Privacy Policy of www.iberostartheclub.com
This privacy policy applies to the website of the Iberostar The Club membership program (hereinafter “Iberostar The Club” or the “Program”). Please read this policy carefully. In it, you will find important information regarding the processing of your personal data and the rights granted to you by current applicable regulations.
We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with any legislative or jurisprudential changes. If you have any questions or need clarification regarding our Privacy Policy or your rights, you can contact us through the channels indicated below.
You declare that the data you provide us, now or in the future, is accurate and truthful, and you undertake to notify us of any changes to it. In the event of providing personal data of third parties, you undertake to obtain the prior consent of those affected and to inform them about the content of this policy.
In general, fields marked as mandatory in our forms must necessarily be completed in order to process your requests.
1. Who is responsible for processing your data?
Unless otherwise indicated in this policy:
If you reside in Mexico, the data controller is Iberostar The Club Mexico, S.A. de C.V., located at Carretera Chetumal Puerto Juárez Km 309, Fracción Playa Paraíso, Municipio Solidaridad, Localidad Playa del Carmen, Estado Quintana Roo, Postal Code 77710, Mexico, hereinafter “Iberostar The Club Mexico”.
If you reside in Brazil, the data controller is The Club Brasil Clube de Ferias LTDA., located at Rodovia BA0099-KM 56, Iberostate, Edificio The Club, Praia do Forte, Cidade de Mata de Sao Joao, Estado de Bahia, Brazil, CEP: 48.287-000, hereinafter “Iberostar The Club Brasil”.
For all other cases, the controller of the data collected on the Website is the entity Iberoclub, N.V., located at Damacor Office Building, 2nd Floor. Schout Bij Nacht Doormanweg, nº 40. Willemstad, Curaçao CP. 4368 (hereinafter “Iberostar The Club”).
For any questions regarding the processing of your data or the exercise of your rights, you can consult the section "What are your rights?" in this same privacy policy.
2. For what purposes will we process your data and on what legal basis?
a) Customer service for requests and inquiries
To resolve inquiries addressed to Iberostar The Club, identification and contact data will be processed, and in all cases will be those provided by you through the various collection methods. When such requests and inquiries relate to a product or service offered by one of the Club's Partners, such requests will be communicated to them for their attention. This may involve the transfer of your data to territories that do not offer a level of personal data protection comparable to your country of residence, when such recipients are located outside it. All these processing activities are necessary for the execution of the contract, the application of pre-contractual measures at your request, or for defense against customer claims, as applicable.
b) Program Management
To manage your participation in the Program and maintain the contractual relationship, we need to process identification, contact, personal characteristics data such as language or nationality, membership data, economic data, and transaction data. All of this to offer you products and services of interest to you.
The data processed will come from your interaction with Iberostar The Club, through contracting, bookings made, or through the forms and actions you perform through our contact channels such as the Website, customer service centers, etc. If you are a beneficiary, your data will come from the Program account holder.
All these processing activities, communications, and, where applicable, international transfers of this data are necessary for the execution of the booking, the provision of the requested services, or the application of pre-contractual measures at your request, as applicable.
The data provided during booking processes will be processed by Iberoclub N.V., Iberostar The Club México, S.A. de C.V., or The Club Brasil Clube de Ferias, LTDA., as applicable, for the processing and commercial follow-up of your requests, the provision of requested services, administration and security management of online platforms, and compliance with legal obligations. Such data will also be processed for statistical and quality improvement purposes. To follow up on your requests, our agents may contact you by email or telephone, for example, to resolve potential issues in the booking process.
When you request contracting a product or service offered by our Partners, we will communicate your data to them so they can apply the rates and benefits related to the Program. This may involve the transfer of your data to territories that do not offer a level of personal data protection comparable to your country of residence, when such recipients are located outside it.
Identification, economic, and transaction data for goods and services generated will be processed for accounting and administrative management purposes, and to comply with the controller's legal obligations regarding accounting and tax matters.
The owner of the Website may, at any time and without prior notice, modify the presentation and configuration of the Website, as well as these general conditions, and introduce new terms of use. Such modifications will be published on the Website so that the user can review them prior to use. Using the Website after the general conditions have been modified implies the user's acceptance of the modified general conditions.
c) Profile Management
We will process the data provided in the contract, website forms, and what you register in your profile to manage your account and contact you regarding operational matters arising from your bookings. These processing activities are necessary for the provision of requested services, execution of the contract, or application of pre-contractual measures at your request. For the inclusion of beneficiaries, you undertake to obtain the prior consent of the affected individuals and inform them of the contents of this policy.
Through your profile, you can access and update your personal information, as well as modify your preferences regarding the processing of your data for commercial purposes. In your account, you can register or access the following information:
- Identification data such as first and last name.
- Contact data such as email, telephone numbers, or contact addresses. We use this data to send you necessary documentation for booked products and services or contact you to resolve issues or cancellations in your bookings. We may also contact you, if authorized, to send commercial offers (+ info on the processing of your data for commercial purposes below in the section “Advertising purposes and commercial profiling”).
- Personal characteristics data such as date of birth, language, or nationality.
- My membership, with data such as accumulated Iberocredits, your membership level, or registration date in the Program.
- My travel preferences, such as room type, schedule, and similar.
- Beneficiaries, with identification, relationship, and contact information from the list of beneficiary individuals of the Program holder.
- My bookings, which include information such as stay dates, booking date, booking code, services included in the trip, price, and customer identification data therein.
d) Processing of browsing data
Iberostar The Club compiles statistics based on browsing data on the Website (IP address, pages visited, or actions taken) to measure and analyze the usage made by our customers and users of these digital media and measure the performance of our online advertising campaigns. Cookies and similar technologies are used for this purpose. You can obtain more information about the cookies we use and how to disable them in our Cookie Policy.
This processing is based on the consent requested from you for the installation of analytical cookies and our legitimate interest in assessing and managing the quality of our services and products.
How has this interest been balanced against your rights and freedoms?
In balancing this interest against your rights and freedoms, it has been determined that the processing had a limited impact on data subjects' privacy, as it aligned with their reasonable expectations and posed no significant threats since it was conducted on aggregated data and with the data subjects' own consent regarding metrics performed via cookie usage.
e) Advertising purposes and commercial profiling
Identification, contact, personal characteristics (such as language or nationality), economic, transaction, and booking history/group contact data are processed for commercial profiling, service personalization, and sending personalized commercial offers and communications.
Such data is obtained from forms you complete and requests you make on the Website, for example when registering, subscribing to newsletters, or booking a stay.
Regarding Website users who are members of the Program, if consented at the time of formalizing membership, data provided now or in the future will be communicated to IBEROSTAR HOTELES Y APARTAMENTOS S.L., parent company of Grupo Iberostar Hotels & Resorts, tourism services company, located at C/ General Riera 154, 07010, Palma de Mallorca – Spain, for inclusion in the file "BRAND USER COMMERCIAL PROFILES" for loyalty, service personalization, and sending (including electronic or telephone means) personalized commercial communications about tourism products/services of companies operating under the Iberostar brand. In such case, Program members consent to these companies contacting them for contracting or providing services, consenting to international data transfers. This may involve transferring data to territories without comparable protection levels if recipients are outside your country.
If you are a Program member, you can indicate that you do not wish to receive commercial information when registering for the Program, unsubscribing from mailing lists via the link provided in communications, or emailing: lopd@iberostar.com.
Data processed for advertising purposes will be retained until deletion is requested by the data subject, or is no longer necessary for the purpose collected.
These processing activities are based on consent requested, without withdrawal of consent conditioning the provision of services contracted prior to withdrawal.
3. How long do we retain your data?
Without prejudice to specific retention periods indicated in previous sections, generally, data obtained on the Website or through any communication channel with Iberostar The Club will be retained for the duration of the relationship and in any case during periods provided by applicable legal provisions and necessary time to address potential liabilities arising from processing. Your data will be erased when no longer necessary or relevant for the purposes for which it was collected.
4. To whom can we communicate your data?
Your personal data will only be communicated to companies with which you have a service contract for actions necessary to perform the service (e.g., payment processing or activities benefiting the customer). Data will also be communicated to third parties due to legal obligations, such as compliance with legal tax or accounting obligations. In no other case will we market your personal data to third parties without prior consent.
5. What are your general rights?
You have the right to obtain confirmation as to whether or not we are processing your personal data and, if so, access it. You may also request rectification of inaccurate data or completion of incomplete data, as well as request erasure when, among other reasons, data is no longer necessary for the purposes collected.
Under certain circumstances, you may request restriction of processing. In such case, we will only process affected data for establishment, exercise, or defense of legal claims or protecting rights of others. Under certain conditions and for reasons related to your particular situation, you may object to processing. We will stop processing except for compelling legitimate grounds overriding interests, rights, freedoms, or for legal claims. Under certain conditions, you may request data portability to another controller.
You may revoke consent granted for specific purposes, without affecting lawfulness of processing based on consent prior to withdrawal, and lodge a complaint with College Bescherming Persoonsgegevens Curaçao (Curaçao Data Protection Authority). You can contact them at info@cbpcuracao.org .
The department responsible for processing Personal Data obtained by Iberoclub N.V. is the Administration Department, public hours 09:00-14:00 and 16:00-19:00 (US Eastern/Standard Time) Monday to Friday, email memberservices@iberostartheclub.com. A Call Center is enabled for direct requests/inquiries (direct phone: 1-855-423-2582).
If you reside in Mexico
If you reside in Mexico, you can submit inquiries or complaints to Iberostar The Club Mexico, public hours 09:00-14:00 and 16:00-19:00 (US Time) Monday to Friday, email memberservices@iberostartheclub.com. A Call Center is enabled (direct line: 8002639604).
If your ARCO rights exercise is directed to Iberostar The Club México and you do not receive a response within 20 days, you can initiate the ARCO protection procedure before the Federal Institute for Access to Information and Data Protection ("IFAI") or equivalent entity.
If you reside in Brazil
If you reside in Brazil, you can submit inquiries or complaints to The Club Brasil Clube de Ferias, LTDA., public hours 09:00-14:00 and 16:00-19:00 (US Time) Monday to Friday, email memberservices@iberostartheclub.com. A Call Center is enabled (direct line: 8002639604).
If your ARCO rights exercise is directed to The Club Brasil Clube de Ferias, LTDA. and you do not receive a response within 20 days, you can initiate the ARCO protection procedure before the National Data Protection Authority (ANPD) of Brazil.
Last modification: 20th July 2026