YUDAYA S.L. is especially sensitive to the protection of personal data of the users of the
services of the website and its customers. By means of this Privacy Policy (or Data
Protection Policy), the owner of this website informs the USERS of the website about the
uses to which the personal data collected is put, so that they can decide, freely and
voluntarily, whether they wish to provide the information requested.
YUDAYA S.L. reserves the right to modify this Policy in order to adapt it to new legislation,
jurisprudential criteria, sector practices or the interests of the company. Any modification
will be announced with due notice, so that you are fully aware of its content.

DATA CONTROLLER
The data controller is YUDAYA S.L. and the other companies acting under the trade name "HD
HOTELS". Address: Carretera del Rincón S/N, Centro Comercial Las Arenas, CP 35010, Las Palmas. Tel.:
928491212. www.hdhotels.com

DPD CONTACT DETAILS
The contact details of the DPD designated by the controller are as follows:
rgpd@grupohd.com

PURPOSES OF PROCESSING
The purposes of the collection and processing of personal data, through the different
forms owned by the data controller and made available to Users, are, depending on the
specific case, as follows:
o Manage the registration in the free loyalty programme of the HD Hotels chain of
WeConnect, as well as manage the collection and redemption of user points within
the framework of the same.
o Booking management: manage the booking made through the website of the "HD
HOTELS" programme in one of our hotels.
o Take into account the information and preferences indicated by you in your

"WeConnect Bronze, Silver and Gold" profile, as well as the products and services
contracted and enjoyed by you in order to offer you products and services that
may be of interest to you, based on statistical data compiled by us.
o Manage your contact requests through the channels and/or forms provided for
this purpose.
o Information and, where appropriate, registration in prize draws organised or in
which the data controller participates.
o To know the opinion of customers through satisfaction and quality surveys.
o Sending communications related to your account, including, but not limited to,
points balance, card category or level, notifications and anything else that keeps
you informed about the status of your account.
o Sending commercial communications by any means (including electronic) to inform
you about news, events and about our products or services that may be of interest
to you, unless you object to such processing.

CONSERVATION PERIOD
The personal data provided will be retained for the relevant period of time in order to
comply with legal obligations or for as long as a judge or court may require it.
Consent-based data will be retained as long as you do not revoke consent or object to the
processing.
Additionally, in order to improve your experience in future stays in our hotels, we will keep
the data related to your visit history for a period of seven years, unless you inform us
otherwise, in which case it will be kept for the legally established periods and for as long as
a judge or court may require it.

DATA BLOCKING
In accordance with Article 32 of Organic Law 3/2018 on the Protection of Personal Data
and Guarantee of Digital Rights (hereinafter LOPDGDD), data controllers shall proceed to
block the data when it is rectified or deleted.
The blocking of data consists of the identification and reservation of the data, adopting
technical and organisational measures to prevent their processing, except for making the
data available to judges and courts, the Public Prosecutor's Office or the competent public

administrations, in particular the data protection authorities, for the enforcement of
possible liabilities arising from the processing and only for the period of limitation of such
liabilities.

LEGITIMACY
The controller is entitled to process personal data on the basis of:
o Where requested, on the basis of the consent given by the data subject for one or
more specific purposes as provided for in Article 6.1. a) of the General Personal
Data Protection Regulation when completing the forms and ticking the box
provided for this purpose.
o On the basis of the execution of a contract for the provision of services in
accordance with the Terms and Conditions of the "WeConnect" Programme, as
referred to in Article 6(1)(b) of the General Data Protection Regulation.
o On the basis of legitimate interest, in accordance with Article 6(1)(f) of the General
Data Protection Regulation.

ORIGIN OF THE DATA
The personal data originate from the registration made by the User in the "WeConnect"
programme, from the reservation made by the interested party or from the forms filled in
by the User and made available to him/her by the data controller.

ACCURACY OF DATA
In order to ensure that the data contained in our files always correspond to reality, we will
try to keep them updated. Therefore, for this purpose, the User must make the changes
directly, when authorised to do so, or by notifying, by reliable means, the corresponding
area or department of the data controller.

TARGET
The personal data you provide to the controller may be disclosed to the following
categories of recipients:
o Third parties to whom the Company is obliged to transmit information, such as
public authorities, in order to comply with the requirements of such authorities

and the applicable regulations, as the case may be.
o The companies owning the hotels in order to be able to make the reservation in
the hotels. The basis of legitimacy in this case is the execution of a contract or pre-
contractual measures (art. 6.1.b. RGPD).
Yudaya S.L. does not market, sell or carry out any similar activity with your personal data,
it only processes your personal data for the purposes indicated and for the use of the data
controller.
The controller has service providers with access to personal data (Processors). Among
these service providers, there may be companies located outside the European Economic
Area, so that international data transfers may be carried out, in any case, complying with
the appropriate guarantees in accordance with articles 44 and following of the RGPD. In
order to carry out international transfers with Yudaya S.L.'s suppliers located in the USA,
the standard contractual data protection clauses adopted by the European Commission
are provided as a guarantee.

RIGHTS OF INTERESTED PARTIES
The data subject may in any case exercise the rights to which he/she is entitled, in
accordance with the General Data Protection Regulation, which are:
o Right to request access to personal data relating to the data subject,
o The right to request the rectification of inaccurate or incomplete data,
o Right to request deletion,
o The right to request the restriction of processing,
o Right to object to processing,
o Right to data portability,
o To revoke, if necessary, the consents granted.
The interested party may exercise these rights by means of a request specifying which of
these rights he/she wishes to be satisfied, sending a letter to the following address:
Carretera del Rincón S/N, Centro Comercial Las Arenas, CP 35010, Las Palmas. or by e-mail
to https://www.hdhotels.com/es/contacto/.Cuando if there are doubts as to his/her
identity, he/she may be asked to enclose a copy of his/her ID card or equivalent

identification document.
If you consider that your right to personal data protection has been violated, you may
contact our Data Protection Officer at rgpd@grupohd.com or file a complaint with the
Spanish Data Protection Agency (www.aepd.es).

Last updated January 2024.

All rights reserved© HD HOTELS