Cookies Policy

Last updated: 25/09/2026

1. Identification of the holders and scope of application

This Cookie Policy applies to the websites www.monhotels.com,
www.hotelmonport.com, www.hotelpergolamallorca.com, and www.esprincep.com
(hereinafter collectively referred to as the “Websites”), which are part of
MON HOTELS. According to the currently published legal information, the
following companies are part of the group: CAS MIOT, SL, with Tax
Identification Number (CIF) B07790512, and ENIX, SL, with Tax Identification
Number (CIF) B07018781, both with registered offices at Ctra. Manacor, 272,
07198 Palma, Illes Balears.

General contact: (+34) 971 200 222.
Data Protection Officer contact:
lopd@monhotels.com.

This Policy explains what cookies and similar technologies are, what criteria
apply to their use on the Websites, and how consent should be managed when
using technologies that are not strictly necessary.

2. What are cookies and similar technologies?

Cookies are small files or pieces of information that a website stores or
accesses on a user’s device. They can, among other functions, ensure the
website’s technical operation, maintain certain preferences, enhance
security, or, when used for this purpose, obtain information about browsing
activity and measure or personalize content.

For the purposes of this Policy, references to cookies also include other
technologies that allow information to be stored or accessed on the user’s
terminal equipment and are subject to equivalent requirements, such as
certain identifiers, local storage, tags or similar technologies.

3. Applicable regulations and consent criteria

The use of cookies is governed, among other applicable regulations, by
Article 22.2 of Law 34/2002, of July 11, on Information Society Services and
Electronic Commerce (LSSI-CE), as well as by Regulation (EU) 2016/679
(GDPR) when the use of such technologies involves the processing of
personal data.

Cookies strictly necessary to enable communication, ensure the technical
operation of the Websites or provide a service expressly requested by the
user may be used without prior consent when the legal requirements for
doing so are met.

Any cookie or technology that is not strictly necessary or exempt may only
be activated after the user has given valid, freely given, informed,
specific, and unambiguous consent. Mere browsing or inactivity does not
constitute consent.

4. Cookies used on the Websites

Category Cookie / service Supplier Purpose Duration / status
Technical / necessary gdprcookienotice MON HOTELS / consent manager Remember, when necessary, the user’s privacy settings or
preferences.
30 days
Technical / security Google reCAPTCHA v3 Google LLC Protect forms and the website against spam, abuse and
automated submissions.
Service active on www.monhotels.com
Analytics Google Analytics (UA-159945290-1, configured via Google Tag Manager) Google LLC Measuring the use of the Websites and obtaining browsing
statistics, only when appropriate and with consent.
DO NOT ACTIVATE without consent
Optional / third parties Google Tag Manager (GTM-PSQP988) Google LLC Managing tags or providing third-party functionalities.
Technologies requiring consent must remain blocked until
the user grants consent.
Active container; optional tags: DO NOT ACTIVATE without consent

5. Technical or strictly necessary cookies

Technical cookies enable functions without which websites or a
user-requested service could not operate correctly. These may include,
among others, technologies for security, session management, load balancing,
form functionality, saving strictly necessary preferences, or processing a
booking request.

These cookies should not be used for commercial profiling, advertising
tracking, or analyzing user behavior for purposes beyond the requested
service. When they meet the requirements to be considered strictly
necessary or exempt, they do not require consent.

6. Third-party services, bookings and content

Websites may include links, booking engines, or content managed by third
parties. The mere existence of an external link does not necessarily imply
that the third party installs cookies on MON HOTELS’ domains. When the user
is redirected to an external platform, the third party’s privacy and cookie
policies will apply to the technologies installed on its own domain.

If maps, videos, widgets, captchas, booking engines, chats, or other
third-party content are directly embedded in the Websites, it must be
verified which cookies or technologies they activate. When they are not
strictly necessary, they must remain blocked until the user gives their
consent.

The loading of a third-party resource should not occur automatically when
doing so involves installing or reading technologies subject to consent
before the user has made a valid choice.

7. Is it necessary to display a consent banner?

If a technical review confirms that a particular website uses only strictly
necessary cookies or technologies exempt from the requirement to obtain
consent, it will not be necessary to request consent via a banner with
“Accept” or “Reject” buttons. In that case, it will suffice to keep this
Policy accessible and provide the relevant information.

If any of the Websites incorporates analytics cookies, advertising,
non-essential personalization, embedded content with tracking, or other
optional technology, a prior consent mechanism must be implemented to
prevent its activation until the user has chosen.

8. Banner requirements if optional cookies are used

Non-essential cookies should remain blocked until the user gives consent.

The first layer must allow users to ACCEPT and REJECT cookies
simultaneously, at the same level, and with equivalent visibility. It must
also offer a CONFIGURE option to allow granular selection by purpose.

Consent obtained by continuing to browse, scrolling through the page,
closing the notice, remaining inactive, or by means of pre-ticked boxes or
options will not be valid.

The panel should only describe the purposes and categories actually used
and allow the user to accept or reject optional cookies in granular detail.
The technical settings must effectively respect the user’s choice.

Withdrawing or modifying consent should be as simple as giving it and be
permanently available through a link or mechanism such as “Configure cookies”.

9. International Transfers

The use of certain technology providers may involve processing or access
from countries located outside the European Economic Area. When the cookies
or technologies used involve an international transfer of personal data,
this must be covered by one of the mechanisms provided for in Articles 44
et seq. of the GDPR.

The existence of an international data transfer does not, in itself,
determine whether a cookie requires consent. The purpose of the technology
and whether consent is required or optional are the determining factors.
Information on data transfers must be kept up to date with the providers
actually used.

10. Managing cookies from your browser

Users can configure their browser to block, delete, or receive notifications
about cookies. Disabling certain technical cookies may affect the proper
functioning of some website features.

When optional cookies exist, browser settings do not replace the consent
mechanism that the Website itself must offer.

11. Processing of personal data

When cookies or similar technologies involve the processing of personal
data, the MON HOTELS Privacy Policy will apply, which provides information
on the responsible parties, purposes, legal bases, recipients, international
transfers, storage and exercise of rights.

Privacy-related queries can be directed to the Data Protection Officer at
lopd@monhotels.com.

12. Policy Modifications

MON HOTELS, CAS MIOT, SL and ENIX, SL may update this Policy when
regulations, the criteria of the supervisory authorities, the services of
the Websites, their providers or the technologies used change.

If technologies requiring consent are incorporated, the Cookie Policy and
management mechanism must be updated before their activation. Likewise,
any relevant changes to the cookie inventory must be reflected in this
Policy.

This Cookie Policy was last reviewed and updated on September 25, 2026.