Privacy Statement

• Identity: Tweelwonen Utrecht V.O.F trading as 2 De Blend, S.A. (hereinafter “2L”)
• Tax number: NL8563.59.518.B.01
• Mailing Address: Rogstraat 2, 2224 TW, Katwijk aan Zee, Netherlands
• Data Protection Officer (DPO): You can contact our DPO using one of the following methods:
• E-mail address: info@2ldeblend.nl
• Phone: 0031 30 3033660
• Please write “Data Protection Officer” as the subject.

By accepting this Privacy Policy, the user confirms that they have been informed and gives their voluntary, informed, specific, and unambiguous consent to the processing by 2L of their personal data provided on the website at www.2ldeblend.nl (hereinafter the “website”), including their browsing data and other data they may provide to 2L in the future.

The user must carefully read this Privacy Policy, written in a clear and simple manner, to fully understand it and be able to decide freely and voluntarily whether to provide their personal data to 2L.

The data requested on the forms on the website must generally be provided (unless otherwise stated in the required field) to fulfill the specified purposes. Failure to provide or correctly provide this data may result in it not being processed, and the free display of website content will not be affected.

The personal data provided through the website will be processed by 2L for the following purposes:

1. Data provided for making reservations, both via the website and via the contact center (call center, email, or chat) for individual and group bookings:

• Management of user booking requests.

• Sending confirmation or documentation of the booking made.

• Sending commercial communications on behalf of 2L, if consent has been given.
• Analysis of website usage and monitoring of user preferences and behavior.

2. Data provided for user registration with 2L:

• Management of requests for registration in the category chosen by the user or for unsubscribing.
• Verification of whether the user meets the requirements for registration in the selected category at any time deemed appropriate by 2L.
• Handling and responding to user information requests.
• Searching for promotions that match the user’s selected needs.
• Sending personalized commercial communications on behalf of 2L.
• Analysis of website usage and monitoring of user preferences and behavior.

3. Data provided on the Best Price form:

• Management of user contact and information requests via the channels available on 2L’s websites.
• Management of the request made.
• Analysis of website usage and monitoring of user preferences and behavior.

4. Data provided for publications on 2L-owned BLOGS:

• Management of comments published on the website.
• Management of subscriptions to and/or unsubscriptions from the Blog newsletter upon user request.
• Analysis of website usage and monitoring of user preferences and behavior.
• If necessary, monitoring of the appropriateness of user comments and, where appropriate, removal of comments that, according to 2L, do not comply with the terms of the current website.

5. Data provided for changing or canceling reservations:

• Management of user requests to 2L to make changes to or cancel their reservations.
• Responding to requests to 2L.
• Analysis of website usage and monitoring of user preferences and behavior.

6. Data provided for sending the newsletter:

• Management of subscriptions to and/or unsubscriptions from the Newsletter available on 2L‘s website.

7. Data provided for the 2L Rewards program:

• Management of the loyalty program and processing of your membership application, assigning your membership number and access codes for your online private zone, and enabling you to collect and redeem points.

• Tailoring the services of the loyalty program to the preferences and tastes of the members and obtaining feedback on the services in our hotels. This may include sending quality surveys as well as adjusting and customizing services offered by 2L.

• Sending correspondence related to your account, including, for example, points balance, card category, announcements, and other matters keeping you informed of your account status.

• Sending personalized commercial communications via email or similar methods about offers and services related to the program, unless you have objected to such processing.

8. Data provided on the company’s contact forms and website:

• Management of user contact and information requests via the channels available on 2L’s websites.
• Management of the request made.
• Analysis of website usage and monitoring of user preferences and behavior.

9. Data provided on the Shopping Cart Recovery form:

• Sending a reminder to the user about incomplete reservations or, if applicable, searches performed by the user.

• Analysis of website usage and monitoring of user preferences and behavior.

10. Information provided as part of the 2L Companies Program and 2L&YourSpace and 2L&YourAgencySpace programs:

• Sending personalized messages via email or similar channels with offers and services related to the program and to offers and services of 2L Partners.

• Management of user booking requests.
• Sending booking confirmations or documentation.

• Analyzing website usage and checking user preferences and behavior.

2L will process the following categories of user data:

1. Data provided for making reservations, both via the website and via the contact center (call center, email, or chat) for individual, group, and room bookings:

• Identifying data: name, surname, nationality.
• Contact details: email address, phone number.
• Data transactions with 2L for goods and services: purchased products and services or those products and services for which you have shown interest.
• Accommodation preferences
• Economic, financial, and insurance data.
• Other data: information provided by the individuals in the non-mandatory fields or during phone calls.
• Browsingdata.

2. . Data provided for user registration with 2L:

• Identifying information: name, surname, address, nationality.
• Contact information: email address, telephone number.
• User and/or member identification codes and keys.
• Employment information: occupation, sector.

3. Data provided on the Best Price form:

• Identifying data: name, surname.

• Contact details: email address, phone number.

• Data on transactions of goods and services.
• Other data: information provided by individuals in the non-mandatory fields on the forms on the website or on the attached documents.
• Browsing data.

4. Data provided for publications on 2L-owned BLOGS:

• Identifying data: name, surname.
• Contact details: email address, phone number.
• Browsing data.

5. Data provided for changes to or cancellations of reservations:

• Identifying information: name, surname.
• Contact information: email address, telephone number.
• Data on transactions of goods and services.
• Economic, financial, and insurance data.
• Other data: information provided by individuals in the non-mandatory fields on the forms on the website or on the attached documents.
• Browsing data.

6. Data provided for sending the newsletter:

• Identification data: name, surname.
• Contact details: Country of Residence, e-mail address.
• Data in regards to personal abilities: language.

7. Data provided for the 2L Rewards program:

• Identification information: name, first name, identity card, signature, address, nationality.
• Data on personal characteristics: date of birth, gender.
• Contact information: email address, telephone number.
• User and/or member identification codes and keys.
• Transactions of goods and services with 2L: purchased products and services or those products and services for which you have shown interest.
• Accommodation preferences.
• Browsing data.

8. Data provided on the company’s contact forms and website:

• Identification data: name, surname.
• Contact information: email address, telephone number.
• Data on transactions of goods and services.
• Other data: information provided by individuals in the non-mandatory fields on the forms on the website or on the attached documents.
• Browsing data.

9. Data provided on the Shopping Cart Recovery form:

• Contactdetails: address and e-mail address.

If the user provides data about third parties, they declare that they have obtained their consent and promise to inform them of the information in this Privacy Policy, thereby exempting 2L from any liability in this regard. However, 2L may conduct regular checks to verify this through appropriate thorough investigation in accordance with data protection regulations.

The legal basis for the processing of your personal data is as follows:

1. For making reservations, both via the website and the contact center (call center, email, or chat) for individual, group, and room bookings: the execution of the contract between the parties. For the analysis of website usage, the legitimate interest of 2L.

2. For managing user registrations: requested consent and verification of the user’s compliance with the terms and conditions. For the analysis of website usage, the legitimate interest of 2L. However, withdrawing your consent will not affect the legal bases of past processing.

3. For the “Best Price” form: the consent requested from you, which you can withdraw at any time. For the analysis of website usage, the legitimate interest of 2L.

4. For managing and publishing comments or posts made by users on 2L’s BLOGS: the consent given by the user. For website analysis confirming user preferences and behavior, and for monitoring the relevance of comments, the legitimate interest of 2L. If you withdraw your consent during comment publication, 2L will remove the comment from the website.

5. For changes and/or cancellations of your reservation: the execution of the contract between the parties. For the analysis of website usage, the legitimate interest of 2L.

6. For sending the Newsletter: the consent given by the user.

7. For the registration and management of members of the 2LRewards program: the execution of the contract between the parties, while the member’s consent will be the basis for sending commercial communications. For the analysis of website usage, the legitimate interest of 2L.

8. For sending contact forms via the company’s website: the consent given by the user. For the analysis of website usage, the legitimate interest of 2L.

9. For sending reminders for cart recovery: the consent given by the user. For the analysis of website usage, the legitimate interest of 2L.

Consent for the above purposes must be given on a separate basis, and the user can withdraw consent without affecting the others. The user can contact 2L to withdraw their consent via the following methods: info@2ldeblend.nl.

User data may be disclosed to the following recipients:

1. Data provided for making reservations, both via the website and the contact center, for individual, group, and room bookings:
   Companies belonging to or affiliated with the 2L Group, all operating in the hotel sector, which need your data to provide the chosen services correctly. Your data may also be communicated to legal entities managing hotels so they are aware of the conditions of your stay (price, dates, inclusive services, etc.). Some of these legal entities may be located outside the European Economic Area, including countries that do not offer a comparable level of protection as Spain. The sole purpose of this transfer is the ability to provide services to you correctly.

2. Data provided for user registration with 2L:
   Companies within the group to which 2L belongs, solely for internal administrative purposes and/or for the purposes mentioned above.

3. Data provided on the “Best Price” form:
   Companies within the group to which 2L belongs, solely for internal administrative purposes and/or for the purposes mentioned above.

4. Data provided for publications on BLOGS owned by 2L:
   Data provided by users will be published on the website and accessible to any user viewing the data.

5. Data provided for changing or canceling reservations:
   Companies belonging to or affiliated with the 2L Group, all operating in the hotel sector, which need your data to provide the chosen services correctly. Additionally, your data will be disclosed to hotel owners so they are aware of the conditions of your stay (price, dates, inclusive services, etc.) for the sole purpose of providing the services correctly. They may be located outside the European Economic Area, including countries that do not offer a comparable level of protection as Spain.Data provided for sending the Newsletter will not be disclosed to third-party companies.

6.  Data provided for the 2L Rewards program:
   Legal entities participating in the 2L Rewards program, all operating in the hotel sector, as they need access to provide the services under the 2L Rewards program correctly, so they are aware of the conditions of your stay (price, dates, inclusive services, etc.) and the information about your account, balance, points, and category. Some of these legal entities may be located outside the European Economic Area (including countries where there is no equivalent level of protection), as this access is necessary for the normal operation of the 2L Rewards program. You can consult these legal entities at https://www.2ldeblend.nl/2L-hotel-group-companies.

7. Data provided on contact forms and the company’s website:
   Companies within the group to which 2L belongs, solely for internal administrative purposes and/or for the purposes mentioned above. Data provided for cart recovery:
   Companies within the group to which 2L belongs, solely for internal administrative purposes and/or for the purposes mentioned above.

Additionally, suppliers of 2L may have access to the data when required for compliance with legal obligations and/or the purposes mentioned above. These providers will not process your data for purposes of which 2L has not previously informed you.

Please note that your data will be transferred to third countries outside the European Economic Area, particularly to the United States, India, and the Philippines. This transfer will occur as a result of Accenture providing services to 2L regarding the management of the company’s billing through the back office. We inform you that the company follows the contractual provisions previously approved by the AEPD (Spanish Data Protection Authority).

Your data will be retained for the following periods:

1. Data provided for making reservations, both via the website and the contact center (call center, email, or chat) for individual, group, and room bookings: will be retained for the duration of the contractual relationship and after its termination for the duration of the statute of limitations for legal actions that may arise from it.

2. Data provided for user registration with 2L: until the user withdraws their consent. However, withdrawing your consent will not affect the legal bases of past processing.

3. Data provided on the “Best Price” form: for as long as necessary to process your request.

4. Data provided for publications on BLOGS owned by 2L: The data will be retained until the user withdraws their consent.

5. Data provided for changing or canceling reservations: will be retained for the duration of the contractual relationship and after its termination for the duration of the statute of limitations for legal actions that may arise.

6. Data provided for sending the Newsletter: will be retained until the user withdraws their consent.

7. Data provided for the 2L Rewards program: will be retained for the duration of the contractual relationship and after its termination for the duration of the statute of limitations for legal actions that may arise.

8. Data provided on contact forms and the company’s website: will be retained for the period necessary to process and respond to your request and, once expired, for the statute of limitations for legal actions that may arise from this request.

9. Data provided for cart recovery: will be retained for up to 15 days after the reservation is abandoned.

The user:

Guarantees that they are over the age of eighteen (18) and that the data they have provided to 2L is truthful, accurate, complete, and up-to-date. For these purposes, the user is responsible for the accuracy of all disclosed data and must keep the provided information properly updated to reflect the actual situation.

They guarantee that they have informed third parties from whom they have provided data and, if they have done so, have also informed them about the points in this document. Furthermore, they guarantee that they have obtained authorization to provide their data to 2L for the stated purposes.

They will be liable for false or inaccurate information provided on the website, as well as for the direct or indirect damage that such information causes to 2L or third parties.

Users can write to 2L at any time and free of charge via the address provided at the top of this policy or via email to info@2ldeblend.nl with a copy of their ID card to:

• – Withdraw previously given consent.
• Obtain confirmation as to whether 2L processes the user’s personal data.
• Access their personal data.
• Correct incorrect or incomplete data.
• Request the deletion of their personal data when the data are no longer necessary for the purpose for which they were obtained.
• Request that 2L restrict the processing of data when all conditions in the data protection regulations are met.
• Request the portability of data provided by the user in cases provided for in the regulations.
• Contact 2L’s DPO at the following address: info@2ldeblend.nl
• File a complaint relating to the protection of personal data with the Dutch Data Protection Authority if the user believes that 2L has violated the rights recognized by the applicable data protection regulations.

2L will always process user data in absolute confidentiality and will keep it secret in accordance with the applicable regulations by taking the necessary technical and organizational measures based on the state of the technology, the nature of the stored data, and the risks to which they are exposed, to guarantee the security of the data and to avoid unauthorized alterations, loss, processing, or access.