Privacy Policy

Privacy Policy

Effective date: 2026-06-03

1. Identity of the Data Controller

INVERSIONES GOAC CHAMARTIN, S.L., Tax ID: B87053914, Agustín de Foxá, s/n, Madrid, 28036, ES (hereinafter the "Controller").

Trading name: Hotel Chamartin The One.

2. Contact for Privacy Matters

For any question related to the processing of your personal data, please contact us at: proteccion.datos@hotelchamartintheone.com.

3. What Data We Collect and Why

We collect the following categories of personal data when you use our services:

  • Identity & contact data – name, email address, phone number – to provide you with hotel services and communications.
  • WiFi connectivity data – device MAC address, IP address, connection timestamps – to manage network access in compliance with applicable regulations. This data is retained for 90 days.
  • Voice interaction data – if you use our voice concierge service, conversation logs are retained for 6 months for quality and safety purposes.
  • Cookie and analytics data – see Section 7 for details.

4. Legal Basis for Processing

We process your personal data under the following legal bases in accordance with Art. 6 GDPR:

  • Performance of a contract (Art. 6(1)(b) GDPR): managing your reservation, check-in/check-out, and delivering the services associated with your stay.
  • Compliance with a legal obligation (Art. 6(1)(c) GDPR): guest registry as required by public safety regulations; issuing and retaining invoices in accordance with tax and accounting law.
  • Consent (Art. 6(1)(a) GDPR): sending commercial and promotional communications, providing hotel WiFi access, and installing non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Data Processor

The Hotel uses Zillion Platform as a data processor to provide guest management, WiFi access management, and marketing automation services. A Data Processing Agreement (GDPR Art. 28) governs this relationship. Zillion does not use your data for its own purposes.

6. International Transfers

Your personal data is stored and processed within the European Economic Area (EEA). Where sub-processors located outside the EEA are used, appropriate safeguards are in place (EU Standard Contractual Clauses or equivalent).

7. Cookies and Tracking

We use the following categories of cookies:

  • essential
  • analytics

You can manage your cookie preferences at any time via our cookie preference center.

8. Your Rights

Under GDPR you have the right to:

  • Access your personal data (Art. 15).
  • Rectify inaccurate data (Art. 16).
  • Erasure ("right to be forgotten") (Art. 17).
  • Restrict processing (Art. 18).
  • Data portability (Art. 20).
  • Object to processing (Art. 21).
  • Withdraw consent at any time, without affecting prior lawful processing.

To exercise any of these rights, contact us at proteccion.datos@hotelchamartintheone.com. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD, www.aepd.es) or with the supervisory authority of your country of residence.

9. Retention Periods

  • Guest and reservation data: 3 years from the end of the stay (civil claims limitation period).
  • Guest registry (traveller registration): 3 years in accordance with public safety regulations.
  • Accounting records and invoices: for the retention periods required by applicable tax, accounting and commercial law.
  • Commercial communications: 24 months from the last interaction or until you withdraw consent.
  • Marketing opt-outs and objections: retained indefinitely to ensure your decision is respected.
  • WiFi access logs: 90 days.
  • Voice interaction logs: 6 months.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with Art. 32 GDPR.

11. Changes to This Policy

We may update this privacy policy from time to time. The date at the top of this page indicates when it was last revised. We will notify you of material changes through our usual communication channels.

Template version: 0abc847bf88cd4a0 | Generated: 2026-06-03

Version 0abc847bf88cd4a0