NH Hotel

Privacy Policy

PRIVACY POLICY

1. IDENTIFICATION

  • Identity: NH HOTEL GROUP, S.A. (hereinafter, "NH HOTEL GROUP") 
  • TAX IDENTIFICATION NUMBER: A-28027944
  • Address: C/Santa Engracia 120, 7ª, 28003, Madrid, Spain.
  • Data Protection Delegate (DPD): you can contact our DPD through the following means:
    • E-mail: dpo@nh-hotels.com
    • Phone: Headquarters of C/Santa Engracia 120, 7ª, 28003, Madrid 

Indicating in the reference " Data Protection Officer ". 

2. INFORMATION AND CONSENT

By accepting this Privacy Policy, the user is informed and gives their free, informed, specific and unequivocal consent for the personal data they provide through the website located at URL www.nh-hotels.com (hereinafter, the "Website") to be processed by NH HOTEL GROUP, as well as the data derived from their browsing and any other data, they shall provide in the future to NH HOTEL GROUP

 

The user must carefully read this Privacy Policy, which has been drafted in a clear and simple manner to facilitate its understanding, freely and voluntarily determining whether the user wishes to provide his/her personal data to NH HOTEL GROUP

3. OBLIGATIONS TO PROVIDE DATA

The data requested in the forms on the Website are, in general, obligatory (unless otherwise specified in the required field) in order to comply with the established purposes.  

 

Therefore, if they are not provided or are not provided correctly, they cannot be fulfilled, without prejudice to the fact that you shall freely view the content of the Website.

4. FOR WHAT PURPOSE WILL NH HOTEL GROUP PROCESS THE USER'S PERSONAL DATA AND FOR WHICH PERIOD OF TIME?

The personal data provided through the Website will be processed by NH HOTEL GROUP for the following purposes: 

4.1. Data provided for the booking of rooms and rooms for the organisation of events in some of the different hotels of the NH HOTEL GROUP chain without registering as a user on the Website, either through this Website or through the contact centre service (call centre, email or chat) for individual or group bookings:

  • Manage the completion of the bookings requested by the user. 
  • Sending the confirmation or documentation of the booking made.

4.2. Data provided to register as a registered user in NH HOTEL GROUP:

  • Manage the registration request within the modality chosen by the user. 
  • Verify that the user complies with the requirements to register within the  
  • Processing and responding to possible requests for information made by the user. 
  • Search for promotions that meet the needs selected by the user.  

4.3. Data provided through the Best Price form:

  • Manage the user's requests for contact and information through the channels provided for this purpose on NH HOTEL GROUP websites in relation to better prices located on other websites or third parties related to NH HOTEL GROUP
  • Management of the request made. 

4.4. Data provided for publications in the BLOG owned by NH HOTEL GROUP:

  • Manage the publication of your comments on the Website. 
  • Manage the subscription and/or unsubscription to the blog's Newsletter. 
  • In the event that this is necessary, to check the content of users' comments and, where appropriate, to remove those whose content does not comply with the conditions applicable to this Website at the discretion of NH HOTEL GROUP.  

4.5. Data provided for modification and cancellation of bookings:

  • Manage requests for modification or cancellation of your reservation requested by the user to NH HOTEL GROUP.  
  • Management of queries made to NH HOTEL GROUP in relation to the modification or cancellation of bookings.   

4.6. Data provided for the sending of personalised commercial communications about the different services of the entities included in the NH Chain, which can be found via the following link https://www.nh-hoteles.es/nh-hotel-group-companies.

  • Manage the registration in the commercial communications service that will be sent by NH HOTEL GROUP about the services offered by the different entities included in the NH Chain 

4.7. Data provided for the sending of personalised commercial communications about the different services of NH HOTEL GROUP's Partners which can be found through the following link https://www.nh-hotels.com/loyalty

  • To manage the registration in the commercial communications service that will be sent by NH HOTEL GROUP about the services offered by the different Partners of NH HOTEL GROUP

4.8. Data provided for the sending of the Newsletter:

  • Manage the subscription to the Newsletter, carried out through the channel provided on the NH HOTEL GROUP Website 

4.9. Data provided for the NH Discovery Programme:

  • Manage the Loyalty Programme, and process their application to join the Programme, as well as their participation in the Programme. 
  • To adapt the services of the Programme to the preferences and tastes of the Card Holder, as well as to measure their degree of satisfaction with the service provided; in those cases, in which they have stayed at one of the Group's Hotels. This purpose shall include the sending of quality surveys and the adaptation and personalisation of the services provided by NH.  
  • Sending your membership card and number, as well as allowing you to accumulate points. 
  • Sending you communications related to your account, including, but not limited to, number of points, notifications and any other communications to keep you informed of the status of your account.  
  • Sending commercial communications by e-mail or equivalent electronic means of communication about offers and services related to the Programme, for advertising and commercial prospecting purposes, unless you indicate otherwise by ticking the box provided for this purpose. 
  • Personalisation of the services offered to members of the Programme, by means of the study of their profile and tastes.  
  • Verify that the new member is not affiliated to another GHA Discovery Alliance member brand programme.

4.10. Data provided on contact forms and Corporate website:

  • Manage the user's requests for contact and information through the channels provided for this purpose on NH HOTEL GROUP websites. 
  • Management of the request made.    

4.11. Data provided in the basket retrieval form:

  • Sending a reminder of the booking not completed by the user or, if applicable, of the searches carried out by the user. 

4.12. Data provided through the GIFT CARDS and gift packs form:

  • Resolving queries raised about the management of GIFT CARDS and gift packs. 
  • Manage the purchase of GIFT CARDS and gift packs. This purpose includes sending reminders in relation to the expiry date of the gift card. This purpose includes sending reminders to the beneficiary regarding the expiry date of the GIFT CARDS.

4.13. Data provided to join the NH+ Business Program:

  • Proceed to the registration to the NH+ Business Program.  
  • Sending commercial communications by e-mail or equivalent electronic means of communication about offers and services related to the Programme, unless you indicate otherwise by objecting to the processing of your data for this purpose.  
  • Creation of an account associated with the registration that allows access within the NH website, to enable the management of the user's account, to be able to communicate with the person in charge, as well as to manage the account.  
  • Sending communications related to your account, including, among others, registration, notifications, failures and/or problems with the account and any other communication that keeps you informed of the status of your account. 
  • To measure your degree of satisfaction with the service provided, in those cases in which you have stayed at one of the Group's Hotels. This purpose shall include the sending of quality surveys and the adaptation and personalisation of the services provided by NH HOTEL GROUP.  
  • Personalisation of the services offered to members of the Programme, by means of the study of their profile and tastes. 

4.14. Manage the resetting of passwords for third party loyalty programmes in which NH HOTEL GROUP participates:

  • Communicate with the owner of the loyalty programme to request a password reset. 
  • Manage the requested password change. 

4.15. Communication of NH DISCOVERY credentials to third parties participating in the loyalty programme, so that the User can browse the Websites of these third parties as registered users:

  • Management of the acceptance of communication of their access credentials to the third-party entity. 
  • Communication of the User's credentials to the third-party entities.  

4.16. Management of contact requests and requests for information made by users of the website:

  • Reception, reply and management of contact requests and requests for information made by users of the website.  

4.17. Management of the FASTPASS service:

  • Management of the online check-in process so that customers can carry out the check-in process by telematic means. 
  • Management of the preferences given by the customer in the check-in process. 
  • Management of the online check-out process in order to allow customers to carry out the check-out process through telematic means.

4.18. Data provided through the chat available on the Website:

  • Reception, answering and management of queries raised through the chat on the Website.  

4.19. Carry out analysis on the use of the Website and check the preferences and behaviour of users.

5. WHAT USER DATA WILL NH HOTEL GROUP PROCESS?

NH HOTEL GROUP will process the following categories of user data: 

5.1. Data provided for the booking of rooms and rooms for the organisation of events in some of the different hotels of the NH HOTEL GROUP chain without registering as a user on the Website, either through this Website or through the contact centre service (call centre, email or chat) for individual or group bookings:

  • Identification data: name, surname, nationality.   
  • Contact data: email address, telephone number.  
  • Transaction data of goods and services.  
  • Economic, financial and insurance data.  
  • Preferences of stay. 

5.2. Data provided to register as a registered user in NH HOTEL GROUP:

  • Identification data: name, surname, nationality and address.  
  • Contact data: e-mail address, telephone number.  
  • Employment details: profession, sector. 
  • User and/or holder identification codes or passwords. 

5.3. Data provided through the Best Price form:

  • Identification data: name, surname, nationality and address.  
  • Contact data: e-mail address, telephone number.  
  • Data relating to transactions of goods and services.  
  • Data relating to best prices or data provided by the interested parties themselves in the open fields of the forms provided on the Website or in the attached documents.

5.4. Data provided for publications in the BLOG owned by NH HOTEL GROUP:

  • Identification data: name, surname, nationality and address.  
  • Contact data: e-mail address. 

5.5. Data provided for modification and cancellation of bookings:

  • Identification data: name, surname, nationality and address.  
  • Contact data: e-mail address.  
  • Data relating to transactions of goods and services.  
  • Economic, financial and insurance data. 

5.6. Data provided for the sending of personalised commercial communications about the different services of the entities included in the NH Chain. 

  • Identification data: name, surname, nationality and address.  
  • Contact data: e-mail address.  

5.7. Data provided for the sending of personalised commercial communications about the different services of NH HOTEL GROUP's Partners. 

  • Identification data: name, surname, nationality and address.  
  • Contact data: e-mail address.  

5.8. Data provided for the sending of the Newsletter:

  • Identification data: name, surname, nationality and address. 
  • Contact data: country of residence, e-mail address. 
  • Data on personal characteristics: language 

5.9. Data provided for the NH Discovery Programme:

  • Identification data: name, surname, ID card number, signature, nationality and address. 
  • Personal characteristics data: date of birth and sex. 
  • Contact data: e-mail address and telephone number.  
  • User and/or customer identification codes or passwords. 
  • Financial data: credit card and/or means of payment. 
  • Transactions of goods and services: products and services purchased or in which you show interest. 
  • Other data: Accommodation preferences. 

5.10.  Data provided on contact forms and Corporate website:

  • Identification data: name, surname, nationality and address.  
  • Contact data: e-mail address, telephone number.  
  • Transaction data for goods and services. 

5.11. Data provided in the basket retrieval form:

  • Contact data: address and e-mail address. 

5.12. Data provided through the GIFT CARDS and gift packs form:

  • Identification data: name, surname, first name.  
  • Contact data: e-mail address, telephone number.  
  • Financial data: credit card and/or means of payment.   

5.13. Data provided to join the NH+ Business Program;

  • Identification data: name and surname of the contact person. 
  • Professional data: work company, address. 
  • Contact data: e-mail address.  

5.14. Manage the resetting of passwords for third party loyalty programmes in which NH HOTEL GROUP participates:

  • Identifying information: name and surname of the contact person. 
  • User and/or customer identification codes or passwords.

5.15. Communication of NH DISCOVERY credentials to third parties participating in the loyalty programme, so that the User can browse the Websites of these third parties as registered users

  • Identifying information: name and surname of the contact person. 
  • User and/or customer identification codes or passwords.

5.16. Management of contact requests and requests for information made by users of the website:

  • Identification data: name and surname of the contact person. 
  • Contact data: e-mail address.  
  • Query raised.   

5.17. Management of the FASTPASS service:

  • Identification data: name, surname, nationality.   
  • Contact data: e-mail address, telephone number.  
  • Transaction data of goods and services.  
  • Financial data: credit card and/or means of payment. 
  • Preferences of stay. 

5.18. Data provided through the chat available on the Website:

  • Identification data: name and surname of the contact person. 
  • Contact data: e-mail address.  
  • Query raised. 

5.19. Carry out analysis on the use of the Website and check the preferences and behaviour of users.

  • Browsing data. 

In the event that the user provides data of third parties, the user declares that the user has their consent and undertakes to provide them with the information contained in the Privacy Policy, exempting NH HOTEL GROUP from any liability in this regard. However, NH HOTEL GROUP shall carry out periodic checks to verify this fact, adopting the corresponding due diligence measures, in accordance with data protection regulations.

6. WHAT IS THE LEGITIMACY OF THE PROCESSING OF USER DATA?

The legitimacy of the processing of your personal data is as follows: 

6.1. Data provided for the booking of rooms and rooms for the organisation of events in some of the different hotels of the NH chain without registering as a user on the Website, either through this Website or through the contact centre service (call centre, email or chat) for individual or group bookings and rooms: the execution of the contract between the parties.

6.2. For the management of the registration as a registered user, the consent requested. However, if you withdraw your consent, this will not affect the lawfulness of the processing previously carried out. 

6.3. For the Best Price form, the consent requested and which you shall withdraw at any time. However, if you withdraw your consent, this will not affect the lawfulness of the processing operations previously carried out.  

6.4. For the management and publication of comments or publications sent by users on the BLOG, the consent given by the user. In the event of withdrawal of consent to the processing of comments, the same will be removed by NH HOTEL GROUP from the Website.

6.5. For the modification and/or cancellation of your reservation, the execution of the contract between the parties.

6.6. For the sending of personalised commercial communications about the different services of the entities included in the NH Chain, the consent given by the user. 

6.7. For the sending of personalised commercial communications about the different services of NH HOTEL GROUP Partners, the consent given by the user. 

6.8. For the sending of newsletters, the consent given by the user.  

6.9. Regarding the registration and management as a member of the Discovery Programme,

  • Enrolment in the NH Discovery Programme. This processing is legitimised by the contractual relationship established between the parties. 
  • Sending commercial communications via email or equivalent electronic means of communication about offers and services related to the Programme, unless you indicate otherwise by objecting to the processing of your data for this purpose. This processing is legitimised by the legitimate interest of the data controller, being communications related to the programme accepted by these conditions, the content of these communications being related to the programme itself. The user shall object to this consent by sending an e-mail to dataprotection@nh-hotels.com, as well as through the procedure included in each of these commercial communications. 
  •  Creation of an account associated with the registration that allows access within the NH website, to enable the management of the user's account, to communicate with the person in charge, as well as to manage the account. This processing is legitimised by the contractual relationship established between the parties. 
  • Sending communications related to your account, including but not limited to registration, notifications, failures and/or problems with the account and any other communication to keep you informed of the status of your account. This processing is legitimised by the contractual relationship established between the parties. 
  • To measure your degree of satisfaction with the service provided, in those cases in which you have stayed at one of the Hotels participating in the programme. This purpose shall include the sending of quality surveys and the adaptation and personalisation of the services provided by NH. This processing is legitimised by NH's legitimate interest. 

In order to satisfy its legitimate interest in monitoring the quality of its services and assessing customer satisfaction, NH shall contact the user to request his/her assessment of the products and services offered and/or purchased and analyse this information in order to improve its services. 

This processing responds to NH's need to adapt its operations and the products and services offered to the preferences and expectations of users, for which it is necessary to know their opinion. This processing also contributes to increasing the quality of the services provided to users. Although for the analysis of opinions, responses will be collected on an individual basis, their analysis will be carried out in a general way, by means of statistics, without identifying specific users. Users shall, in any case, refuse to give their assessment, as well as communicate their opposition to being contacted for this purpose. 

  • Personalisation of the services offered to members of the Programme, by studying their profile and tastes. This processing is legitimised by NH's legitimate interest. 

In order to improve the receptiveness to the products offered, NH will proceed to the elaboration of a profile based on your personal characteristics (such as stays made) and the information obtained from your actions as a user. 

This purpose responds to the need to make personalised offers to each member of the Programme (including by electronic means, when so authorised), to facilitate the purchase by them of their preferred products and similar alternatives, as well as to offer them products that shall be of interest to them based on their profile (for this purpose, automated decisions shall be made). You will therefore benefit from offers tailored to your preferences and tastes, expressed through your activity or inferred on the basis of your profile characteristics. The information relating to your profile will be processed securely and confidentially, being processed only in systems that analyse the information obtained in an automated manner. In addition, the User shall, at any time, express his/her wish not to be subject to this processing by exercising his/her right to object to it.   

6.10. For the sending of contact forms and website Corporate the consent given by the user. 

6.11. For the recovery of the cart and its reminder the consent given by the user.

6.12. For the purchase of the GIFT CARDS and gift packages the execution of the contract between the parties.

6.13. For the management of the NH+ Business Program, 

  • Proceed to the registration to NH+ Business Program. This processing is legitimised by the contractual relationship established between the parties.
  • Sending commercial communications by e-mail or equivalent electronic means of communication about offers and services related to the Programme, unless you indicate otherwise by objecting to the processing of your data for this purpose. This processing is legitimised by the legitimate interest of the data controller, being communications related to the programme accepted by these conditions, the content of these communications being related to the programme itself. The user shall object to this consent by sending an e-mail to dataprotection@nh-hotels.com, as well as through the procedure included in each of these commercial communications. 
  • Creation of an account associated with the registration that allows access within the NH website, to allow the management of the user's account, to be able to communicate with the person responsible, and to manage the account. This processing is legitimised by the contractual relationship established between the parties. 
  • Sending communications related to your account, including, among others, registration, notifications, faults and/or problems with the account and any other communication to keep you informed of the status of your account. This processing is legitimised by the contractual relationship established between the parties. 
  • To measure your degree of satisfaction with the service provided, in those cases in which you have stayed at one of the Group's Hotels. This purpose shall include the sending of quality surveys and the adaptation and personalisation of the services provided by NH. This processing is legitimised by the legitimate interest held by NH.  

In order to satisfy its legitimate interest in monitoring the quality of services and assessing customer satisfaction, NH shall contact users to request their assessment of the products and services offered and/or purchased and to analyse this information in order to improve services. 

This processing responds to NH's need to adapt its operations and the products and services offered to the preferences and expectations of users, for which it is necessary to know their opinion. This processing also contributes to increasing the quality of the services provided to users. Although for the analysis of opinions, responses will be collected on an individual basis, their analysis will be carried out in a general way, by means of statistics, without identifying specific users. Users shall, in any case, refuse to give their assessment, as well as communicate their opposition to being contacted for this purpose.

  • Personalisation of the services offered to members of the Programme, by means of the study of their profile and tastes. This processing is legitimised by the legitimate interest held by NH. 

In order to improve the receptiveness to the products offered, NH will proceed to the elaboration of a profile based on your personal characteristics (such as stays made) and the information obtained from your actions as a user. 

This purpose responds to the need to make personalised offers to each of the members of the Programme (including by electronic means, when authorised), to facilitate the acquisition by them of their preferred products and similar alternatives, as well as to offer them products that shall be of interest to them based on their profile (for this purpose, automated decisions shall be taken). Therefore, the user will benefit from offers tailored to his preferences and tastes, expressed through his activity or deduced according to the characteristics of his profile. The information relating to your profile will be processed securely and confidentially, being processed only in systems that analyse the information obtained in an automated manner. Moreover, the User shall, at any time, express his/her wish not to be subject to this processing by exercising his/her right to object to it.

6.14. For the management of the password reset of third-party loyalty programmes in which NH HOTEL GROUP participates, the consent given by the user.  

6.15. Communication of NH DISCOVERY credentials to third party entities participating in the loyalty programme, so that the User can browse the Websites of these third parties as registered users the consent given by the user.  

6.16. For the management of contact requests and requests for information raised by users of the website the consent given by the user. 

6.17. The management of the FASTPASS service is legitimised by the contractual relationship established between the parties. 

6.18. For the use of the chat available on the Website the consent given by the user.

6.19. For the analysis of the use of the Website and to check the preferences and behaviour of users; the legitimate interest of NH HOTEL GROUP. In order to satisfy its legitimate interest in controlling the quality of services and assessing customer satisfaction, NH shall use the browsing data of users on the Website to assess the products and services offered and/or purchased and to analyse this information in order to improve services. 

    This processing responds to NH's need to adapt its operations and the products and services offered to the preferences and expectations of users.

The consents obtained for the aforementioned purposes are independent, so the user shall revoke only one of them without affecting the others. 

To revoke said consent, the user shall contact NH HOTEL GROUP through the following channels dataprotection@nh-hotels.com

7. WHICH RECIPIENTS WILL THE USER'S DATA BE SHARED WITH?

User data shall be disclosed to:

7.1. Data provided for the booking of rooms and rooms for the organisation of events in some of the different hotels of the NH HOTEL chain without registering as a user on the Website, either through this Website or through the contact centre service (call centre, email or chat) for individual or group bookings:

  • Companies of the group to which NH HOTEL GROUP belongs, solely for internal administrative purposes and/or for the aforementioned purposes.  
  • Entity owning the hotel in which the user will be staying so that the user is aware of the conditions of the accommodation and the user can stay at the hotel and therefore the transfer is necessary. You can consult the list of NH Chain Entities by clicking on the link https://www.nh-hoteles.es/nh-hotel-group-companies.

7.2. Data provided for publications in the BLOG owned by NH HOTEL GROUP:  

  • The data provided by the user will be published on the Website and will therefore be accessible to any user accessing the Website.

7.3. Data provided for modification and cancellation of bookings: 

  • Companies of the group to which NH HOTEL GROUP belongs, solely for internal administrative purposes and/or for the purposes indicated above. 
  • In the case of including products and/or services in the GIFT CARDS and gift packages, products and/or services of third parties, to these entities so that the user can enjoy these products and/or services, so this communication of data is necessary.   

7.4. Data provided for the NH Discovery Programme: 

  • Entities owning the hotels where you can benefit from the advantages of the NH Discovery Programme, belonging to the GHA Discovery Alliance, so that they are aware of your membership of the Programme and can apply its conditions to your stay (price, dates, services included...). This communication of data is covered by the acceptance of these terms and conditions, being this communication necessary to be able to apply the advantages of the NH Discovery Programme. You can consult the total of these entities through the link [https://www.ghadiscovery.com/content/download/81540/file/List+of+GHA+Management+Companies.pdf

7.5. Data provided on contact forms and Corporate website: 

  • Companies of the group to which NH HOTEL GROUP belongs, solely for internal administrative purposes and/or for the purposes indicated above. 

7.6. Data provided through the GIFT CARDS and gift packs form:

  • Companies of the group to which NH HOTEL GROUP belongs, solely for internal administrative purposes and/or for the purposes indicated above. 
  • In the case of including products and/or services in the GIFT CARDS and gift packages, products and/or services of third parties, to these entities so that the user can enjoy these products and/or services, so this communication of data is necessary.

7.7. Data provided to join the NH+ Business Program;

  • The companies belonging to the NH Group, all dedicated to the hotel sector, will need to have access to your data for the correct provision of the services linked to the NH+ Business Program. Similarly, your data will be communicated to those entities that own the hotels that shall be included in the NH+ Business Program, in order for them to know the conditions of your stay (price, dates, services included, etc.). You can consult the total of these entities through the link https://www.nh-hotels.com/nh-hotel-group-companies

7.8. Manage the resetting of passwords for third party loyalty programmes in which NH HOTEL GROUP participates, to these third parties.

7.9. Communication of NH DISCOVERY credentials to third parties participating in the loyalty programme, so that the User can browse the Websites of these third parties as registered users, to these third parties. 

7.10. Management of the FASTPASS service:

  • Entity owning the hotel where the user will be staying in order for the user to be aware of the conditions of the accommodation and therefore the transfer is necessary. 

Additionally, the data shall be accessed by NH HOTEL GROUP's suppliers, such access being necessary for the proper fulfilment of legal obligations and/or the aforementioned purposes. These suppliers shall not process your data for their own purposes that have not been previously informed by NH HOTEL GROUP.   

8. INTERNATIONAL DATA TRANSFERS

With regard to international data transfers, the user's data shall be transferred internationally under the following conditions: 

8.1. Data provided for the booking of rooms and rooms for the organisation of events in some of the different hotels of the NH chain without registering as a user on the Website, either through this Website or through the contact centre service (call centre, email or chat) for individual or group bookings: 

  • To the entities that own the hotels in which the user will be staying, which shall be located outside the European Economic Area, the transfer being necessary in order for the user to be able to stay in the hotel booked. You can consult the list of Entities of the NH Chain, through the link https://www.nh-hoteles.es/nh-hotel-group-companies

8.2. Data provided for modification and cancellation of bookings:  

  • To the entities that own the hotels in which the user will be staying, which shall be located outside the European Economic Area, the transfer being necessary in order for the user to be able to stay in the hotel booked. You can consult the list of Entities of the NH Chain, through the link https://www.nh-hoteles.es/nh-hotel-group-companies

8.3. Data provided for the NH Discovery Programme: 

  • To the entities included in the GHA Discovery Programme in order for you to enjoy the benefits of the programme, which shall be located outside the European Economic Area. This transfer will be made in order to be able to apply the benefits of the NH Discovery Programme to the accommodation services you request. You can consult the list of entities through the link [https://www.ghadiscovery.com/content/download/81540/file/List+of+GHA+Management+Companies.pdf]. 

8.4. The data provided to form part of the NH+ Business Program shall be transferred to third parties given that some of the companies included in the NH HOTEL Group are located outside the European Economic Area. This transfer will be made in order to be able to provide you with the services associated with the NH+ Business Program that you request. You can consult the list of NH Chain Entities through the following link https://www.nh-hoteles.es/nh-hotel-group-companies 

8.5 The data provided to manage the resetting of passwords for third party loyalty programmes in which NH HOTEL GROUP participates, to said entities in the event that they are located outside the European Economic Area. This transfer will be carried out for the purpose of processing your request and is necessary for the management. 

8.6. The data provided for the communication of NH DISCOVERY credentials to third party entities participating in the Discovery Alliance, so that the User can browse the Websites of these third parties as registered users, to such entities in the case of being located outside the European Economic Area. This transfer will be carried out in order to process your request and is necessary for the management of your personal data.  

8.7. Management of the FASTPASS service:

  • To the entities owning the hotels in which the user will be staying, which shall be located outside the European Economic Area, the transfer being necessary in order for the user to be able to stay in the hotel booked. You can consult the list of Entities of the NH Chain, through the link https://www.nh-hoteles.es/nh-hotel-group-companies 

 8.8. The data provided for the use of the chat available on the Website shall be transferred to the USA for the provision of services that LivePerson provides to NH HOTEL GROUP, being regularised by the signing of standard contractual clauses 

In addition, NH HOTEL GROUP shall transfer data to third countries located outside the European Economic Area and, specifically, to the USA, India and the Philippines as a result of the services provided by Accenture to NH HOTEL GROUP in relation to the management of the back office related to the company's invoicing. In this regard, we inform you that this is regulated by means of standard contractual clauses, previously authorised by the AEPD. 

Further information on any of these international data transfers can be obtained by sending an email to dpo@nh-hotels.com.   

9. RETENTION OF DATA

Your data will be retained for the following periods:  

9.1. Data provided for the booking of rooms and rooms for the organisation of events in some of the different hotels of the NH chain without registering as a user on the Website, either through this Website or through the contact centre service (call centre, email or chat) for individual or group bookings: shall be retained for the duration of the contractual relationship and, after the end of the contractual relationship, for the period of limitation of any legal action that shall arise from it.   

9.2. Data provided to register as a registered user in NH HOTEL GROUP: as long as the user does not revoke the consent given. However, in the event of withdrawal of consent, this shall not affect the lawfulness of any processing previously carried out. 

9.3. Data provided through the Best Price form: for the period of time necessary for the processing of your application sent to you.  

9.4. Data provided for publications in the BLOG owned by NH HOTEL GROUP: The data will be kept for as long as the user does not revoke the consent given.   

9.5. Data provided for modification and cancellation of bookings: shall be retained for the duration of the contractual relationship and, after the end of the contractual relationship, for the period of limitation of any legal action that shall arise from it.   

9.6. Data provided for the sending of personalised commercial communications about the different services of the entities included in the NH Chain: the data will be retained for as long as the user does not revoke the consent given or objects to receiving the communications. 

9.7. Data provided for the sending of personalised commercial communications about the different services of NH HOTEL GROUP's Partners: the data will be retained for as long as the user does not revoke the consent given or objects to receiving the communications. 

9.8. Data provided for the sending of the Newsletter: shall be retained for as long as the user does not revoke the consent given for this purpose.   

9.9. Data provided for the NH Discovery Programme: shall be retained for the duration of the contractual relationship and, after the end of the contractual relationship, for the period of limitation of any legal action arising therefrom.   

9.10. Data provided on contact forms and Corporate website: shall be retained for the period necessary to process and respond to your request and, once this period has expired, for the period of limitation of any legal action arising from your request.   

9.11. Data provided in the basket retrieval form: for the period of time necessary for the processing of your application sent to you. 

9.12. Data provided through the GIFT CARDS and gift packs form: shall be retained for the period necessary to process the application and, after the expiry of that period, for the period of limitation of legal actions arising from the application.   

9.13. Data provided to join the NH+ Business Program: shall be retained for the duration of the contractual relationship and, after the end of the contractual relationship, for the period of limitation of any legal action that shall arise from it. 

9.14. Manage the resetting of passwords for third party loyalty programmes in which NH HOTEL GROUP participates: shall be retained until the processing of the request. 

9.15. Communication of NH DISCOVERY credentials to third parties participating in the loyalty programme, so that the User can browse the Websites of these third parties as registered users: shall be retained until the processing of the request. 

9.16. Management of contact requests and requests for information made by users of the website, until the query is resolved. Once resolved, the query shall be anonymised in order to be kept by NH HOTEL GROUP for historical-statistical purposes. 

9.17. Management of the FASTPASS service: shall be retained for the duration of the contractual relationship and, after the end of the contractual relationship, for the period of limitation of any legal action that shall arise from it. 

9.18. Data provided through the chat available on the Website, will be retained for 13 months and then deleted. 

9.19. To carry out analyses on the use of the Website and to check the preferences and behaviour of users, will be kept for one year. Once this period has elapsed, the analysis shall be anonymised in order to be kept by NH HOTEL GROUP for historical-statistical purposes. 

10. USER LIABILITY

The user: 

  • You guarantee that you are over eighteen (18) years of age and that the information you provide to NH HOTEL GROUP is true, accurate, complete and up to date. To this effect, the user is responsible for the veracity of all the data provided and shall keep the information provided suitably updated, in such a way that it corresponds to his/her real situation.  
  • The user guarantees that has informed the third parties from whom the user provides his/her data, if the user does so, of the aspects contained in this document. Likewise, you guarantee that you have obtained their authorisation to provide their data to NH HOTEL GROUP for the aforementioned purposes. 
  • You shall be liable for any false or inaccurate information you provide through the Website and for any damages, direct or indirect, that this shall cause to NH HOTEL GROUP or third parties. 

11. EXERCISE OF RIGHTS

The user shall send a letter to NH HOTEL GROUP, to the address indicated in the heading of this Policy, or by e-mail to the address dataprotection@nh-hotels.com, attaching a photocopy of his/her identity document, at any time and free of charge, in order to 

  • To revoke the consents granted. 
  • Obtain confirmation as to whether or not NH HOTEL GROUP is processing personal data concerning the user.  
  • Access their personal data.  
  • Rectify inaccurate or incomplete data.  
  • Request the deletion of their data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.  
  • Obtain from NH HOTEL GROUP the limitation of data processing when any of the conditions provided for in the data protection regulations are met.  
  • Request the portability of the data provided by the User in those cases provided for in the regulations.  
  • Contact the NH HOTEL GROUP's DPO at the following address: dpo@nh-hotels.com 
  • File a complaint regarding the protection of their personal data with the Spanish Data Protection Agency at Calle de Jorge Juan, 6, 28001 Madrid, when the interested party considers that NH HOTEL GROUP has violated the rights recognised by the applicable data protection regulations. 

12. SECURITY MEASURES

NH HOTEL GROUP shall process the user's data at all times in an absolutely confidential manner and shall maintain the mandatory duty of secrecy with regard to the same, in accordance with the provisions of the applicable regulations, adopting for this purpose the necessary technical and organisational measures to guarantee the security of your data and prevent its alteration, loss, processing or unauthorised access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed. 

Last update: Dec 2022