Privacy policy

Draft written for this website (Subibor, S.L. as controller, according to the legal notice; DPO contact dpo@grupbauza.com, which replaces the Conversia one in the old text). Pending review by the legal department before publication: confirm the controller and address, the legal bases, the retention periods, the safeguards for transfers to the US (Vercel, Resend, Cloudflare, Google, Trustindex), the destination of quote requests (groups@) and that the text is consistent with the privacy policy of protur-hotels.com, where bookings are managed.

1. Data controller

The controller of the personal data collected on this website is:

• Identity: Subibor, S.L. (Grup Bauzá), owner of Protur Naisa Palma Hotel.
• Tax ID (NIF): B79214995
• Address: Avda. Bella Vista 2, 07560 Cala Millor (Illes Balears)
• Telephone: 971 587 520
• Email and contact of the data protection officer: dpo@grupbauza.com

We process your data in accordance with Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights (LOPDGDD) and Law 34/2002 (LSSICE).

2. What data we process, for what purpose and on what legal basis

We only process the data you provide yourself when using the forms on this website or when writing to us. Required fields are marked on each form.

Contact form

• Data: name, email, phone (optional), reason for the enquiry and message.
• Purpose: to deal with your enquiry and reply to you.
• Legal basis: your consent (Art. 6.1.a of the GDPR), which you give by ticking the acceptance box and submitting the form.

Quote request for meetings and events

• Data: name, company (optional), email, phone, type of event, expected date (optional), number of people and message.
• Purpose: to prepare and send you a quote and manage your request.
• Legal basis: the application of pre-contractual measures at your request (Art. 6.1.b of the GDPR).

Bookings

Accommodation bookings are not managed on this website: when you click “Book”, the Protur Hotels booking engine opens, hosted at protur-hotels.com, where the data needed to make the booking is requested and processed. That website belongs to the same controller (Subibor, S.L.) and its processing is governed by the privacy policy of protur-hotels.com.

WhatsApp communication

The WhatsApp button opens a conversation in that app. We use the data you send us this way only to deal with your enquiry (legal basis: your consent). WhatsApp also processes your data as a controller under its own terms.

Analytics and advertising

Only if you accept it in the cookie banner, we use Google Analytics to measure how the website is used (page views, source of visits, interactions) and a third-party service (Trustindex) to show customer reviews in the frequently asked questions section. You can change your decision at any time. More information in the cookie policy.

Technical data

When you browse, the servers may automatically record technical data (IP address, date and time, pages visited and browser) for security and service operation reasons, on the basis of our legitimate interest (Art. 6.1.f of the GDPR).

3. Recipients and international transfers

We do not share your data with third parties except where legally required. To provide the service we use providers acting as data processors, under a contract compliant with Art. 28 of the GDPR: web hosting, email sending and form security (anti-bot).

Only if you accept the corresponding cookies, web analytics providers (Google Analytics) and customer review providers (Trustindex) are also involved.

Your messages reach the hotel team and, in the case of quote requests, also the groups team of Protur Hotels Group.

Some of these providers are established in the United States. Those transfers are covered by the European Commission's adequacy decision (EU-US Data Privacy Framework) or, failing that, by standard contractual clauses.

4. Retention period

We keep your data for the time necessary to deal with your enquiry or your quote request and, afterwards, duly blocked, for the limitation periods of possible legal liabilities. Analytics and advertising data are governed by the cookie periods, which are detailed in the cookie policy.

5. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, without this affecting the lawfulness of previous processing.

To exercise them, write to dpo@grupbauza.com or to the postal address given in section 1, identifying yourself and stating the right you wish to exercise. If you believe we have not honoured your rights, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es (opens in a new tab)).

6. Minors

This website is not aimed at people under 18. If you believe a minor has given us data without the permission of their parents or guardians, write to us and we will delete it.

7. Security and automated decisions

We apply appropriate technical and organisational measures to protect your data. We do not make automated decisions or create profiles with legal effects on you.

8. Changes to this policy

We may update this policy to adapt it to legal or service changes. The date of the last update is shown at the top of the page.