Website privacy policy
At Tayko Hotels we are committed to protecting the privacy and personal data of our users, clients and collaborators. Through this Privacy Policy we inform you about how we collect, use and protect your personal data.
This Privacy Policy establishes the basis on which the company treats the personal data voluntarily provided by our users through the website.
This Policy shall be applicable when personal data is provided to the company, which is responsible for the processing of such data (data controller), and through any of the contact or subscription forms where personal data (name, e-mail, etc.) is collected.
What we are committed to
We undertake to process your personal data in a lawful, fair and transparent manner, guaranteeing its confidentiality and applying the necessary security measures to protect it against unauthorised access, loss or improper processing. Likewise, we will only process your data for the purposes indicated in this Privacy Policy and for the time strictly necessary.
Who is responsible for your personal data
- Company name: Byou Hotels, S.A.
- Tax ID: A95883344
- Address: C/ Ribera 13, 48005 Bilbao (Bizkaia)
Byou Hotels S.A. is a business group dedicated to the operation, management and marketing of hotels, which includes (Tayko Bilbao, S.L., Tayko Sevilla, S.L., Restaurante Ola Bilbao, S.L.) hereinafter referred to as “Tayko Hotels”.
What is personal data and the processing of personal data?
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is any person whose identity can be established directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more elements of that person's physical, physiological, genetic, mental, economic, cultural or social identity.
Furthermore, the processing of personal data involves any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
What processing we carry out on your personal data and for which purposes
CUSTOMERS
Purpose: To manage requests for information, queries, bookings, modifications and cancellations made by clients through the different channels provided, as well as to manage the stay and the provision of the hotel services contracted.
Legitimation: Consent of the data subject and execution of the contractual relationship or application of pre-contractual measures, as well as the legitimate interest of the data controller for the administrative and commercial management derived from the relationship with the client.
Conservation: The data shall be kept for as long as the contractual or commercial relationship is maintained and, once it has ended, for the legal limitation periods that may derive from the same.
Transfers of data: Your data may be communicated to financial institutions for the management of collections and payments, to competent public administrations, as well as to the State Security Forces and Corps when necessary for the fulfilment of legal obligations or for the prevention, investigation or prosecution of criminal offences. They may also be communicated to suppliers necessary for the correct provision of the service (e.g. technological or web hosting services).
CONTACTS
Purpose: To manage queries, requests for information and communications received through the different channels provided, as well as to maintain the commercial or professional relationship with the interested parties.
Legitimation: Consent of the data subject.
Conservation: The data will be kept for the time necessary to deal with the request or query made and, subsequently, for the legal limitation periods that may arise.
Transfers of data: No transfer of data is foreseen, unless legally obliged or required by the competent authorities.
NEWSLETTER
Purpose: Manage the subscription and sending of newsletters, commercial communications, promotions, news and information related to the services and activities of the entity, by electronic and/or conventional means.
Legitimation: Consent of the data subject.
Conservation: The data will be kept as long as the user does not request cancellation or revoke their consent, and thereafter for the periods necessary to meet possible legal responsibilities.
Transfers of data: No transfer of data is envisaged, unless legally obliged to do so. However, the data may be processed by technology providers responsible for sending communications.
CVS AND SELECTION PROCESSES
Purpose: Managing the reception and evaluation of applications for current and future selection processes, as well as contacting candidates during the selection process.
Legitimation: Consent of the data subject.
Conservation: The data will be kept for the time necessary for the management of the current selection process and, in the case of unsuccessful applications, for a maximum period of 1 year, unless the candidate withdraws his/her consent beforehand.
Transfers of data: No transfer of data is foreseen, unless legally obliged or required by the competent authorities.
What rights do you have over the personal data provided
As a user, you can exercise your rights of access, rectification, deletion, opposition, limitation of processing and portability of your data, as well as withdraw the consent given at any time.
You also have the right not to be subject to decisions based solely on automated processing of your data.
You may exercise these rights by sending a written request to the data controller, providing proof of your identity and using the contact details indicated in this Privacy Policy or by sending an e-mail to info@taykohotels.com.
You also have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that the processing of your personal data does not comply with the regulations in force.
Data security and storage
We will keep personal data for the time strictly necessary to fulfil the purposes for which they were collected and for as long as there is a legitimate basis for processing them. We also implement appropriate technical and organisational measures to ensure their security, confidentiality and integrity.