Privacy Policy
Last updated: February, 2025
In accordance with applicable data protection regulations, this Privacy Policy is intended to help you understand the following:
DATA CONTROLLER
The Data Controller for the processing of the personal data in HBX Group site is HBX Group International Plc (hereinafter "HBX Group"), with registered office at 7th Floor Tower 42, 25 Old Broad Street, London, EC2N 1HN.
DATA PROTECTION OFFICER
HBX Group has a Global Data Protection Officer to respond to any queries, requests or clarifications regarding the processing of personal data that may be made by HBX Group in the following email address dataprotection@hotelbeds.com or at our postal address, mentioned in paragraph 9.
HOW DID WE OBTAIN YOUR DATA?
The personal data processed shall be those that you provide to us through the various channels that HBX Group makes available to you.
Also, when you visit the HBX Group site various technologies are used to collect and store information and this may include the use of cookies or similar technologies to identify your browser or device. HBX Group also uses these technologies to collect and store information when you interact with services offered by HBX Group or other features. You can obtain more information about how HBX Group process personal data obtained through cookies or as a result of your browsing in the event that you accept the installation of cookies (for more information about cookies on the Website, visit our Cookies Policy ).
WHAT PERSONAL DATA DO WE PROCESS, FOR WHAT PURPOSE AND FOR WHAT REASON
These purposes are listed below depending on which category of data subject you are, indicating which data shall be processed (type of data) and for what reason or on what basis (legal basis). Likewise, we may also process any additional data that you provide us with or that is generated in the course of your relationship with HBX Group for the purposes set out above.
CANDIDATES | ||||
TYPE OF DATA | PURPOSE AND LEGAL BASIS | |||
Those data requested in the Website and, among others:
The data generated during the selection processes in which you participate shall also be processed, which implies the possibility of performing an analysis of your personal profile in order to assess your suitability for the corresponding vacancy.
Among such additional data, the following may be processed data published on social networks whose privacy settings are not restricted to third parties and/or data published on the Internet. | Performance of a contract between you and HBX Group or application of pre-contractual measures:
With your consent:
| |||
WEB / PLATFORM USERS | ||||
TYPE OF DATA | PURPOSE AND LEGAL BASIS | |||
| The processing of your personal data is legitimized by the express consent you give us through the cookie banner made available by HBX Group. You may withdraw your consent at any time in accordance with the information provided in our Cookies Policy. However, HBX Group may process information obtained through cookies or similar technologies without your consent as long as it is anonymized or aggregated information that does not contain any attribute that can identify directly or indirectly. The purpose is:
| |||
| The processing of your E-mail address for sending you HBX Group Newsletters, is based on your explicit consent. You may at any time withdraw your consent. The processing is intended solely to provide you with the requested information. The purpose is:
| |||
SOCIAL MEDIA USERS | ||||
TYPE OF DATA | PURPOSE AND LEGAL BASIS | |||
Those personal data that allow us the privacy policy of the social network in which you have an account / user profile, as well as the privacy settings you have as a user of that social network. This data depends on your own privacy settings of the social network and the privacy policy of that social network. | HBX Group has active profiles in different social networks, the following personal data processing are applicable to persons who become HBX Group stakeholders by being a member, following or being part of such profiles.
Performance of the obligations arising from your status as a registered user of the social network and the conditions of use of such social network:
| |||
APPLICABLE TO ALL DATA SUBJECTS | ||||
TYPE OF DATA | PURPOSE AND LEGAL BASIS | |||
Those personal data that you provide us and that are generated in the relationship. | Fulfilment of our civil, commercial, tax, accounting and legal obligations related to compliance with personal data protection regulations, among others that may be applicable.
| |||
WHEN AND WHY DO WE DISCLOSE YOUR PERSONAL DATA TO THIRD PARTIES?
Personal data may be communicated to the following recipients, for the reasons explained below:
RECIPIENT | PURPOSE | LEGAL BASIS |
Public administrations; Courts and tribunals; Law enforcement agencies | For the fulfilment of the legal obligations to which HBX Group is subject for the development of its activity, and in the cases provided by law, including the obtaining of subsidies and public aid. | Fulfil a legal obligation. |
Accounting audit firms | To comply with the legal obligations of account auditing to which HBX Group is subject due to its activity. | Fulfil a legal obligation. |
Digital Advertising Service Provides | To personalize and segment the content of the Website through the use of cookies when necessary or similar technologies when these are consented to by the data subject. | The data subject express consent or when express consent is not required by law, HBX Group legitimate interest in optimizing the appeal and effectiveness of its services or partner services. |
Companies that are part of HBX Group | We may communicate the data to the other Group companies with the purpose of share your information for manage your candidature. | The legitimate interest of HBX Group recognized by the applicable regulations on data protection. |
Third parties interested in acquiring all or part of the capital stock of HBX Group. | Analysis and execution of commercial operations in which HBX Group may be involved due to structural modifications or transfer of business. | The legitimate interest of HBX Group to analyse and execute commercial operations in the course of structural modifications or transfers of business . |
In addition to suppliers who need access to your data for the provision of services that HBX Group has contracted to these suppliers, and with which HBX Group has signed confidentiality agreements and processing of personal data necessary and required by law to protect your privacy, your personal data may also be shared with third parties necessary to provide a service or to assist HBX Group in delivering a service that you have contracted.
From HBX Group we shall not share your data with other third parties without first obtaining your consent, except in those cases where it is necessary for compliance with legal or contractual obligations to which HBX Group is subject at all times by its nature and activity.
If in the future HBX Group shall make other communications of personal data, it shall inform you in a timely manner.
INTERNATIONAL DATA TRANSFERS
HBX Group hires the services of suppliers located in countries outside the European Economic Area, the UK and/or Switzerland based on decisions of adequacy of the European Commission, the UK’s Secretary of State or the Swiss Federal Council (as applicable). In this case, it is considered that the countries have equivalent regulations to the European, the UK or the Swiss one. In the event that HBX Group needs to hire services from suppliers located in countries that do not have regulations equivalent to the European, the UK or the Swiss (as applicable), the contracting shall include all the guarantees and safeguards required by the regulations to preserve your privacy, after verification of the legislation of the destination country. In certain specific cases, we transfer your data outside the European Economic Area, the UK and/or Switzerland because it is in your interest or is necessary to conclude or perform the contract we have with you. For instance, when you make a reservation on HBX Group, we might need to transfer your data to a hotel or business partner who is located in the country of your choice.
Such safeguards may consist of the application of contractual clauses and additional guarantees to them, in accordance with the regulations of each destination country, or of binding corporate rules approved by the data protection authorities. For citizens in the European Economic area this contractual clauses are available here. We also inform you that the regulations allow us to send your data to such countries, if it is necessary to comply with our obligations arising from the service you request from us.
Likewise, we inform you that HBX Group has companies outside the European Union, the UK or Switzerland. A list with these countries can be found here. In those cases, HBX Group requires that these companies comply with the appropriate measures to protect your personal data following the European regulations.
For more information about the guarantees to your privacy, or the destination countries to which we need to transfer your data to fulfil our contractual obligations to you, you can contact HBX Group, through the addresses indicated in the "How can you exercise your rights" section of this Privacy Policy.
AUTOMATED DECISIONS
HBX Group does not make decisions that may affect you based solely on the automated processing of your personal data. All decision-making processes related to the above-described processing purposes are carried out with human intervention.
The profiling indicated in the purposes of candidate management, in no case shall be used in making decisions by our entity that may have legal effects for you or that may affect you significantly.
FOR HOW LONG DO WE KEEP YOUR DATA?
We shall only keep your personal data for as long as we need it for the purposes for which we collect it and to comply with legal, financial, business or reporting requirements or until your consent withdrawal. In some circumstances, we may anonymize personal data so that it is no longer identifiable, and we can continue to use it. When we no longer need the personal data, we shall securely delete or destroy it.
HBX Group shall retain the data collected to carry out the above purposes for the duration of your relationship with HBX Group and, even thereafter, until the statute of limitations on any legal liability arising there.
HOW CAN YOU EXERCISE YOUR RIGHTS?
You may exercise, with respect to the data collected, the rights of access, rectification, opposition, deletion, limitation and portability of data, in accordance with the regulations on data protection and withdraw your consent.
These rights may be exercised by sending a communication:
To the e-mail dataprotection@hotelbeds.com with the subject "Data protection"; or
By any postal means with which there is evidence of receipt by HBX Group, indicating on the envelope the reference "Data Protection", addressed to the following address:
- Data Protection Officer: Camí Son Fangos, 100, Palma de Mallorca.
- Company: 7th Floor Tower 42, 25 Old Broad Street, London, EC2N 1HN
Also, if you consider that the processing of your personal data violates the regulations or your privacy rights, you can file a complaint:
- via the postal and e-mail addresses indicated above, or
- you have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk)
before the Spanish Data Protection Authority, by accessing www.aepd.es or at the address Calle Jorge Juan, 6, 28001, Madrid, Spain.
with a data protection authority, for example at the data protection competent for your habitual residence, place of work or place of the alleged infringement. The contact details of the data protection authorities can be found here.
CHANGES, MODIFICATIONS OR UPDATES
HBX Group reserves the right to revise this Privacy Policy at any time it deems appropriate, in order to reflect regulatory changes, best practices or update the processing activities of personal data. You shall be informed of such updates in accordance with regulatory requirements, in the event that your rights are significantly affected as a result of such modification or update.
