Privacy Policy

( 1 )  Who is responsible for the processing of your data?

The owner of the website https://yurbbanhotels.com is YURBBAN WORLDWIDE, S.L., registered in the Mercantile Registry of Barcelona, volume 43,188, folio 213, sheet B426216, entry 1, with CIF B-65786378, and address at Calle Trafalgar, 52, 1º 2ª, 08010 Barcelona.

The entity responsible for the processing of your personal data depends on the hotel you contact or make a reservation with:

  • For Hotel Yurbban Passage, the responsible entity is SOGAMAN T26, SLU, registered in the Mercantile Registry of Barcelona, volume 45,317, folio 18, sheet B-483.954, entry 1, CIF B-66729203, address Calle Trafalgar 26, bajos, 08010 Barcelona.

  • For Hotel Yurbban Trafalgar, the responsible entity is SOGAMAN RESIDENCIAL, SLU, registered in the Mercantile Registry of Barcelona, volume 41,290, folio 54, sheet B-379.951, entry 1, CIF B-65120453, address Calle Trafalgar, 30, 08010 Barcelona.

  • For Hotel Yurbban Ramblas, the responsible entity is SOGAMAN RAMBLA, SLU, registered in the Mercantile Registry of Barcelona, volume 47,803, folio 78, sheet 562688, entry 1, CIF B04988754, address Rambla 127, 08002 Barcelona.

(Hereinafter, any of the three individually or collectively referred to as “Yurbban”).

YURBBAN has implemented the necessary technical and organizational measures to comply with data protection regulations.

Contact information regarding privacy and data protection:
Phone: +34 93 160 03 03
Email: gdpr@yurbbanhotels.com

 

( 2 )  What type of personal data do we process and for what purpose?

( 2.1 ) Types of personal data collected
For confidentiality reasons, we collect the minimum amount of personal data from our clients, beyond what you voluntarily provide or what the law requires us to collect and retain for reservations made through booking engines. We may collect and process the following categories of personal data:

a. Name, title, and gender.
b. Contact details and address, phone number (if making a reservation by phone), email address (if booking via email), or any data required by the booking engine to make a reservation. Reservation details and dates, information about your stay and preferences, as well as credit card information. For electronic reservations, the system may request a record of your documentation to verify its accuracy. Documentation data will only be used for these purposes and retained only for the duration of your stay.
c. Any additional data you provide when making a reservation or contracting our services.
d. For our employees: identification data, social security data, banking information, and any other data necessary for the employment relationship.
e. Identification data of our suppliers or their contact persons if they are companies.
f. Communications with us via email or other means. Telephone inquiries may be recorded in our customer service database.
g. Information collected when using our website or other digital platforms. This may include IP address, browser type, operating system, referring website, and browsing behavior.
h. Social media information. Depending on your social media settings, we may receive information from your social media provider. For example, if you log in using a social media account, we may receive your profile information, including contact data, interests, and contacts. For more details, consult your social media provider’s privacy policy.
i. Information you choose to share with us, e.g., when adding comments on LinkedIn or Facebook.
j. If you connect to the TV in any of our rooms, we may request your ID, creating a record of your browsing history.
k. Images captured by our surveillance cameras within our premises.

( 2.2 ) Purpose of processing personal data
Your personal data will only be used for the following purposes:

a. To register you in our database if you make a reservation or use our services.
b. To perform the necessary commercial and administrative management with website users, clients, or potential clients.
c. At YURBBAN, we process the information you provide to respond to your inquiries, provide information about our services, manage reservations, and fulfill legal obligations arising from these activities.
d. To send marketing communications, newsletters, or promotional information via email, social media, or other electronic or physical means, provided you have explicitly consented to receive such communications. For clients using our services, we may send commercial information, updates, or news related to our services without requiring prior consent, based on our contractual relationship.
e. To communicate with you to respond to inquiries or process complaints.
f. To collect your feedback regarding the quality of our services or the treatment received.
g. Data collected during website navigation is used to provide access to online content, respond to user requests, maintain a statistical record of visits (IP addresses, browser data, country, accessed pages, etc.), improve services and products, optimize offerings, provide more effective customer service, and enhance website design and content.
h. Data from clients, employees, and suppliers is processed within the contractual relationship to comply with administrative, fiscal, accounting, and labor obligations under applicable law.
i. To comply with legal obligations.

In accordance with LSSICE, YURBBAN does not engage in SPAM practices; we do not send commercial emails without proper legal basis. You always have the right to withdraw your consent to receive communications.

We will not process your personal data for any purpose other than those described here, except as required by law or judicial order. Your personal data will not be subject to automated decision-making that produces effects on you.

 

( 3 )  What is the legal basis for processing your data?

The legal basis for processing your personal data is your explicit consent given to carry out the purposes described above, which will be requested when you contact us for information.

If a commercial relationship arises between you, either as a client or as a supplier, and YURBBAN, the legal basis legitimizing the processing of your personal data will be the execution of the contractual relationship established.

Compliance with legal obligations that apply to us may also serve as a legal basis.

In some cases, the processing of your personal data may be justified by our legitimate interest. The legal basis for processing images recorded by our surveillance cameras is our legitimate interest in maintaining the security of our facilities.

If you do not provide us with your personal data or do not accept our privacy policy, YURBBAN will not process your personal data. However, this may make it impossible for us to send you information or, if applicable, provide our services.

( 3.1 ) Commercial Information

Any communication you send will be incorporated into YURBBAN’s information systems.

If you provide your personal data and accept this privacy policy, YURBBAN may carry out the following activities and/or actions, unless you indicate otherwise:

  • Sending commercial and/or promotional communications in response to your request for information by any means. The legal basis for this processing is your explicit consent provided when voluntarily making the request.

  • Sending any information, including commercial information such as news, updates, or any information related to our activities or services contracted by our clients. The legal basis for this processing is our legitimate interest within the established commercial relationship with you.

Objection or Withdrawal. You may object to or withdraw your consent to receive marketing communications at any time by following the instructions in the relevant marketing communication or by contacting us at gdpr@yurbbanhotels.com.

( 3.2 ) Curricula / CVs

If a user submits their CV to YURBBAN, the data provided will be processed to include the applicant in the selection processes, analyzing the profile to select the best candidate for the vacant position at YURBBAN.

We will only accept CVs submitted electronically; paper submissions will not be accepted. If there are any changes to your data, please notify us in writing as soon as possible to keep your information updated.

Your CV and the data it contains will be stored for a maximum period of one year, after which the data will be deleted, ensuring full confidentiality during processing and subsequent destruction. If you wish to continue participating in YURBBAN’s selection processes after this period, please resubmit your updated CV.

However, if you are hired by YURBBAN, your CV will be retained along with the rest of your employment record for the duration of your contractual relationship with the relevant company.

 

( 4 )  Data Retention Period: How long will we keep your data?

The personal data you provide will be retained for as long as necessary to manage the information you request, as well as to manage your reservations, provide our services, or fulfill any contract that may arise between YURBBAN and third parties.

If your identifying data is stored in our database for sending commercial information, it will be retained as long as the legal basis legitimizing its storage and use remains valid. You may request the deletion of your data at any time to stop receiving commercial communications.

Once the data has fulfilled the purposes for which it was collected, it will be permanently deleted. However, we may retain your data for a longer period if required to comply with legal obligations. It may also be necessary to keep it for the duration needed to cover the statute of limitations for any legal responsibilities that may arise.

Images recorded by our surveillance cameras will be retained for 30 days, unless required by the police or judicial authorities to be kept for a longer period. In such cases, they will be securely blocked.

Data provided to initiate a recruitment process will be kept for a maximum period of one year. If you are not hired by YURBBAN or are no longer part of an ongoing recruitment process, the data will be deleted and no copy will be retained.

The personal data of our employees will be retained for the duration of their employment with YURBBAN and, subsequently, for the legally established retention periods.

 

( 5 )  Recipients of your data

Within our organization, your personal data will be processed by duly authorized personnel and, if necessary or practical to fulfill the purposes described above, may also be processed by third parties.

The categories of recipients to whom your personal data may be communicated include:

  • Third-party data processors, such as IT providers, consultants, advisors, and other companies providing auxiliary services.

  • Social media providers.

  • Public authorities and organizations, exclusively to comply with applicable legal obligations.

  • Other providers to whom your personal data may be transferred if necessary, such as financial institutions, fraud detection service providers, etc.

  • Operationally, with SMART ROOMS CORPORATION and its subsidiaries, or the SOGAMAN GROUP with which we share management.

  • Third-party websites. Our websites may contain links to third-party websites. If you follow these links, you will leave our website or mobile applications. This privacy policy does not apply to third-party websites, and YURBBAN declines any responsibility for third-party use of your personal data. Access and use of these websites is your responsibility.

In all cases, the third parties mentioned above will have previously signed the corresponding confidentiality agreement following our instructions in accordance with current data protection regulations, will be bound by professional secrecy, or will act in compliance with a legal obligation.

The information you provide through this website will be hosted on YURBBAN’s servers.

 

( 6 )  What are your rights when you provide us with your data?

If you wish to exercise the rights granted to you under data protection regulations, please send an email to gdpr@yurbbanhotels.com, specifying in the subject line the right you wish to exercise and attaching a copy of your national ID or passport.

The rights recognized by current legislation, which you may exercise, are:

( 6.1 ) Right of Access:
You have the right to be informed by YURBBAN whether your personal data is being processed. If so, you may access your data and receive the following information:

  • The purposes of processing.

  • The categories of personal data involved.

  • The retention period or criteria used for storing the data.

( 6.2 ) Right to Rectification:
You have the right to request YURBBAN to correct any inaccurate or incomplete data through an additional rectification statement.

( 6.3 ) Right to Erasure (Right to be Forgotten):
You have the right to request the deletion of your data when:

  • The processing is unlawful.

  • You have withdrawn your consent.

  • The data is no longer necessary for the purposes for which it was collected.

  • You have exercised your right to object, and no other legitimate grounds for processing prevail.

  • The data must be deleted to comply with a legal obligation.

You do not have the right to erasure when the processing is necessary for:

  • Exercising the right to freedom of expression and information.

  • Compliance with a legal obligation of YURBBAN.

  • The establishment, exercise, or defense of legal claims.

  • Public interest reasons based on applicable law, including public health or historical, statistical, or scientific research.

( 6.4 ) Right to Data Portability:
You have the right to receive your data in a structured, commonly used, and machine-readable format, and to transfer it to another data controller, when processing is carried out by automated means and based on:

  • Your consent for specific purposes.

  • The execution of a contract or pre-contract with you.

The right to data portability does not apply when:

  • Transmission is technically impossible.

  • It may adversely affect the rights and freedoms of others.

  • Processing is carried out for public interest purposes based on applicable law.

( 6.5 ) Right to Restriction of Processing:
You may object to the processing of your data by YURBBAN for reasons related to your particular situation when processing is based on:

  • Direct marketing.

  • Profiling.

  • Legitimate interest of the controller or a third party, unless your interests, rights, and freedoms prevail, especially if you are a child.

  • Historical, statistical, or scientific research, unless processing is necessary for public interest.

Even if you object to the processing of your data, YURBBAN may continue processing it if its legitimate interest overrides your rights and freedoms in a justified legal procedure. YURBBAN will inform you of your right to object explicitly, clearly, and separately from other information at the time of first communication.

( 6.6 ) Right to Object:
You have the right to object to the processing or to require cessation of processing when your consent is not necessary, based on a legitimate and justified reason relating to your specific situation, unless otherwise provided by law.

( 6.7 ) Right Not to Be Subject to Automated Profiling:
You have the right not to be subject to automated profiling that results in individual decisions intended to evaluate, analyze, or predict personal aspects such as:

  • Professional performance.

  • Economic situation.

  • Health.

  • Personal preferences or interests.

  • Reliability.

  • Behavior.

  • Location or movements.

When profiling is based solely on automated processing:

  • You have the right to be informed if the decision could produce significant legal effects.

  • You have the right to obtain human intervention from YURBBAN, to express your point of view, and to contest the decision if the processing is authorized by:

    • Your explicit consent.

    • A contract between YURBBAN and you.

This right does not apply when decisions resulting from profiling are authorized by:

  • Your explicit consent.

  • A contract between YURBBAN and you.

  • Processing based on applicable law.

     

( 7 )  Complaint to the Supervisory Authority

If you believe that YURBBAN has violated any of your rights protected under data protection legislation or has breached any obligation regarding the protection of personal data, you have the right to file a complaint with the competent supervisory authority in Spain, which is the Spanish Data Protection Agency (Agencia Española de Protección de Datos), located at Calle Jorge Juan, 6, 28001 – Madrid.
Tel.: 901 100 099 – 912 663 517

You can also submit an electronic complaint through the electronic headquarters available on their website: https://www.aepd.es

 

( 8 )  Legislation and Jurisdiction

This Privacy Policy is governed in all respects by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data.

It is also governed by Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights. Likewise, our website is governed by Law 34/2002 of 11 July on Information Society Services and Electronic Commerce.

Users of this website are subject to Spanish law and jurisdiction, to which they expressly submit, with the Courts and Tribunals of Barcelona being competent for the resolution of all disputes arising from or related to the use of this website.

 

( 9 )  Additional information

( 9.1 ) Social Networks (Privacy Policy)

Please note that YURBBAN may have a presence on social media platforms. The processing of data from individuals who follow YURBBAN on social networks (and/or interact or connect through social media) on the official YURBBAN pages will be governed by this section, as well as by the terms of use, privacy policies, and access regulations of the respective social network, which must have been previously accepted by the user.

YURBBAN will process your data for the purpose of properly managing its presence on the social network, informing you of activities, products, or services, as well as for any other purposes permitted by social network regulations.

The publication of content is prohibited if it:

  • Is allegedly illegal under national, EU, or international law, engages in illegal activities, or contravenes principles of good faith.

  • Violates fundamental rights, breaches online courtesy, harasses or may generate negative opinions among our users or third parties, or, in general, is deemed inappropriate by YURBBAN.

  • Contravenes principles of legality, honesty, responsibility, protection of human dignity, protection of minors, public order, privacy, consumer rights, or intellectual and industrial property rights.

YURBBAN reserves the right to remove, without prior notice, any content on its website or corporate social media deemed inappropriate. Communications sent through social media will be stored in a file owned by YURBBAN, which may be used to send you relevant information.

For more information, including a list of companies in our group, please consult this privacy policy. In any case, if you provide personal information through social media, YURBBAN is not responsible for the security measures of the respective platform; users should consult the platform’s terms if they wish to understand these measures.

( 9.2 ) Security Measures

All data provided to us will be treated confidentially. YURBBAN has adopted all necessary technical and organizational measures and protection levels to ensure data security, preventing alteration, loss, theft, unauthorized processing, or access, according to the current state of technology and the nature of the stored data. Furthermore, the processing and recording of data in files, programs, systems, or equipment, both local and remote, comply with the integrity and security requirements established by applicable law.

( 9.3 ) SSL Certificate (Secure Sockets Layer)

The SSL certificate provides authentication, privacy, and data security between YURBBAN and the user. YURBBAN has a security certificate used to establish secure connections, encrypting and decrypting all data sent until the connection is closed.

( 9.4 ) Language

The applicable language of this Privacy Policy is Spanish. Therefore, in case of any contradiction in versions provided in other languages, the Spanish version shall prevail.

 

( 10 )  Update

This Privacy Policy was last updated in December 2024 but may be updated at any time. We recommend that you review it each time you access our website in case any changes have been made.

 

 

 

This disclaimer exists in a Spanish and English language version. In case of contradiction between both versions, the Spanish version shall prevail.