Privacy Policy

DATA PROTECTION INFORMATION

Last updated: 30 September 2025

By using the following "Website" and/or communicating electronically with congresos@bcocongresos.com, personal data of users accessing and requesting our services may be collected and processed, the processing of which is governed by this Privacy Policy ("Privacy Policy").

Controller	BCO Congress, S.L. "BCO Congresos"
Website (domains and subdomains)	https://preview.bcocongresoshotels.com
Purpose	To handle and manage queries submitted via contact forms, telephone or other channels; send commercial communications (with consent); share data with Ávoris Group companies; analyse data to send personalised offers; register users; manage bookings; improve the website; comply with legal obligations
Legal basis	Consent; Contract performance; Legitimate interest; Legal obligation
Recipients	Personal data will not be disclosed to third parties unless legally required. However, accommodation providers and service providers acting as data processors may access the data where necessary
International transfers	Transfers may occur when services are outside the EEA, based on Article 49.1(b) GDPR
User rights	Right of access, rectification, erasure, objection, restriction, portability and not to be subject to automated decisions
Additional information	Legal Notice and Terms of Use; Cookies Policy

I. IDENTIFICATION AND CONTACT DETAILS OF THE CONTROLLER

Controller’s contact details:

BCO CONGRESS, S.L., with Tax ID No. B-57.764.292, and registered office at Gremi de Fusters Street 23, 07009 – Palma de Mallorca

Data Protection Officer’s contact details:

You may contact our Data Protection Officer via the following email address: dpo@avoristravel.com.

II. SCOPE, PURPOSE, LEGAL BASIS AND DURATION OF PROCESSING

Scope of this Privacy Policy

This Privacy Policy applies to personal data collected in connection with the services provided by BCO Congresos through the Website, as well as to the collection of personal data through applications, blogs, forms, legal terms or other contact channels or means that refer to this Privacy Policy or contain a link to it (hereinafter collectively referred to as the “Services”).

What information do we collect about you?

In general, you may access and browse the Website without providing any personal data, except as provided in the Cookies Policy.

BCO Congresos will process your personal data (or those of accompanying persons or other individuals on whose behalf you act who have authorised you to make the booking) only when you provide them to us through the forms and designated sections available on our Website, which, depending on the purpose, may include your identification data, contact details, information regarding bookings made from your account, as well as any other information you may provide in the “Observations”, “Comments” or similar sections.

The following processing activities are carried out:

PURPOSE	LEGAL BASIS	DURATION
Sending of commercial communications (email, SMS, WhatsApp, telephone, etc.) regarding products and services marketed by BCO Congresos, which are directly related to the contracted service	Legitimate interest. This processing is necessary for the purposes of the legitimate interests pursued by BCO Congresos, in accordance with Article 21.2 of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce. In the event that no service has previously been contracted with BCO Congresos, it will be necessary to obtain consent for the sending of commercial communications. In any case, the customer may object to receiving this type of communication through the means provided in section X of this Privacy Policy.	Unless you inform us of your wish to stop receiving commercial communications.
Sending of electronic commercial communications (newsletter) and non- electronic communications (SMS, WhatsApp, telephone calls, etc.) regarding offers and promotions on products and services offered by BCO Congresos	Consent of the data subject. To offer you products and services that may be of interest to you, offers relating to products and services associated with those contracted with BCO Congresos will be sent to the customer for their consideration. In any case, the customer may object to receiving this type of communication through the means provided in section X of this Privacy Policy.	Unless you inform us of your intention to unsubscribe from the newsletter or your wish to stop receiving electronic or other commercial communications.
Managing queries and/or complaints submitted through the contact form	Performance of the contractual relationship. If you use the telephone channel, the call may be recorded to handle your request and ensure its quality.	For the period necessary to comply with the applicable legal requirements and thereafter, for the periods provided by law, depending on the content of your enquiry.
Managing queries, complaints and/or requests	As appropriate, based on the legitimate business interest of BCO Congresos, and its business, or on your consent, we may record the communications and telematic instructions produced during your use of any BCO Congresos customer service or sales office service and, therefore, we will process your personal data, including your voice when you contact us through such channels, in order to keep a record of the transactions carried out for the relevant legal purposes.	For the period necessary to handle your claim / query / complaint and thereafter, for the periods provided by law, depending on the content of your enquiry.
Management of the booking / contracted services	Performance of the contractual relationship. To manage your request to contract the accommodation service at the relevant establishment, as well as to process the payment for the services provided and resolve any doubts, queries or complaints that may arise in the context of such services and, once your request has been confirmed, to maintain the contractual relationship. Where you request a booking on behalf of an accompanying person (as representative / authorised person), you undertake and declare that you have informed the data subject of the content of this Privacy Policy and have obtained their consent to disclose their personal data to BCO Congresos, being liable for any damage or loss, whether direct or indirect, that may arise as a result of failure to comply with such obligation.	For the duration of the contractual relationship and thereafter, for the periods provided by law.
Sending of quality surveys	Legitimate interest of BCO Congresos. To assess the level of customer satisfaction with the Services contracted, quality surveys will be sent to obtain their opinion on them and thus improve those aspects that may require it in relation to other customers.	For the duration of the contractual relationship and thereafter, for the periods provided by law.
Sending of communications related to the status of your booking	Performance of the contractual relationship. Based on our contractual relationship with you, to send you status updates and service-related or operational communications regarding the contracted service.	For the duration of the contractual relationship and thereafter, for the periods provided by law.
Other purposes	Where you authorise us, for the sending of advertising relating to other products and services of BCO Congresos and the companies of the Ávoris Business Group, through all available channels (including electronic means), whether of a general nature or adapted to your personal characteristics according to your interests, by means of the creation of a commercial profile based on the information provided and through automated processing.	Unless you inform us that you wish to stop sharing your data with such entities.
	Compliance with legal obligations (for example, for security reasons, fraud prevention, compliance with health regulations). Legitimate interest.	For the periods provided by the applicable legislation in each case.
	Internal analytical purposes. In order to improve our services and products through market research, or to manage requests, queries or possible complaints that may arise, as provided in Article 6.1(f) of the General Data Protection Regulation.	For the periods provided by the applicable legislation in each case.

These data will be collected and processed by BCO Congresos only if you provide them to us. All fields marked with (*) within the forms on the Website are mandatory, such that failure to complete any of them may result in the relevant form not being submitted and, consequently, in the requested service not being provided.

By clicking on the “Accept”, “Submit” or equivalent button included in the forms, you declare that the information and data you have provided therein are accurate and true.

III. RECIPIENTS

Your data and the personal data of users or accompanying persons on whose behalf you make the reservation may be disclosed:

(i) To companies of the Ávoris Corporación Empresarial Group to which BCO Congresos belongs, for the proper provision of the service or for internal administrative purposes.

(ii) Where BCO Congresos is under a legal obligation to disclose your data, these may be communicated to Public Authorities, the Tax Agency, Courts and Tribunals, and State Security Forces and Bodies.

(iii) Likewise, your data may be disclosed to certain third-party service providers with whom BCO Congresos has a contractual relationship, and who provide services associated with the contract, both for its formalisation and for its management and execution. By way of example and not limitation, BCO Congresos providers operate in the following areas: water parks, amusement parks, music events, sporting events, etc., as well as general auxiliary services, commercial communications, technology service providers, financial institutions, fraud prevention, legal advisory services, multidisciplinary professional service firms, maintenance-related companies, technology service providers, physical security companies and call centre service providers. These providers, depending on the country of destination of your trip, may be located in third countries for which an international data transfer may be required.

(iv) The above disclosures are limited to enabling the development and maintenance of the contractual relationship between us and you. This is the case, for example, of final service providers, if you request entrance to a water park in order to ensure that the requested booking is made. You may check which providers we share your data with by reviewing the booking documentation that we will provide to you at the end of our services. However, it is advisable that you review the privacy policies of such companies to obtain further information on how they process your personal data, as well as in the cases provided for under the data protection regulations in force at any given time.

IV. INTERNATIONAL TRANSFERS

No international transfers are foreseen. If they occur, appropriate safeguards under GDPR will apply.

V. LINKS

Our Website may contain links to third-party websites that are outside our control. BCO Congresos is not responsible for the security or privacy of any information collected on such websites or other external services, and therefore you should exercise caution and review the applicable privacy policies of the third-party websites you use.

VI. SECURITY

At BCO Congresos, we maintain the highest levels of security required by law in order to protect your personal data against accidental loss and unauthorised access, processing or disclosure, taking into account the state of the art, the nature of the data stored and the risks to which they are exposed. When we receive your data, we use strict procedures and security features to prevent any unauthorised access.

The actions described in this section, aimed at ensuring a level of security appropriate to the risk identified, shall include, where necessary, the following measures:

Pseudonymisation and encryption of personal data.

Measures capable of ensuring the ongoing confidentiality, integrity, availability and resilience of processing systems and services.

Measures capable of restoring the availability of and access to personal data in a timely manner in the event of a physical or technical incident.

The existence of a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing.

Periodic assessment of the risk of accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised disclosure of or access to such data.

VII. CONFIDENTIALITY

The personal data that may be collected will be treated with strict confidentiality. We undertake to maintain secrecy regarding such data and to comply with the duty to safeguard them by adopting all necessary measures to prevent their alteration, loss, and unauthorised processing or access, in accordance with the provisions set out in the applicable legislation.

VIII. RESPONSIBILITY

Users are responsible for providing accurate and up-to-date data.

IX. COOKIES

This Website uses cookies. Please refer to the Cookies Policy for further information.

X. RIGHTS

You may exercise your rights of access, rectification, objection, erasure, restriction of processing, portability and not to be subject to automated individual decision-making, as recognised by the applicable legislation, by sending a written communication to the address indicated in the header, or by sending an email to proteccion.datos.bcocongresos@avoristravel.com, through which you may also contact our Data Protection Officer.

Where you have given your consent for a specific purpose, you may withdraw your consent at any time by following the procedure indicated above.

Without prejudice to the foregoing, we inform you that you have the right to seek protection from the Spanish Data Protection Agency through its website www.aepd.es.