In accordance with the principles of legality, fairness and transparency, we provide you with this Privacy Policy.
1. Who is responsible for the processing of your data?
Responsible: Hostel Experiences Europe Overhead, S.L.
NIF: B88581517
Registered office: Calle Orense 70, 6º Derecha, 28020, Madrid
E-mail: info@grouptch.com
Telephone: 915968175
Data Protection Officer: Grupo Adaptalia Legal - Formativo, S.L. dpd@grouptch.com
2. For what purposes do we process your personal data?
At Hostel Experiences Europe Overhead, S.L., depending on the category of interested party in question, we process the information you provide us with the following purposes:
Stakeholders / Purposes of processing
Potential clients / Contact details to manage the booking request, resolve any queries raised about the booking and send estimates,
Customers / Contact details for identification of the reservation and pre check in. Resolution of queries raised. Economic data to guarantee the reservation and payment of our services. Sending communications about our services and events. Sending communications on incidents.
Suppliers / Contact details for managing bookings and resolving queries.
Candidates / Manage recruitment processes.
Web users / Manage the analysis of their browsing data
3. What is the legitimacy for the processing of your data?
The legal basis for processing your personal data, depending on the category of data subject concerned, may be:
Stakeholders / Basis of legitimacy (Article 6 of the GDPR)
Potential customers / Art. 6.1.b RGPD: application, at the request of the data subject, of pre-contractual measures (estimates, order forms, service offers, etc.). Art. 6.1.f RGPD: Legitimate interest (sending requested information, answering queries, etc.). Art. 6.1.a RGPD: consent of the data subject (providing offers of our services and/or products).
Customers / Art. 6.1.b GDPR: performance of a contract to which the data subject is a party.
Providers / Art. 6.1.b GDPR: performance of a contract to which the data subject is a party.
Applicants / Art. 6.1.a RGPD: consent of the data subject himself/herself.
Web users / Art. 6.1.a RGPD: consent of the data subject.
The data we request from you are adequate, relevant and strictly necessary and you are under no obligation to provide them, but failure to provide them may affect the purpose of the service or the impossibility of providing it.
4. How long will we keep your personal data?
Your data will be kept for the minimum time necessary for the correct provision of the service offered, as well as to meet the responsibilities that may arise from the same and any other legal requirement.
5. To which recipients will your data be communicated?
Hostel Experiences Europe Overhead, S.L. will not communicate your data to any third party, unless expressly informed of this.
Additionally, we inform you that certain data, by virtue of the regulations in force or the contractual relationship with Hostel Experiences Europe Overhead, S.L. , may be communicated to:
- Banks and financial institutions for the collection and return of contracted services and/or purchased products.
- Public administrations with competence in the sectors of activity of Hostel Experiences Europe Overhead, S.L. when so established by current legislation.
- Other Group companies in order to provide our services correctly.
6. Are data transferred internationally?
Hostel Experiences Europe Overhead, S.L. may carry out international data transfers from this Website derived from the acceptance of cookies:
Google Llc and Google Ireland Limited transfer data to the United States based on the user's consent to accept cookies.
By accepting cookies from these entities, the user consents to the transfer of personal data that may be collected through the loading and reading of cookies to the United States, a country that offers a level of protection comparable to the European level, only in those US companies included in the EU-US data privacy list, in the so-called "Data Privacy Framework" (hereinafter, "DPF"). If US companies do not adhere to the DPF, it is understood that they do not guarantee a level of protection comparable to the European level.
In the event that the user does not consent to this international transfer of data to the United States, the user must reject these cookies and the functionalities or services offered with these cookies will not be provided or obtained.
You can find out about transfers to third countries, if any, made by the third parties identified in the cookies policy in their corresponding policies.
We also inform you that your personal data may be transferred to other companies of the business group located outside the European Economic Area, in order to ensure proper administrative management and correct provision of the contracted services.
Where such entities are located in countries that do not offer a level of data protection equivalent to the European level, appropriate safeguards shall be adopted to ensure the confidentiality and security of the information, such as the signature of standard contractual clauses approved by the European Commission or the application of binding corporate rules.
Additional information on international data transfers and applicable safeguards may be obtained from the customer by sending a request to dpd@grouptch.com.
7. What are your rights when you provide us with your data?
The data protection rights that data subjects may exercise, where applicable, are:
Law / What is it?
Right of access / To consult which personal data is processed by the Data Controller. For more information, click here.
Right to rectify / Modify personal data processed by the Data Controller when it is inaccurate, incorrect or incomplete. For more information, click here.
Right to object / Request that the Data Controller does not process your personal data for certain specific purposes. For more information, click here.
Right of erasure / Request that the Controller deletes your personal data. For more information, click here.
Right of restriction / Request that the Data Controller restricts the processing of your personal data. For more information, click here.
Right of portability / Where the processing is carried out by automated means, you receive your personal data in a structured, commonly used, machine-readable and interoperable format and you can transfer it to another controller. For more information, click here.
Right not to be subject to automated individual decisions / This right aims to ensure that you are not subject to a decision based solely on the processing of your data, including profiling, which produces legal effects on you or significantly affects you in a similar way. For more information, click here.
Right to lodge a complaint with the competent authority / lodge a complaint against the Data Controller with the Spanish Data Protection Agency (AEPD) if the User considers that the entity has processed his/her personal data in breach of the regulations.
The holders of the personal data obtained may exercise their personal data protection rights by sending a written communication to the registered office of Hostel Experiences Europe Overhead, S.L. at Calle Orense 70, 6º Derecha, 28020, Madrid, or to the e-mail address provided for this purpose: dpd@grouptch.com.
You can use the following templates to carry out your rights exercises:
- Access to the form for exercising the right of access.
- Access to the form for exercising the right of rectification.
- Access to the form for exercising the right of erasure.
- Access to the form for exercising the right of objection.
- Access to the form for exercising the right to limit processing.
- Access to the form to exercise the right of portability.
- Access to the model to exercise the right not to be subject to automated individual decisions.
More information on the exercise of rights can be found on the official website of the Spanish Data Protection Agency (hereinafter, "AEPD"), at the following link.
8. Can I withdraw consent?
You have the possibility and the right to withdraw consent for any specific purpose given at the time, without affecting the lawfulness of the processing based on consent prior to its withdrawal.
9. Where can I complain if I feel that my data is not being handled correctly?
If any data subject considers that their data is not being processed correctly by Hostel Experiences Europe Overhead, S.L. or that requests to exercise their rights have not been dealt with satisfactorily, they may lodge a complaint with the corresponding data protection authority, being the Spanish Data Protection Agency (AEPD) the one indicated in the national territory. More information on their website: www.aepd.es.
10. Security and updating of your personal data.
In order to safeguard the security of your personal data, we inform you that we have taken all necessary technical and organisational measures to ensure the security of the personal data provided. All of this is to prevent their alteration, loss and/or unauthorised processing or access, as required by law, although there is no such thing as absolute security.
In order for us to keep your personal data up to date, it is important that you inform us whenever there is a change in your personal data.
11. Confidentiality.
Hostel Experiences Europe Overhead, S.L. informs you that your data will be treated with the utmost care and confidentiality by all staff involved in any of the processing stages. We will not pass on or communicate your data to any third party, except in the cases provided for by law, or unless the interested party has expressly authorised us to do so.
