Privacy and Personal Data Protection Policy of the website www.terrenobarriohotel.com

Last updated: December 2025

This privacy policy applies to the website www.terrenobarriohotel.com.

Please read this policy carefully. It contains important information about the processing of your personal data, whether you visit our website as a private customer or act in a professional capacity. This policy also informs you of the rights granted to you under applicable regulations and the obligations that apply to you.

We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with possible legislative or case law changes.

If you have any questions or need clarification regarding our Privacy Policy or your rights, you may contact us through the channels indicated below.

You declare that the data you provide to us, now or in the future, are accurate and truthful and you undertake to notify us of any changes to them. If you provide personal data relating to third parties, you undertake to obtain their prior consent and to inform them of the contents of this policy.

As a general rule, the fields in our forms marked as mandatory must be completed in order to process your requests.

Who is responsible for processing your data?

Controller: TERRENO HOSPITALITY GROUP, S.L. (EL TERRENO BARRIO HOTEL, hereinafter)

Tax ID: B22898522
Postal address: Plaza Mediterráneo, 5, 07014 Palma, Balearic Islands (Spain)
Telephone: +34 971 787 700
Email: naguilera@terrenobarriohotel.com
Data Protection Officer contact: dpd.privacy@grupo-pinero.com

What personal information do we collect?

If you access our website as a private customer, the data we process are obtained from:

• The forms you complete and the requests you submit;
• The data included in requests and enquiries received by email;
• Profiles and analytics obtained from users’ browsing activity on the website.

If you interact with this website as a professional, in addition to the data obtained from the forms you complete and the requests you submit, we also process data obtained from:

• Requests for the creation of user accounts; and
• Information generated by the contractual relationship itself.

The categories of data processed for private customers typically include:

• Identification and contact data, such as ID card or passport number, telephone number, email address;
• Personal characteristics data, such as language;
• Data relating to transactions of goods and services;
• Economic and transaction data;
• Data related to your browsing activity, for example the IP address from which you connect to the website, weblogs, pages visited or actions carried out on the website. For this purpose, we use cookies and similar technologies that may involve tracking your browsing activity. More information is available in our cookie policy here;
• Commercial tracking data;
• Preferences and commercial profile data, where you have given your consent;
• Data generated by your use of social networks that you have chosen to share with us (for example, likes and comments).

The categories of data processed for professionals typically include:

• Professional identification and contact data;
• Personal characteristics data, such as language;
• Data relating to transactions of goods and services.

The data of professionals have been provided either directly by them or by the person who requested the creation of the corresponding user accounts on their behalf.

For what purposes will we process your data?

The data of website users will be processed for the management of the relationship with them, handling their requests and enquiries, processing reservations, administering and managing website security, complying with legal obligations, statistical purposes and quality assessment.

To whom may we disclose your data?

Personal data will only be disclosed to third parties where required by law, with your consent, or where your request implies such disclosure or it is necessary for the management and control of the contractual relationship.

For example, for the proper processing of reservations, the data provided by private customers must necessarily be disclosed to the companies whose services are included in the contracted service.

Legal basis for processing

The legal basis for processing your data is the management of the legal relationship established with you, compliance with legal obligations and, where applicable, the provision of the services requested or contracted.

Website security management is based on the existence of a legitimate interest.

The preparation of statistics, quality control and the sending of commercial communications to private customers are based on our legitimate interest for internal administrative purposes, as well as to evaluate and promote our services.

The sending of personalised commercial communications to private customers by electronic means is based on your consent.

The sending of information to website visitors acting as professionals regarding news, products and tourism services marketed by EL TERRENO BARRIO HOTEL is based on our legitimate interest in keeping collaborating entities informed about our products and services.

How long will we keep your data?

As a general rule, we will retain your data for the duration of the relationship you maintain with us and, in any case, for the periods established by applicable legal provisions, for example in accounting and tax matters, and for the time necessary to address possible claims related to the services or potential liabilities arising from the processing.

Your data will be deleted when they are no longer necessary or relevant for the purposes for which they were collected. Logs of access to restricted areas of the website will be deleted one month after their creation.

Information related to browsing activity will be deleted once the web session has ended and the statistics have been generated.

What are your rights?

You have the right to obtain confirmation as to whether or not we are processing your personal data and, if so, to access them. You may also request that inaccurate data be rectified or that incomplete data be completed, as well as request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you may request the restriction of the processing of your data. In such cases, we will only process the affected data for the establishment, exercise or defence of legal claims or for the protection of the rights of other persons.

Under certain conditions and for reasons related to your particular situation, you may also object to the processing of your data. In such cases, we will cease processing the data unless there are compelling legitimate grounds overriding your interests or rights and freedoms, or for the establishment, exercise or defence of legal claims.

Likewise, under certain conditions, you may request the portability of your data so that they are transmitted to another data controller.

You may withdraw the consent you have given for certain purposes at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal, and you may lodge a complaint with the competent authority.

To exercise your rights, you must send a request to the relevant data controller, accompanied by a copy of your national identity document or another valid identification document, by post or email, to the addresses indicated in the section “Who is responsible for processing your data?”.