EnglishSpanish

 

Privacy Notice

Basic Information on Data Protection
Data controller	Galaxia Estelar, S.L.
Purpose	To provide the service of accessing, using and enjoying the Website; to manage the provision of the services; and, subject to your consent, to send you personalized   commercial communications based on your interests profile.
Legal grounds	Performance of the contract  Compliance with legal obligations  Legitimate interest Consent
Recipients	Other entities of our corporate group listed in the additional information.
Rights	Access, rectify and delete data, as well as other rights, as explained in additional information.
Additional information	Additional and detailed information on Data Protection can be found in our Privacy Notice.

 

Privacy Policy

I. – Who processes your personal data?

In your relationship with us, we will process your personal data in our capacity as data controllers. In case you need it, the details of the person responsible for the processing of your data are as follows:

• Galaxia Estelar, S.L. with registered office at Calle Canarias 35, Edificio CETIS, torre 4, piso 4, 07800, Eivissa (Illes Balears), España and with the following e-mail address lopd@liogroup.com.

We are part of a corporate group, consisting of other companies. As indicated in the following sections, some processing activities require these entities to engage in processing or to perform certain functions from time to time. You can obtain information about the entities that constitute our corporate group by clicking on the following link.

We have appointed a data protection officer (“DPO”). If you want to contact our DPO directly, you may use the following contact details:

Dirección: Calle Canarias 35, Edificio CETIS, torre 4, piso 4, 07800, Eivissa (Illes Balears), España.

 

Email: dpo@liogroup.com

 

II. – What kind of personal data do we process?

Subject to the specific services that you decide to use, to your choices and, where applicable, your device settings (regarding, in particular, to cookies and other trackers), the personal data about you that we collect and process may include: your first name and last name, date of birth, email address, phone number, postal address and telephone number, photographs of you (subject to your prior explicit consent), your bank account or credit card details, details of your previous bookings and your table, accommodation or service preferences; as well as subject to your consent your lifestyle interests, your hobbies, your profession/sector.

While browsing through our Website or hiring our services, we may request you to identify yourself by creating an user account or request you further information about. In such case, personal data that is strictly necessary for the provision of the particular service will be marked as such. Without such data, we may not be able to render our services properly.

Please note that when you book a reservation through the services of a third-party, we may obtain the data detailed above directly from them (e.g. booking websites, travel agencies, concierges, etc.). Their processing of your personal data would be explained in detail in their corresponding privacy notices.

III. – For what purposes do we process your personal data?

We will collect and process your personal data under the legal bases mentioned below to fulfill the following purposes:

• Based on the performance of the relevant contracts, in order to provide you with our services; in particular:
  • to ensure your access, use and enjoyment of the functions of  our websites and applications, subject to the applicable terms of use.
     
  • to respond to and manage requests for booking our services, including the management of the payment, subject to the terms and conditions of our services.
  • to manage the provision of the service you contracted, as well as any additional service booked by you or on your behalf, including the management of the payment, subject to the terms and conditions of our services.
     
• Based on our compliance with applicable legal obligations, including, among others:
  • in case you stay in one of our hotels or other accommodation services, to log information about your identity and your stay in our facilities into our record of travelers, as required by applicable regulations.
  • to comply with regulations preventing money laundering and the financing of illegal activities.
  • to comply with applicable tax regulations.
• Based on our legitimate interests (more information on the weighing of interests is available upon request), in particular:
  • to answer questions you may send via online forms or to meet any other requests from your side, following our legitimate interest in providing a high-quality customer care.
  • to ensure the security of your online transactions, to prevent fraud and payment defaults, following our legitimate interest in fighting and preventing fraud and payment defaults.
  • to share your personal data with other entities within our group of companies, to attend your request and provide your services, following our legitimate interest in carrying out a uniform and comprehensive administration of the business activity of our group of companies,. 
• Based on your prior and explicit consent, in particular:
  • to create a profile based on your booking and purchase history and on the preferences you may have communicated to us when enjoying our services in the past, in order to adjust our services to your preferences and/or to offer more personalized advertising.
  • for the entities within our group of companies to send communications to you commercial communications based on your profile via email, phone, SMS, push notifications and traditional mail; with information about offers, news and events and the relevant entities our group of companies.
  • to disclose your personal data to social media partners like Facebook, Google or Amazon to create a profile based on your preferences, including the combination of external sources, in order to personalize the user's experience and/or to offer you more personalized advertising. This customization can be done through technical mechanisms such as cookies, more information can be found in our cookie notice available on our website.

 

V. – Do we share your personal data?

In order to fulfill the purposes described above, we may need to disclose your personal data to entities within our group of companies. This is because certain business and organizational functions are centralized in certain entities of our group to ensure optimal performance. If you wish, you can find more information about the entities that make up our group of companies at the link indicated at the beginning of this Privacy Notice.

On certain occasions, it may be necessary for us to disclose your personal data to third parties that support us in the provision of services we offer you, such as financial service providers, technology and security service providers, marketing and advertising related service providers. They will process your personal data as data processors, following our instructions, under specific contractual terms and subject to the applicable data protection regulations.

VI. – Do we transfer your personal data abroad?

The recipients of your personal data may be located abroad, including outside the European Economic Area. Any transfer of your personal data outside the European Economic Area will only take place under the execution of the appropriate safeguards, in accordance with applicable data protection laws and regulations.  These guarantees will include, in most situations, the subscription of standard or standard contractual clauses approved by the European Commission.

For more information on how your personal data will be disclosed to recipients abroad, please contact us through the contact information indicated above. You also have the right to contact us for more information about the safeguards implemented to guarantee adequate protection of your personal data when it is transferred as described above.

VII. – What are your rights when you provide us with your data?

Pursuant to the provisions of the applicable data protection laws and regulations, you may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as your right to withdraw your consent to the processing of your personal data. 

You may exercise your rights by simply contacting us through the contact information indicated above. Please note that in case we have not enough information to identify you and proceed with your request, we may have to ask you for further information.

You have also the right to file a complaint with the relevant data protection authority in case you deem it necessary.

VII. – For how long will we process your personal data?

We will store your data as long as necessary to provide you with the services requested. When your personal data is no longer necessary to comply with contractual or statutory obligations, it will be blocked or archived in our systems only for the period necessary for the establishment, exercise and defense of legal claims until the expiry of applicable statutes of limitations.  Please note that we may retain your personal data, among other purposes, for tax, audit, or legal compliance for a legally prescribed time period thereafter, or if we need it to preserve evidence within statutes of limitation.

Once this period has elapsed, the data will be either erased or anonymized.

VIII. – Considerations regarding personal data provided by third parties

If in the course of your interaction with us you disclose data of third parties to us (for example to arrange a reservation for a friend or other third party), you confirm that you have informed them of the purpose and the way in which we will process their personal data. You also acknowledge and represent that the personal data you provide us with is accurate and updated to the moment of their provision, and commit to notify us of any change to these personal data.

X. –Changes to this Privacy Notice

This Privacy Notice may be updated by us from time to time. In such event, we will post the updated version of the text on the corresponding Website. However, you will be notified of any material changes to this Privacy Notice. We encourage you to periodically review this Privacy Notice to stay informed about our privacy practices.

 

Specific information on video-surveillance (CCTV)

In addition to the general information stated above, this section includes specific information about how we use our video-surveillance systems (CCTV).

We process personal data that has been collected through video surveillance or CCTV. Only images are captured by the CCTV are processed (i.e., no audio is processed). The purpose of this data processing is to ensure the safety of people, property and facilities and investigate any suspected illegal activity or other wrongdoing. This data processing based on public interests we seek to achieve, related with ensuring security and safety and in line with applicable laws and regulations.

The recordings will be kept for the maximum legal period of one (1) month. After this period, the images will be deleted.

As a general rule, we do not share the images with third parties; except with other entities of our corporate group that may be involved in security activities. However, in some cases we may be under a legal obligation to share certain images with parties such as law enforcement, courts and lawyers.

As stated above, you can exercise your data protection rights at any time via the contact details indicated at the beginning of this Privacy Notice or file a complaint with the relevant data protection authority.