Privacy Policy

1. Data Controller

Data Controller: Gat Accommodation, S.L.
Tax ID: B-62914692
Address: C/ Aribau 230-240, 5th floor, Local E-F, 08006 Barcelona, Spain
Email: info@gatrooms.com
Telephone: +34 93 221 04 56

If any of the group’s establishments or companies act as independent data controllers for specific processing activities, this will be expressly indicated in the relevant forms, booking processes or specific clauses.

2. Purpose of this Policy

This Privacy Policy provides information about the processing of personal data collected by Gat Rooms through its website, contact forms, commercial requests, booking processes, electronic communications and any other digital interaction with users, customers, collaborators or candidates.

3. What Personal Data We Process

Depending on the channel used and the relationship with the data subject, Gat Rooms may process the following categories of personal data:

• identification data, such as first name and surname;
• contact data, such as email address, telephone number and country of residence;
• data related to requests, bookings or stays, such as hotel of interest, dates, number of guests, preferences and comments;
• billing and payment data, when necessary;
• data contained in communications sent by the user;
• professional data in the event a curriculum vitae is submitted;
• technical and browsing data, including IP address, device, browser, language, online identifiers and data derived from the use of cookies or similar technologies.

4. How We Obtain the Data

Personal data may be obtained:

• directly from the data subject, through website forms, emails, calls or booking processes;
• through booking platforms, booking engines, agencies or intermediaries;
• through cookies and technological tools, under the terms described in the Cookie Policy.

5. Purposes of Processing and Legal Bases

a) To handle enquiries, requests and communications

We process data in order to manage requests for information, answer questions, respond to contact forms and maintain communications related to our services.

Legal basis: taking steps at the request of the data subject prior to entering into a contract, or legitimate interest in properly handling incoming communications.

b) To manage bookings and provide hotel services

We process data in order to manage bookings, modifications, cancellations, payments, invoicing, customer service and operational matters related to the stay.

Legal basis: performance of a contract or pre-contractual measures.

c) To comply with legal obligations

We process data when necessary to comply with legal, accounting, tax, security, fraud prevention and any other obligations arising from applicable law in the hotel sector and business activity.

Legal basis: compliance with a legal obligation.

d) To send commercial communications

We process data to send information about promotions, news, campaigns, experiences, services or establishments of Gat Rooms by electronic or non-electronic means.

Legal basis: consent of the data subject or, where legally permitted, legitimate interest arising from a prior relationship and within the limits established by applicable law. The user may object or withdraw consent at any time.

e) To manage applications and recruitment processes

If a curriculum vitae is submitted, we will process the data in order to assess the application for current or future recruitment processes within the group.

Legal basis: pre-contractual measures at the request of the data subject and, where appropriate, consent for storage during an additional reasonable period.

f) To improve the website, security and analytics

We process certain technical data to ensure website security, prevent misuse, compile aggregated statistics and improve the browsing experience.

Legal basis: legitimate interest for security and proper functioning; consent where analytical, advertising or personalisation cookies that are not strictly necessary are used.

6. Mandatory or Optional Nature of the Data

Forms will indicate which data are necessary to process the request or provide the service. Failure to provide the mandatory data may make it impossible to manage the enquiry, booking, application or requested service.

The data subject guarantees that the data provided are true, accurate and up to date, and undertakes to notify us of any changes.

7. Data Retention

Personal data will only be kept for as long as necessary to fulfil the purpose for which they were collected and, afterwards, for the legal retention or limitation periods applicable.

As a general rule:

• contact or enquiry data will be kept for the time necessary to deal with the request and, afterwards, for the applicable legal periods;
• data related to bookings, invoicing and the contractual relationship will be kept for the duration of the contractual relationship and for the legal tax, accounting and liability periods;
• data processed for commercial purposes will be kept until the data subject withdraws consent or objects to the processing;
• CV data will be kept for the time necessary for ongoing recruitment processes and, where appropriate, for the additional period informed to the candidate;
• data obtained through cookies will be kept in accordance with the Cookie Policy.

8. Recipients of the Data

Data may be disclosed or made accessible to:

• technology, hosting, website maintenance, emailing, CRM, PMS, booking engine, analytics and support providers;
• financial institutions and payment gateways;
• companies within the group, when necessary for administrative, commercial or operational management;
• public administrations, authorities, courts and tribunals, where there is a legal obligation;
• third-party collaborators necessary for the proper provision of the contracted service.

Where such third parties act as data processors, Gat Rooms will enter into the legally required agreements with them.

9. International Transfers of Data

If certain technology providers are located outside the European Economic Area or involve international access to data, Gat Rooms will implement the appropriate safeguards required by the GDPR, such as adequacy decisions, standard contractual clauses or other valid mechanisms under applicable law.

10. Rights of Data Subjects

Any person has the right to:

• access their personal data;
• request rectification of inaccurate data;
• request erasure of their data where appropriate;
• request restriction of processing;
• object to processing in certain cases;
• request data portability, where applicable;
• withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, the data subject may send a request to:

info@gatrooms.com
stating in the subject line: “Data Protection”

The request must sufficiently identify the applicant and specify the right they wish to exercise.

11. Right to Lodge a Complaint

The data subject has the right to lodge a complaint with the competent supervisory authority if they consider that the processing of their personal data does not comply with applicable regulations.

12. Minors

The website services are not generally aimed at minors. Where it is necessary to collect data from minors, the intervention or authorisation of those holding parental authority or guardianship will be required, in accordance with applicable law.

13. Security

Gat Rooms applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, preventing loss, alteration, unauthorised processing or improper access to personal data.

14. Cookies

This website uses its own and third-party cookies. Some are strictly necessary for the operation of the website and others require the user’s consent before being installed.

The user may accept, reject or configure cookies through the panel available when accessing the website. For more information, please consult the Cookie Policy.

15. Amendments

Gat Rooms reserves the right to modify this Privacy Policy in order to adapt it to legislative changes, case law, criteria of supervisory authorities or changes in the operation of the website and the services offered.

In the event of relevant changes, users will be informed through the usual channels.