At ‘Cocoon Wellbeing & SPA’, we may process your personal data for the following purposes:

• To manage reservations made, including payment management (where applicable) and the handling of your requests and preferences.
• To manage the subscription to the newsletter and its subsequent delivery.
• To manage your contact requests with ‘Cocoon Wellbeing & SPA’ through the channels provided for this purpose.
• To manage the sending of personalized commercial communications from ‘Cocoon Wellbeing & SPA’, via electronic and/or conventional means, in cases where the user expressly consents to it.
• To manage the provision of the contracted accommodation service, as well as services additional to the stay.
• To manage the conducting of surveys and/or evaluations regarding the quality of the services provided by ‘Cocoon Wellbeing & SPA’.
• To process orders, requests, respond to inquiries, or any type of request made by the user through any of the contact forms made available on the website.
• Through implicit data capture measures, such as the study of the most read pages and the use of cookies.
  
  

The processed data comes from:

• Data provided by you through the completion of forms enabled for this purpose.
• Data derived from the provision of the service. This category includes navigation data through the public website or access to the Client and Reservations Area that you provide indirectly and that are derived from the very provision and maintenance of this activity.
• Data obtained from marketing studies in which you have agreed to participate and for which you have given us your consent to be used.
• Data provided or transferred (with your consent) by third-party companies that provide outsourced services at ‘Cocoon Wellbeing & SPA’ establishments (e.g., regarding telecommunication networks, internet access, excursions, etc.). Depending on the service, the processed data encompasses the following types:
• Identifying data (e.g., name, surname, identity document, postal address, email address, phone number, or mobile device identifiers).
• Economic and operational data related to transactions carried out at ‘Cocoon Wellbeing & SPA’ (e.g., data on consumption made at ‘Cocoon Wellbeing & SPA’ establishments).
• Goods and services transaction data (e.g., payments for services rendered).
• Commercial information data (e.g., interests in products or services).
• For quality assurance and training purposes, we record most of the calls you make to us.
• Cookies. Each website that belongs to and is operated by ‘Cocoon Wellbeing & SPA’ uses cookies. A cookie is a small text file of which there are three types.

1. Session cookies: These are used to maintain something called session state. If you consider your journey through the site as a conversation with us, this cookie only remembers the point we were at in that conversation (for example, if at any point in the conversation you asked us to add a hotel to your basket, the next time you click on the basket it will still be there). These are necessary for the site to function, but are not used in any way to identify you personally.
2. Permanent cookies: These store some numbers on your hard drive. You can see them by looking in the cookie directory of your browser installation if you are interested. They last for a long time and each time you come to our site, you send us a copy of them. We use them to identify you between visits. For example, if the last time you were on the site you were looking for hotels in London and we have a great hotel offer, we can use this cookie to recognize you and show you our great offer. They are not necessary for the site to function, but they can improve your experience. We do not store any personal data in these cookies, only a unique number that identifies you to us.
3. Third-party cookies: You may have noticed that we carry third-party advertising on our site. Occasionally they may send you a cookie. We have no control over them. Although you cannot block "session" cookies, as they are necessary for our site to work correctly, you can configure your Internet browser to reject both "permanent" and "third-party" cookies. The way you do this will depend on the Internet browser you use (e.g., Internet Explorer 5, Netscape 4 or Opera, etc.). Please consult the website of the corresponding Internet browser manufacturer, where you will be able to receive all the information you need.

What is the legal legitimacy for the processing of your data?

The processing of your data related to “Contact” and “Registration to the Client / Reservations / My Reservations Area” and other communication channels at your disposal, is based on the maintenance of your request and, where appropriate, for the provision of the contracted services.

Likewise, the legal basis for the processing of your data derived from the contracting is the execution of the contract for the provision of services or products of ‘Cocoon Wellbeing & SPA’ (according to the terms and conditions stated on the website).

The sending of advertising for our own products may be based on the legitimate interest of ‘Cocoon Wellbeing & SPA’ when you register in the Client Area or contract a service or make a reservation.

In the rest of the cases, as well as when the advertising is from third parties, the processing of your data will be based on the consent you have given us and which we will keep until you request the deletion or object to the processing of your personal data.

The enrichment of your data with external sources is based on your consent.

To whom is your data communicated?

Your data may be communicated to:

• Participated companies or companies of the ‘Cocoon Wellbeing & SPA’ business group, solely for internal administrative purposes and/or for the purposes indicated above.
• Entities operating hotels managed by ‘Cocoon Wellbeing & SPA’ or under a franchise, solely for internal administrative purposes and/or for the purposes indicated above.
• Suppliers of ‘Cocoon Wellbeing & SPA’ or of the hotel operators necessary for the proper fulfillment of legal obligations and/or the purposes indicated above.
• Public Administrations, in the cases provided for by Law.
• Third-party advertising. The advertisements that appear online, personalized and non-personalized, are delivered to you, on our behalf, by our web advertising partners. These third parties include companies such as Amadeus, Affilired, and Google. Consult Google's terms and conditions here.
• We may send your information internationally, including to countries outside the EEA. Some of these jurisdictions offer different levels of personal information protection.