Europe
In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, as well as with Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, we provide you with information on the processing of your data through this Privacy Policy.
4. What data do we collect, for what purposes, and for how long?
5. Club Registration / Ona Traveler
The user may register as a club member in order to be able to receive informative communications from Ona Vacation Club and enjoy the advantages of being part of the Club, with the legal basis of the processing being express consent in accordance with Art. 6.1.a) of the GDPR.
The data will be kept for the duration of the subscription to the Newsletter or until the exercise of the right to objection or erasure of the data by the data subject. In any case, they may be kept in order to determine any possible liabilities that may arise from this purpose.
Likewise, the user is informed that the Ona Vacation Club group of companies will act as Joint Data Controllers.
The user may unsubscribe as a member of the club, as well as revoke consent to receive commercial communications by following the steps listed in the section “What rights do you have as a user and how can you exercise them?”.
6. To whom will the data be disclosed?
The data will be disclosed to CLUBOTEL LA DORADA, S.L., the establishment where the data are stored and managed, with the legal basis being the legitimate interest in transmitting personal data within the business group for internal administrative purposes.
The personal data of guests relating to the identity document number, type of document and date of issue, name and surname, sex, date of birth and country of nationality, date of entry and signature of the traveller will be disclosed to the State Security Forces and Corps, with the legal basis for this disclosure being a legal obligation.
The personal data of guests relating to the identity document number, type of document and date of issue, name and surname, sex, date of birth and country of nationality, date of entry and signature of the traveller will be disclosed to the State Security Forces and Corps, with the legal basis for this disclosure being a legal obligation.
They will not be disclosed to other third parties except where required by law or with the express consent of the data subject.
7. Ona Vacation Club as manager
CLUBOTEL LA DORADA, S.L. acquires the status of Data Processor for those hotels where it manages the accommodation. In this regard, the user can access information on the Data Controllers depending on their accommodation by clicking here.
8. Are international transfers of data carried out?
9. What rights do you have as a user and how can you exercise them?
As a user, you can ask us to explain what we do with your personal data.
You can also ask us for information about the purpose of the processing of your personal data, how long we keep your data for, what rights you have as a user, whether your data has been transferred to a third country or an international organisation, the existence of automated decisions or whether profiling is carried out on the website, among other things.
- You dispute the accuracy of your personal data for a period of time that allows us to verify its accuracy.
- If the processing is unlawful and you object to the erasure of your personal data and, instead of erasure, you request that their use be restricted.
- If we no longer need your data for the purposes of processing, but you need it to make, exercise or defend claims.
If you have exercised your right to rectification, erasure, or restriction, we are obliged to inform all recipients to whom your personal data have been disclosed of said rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort.
As a User, you have the right to be informed by the data controller about who these recipients are.
As a user, you have the right to object at any time to the use of the personal data made available to us for specific personal reasons.
We will stop processing your personal data unless we have compelling legitimate grounds for using them, if these grounds prevail over your interests, rights and freedoms or if the processing is for the purpose of making, exercising or defending claims.
The user may request the exercise of their rights by sending an email to gdpr@onahotels.com
Likewise, in order to facilitate the exercise of the rights established in Articles 15 to 22 of the General Data Protection Regulation (EU) 2016/679 and Articles 12 to 18 of Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights, and without their use being compulsory, a number of application forms for the different rights are made available to data subjects.
10. Do I have to provide all the information requested in the data collection forms?
For the forms on the Website, you must complete those marked as “required”. Failure to complete the required personal data fields or doing so partially may mean that Ona Vacation Club will not be able to respond to your requests and, consequently, Ona Vacation Club will be held harmless from any liability if the services requested are not provided or provided only partially.
The personal data provided by the User to Ona Vacation Club must be current to ensure that the information in the records is up to date and error-free. The User shall be responsible for the accuracy of the data provided
11. What security measures do you have in place?
We inform you that we take care of and use your personal data in accordance with the current regulations on data protection and information society services.
We have implemented the necessary technical and organisational security measures to guarantee the security of the User’s personal data and prevent its alteration, loss, processing and/or unauthorised access in accordance with the state of the art, the nature of the data stored, and the risks to which they are exposed, whether from human action or the physical or natural environment, in accordance with the provisions of current legislation.
