Privacy Policy
Last updated: 27/05/2026
-
Data Controller
The controller responsible for the processing of personal data through the website www.ayslawellnessclub.com and in connection with Aysla Wellness Club is:
SANTA PONSA HOTEL OPCO, S.L.U. Tax ID No.: B16942070. Registered address: Av. Del Golf, 37, Santa Ponsa, Calvià, Illes Balears. Data Protection Officer (DPO) email address: pmims.lopd@ihg.com Telephone: +34 871 555 500.
-
Personal Data Processed
SANTA PONSA HOTEL OPCO, S.L.U. may process the following categories of data, depending on the relationship maintained with the user:
Identification and contact details: first name, surname, telephone number, email address and other information provided through forms or communications.
Membership data: registration as a member, type of membership, status of the relationship, fees, payments, renewals, cancellations, incidents, requests and use of benefits associated with the Club.
Financial and billing information: information required to manage fees, payments, invoices, refunds or administrative incidents.
Data related to wellness, fitness or spa services: bookings, attendance at classes, personal training sessions, treatments purchased, preferences communicated by the user and any other information required to properly provide the requested service.
Communication data: enquiries, requests, complaints and messages sent through website forms, email, telephone, WhatsApp or other available channels.
Browsing data: IP address, online identifiers and data resulting from the use of cookies or similar technologies, in accordance with the Cookies Policy.
Image data or participation in events: only when the user participates in events, promotional activities or audiovisual content and there is a valid legal basis for doing so.
Special categories of personal data will not be requested unless they are strictly necessary for a specific service and are voluntarily provided by the user, for example, information relevant to adapting a physical activity, treatment or wellness service. In such cases, the data will be processed with enhanced safeguards and solely for the corresponding purpose.
-
Purposes of the Processing
Personal data may be processed for the following purposes:
· To manage enquiries received through the website, email, telephone or other contact channels.
· To process requests for information about Aysla Wellness Club, its facilities, services, classes, events, treatments, memberships or member benefits.
· To manage the registration, maintenance, renewal and cancellation of Club memberships.
· To manage access to and use of the facilities, gym, thermal area, group classes, personal training, spa, treatments, events and other services offered.
· To manage bookings, appointments, attendance at activities, service availability and operational communications related to the contracted service.
· To manage fees, payments, invoicing, collections, refunds and financial incidents.
· To handle requests, complaints, incidents, suggestions or communications submitted by users, clients or members.
· To send informative communications related to membership status, changes to timetables, activities, services, benefits, internal events or operational matters concerning the Club.
· To send marketing communications regarding Aysla Wellness Club services, promotions, events, benefits or news, only where there is a valid legal basis for doing so.
· To manage participation in events, workshops, promotional activities or experiences organised by Aysla Wellness Club.
· Where applicable, to manage benefits or advantages linked to third-party partners, such as Kimpton Aysla Mallorca, Maison CODAGE, IHG One Rewards or other programmes, whenever necessary and in accordance with the information provided to the user in each case.
· To ensure the security, proper operation and improvement of the website.
· To comply with the legal obligations applicable to SANTA PONSA HOTEL OPCO, S.L.U.
-
Legal Basis for Processing
The legal basis will depend on each processing activity:
· Performance of a contractual relationship or implementation of pre-contractual measures: to manage requests for information, membership registration, the provision of services, bookings, treatments, classes, training sessions, events, fees, payments and any other obligations arising from the relationship with the user or member.
· Consent of the data subject: for sending marketing communications where required, for certain forms, participation in specific promotional activities, the use of non-essential cookies and any other processing activities that require consent.
· Compliance with legal obligations: to comply with tax, accounting, administrative, consumer protection, security and invoicing obligations, as well as requests from competent authorities.
· Legitimate interest: to respond to enquiries initiated by the user, manage operational communications with members, prevent abuse or fraud, ensure website security and defend the legitimate interests of the company in the event of potential claims. Where this legal basis is used, a prior balancing assessment will be carried out between the company’s interests and the rights and freedoms of the data subject.
-
Marketing Communications
SANTA PONSA HOTEL OPCO, S.L.U. may send marketing communications regarding Aysla Wellness Club services, activities, events, promotions, benefits or news where the user has provided their consent or where another valid legal basis exists in accordance with the GDPR and the LSSI-CE.
The user may object to or unsubscribe from these communications at any time by using the mechanism included in each communication or by writing to pmims.lopd@ihg.com.
Acceptance of marketing communications will not be a requirement for purchasing services, registering as a member or using the facilities, except in the case of communications that are strictly necessary for managing the contractual relationship.
-
Recipients of Personal Data
As a general rule, personal data will not be disclosed to third parties unless required by law or necessary for the provision of the requested service.
Certain providers acting as data processors may have access to the data, including providers of technology services, web hosting, IT maintenance, administrative management, invoicing, legal advice, marketing, communication platforms, booking systems, membership management systems, payment gateways or services related to the operation of the Club.
Where the user requests or expressly accepts benefits, services or programmes managed by third parties, such as Kimpton Aysla Mallorca, Maison CODAGE, IHG One Rewards or other partners, the data strictly necessary to manage the relevant request, benefit or registration may be disclosed, always in accordance with the information provided in each case.
SANTA PONSA HOTEL OPCO, S.L.U. may disclose personal data to public administrations, courts, law enforcement agencies, supervisory authorities or other bodies where required by law or pursuant to a valid request.
-
International Data Transfers
As a general rule, no international transfers of personal data are expected to take place.
However, certain technology providers, communication platforms, analytics tools, social media platforms or services linked to third-party partners may involve the processing of personal data outside the European Economic Area. In such cases, SANTA PONSA HOTEL OPCO, S.L.U. will implement the safeguards required under the GDPR, including adequacy decisions, Standard Contractual Clauses or other legally valid mechanisms.
This section must be specifically reviewed once the technologies used by the website, the App, the membership management platform, the booking system, the CRM, the email marketing tool and the cookies actually installed have been confirmed.
-
Data Retention
Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected.
Data processed to respond to enquiries will be retained for the time necessary to manage and close the request and, subsequently, for the applicable statutory limitation periods.
Membership data will be retained for the duration of the membership relationship and, after its termination, for the periods necessary to address any potential legal, contractual, tax, accounting or administrative liabilities.
Billing information and accounting documentation will be retained for the periods required under applicable tax and commercial legislation.
Data used for marketing communications will be retained until the user withdraws their consent, requests to unsubscribe or objects to the processing, without prejudice to the minimum period necessary to keep a record of such withdrawal or objection.
Data processed through cookies will be retained for the periods indicated in the Cookies Policy.
Once the applicable periods have expired, the data will be deleted or, where appropriate, blocked for the period during which liabilities may arise.
-
Rights of Data Subjects
· Access: to know whether their personal data is being processed and to obtain information about such processing.
· Rectification: to request the correction of inaccurate or incomplete personal data.
· Erasure: to request the deletion of personal data when it is no longer necessary or where another lawful reason applies.
· Objection: to object to the processing of personal data in certain circumstances, particularly in relation to marketing communications.
· Restriction of processing: to request that personal data be retained solely for the establishment, exercise or defence of legal claims or in any other circumstances provided for by law.
· Data portability: to receive the personal data provided in a structured, commonly used and machine-readable format, where applicable.
· Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before consent was withdrawn.
To exercise these rights, the user may send a request to pmims.lopd@ihg.com, specifying the right they wish to exercise and providing the information necessary to verify their identity.
If the user believes that the processing of their personal data does not comply with applicable legislation, they may lodge a complaint with the Spanish Data Protection Agency through www.aepd.es.
-
Third-Party Data
The user guarantees that the personal data provided is truthful, accurate and up to date.
Where the user provides personal data relating to third parties, they declare that they have a sufficient legal basis to do so and undertake to inform those third parties of the contents of this Privacy Policy.
-
Minors
Aysla Wellness Club services may be subject to specific conditions regarding age, access, authorisation or supervision.
Minors must not provide personal data through the website without the authorisation of their parents, guardians or legal representatives where such authorisation is required.
If it is discovered that personal data relating to a minor has been collected without the necessary authorisation, the data will be deleted or the situation will be regularised in accordance with applicable legislation.
-
Data Security
SANTA PONSA HOTEL OPCO, S.L.U. will implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk and to prevent the destruction, loss, alteration, unauthorised disclosure of or unauthorised access to personal data.
These measures will be implemented taking into account the nature of the personal data processed, the context of the processing, the existing risks and the state of the art.
-
Social Media
Aysla Wellness Club may maintain profiles on social media platforms. Users who interact with these profiles should be aware that their personal data will also be processed by the relevant social media platform in accordance with its own privacy policies.
SANTA PONSA HOTEL OPCO, S.L.U. will process data arising from interactions with its corporate profiles for the purposes of managing its relationship with users, responding to messages, comments or requests, publishing content relating to its services and, where applicable, managing promotions or activities.
The user should review the privacy settings of each social media platform and avoid publishing third-party personal information without authorisation.
-
Contact Form
Personal data provided through the website’s contact form will be processed for the purpose of responding to the enquiry, request or communication submitted by the user.
The legal basis for this processing will be the user’s consent when submitting the form and, where applicable, the implementation of pre-contractual measures where the enquiry relates to services, memberships, bookings, activities or treatments.
The data will be retained for the time necessary to respond to the request and, subsequently, for any applicable statutory periods.
-
Processing Activities Related to the App
When Aysla Wellness Club makes an App available to users, any processing activities carried out through the application must comply with this Privacy Policy and with the App’s specific Terms and Conditions.
In particular, clear information must be provided regarding processing activities associated with user registration, membership management, bookings, classes, payments, notifications, communications, preferences, use of services and any additional functionality incorporated into the App.
-
Amendments to the Privacy Policy
SANTA PONSA HOTEL OPCO, S.L.U. may amend this Privacy Policy where necessary to adapt it to regulatory, technical, organisational or service-related changes.
Where the changes are significant, users will be informed through the website or by other appropriate means.