Website privacy policy
At Tayko Hotels we are committed to protecting the privacy and personal data of our users, clients and collaborators. Through this Privacy Policy we inform you about how we collect, use and protect your personal data.
This Privacy Policy establishes the basis on which the company treats the personal data voluntarily provided by our users through the website.
This Policy shall be applicable when personal data is provided to the company, which is responsible for the processing of such data (data controller), and through any of the contact or subscription forms where personal data (name, e-mail, etc.) is collected.
What we are committed to
We undertake to process your personal data in a lawful, fair and transparent manner, guaranteeing its confidentiality and applying the necessary security measures to protect it against unauthorised access, loss or improper processing. Likewise, we will only process your data for the purposes indicated in this Privacy Policy and for the time strictly necessary.
Who is responsible for your personal data
Company name: Byou Hotels, S.A.
Tax ID: A95883344
Address: C/ Ribera 13, 48005 Bilbao (Bizkaia)
Byou Hotels S.A. is a business group dedicated to the operation, management and marketing of hotels, which includes (Tayko Bilbao, S.L., Tayko Sevilla, S.L., Restaurante Ola Bilbao, S.L.) hereinafter referred to as “Tayko Hotels”.
What is personal data and the processing of personal data?
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is any person whose identity can be established directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more elements of that person's physical, physiological, genetic, mental, economic, cultural or social identity.
Furthermore, the processing of personal data involves any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
What processing we carry out on your personal data and for which purposes
CUSTOMERS
Purpose: To manage requests for information, enquiries, bookings, amendments and cancellations made by customers via the various channels provided, as well as to manage their stay and the provision of the hotel services booked.
Legal basis: Consent of the data subject and the performance of the contractual relationship or the implementation of pre-contractual measures, as well as the data controller’s legitimate interest in the administrative and commercial management arising from the relationship with the customer.
Retention: The data will be retained for the duration of the contractual or commercial relationship and, once this has ended, for the duration of any statutory limitation periods arising from that relationship.
Disclosure of data: Your data may be disclosed to financial institutions for the purposes of managing collections and payments, to the relevant public authorities, and to the State Security Forces where necessary to comply with legal obligations or for the prevention, investigation or prosecution of criminal offences. It may also be disclosed to suppliers necessary for the proper provision of the service (for example, technology or web hosting services).
CONTACTS
Purpose: To manage enquiries, requests for information and communications received through the various channels provided, and to maintain the commercial or professional relationship with data subjects.
Legal basis: Consent of the data subject.
Retention: The data will be retained for as long as is necessary to deal with the request or enquiry made and, thereafter, for the duration of any applicable statutory limitation periods.
Data transfers: No data transfers are envisaged, unless required by law or by the competent authorities.
NEWSLETTER
Purpose: To manage subscriptions to and the dispatch of newsletters, marketing communications, promotions, updates and information relating to the organisation’s services and activities, via electronic and/or traditional means.
Legal basis: Consent of the data subject.
Retention: The data will be retained for as long as the user does not request its deletion or withdraw their consent, and thereafter for the periods necessary to meet any potential legal liabilities.
Data transfers: No data transfers are envisaged, unless required by law. However, the data may be processed by technology providers responsible for sending communications.
CVS AND SELECTION PROCESSES
Purpose: To manage the receipt and assessment of applications for current and future recruitment processes, and to liaise with candidates during the recruitment process.
Legal basis: Consent of the data subject.
Retention: The data will be retained for as long as is necessary to manage the current recruitment process and, in the case of unsuccessful applications, for a maximum period of one year, unless the candidate withdraws their consent before then.
Data transfers: No data transfers are envisaged, unless required by law or by the competent authorities.
What rights do you have over the personal data provided
As a user, you can exercise your rights of access, rectification, deletion, opposition, limitation of processing and portability of your data, as well as withdraw the consent given at any time.
You also have the right not to be subject to decisions based solely on automated processing of your data.
You may exercise these rights by sending a written request to the data controller, providing proof of your identity and using the contact details indicated in this Privacy Policy or by sending an e-mail to info@taykohotels.com.
You also have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that the processing of your personal data does not comply with the regulations in force.
Data security and storage
We will keep personal data for the time strictly necessary to fulfil the purposes for which they were collected and for as long as there is a legitimate basis for processing them. We also implement appropriate technical and organisational measures to ensure their security, confidentiality and integrity.