LOYALTY PROGRAMME CONFIDENTIALITY AND DATA PROTECTION PRIVACY POLICY

This section presents the data protection information to be included in the conditions of the NH Discovery Programme.

1. Who is the data controller for the processing of data subjects' data?

Identity: Minor Hotels Europe & Americas 

TAX IDENTIFICATION NUMBER: A-28027944. 

Address: Calle Santa Engracia 120, 7ª, 28003, Madrid. 

Data Protection Officer (DPO): you can contact our DPO through the following means: 

E-mail: dpo@nh-hotels.com , indicating in the reference "Data Protection Officer".

2. For what purpose will Minor Hotels Europe & Americas process the user's personal data and on what grounds?

We inform you that the data provided in the NH Discovery Program registration process are processed by Minor Hotels Europe & Americas for the following purposes: 

  • Proceed to the registration to the NH Discovery Program. This processing is legitimized by the contractual relationship established between the parties. 
  • Sending commercial communications via email or equivalent electronic means of communication about offers and services related to the Programme, unless you tell us otherwise by objecting to the processing of your data for this purpose. This processing is legitimized by the legitimate interest of the data controller, being communications related to the Programme accepted by these General Terms & Conditions, the content of these communications being related to the Programme itself. The user may object to this consent by sending an e-mail to dataprotection@nh-hotels.com , as well as through the procedure included in each of these commercial communications.
  • Creation of an account associated with the registration that allows access within the Minor Hotels Europe & Americas website, to enable the management of the user's account, to communicate with the person in charge, as well as to manage the account. This processing is legitimized by the contractual relationship established between the parties. 
  • Sending communications related to your account, including, among others, registration, notifications, failures and/or problems with the account and any other communication that keeps you informed of the status of your account. This processing is legitimized by the contractual relationship established between the parties. 
  • To measure your degree of satisfaction with the service provided, in those cases in which you have stayed at one of the Participating Hotels operated by Minor Hotels Europe & Americas or any of its subsidiaries under a Minor Hotels Europe & Americas Brand. This purpose may include sending quality surveys and adapting and personalizing the services provided by Minor Hotels Europe & Americas. This processing is legitimized by the legitimate interest held by Minor Hotels Europe & Americas. In order to satisfy its legitimate interest in controlling the quality of its services and assessing customer satisfaction, Minor Hotels Europe & Americas may contact the user to request his or her assessment of the products and services offered and/or purchased and to analyze this information in order to improve its services.
    This processing responds to Minor Hotels Europe & Americas's need to adapt its operations and the products and services offered to the preferences and expectations of users, for which it is necessary to know their opinion. This processing also contributes to increasing the quality of the services provided to users. Although for the analysis of opinions, responses will be collected on an individual basis, their analysis will be carried out in a general way, by means of statistics, without identifying specific users. Users may, in any case, refuse to give their assessment, as well as communicate their opposition to being contacted for this purpose. 
  • Personalization of the services offered to members of the Programme, by means of the study of their profile and tastes. This processing is legitimized by the legitimate interest held by Minor Hotels Europe & Americas.
    In order to improve the receptiveness to the products offered, Minor Hotels Europe & Americas will proceed to the elaboration of a profile based on your personal characteristics (such as stays made) and the information obtained from your actions as a user.
    This purpose responds to the need to make personalized offers to each of the members of the Programme (including by electronic means, when authorized), to facilitate the acquisition by them of their preferred products and similar alternatives, as well as to offer them products that may be of interest to them based on their profile (for this purpose, automated decisions may be taken). Therefore, the user will benefit from offers tailored to his preferences and tastes, expressed through his activity or deduced according to the characteristics of his profile. The information relating to your profile will be treated securely and confidentially, being processed only in systems that analyze the information obtained in an automated manner. Moreover, the User may, at any time, express his/her wish not to be subject to this processing by exercising his/her right to object to it.

3. What user data will Minor Hotels Europe & Americas process?

Minor Hotels Europe & Americas will process the following categories of data: 

  • Data provided for registration in NH Discovery. 
    • Identification data: Name, surname, telephone number.  
    • Contact details: Address, email address. 
    • Professional data: Company where you provide services. 
  • Data provided for the creation of an account associated with the registration. 
    • Identification data: Name, surname, telephone number. 
    • Contact details: Address, e-mail address... 
  • Data provided for the sending of communications related to your account. 
    • Identification data: Name, surname, first name. 
    • Contact details: e-mail address. 
  • Data provided for the sending of commercial communications- 
    • Identification data: Name, surname. 
    • Contact details: e-mail address. 
  • Data provided to measure your degree of satisfaction with the service provided. 
    • Identification data: Name, surname and first name. 
    • Contact details: e-mail address.
    • Data on services provided: Stays at Minor Hotels Europe & Americas Hotels. 
  • Data provided for personalization of the services offered to members of the Programme  
    • Identification data: Name, surname(s). 
    • Contact details: e-mail address.
    • Data on services provided: Stays at Minor Hotels Europe & Americas Hotels.

4. With which recipients will user data be shared?

Your data will be communicated to those entities that own the hotels where you can take advantage of the benefits of the NH Discovery Programme, which belong to the GHA DISCOVERY, so that they are aware of your membership of the Programme and can apply its conditions to your stay (price, dates, services included...). This communication of data is covered by the acceptance of these General Terms & Conditions, being such communication necessary in order to apply the advantages of the NH Discovery Programme. 

You can consult the total number of these entities through the link. In addition, we would like to inform you that some of these entities may be located outside the European Economic Area (even in countries that do not offer a level of protection comparable to the Spanish one), this communication of data being made for the sole purpose of being able to apply the NH Discovery Programme in the services provided by these entities.

5. International data transfers

We inform you that your data may be transferred to third countries as we have indicated in the previous section, given that some of the companies included within the Minor Hotels Europe & Americas are located outside the European Economic Area. This transfer will be made in order to be able to apply the benefits of the NH Discovery Programme to the accommodation services you request.

6. Data retention

The data will be stored by Minor Hotels Europe & Americas as the data controller in accordance with the following indications, 

  • Data provided for registration with NH Discovery. The data will be kept for as long as the user is registered with NH Discovery, and once the contractual relationship has ended, until the expiry of the liabilities that may arise for any of the parties.
  • Data provided for the creation of an account associated with the registration. The data will be kept for as long as the user is registered with NH Discovery, and once the contractual relationship has ended, until the expiry of any liabilities that may arise for either party. 
  • Data provided for the sending of communications related to your account. The data will be kept for as long as the user is registered in the NH Discovery Programme, and once the contractual relationship has ended, until the expiry of the liabilities that may arise for any of the parties. 
  • Data provided for the sending of commercial communications. The data will be kept until the user opposes the sending of commercial communications, either by means of a communication sent to the user's e-mail account, or by means of the means made available to the user in each of the commercial communications that may be sent dataprotection@nh-hotels.com. The data will be kept until the user opposes the sending of commercial communications, either through a communication made to the e-mail account, or opposes them through the means made available to the user, in each of the commercial communications that may be sent.
  • Data provided to measure the degree of satisfaction with the service provided. Once the user's evaluation has been received, the personal data will be deleted as the evaluation of the services is carried out anonymously.
  • Data provided for personalization of the services offered to members of the Programme. The data will be kept for as long as the user is registered with NH Discovery, and once the contractual relationship is terminated, they will be deleted.

7. Commercial communications

In order for you to enjoy all the benefits of NH Discovery, we will send you commercial communications with promotions and offers that best fit your profile through different channels, including electronic media, as well as the communication of your balance, points and categories about the Programme, as well as promotions and offers from our NH Discovery Partners. As part of our commitment to your privacy, we remind you that, at any time, you may access the General Terms & Conditions of the Programme through the following address dataprotection@nh-hotels.com and object to commercial communications by sending an email to dataprotection@nh-hotels.com or through the link provided for this purpose in each of them.

8. Processing of third-party data

In the event that the Data Controller provides, at any time, data of third parties, he/she declares that he/she has their consent and undertakes to transfer the information contained in this clause to them, as well as to inform Minor Hotels Europe & Americas of any change or update regarding the same.

9. Data security

Minor Hotels Europe & Americas has adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent their alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or the physical or natural environment. 

You are responsible for maintaining the strict confidentiality of your user password and are responsible for access to or use of our website or our NH Discovery service by you or any person using the password previously provided by you, whether or not such access or use is authorized by you or on your behalf, and whether or not such person is your employee, relative or agent. You agree to (i) inform us immediately of any unauthorized use of your password, your account, or any other breach of security and (ii) ensure that you close your account at the end of each session. You are solely responsible for monitoring the dissemination and use of your password, access to and use of your account, and for informing us of your desire to terminate your account.

10. Rights of data subjects in relation to their data.

You may exercise, by writing to the address of the data controller indicated in the heading of this document, with the Reference "Data Protection", enclosing a photocopy of your identity document, at any time and free of charge, the following rights: 

  • To revoke the consent given for the processing and communication of their personal data. 
  • Obtain information about the existence or non-existence of processing of your personal data. 
  • Access to your personal data. 
  • To rectify inaccurate or incomplete data.
  • To request the deletion of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected. 
  • To limit the processing of data when any of the conditions provided for in the data protection regulations are met. 
  • In certain circumstances and on grounds relating to their situation, data subjects may object to the processing of their data. 
  • Request the portability of your data. 
  • Claim before the Spanish Data Protection Agency, through the following address: Calle de Jorge Juan, 6, 28001 Madrid, when you consider that the data controller has violated the rights that you are entitled to. 

Updated: June 2024