This section presents the data protection information to be included in the conditions of the Minor DISCOVERY Programme.

For residents and citizens of the People's Republic of China, the data protection regulations can be found here. This regulation is part of the Minor DISCOVERY Privacy Policy (“Privacy Policy”) and should be read in conjunction with it.

1. Who is the data controller for the processing of data subjects' data?

Identity: Minor Hotels Europe & Americas, S.A., (hereinafter “MHEA”)
TAX IDENTIFICATION NUMBER: A-28027944.
Address: Calle Santa Engracia 120, 7ª, 28003, Madrid.
Data Protection Officer (DPO): you can contact our DPO through the following means:
E-mail: dataprotection@minor-hotels.com, indicating in the reference "Data Protection Officer".

2. For what purpose will MHEA process the user's personal data and on what grounds?

We inform you that the data provided in the Minor DISCOVERY Programme registration process are processed by MHEA for the following purposes:

• Proceed to the registration to the Minor DISCOVERY Programme. This processing is legitimised by the contractual relationship established between the parties.    
• Creation of an account associated with the registration that allows access within the Minor Hotels website(s), to enable the management of the user's account, to communicate with the person in charge, as well as to manage the account. This processing is legitimised by the contractual relationship established between the parties 
• Sending communications related to your account, including, among others, registration, notifications, failures and/or problems with the account and any other communication that keeps you informed of the status of your account. This processing is legitimized by the contractual relationship established between the parties 
• Sending commercial communications via email or equivalent electronic means of communication about offers and services related to the Programme, unless you tell us otherwise by objecting to the processing of your data for this purpose. This processing is justified by the legitimate interest of the data controller, specifically in relation to communications concerning the Programme, as outlined in these General Terms & Conditions, with the content of these communications being directly related to the Programme itself. The user may object to this consent by sending an e-mail to dataprotection@minor-hotels.com as well as through the procedure included in each of these commercial communications.  
• To measure your degree of satisfaction, this purpose may include sending quality surveys and adapting and personalising the services. This processing is legitimised by the legitimate interest and respond to Minor Hotels’ need to adapt its operations and the products and services offered to the preferences and expectations of users, for which it is necessary to know their opinion. This processing also contributes to increasing the quality of the services provided to users. Although for the analysis of opinions, responses will be collected on an individual basis, their analysis will be carried out in a general way, by means of statistics, without identifying specific users. Users may, in any case, refuse to give their assessment, as well as communicate their opposition to being contacted for this purpose.    
• Personalisation of the services offered to members of the Programme, by means of the study of their profile and tastes. This processing is legitimised by the legitimate interest held by Minor Hotels. To improve the receptiveness to the products offered, Minor Hotels will proceed to the elaboration of a profile based on your personal characteristics (such as stays made) and the information obtained from your actions as a user. This purpose responds to the need to make personalised offers to each of the members of the Programme (including by electronic means, when authorised), to facilitate the acquisition by them of their preferred products and similar alternatives, as well as to offer them products that may be of interest to them based on their profile (for this purpose, automated decisions may be taken). Therefore, the user will benefit from offers tailored to his preferences and tastes, expressed through his activity or deduced according to the characteristics of his profile. The information relating to your profile will be treated securely and confidentially, being processed only in systems that analyse the information obtained in an automated manner. Moreover, the User may, at any time, express his/her wish not to be subject to this processing by exercising his/her right to object to it. 

3. What user data will MHEA process?

MHEA will process the following categories of data:    

• Data provided for registration in Minor DISCOVERY.  
  • Identification data: Name, surname, telephone number, date of birth, nationality.  
  • Contact details: Address, email address.  
  • Professional data: Company where you provide services.  
    
    
• Data provided for the creation of an account associated with the registration.  
  • Identification data: Name, surname, telephone number.  
  • Contact details: Address, e-mail address.
  • Social Login: Identification data and e-mail address. 
    
    
• Data provided for the sending of communications related to your account.  
  
  • Identification data: Name, surname, first name.  
  • Contact details: e-mail address.
     
• Data provided for the sending of commercial communications.      
  • Identification data: Name, surname.
  • Contact details: e-mail address. 

• Data provided to measure your degree of satisfaction with the service provided. 
  • Identification data: Name, surname and first name. 
  • Contact details: e-mail address.
  • Data on services provided: Stays at Minor Hotels  

• Data provided for personalisation of the services offered to members of the Programme.   
  
  • Identification data: Name, surname(s).  
  • Contact details: e-mail address. 
  • Data on services provided: Stays at Minor Hotels. 

4. With which recipients will user data be shared? 

Your data will be communicated to those entities that own the hotels where you can take advantage of the benefits of the Minor DISCOVERY Programme, which belong to the GHA DISCOVERY, so that they are aware of your membership of the Programme and can apply its conditions to your stay (price, dates, services included). This communication of data is covered by the acceptance of these General Terms & Conditions, being such communication necessary to apply the advantages of the Minor DISCOVERY Programme.  

You can consult the total number of these entities through this list. In addition, we would like to inform you that some of these entities may be located outside the European Economic Area (even in countries that do not offer a level of protection comparable to the Spanish one), this communication of data being made for the sole purpose of being able to apply the Minor DISCOVERY Programme in the services provided by these entities. 

5. International data transfers 

We inform you that your data may be transferred to third countries as we have indicated in the previous section, given that some of the companies are located outside the European Economic Area. This transfer will be made to be able to apply the benefits of the Minor DISCOVERY Programme to the accommodation services you request. 

6. Data retention 

The data will be stored by MHEA as the data controller in accordance with the following indications,  

• Data provided for registration with Minor DISCOVERY. The data will be kept for as long as the user is registered with Minor DISCOVERY, and once the contractual relationship has ended, until the expiry of the liabilities that may arise for any of the parties. 
• Data provided for the creation of an account associated with the registration. The data will be kept for as long as the user is registered with Minor DISCOVERY, and once the contractual relationship has ended, until the expiry of any liabilities that may arise for either party.    
• Data provided for the sending of communications related to your account. The data will be kept for as long as the user is registered in the Minor DISCOVERY Programme, and once the contractual relationship has ended, until the expiry of the liabilities that may arise for any of the parties.  
• Data provided for the sending of commercial communications. The data will be kept until the user opposes the sending of commercial communications, either by means of a communication sent to the user's e-mail account, or by means of the means made available to the user in each of the commercial communications that may be sent to. The data will be kept until the user opposes the sending of commercial communications, either through a communication made to the e-mail account, or opposes them through the means made available to the user, in each of the commercial communications that may be sent. 
• Data provided to measure the degree of satisfaction with the service provided. Once the user's evaluation has been received, the personal data will be deleted as the evaluation of the services is carried out anonymously. 
• Data provided for personalisation of the services offered to members of the Programme. The data will be kept for as long as the user is registered with Minor DISCOVERY, and once the contractual relationship is terminated, they will be deleted. 

7. Commercial communications 

For you to enjoy all the benefits of Minor DISCOVERY Programme, we will send you commercial communications with promotions and offers that best fit your profile through different channels, including electronic media, as well as the communication of your balance, points and categories about the Programme, as well as promotions and offers from our Minor DISCOVERY Partners. As part of our commitment to your privacy, we remind you that, at any time, you may access the General Terms & Conditions of the Programme through the following address dataprotection@minor-hotels.com and object to commercial communications by sending an email to dataprotection@minor-hotels.com or through the link provided for this purpose in each of them. 

8. Processing of third-party data 

If the Data Controller provides, at any time, data of third parties, he/she declares that he/she has their consent and undertakes to transfer the information contained in this clause to them, as well as to inform MHEA of any change or update regarding the same. 

9. Data security 

MHEA has adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent their alteration, loss, unauthorised processing or access, considering the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or the physical or natural environment.  

You are responsible for maintaining the strict confidentiality of your user password and are responsible for access to or use of our website or our Minor DISCOVERY service by you or any person using the password previously provided by you, whether or not such access or use is authorised by you or on your behalf, and whether or not such person is your employee, relative or agent. You agree to (i) inform us immediately of any unauthorised use of your password, your account, or any other breach of security and (ii) ensure that you close your account at the end of each session. You are solely responsible for monitoring the dissemination and use of your password, access to and use of your account, and for informing us of your desire to terminate your account. 

10. Rights of data subjects in relation to their data. 

You may exercise, by writing to the address of the data controller indicated in the heading of this document, with the Reference "Data Protection", enclosing a photocopy of your identity document, at any time and free of charge, the following rights:  

• To revoke the consent given for the processing and communication of their personal data.  
• Obtain information about the existence or non-existence of processing of your personal data.  
• Access to your personal data.  
• To rectify inaccurate or incomplete data. 
• To request the deletion of your data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.  
• To limit the processing of data when any of the conditions provided for in the data protection regulations are met.  
• In certain circumstances and on grounds relating to their situation, data subjects may object to the processing of their data.  
• Request the portability of your data.  
• Claim before the Spanish Data Protection Agency, through the following address: Calle de Jorge Juan, 6, 28001 Madrid, when you consider that the data controller has violated the rights that you are entitled to.  

Updated: March 2025