Privacy | Lio London

PRIVACY

Basic Information on Data Protection This table contains a high-level summary of how and why we process your personal data. Please review the full Privacy Policy for further details.
Joint controllers	Galaxia Estelar, S.L. Lío London, Ltd.
Purpose	To provide the service of accessing, using and enjoying the Website; to manage the provision of Lío services; to comply with our legal obligations; to communicate with you; and, subject to your consent, to offer you personalised advertising and send you personalised commercial communications based on your interest profile.
Legal grounds	Performance of the contract Compliance with legal obligations Legitimate interest Consent
Recipients	Other Lío Group entities, our service providers and our Social Media Partners.
Rights	Access, rectify and delete data, as well as other rights, as explained in additional information.
Additional information	Additional and detailed information on Data Protection can be found in our Privacy Notice.

Privacy Policy

I. – Who processes your personal data?

Galaxia Estelar, S.L., and Lío London, Ltd., (hereinafter, jointly, “Lío”) will process your personal data as joint data controllers. You can contact both data controllers by the email lopd@liogroup.com or at the address Avda. 8 de agosto, 27, 07800 Ibiza, Balearic Islands, Spain.

Lío has appointed a data protection officer (DPO). If you want to contact our DPO directly, you may use the following contact details:

DPO: Unai Berbel

Address: C/Canarias 39, Torre 4, Planta 4, 07800, Ibiza, Balearic Islands, Spain.

Email: dpo@liogroup.com

II. – What kind of personal data do we process?

Depending on how you choose to interact with us and the choices you make, the personal data we collect and process about you may include:

your first name and last name
your email address, phone number, and postal address
photographs of you (subject to your prior consent)
your bank account, credit card details, and payment information
details of your bookings and previous bookings
your table, accommodation, service, and communication preferences
your lifestyle interests, hobbies, profession/sector, and birthday (subject to your prior consent)
technical and usage data about your device, browsing actions and patterns when you use our website, www.liolondon.co.uk (“Website”) (subject to your prior consent in most cases)

III. – How do we collect your personal data?

Direct interaction: Generally, your personal data is collected through direct interaction with you. For example, you may provide us with identity and contact details over email, through our booking and payment systems, or when you set up a user account on our Website.
Automatic collection: Your personal data may be collected automatically using cookies and other similar technologies (subject to your prior consent in most cases). Please see our Cookie Policy for further information.
Third parties: If you book a reservation through the services of a third party (such as booking websites, travel agencies, and concierges), the third party will share your personal data with us. Please review the third party’s privacy policy for details of how they process your personal data.

IV. – For what purposes do we process your personal data?

Your personal data will be collected and processed by Lío under the following legal bases to fulfil the following purposes:

Based on the performance of the relevant contracts executed between you and Lío; in particular:
- to ensure your access, use and enjoyment of the functions of the Website.
  The downloading of, installation of, browsing through and otherwise use of our Website is subject to the applicable terms and conditions.
- to respond to and manage requests for booking our services, including the management of payments. Please note that the reservation, booking and enjoyment of our services is subject to the applicable terms and conditions.
- to manage the provision of the services you requested or contracted for, as well as any additional service booked by you or on your behalf, including the management of payments. Please note that the reservation, booking and enjoyment of our services is subject to the applicable terms and conditions.
Based on our compliance with applicable legal obligations, including, among others:
- if you stay in one of our hotels or other accommodation services, to comply with legal obligations to log information about your identity and your stay in our records.
- to comply with regulations to prevent money laundering and the financing of illegal activities.
- to comply with applicable tax regulations.
- to comply with legal obligations to retain your personal data for a certain period.
Based on our legitimate interests (more information on the weighing of interests is available upon request), in particular:
- to respond to any questions or requests you may submit via our online forms or otherwise send to us, in accordance with our legitimate interest in providing a high standard of customer care.
- to ensure the security of your online transactions and prevent payment fraud and breaches, in accordance with our legitimate interest in detecting and preventing payment fraud and breaches.
- to share your personal data with other entities within the Lío Group to respond to and manage your requests and to provide your services, in accordance with our legitimate interest in carrying out consistent and efficient business operations within the Lío Group.
Based on your prior and consent, in particular:
- to create a profile based on your booking and purchase history and the preferences you may have disclosed to Lío when enjoying our services in the past, in order to:
  - adjust our services to your preferences;
  - offer you personalised advertising; and
  - send you commercial communications based on your profile (via email, phone, SMS, push notifications and traditional mail) with information about offers, news and events from Lío and the relevant entities of the Lío Group.
- to disclose your personal data to social media partners such as Facebook, Google and Amazon (“Social Media Partners”) to create profiles based on your preferences, in order to further personalise your experience and/or to offer you more personalised advertising.
  - Our Social Media Partners may combine the personal data we share with them with personal data obtained from other external sources in order to create more detailed profiles.
  - The Social Media Partner profiles provide us with more detailed knowledge about your preferences so that we can offer you more individualised and accurate advertising, according to your specific interests and habits.
  - Our Social Media Partners generally operate as independent data controllers, and they are responsible for their own compliance with the applicable data protection laws. Please refer to their respective privacy notices for more information on how they process your personal data.

V. – Do we share your personal data?

To fulfil the purposes described above, Lío may need to disclose your personal data to the following third parties:

The Lío Group entities listed here, on a need-to-know basis.
Our third-party service providers that support us in the provision of services we offer you, such as financial service providers, technology and security service providers, and marketing and advertising related service providers. They will process your personal data as data processors under specific contractual terms and subject to the applicable data protection laws.
Social Media Partners (subject to your prior consent).

VI. – Do we transfer your personal data abroad?

The recipients of your personal data may be located abroad, including outside the European Economic Area and the United Kingdom. Any transfer of your personal data outside the European Economic Area or the United Kingdom will only take place if we have adequate safeguards in place in accordance with applicable data protection laws.

Adequate safeguards mean that we only transfer personal data to countries that have been deemed to adequately protect personal data, unless we use an appropriate mechanism to ensure the ongoing protection of personal data, such as standard contractual clauses approved by the applicable regulatory authority.

For more information on how your personal data will be shared with recipients abroad, please contact via the contact details at the beginning of this Privacy Policy. You also have the right to contact us for more information about the adequate safeguards implemented by Lío.

VII. – What are your rights when you provide us with your data?

Under certain circumstances, you have rights under data protection laws in relation to your personal data. Depending on the lawful basis we are relying on and subject to some exceptions, you may be able to exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as your right to withdraw your consent to the processing of your personal data.

As joint controllers, we have agreed that you may exercise your rights by contacting us via the contact details at the beginning of this Privacy Policy. Please note that in case we have not enough information to identify you and proceed with your request, we may have to ask you for further information.

You have also the right to file a complaint with the applicable data protection regulator. The data protection regulator in the United Kingdom is the Information Commissioner’s Office (ICO). The ICO may be contacted at https://ico.org.uk/make-a-complaint/. We would appreciate the opportunity to handle your concerns before you approach the ICO, so we ask that you contact us first in this instance.

VIII. – How long will we process your personal data for?

We will only store your data for as long as is reasonably necessary to fulfil the purpose for which it was originally collected, or otherwise as required by applicable legal obligations. After this point, your personal data may be restricted or archived in our systems if necessary for the establishment, exercise and defence of legal claims, until the expiry of applicable statutes of limitations. Once this period has elapsed, the data will be either erased or anonymized.

If we need to keep your personal data for tax, audit, or legal compliance for a legally prescribed time period thereafter, or if we need it to preserve evidence within statutes of limitation, we will retain the data for such purposes. To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal obligations.

IX. – Considerations regarding personal data provided by third parties

If, during your interactions with us, you disclose the personal data of third parties to us (for example, to arrange a reservation for a friend or other third party), you confirm that you have informed them of the purpose and the way in which we will process their personal data. You are also responsible for ensuring that the any third-party personal data you provide to Lío is accurate and up-to-date.

X. – Changes to this Privacy Policy

This Privacy Policy may be updated by us from time to time. In such event, we will post the updated version of the text on the Website. However, you will also be notified of any material changes to this Privacy Policy. We encourage you to periodically review this Privacy Policy to stay informed about our privacy practices.

Specific information on video-surveillance (CCTV)

In addition to the general information stated above, this section includes specific information about how Lío uses video-surveillance systems (CCTV). Galaxia Estelar is the entity responsible for the use of the CCTV as described below.

Lío processes personal data that has been collected through CCTV. Only images are captured by the CCTV are processed (i.e., no audio is processed). The purpose of this data processing is to ensure the safety of people, property and facilities and investigate any suspected illegal activity or other wrongdoing. This is a data processing is based on public interests Lío seeks to achieve, related with ensuring security and safety and in line with applicable laws and regulations.

The recordings will be kept for the maximum legal period of one (1) month. As a general rule, Lío does not share the images with third parties, however, in some cases we may be under a legal obligation to share certain images with parties such as law enforcement, courts and lawyers. Once this period has elapsed, the images will be deleted.

As a general rule, Lío will not provide the images recorded to any third party. However, in some cases we may have the legal obligation to provide them, for example, to the Security Forces, to competent Public Authorities, or to Courts or Tribunals.

As stated above, you can exercise your data protection rights at any time via the contact details at the beginning of this Privacy Policy. You may also make a complaint to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/.