Privacy Policy of www.iberostartheclub.com

This privacy policy applies to the website of the Iberostar The Club affiliate program (hereinafter “Iberostar The Club” or the “Program”). Please read this policy carefully. It contains important information regarding the processing of your personal data and the rights granted to you under current regulations on the matter.

We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with any potential legislative or case law changes. If you have any doubts or require any clarification regarding our Privacy Policy or your rights, you may contact us through the channels indicated below.

You represent that the data you provide us, now or in the future, is correct and truthful, and you undertake to notify us of any modifications thereto. In the event of providing personal data of third parties, you undertake to obtain the prior consent of the affected parties and to inform them of the content of this policy.

Generally, the fields on our forms that are marked as mandatory must necessarily be completed in order to process your requests.

1. Who is the data controller for your data?
Unless otherwise indicated in this policy:

If you reside in Mexico: The data controller is Iberostar The Club Mexico, S.A. de C.V., with registered office at Carretera Chetumal Puerto Juárez Km 309, Fracción Playa Paraíso, Municipio Solidaridad, Localidad Playa del Carmen, Estado Quintana Roo, Postal Code 77710, Mexico (hereinafter “Iberostar The Club Mexico”).

For all other cases: The data controller for the data collected on the Website is the entity Iberoclub, N.V., with registered office at Damacor Office Building, 2nd Floor. Schout Bij Nacht Doormanweg, nº 40. Willemstad, Curaçao CP. 4368 (hereinafter “Iberostar The Club”).

For any questions regarding the processing of your data or the exercise of your rights, you may consult the section “What are your rights?” within this same privacy policy.

2. For what purposes will we process your data and on what legal basis?
a) Responding to requests and inquiries

To resolve inquiries submitted to Iberostar The Club, identification and contact data will be processed; in all cases, these will be the data you provide through the various collection methods. When such requests and inquiries relate to a product or service offered by one of the Club's Partners, said requests will be communicated to them for their attention. This may involve the transfer of your data to territories that do not provide a level of personal data protection comparable to your country of residence, when such recipients are located outside of it. All such processing is necessary for the performance of the contract, the application of pre-contractual measures at your own request, or for the defense against customer claims, as applicable.

b) Program Management

For the management of your participation in the Program and the maintenance of the contractual relationship, we need to process identification and contact data, data on personal characteristics such as language or nationality, membership data, and financial and transaction data. This is all done to offer you products and services of interest to you.

The data processed will come from your interaction with Iberostar The Club through contracting, reservations made, or through the forms and actions you perform on our contact media, such as the Website, customer service centers, etc. If you are a beneficiary, your data will come from the Program holder.

All such processing, communications and, where applicable, international transfers of this data are necessary for the execution of the reservation, the provision of the requested services, or for the application of pre-contractual measures at your own request, as applicable.

The data provided during the reservation processes will be processed by Iberoclub N.V. or Iberostar The Club México, S.A. de C.V., as applicable, for the processing and commercial follow-up of your requests, the provision of the services requested, the administration and management of the security of the online platforms, and the fulfillment of their legal obligations. Such data will also be processed for statistical and quality improvement purposes. To follow up on your requests, our agents may contact you by email or telephone—for example, to resolve potential issues in the reservation process.

When you request that we contract a product or service offered by our Partners, we will communicate your data to them so they can apply the rates and advantages related to the Program. This may involve the transfer of your data to territories that do not provide a level of personal data protection comparable to your country of residence, when such recipients are located outside of it.

Identification, financial, and transaction data for goods and services generated will be processed for accounting and administrative management purposes, and for the fulfillment of the controller's legal obligations regarding accounting and tax matters.

The owner of the Website may, at any time and without prior notice, modify the presentation and configuration of the Website, as well as these general conditions, and introduce new conditions of use. Such modifications will be published on the Website so that the user may be aware of them before using it. Use of the Website once the general conditions have been modified shall signify the user's acceptance of the modified general conditions.

c) Profile Administration

We will process the data provided in the contract, on the web forms, and those you register in your profile to manage your account and contact you regarding operational issues arising from your reservations. This processing is necessary for the provision of the requested services, the performance of the contract, or for the application of pre-contractual measures at your own request. For the inclusion of beneficiaries, you undertake to obtain the prior consent of the affected parties and to inform them of the content of this policy.

Through your profile, you may access and update your personal information, as well as modify your preferences regarding the processing of your data for commercial purposes. In your account, you may register or access the following information:

Identification data: such as first and last names.
Contact data: such as email, telephone numbers, or contact addresses. We use this data to send you the necessary documentation for the products and services reserved or to contact you to resolve incidents or cancellations regarding your reservations. We may also contact you, if you have so authorized, to send you commercial offers (more info on the processing of your data for commercial purposes below in the section “Advertising purposes and commercial profiles”).
Data on personal characteristics: such as date of birth, language, or nationality.
My membership: including data such as accumulated Iberocréditos, your membership level, or the date of enrollment in the Program.
My travel preferences: such as room type, schedule, and similar preferences.
Beneficiaries: including identification, kinship, and contact information of the list of the Program holder’s beneficiaries.
My reservations: including information such as stay dates, reservation date, reservation code, services included in the trip, price, and the customer identification data therein.

d) Processing of browsing data

Iberostar The Club compiles statistics from browsing data on the Website (IP address, pages visited, or actions performed) to measure and analyze the use our customers and users make of these digital media and to measure the performance of our internet advertising campaigns. For this purpose, cookies and similar technologies are used. You can obtain more information about the cookies we use and how to disable them in our Cookie Policy.

This processing is based on the consent requested from you for the installation of analytical cookies and our legitimate interest in evaluating and managing the quality of our services and products.

How has this interest been balanced against your rights and freedoms? In balancing this interest against your rights and freedoms, it has been determined that the processing had a limited impact on the privacy of the data subjects, as it corresponded to their reasonable expectations and did not pose significant threats, as it occurred regarding aggregated data and with the subjects' own consent regarding metrics performed through the use of cookies.

e) Advertising purposes and commercial profiling

Identification and contact data, data on personal characteristics such as language or nationality, financial and transaction data, and data relating to your history of reservations and contact with the group are processed for the purpose of commercial profiling, personalization of services, and the sending of personalized commercial offers and communications.

Such data are obtained from the forms you complete and the requests you make on the Web—for example, when you register, sign up for our newsletters, or reserve a stay.

Regarding Website users who are members of the Program, if they have so consented at the time of formalizing their membership, the data provided now or in the future will be communicated to IBEROSTAR HOTELES Y APARTAMENTOS S.L., head of the Iberostar Hotels & Resorts Group, a tourism services company, with address at C/ General Riera 154, 07010, Palma de Mallorca – Spain, for incorporation into the “BRAND USER COMMERCIAL PROFILES” file for loyalty purposes, personalization of services, and to send you, including by electronic or telephone means, personalized commercial communications about tourism products and services of the companies operating under the Iberostar brand. In such case, Program members consent to the aforementioned companies contacting them for the contracting or provision of services, consenting to the international transfers of their data. This may involve the transfer of your data to territories that do not provide a level of personal data protection comparable to your country of residence, when such recipients are located outside of it.

If you are a member of the Program, you may indicate that you do not wish to receive commercial information at the time of your enrollment in the Program, by unsubscribing from the chain's distribution lists through the link provided for this purpose in our communications, or by sending an email to: lopd@iberostar.com.

Data processed for advertising purposes will be kept as long as the data subject does not request its erasure, or it is no longer necessary to fulfill the purpose for which it was collected.

This processing is based on the consent requested from you; the withdrawal of such consent shall not condition the provision of services contracted prior to the withdrawal of consent.

3. How long do we keep your data?
Without prejudice to the specific retention periods indicated in the previous sections of this policy, generally, data obtained on the Website or through any communication channel with Iberostar The Club will be kept for the duration of your relationship and, in any case, for the periods provided for in applicable legal provisions and for the time necessary to address potential liabilities arising from the processing. Your data will be canceled when they are no longer necessary or relevant for the purposes for which they were collected.

4. To whom may we communicate your data?
Your personal data will only be communicated to companies with which you have entered into a service provision contract, for the actions necessary to perform the service—for example, for payment processing—or to carry out activities for the benefit of the customer. They will also be communicated to third parties by legal obligation—for example, for the fulfillment of legal obligations in accounting or tax matters. In no other case will we commercialize your personal data to a third party without obtaining prior consent from you.

5. What are your general rights?
You have the right to obtain confirmation as to whether or not we are processing your personal data and, if so, to access it. You may also request that your data be rectified when it is inaccurate or that incomplete data be completed, as well as request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, you may request the restriction of the processing of your data. In such case, we will only process the affected data for the establishment, exercise, or defense of legal claims or with a view to protecting the rights of other persons. Under certain conditions and for reasons related to your particular situation, you may also object to the processing of your data. In this case, we will stop processing the data except for compelling legitimate grounds that prevail over your interests or rights and freedoms, or for the establishment, exercise, or defense of legal claims. Likewise, and under certain conditions, you may request the portability of your data so that they are transmitted to another data controller.

You may revoke the consent you may have given for certain purposes without affecting the lawfulness of the processing based on the consent prior to its withdrawal, and lodge a complaint with a data protection authority. You can consult the list and contact details of European data protection agencies on the European Commission website at: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080

The area responsible for the processing of Personal Data obtained by Iberoclub N.V. is the Administration Area, whose public service hours are from 09:00 to 14:00 and from 16:00 to 19:00 (United States time), Monday to Friday, at the email address [***]. A “Call Center” has been set up to directly handle any of your requests or inquiries (direct telephone number: 1-855-423-2582).

If you reside in Mexico
If you are a resident of Mexico, you may direct your inquiries or complaints to Iberostar The Club Mexico, whose public service hours are from 09:00 to 14:00 and from 16:00 to 19:00 (United States time), Monday to Friday, at the designated email address. A “Call Center” has been set up to directly handle any of your requests or inquiries (direct telephone number: 8002639604).

If your exercise of ARCO rights (Access, Rectification, Cancellation, and Opposition) is directed to Iberostar The Club México and you do not receive a response within 20 days, you may then initiate the ARCO rights protection procedure before the Federal Institute for Access to Information and Data Protection (“IFAI”) or the institute, department, or entity responsible for granting access to information and data protection.

Last modified: 26/06/2024