+34 971 392 281 +34 690 847 770

Privacy Policy

DATA CONTROLLER

The data controller is APARTAMENTOS PLAYA GRANDE, S.L., Calle Argelagues 6-8, 07817, San Josep (BALEARIC ISLANDS).

Privacy principles

We at APARTAMENTOS PLAYA GRANDE, S.L. are committed to working continuously to ensure privacy in the processing of your personal data, and to offer you the most complete and clear information we can. We encourage you to read this section carefully before providing us with your personal data.

If you are under fourteen years of age, please do not give us your data without your parents’ consent.

In this section we inform you of how we process the data of persons that have dealings with our organisation. Starting with our principles:

  • We do not request personal information unless it is necessary to provide the services you require.
  • We never share personal information with anyone, except to comply with the law, or if we have your express authorisation.
  • We will never use your personal data for purposes other than those set out in this privacy policy.
  • Your data will always be processed with a level of protection appropriate to the legislation governing data protection, and we will not subject them to automated decisions.

We have drafted this privacy policy taking into account the requirements of prevailing data protection legislation:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons (GDPR).
  • Organic Law 15/1999, of 13 December, on Personal Data Protection (LOPD).
  • Royal Decree 1720/2007, of 21 April (RLOPD).

This privacy policy is drafted on 25 May 2018.

We may modify this privacy policy due to the amendment of processing criteria, in order to facilitate understanding or to adapt such processing to prevailing legislation. We will change the date of this policy so that you can check its validity.

Processing that we carry out

PROCESSING OF CONTACTS

Purpose: To deal with your request, petitions or queries received from the website, by email or telephone. Respond to your request and subsequent follow-up.
Legitimacy: The consent of the data subject.
Recipients: Data will not be disclosed to third parties.
Storage period: We will store your data for the time necessary to fulfil the purpose for which they were collected and to determine potential liabilities that may arise from this purpose and the processing of data.

PROCESSING OF CLIENTS

Purpose: To manage relations with clients, billing and payment. To send offers on products/services that are complementary to those you have purchased from us.
Legitimacy: Contractual relationship and legitimate interest.
Recipients: Your data will be disclosed to the competent Public Administrations in those cases set out in prevailing legislation, and with the purposes that said legislation establishes. We will only disclose these data to those third parties if they are essential for the provision of the service.
Storage period: We will store your data for an indefinite period once the mandatory legal period has expired, or until you request the erasure of the same.

PROCESSING OF MARKETING

Purpose: To provide you with information about products and services that we believe may be of interest to you. In each commercial communication you will have the opportunity to object to this processing by cancelling your subscription.
Legitimacy: The consent of the data subject.
Recipients: Data will not be disclosed to third parties.
Storage period: We will store your data for an indefinite period. We will erase such data if you so request or if, following a certain number of emails, you do not take any action.

PROCESSING OF HUMAN RESOURCES

Purpose: To evaluate your CV in order to consider you in any personnel selection processes we may perform.
Legitimacy: The consent of the data subject.
Recipients: Data will not be disclosed to third parties.
Storage period: We will store your data for a maximum of 5 years.

PROCESSING OF VIDEO SURVEILLANCE

Purpose: Video surveillance of the facilities and labour control.
Legitimacy: Legitimate interest of the data controller.
Recipients: The images may be disclosed to the Security Forces and Corps, to the Judicial Bodies and to the Public Prosecutor’s Office.
Storage period: We will store your data for a maximum of 1 month.

YOUR RIGHTS

You have the right to ask us for a copy of your personal data, to correct inaccurate data or to complete them if they are incomplete, or if necessary to delete them when they are no longer necessary for the purposes for which they were collected.

You also have the right to restrict the processing of your personal data and obtain your personal data in a structured and readable format.

You can object to the processing of your personal data in certain circumstances (in particular, when we do not have to process them to meet a contractual requirement or other legal requirement, or when the object of the processing is direct marketing).

When you have given us your consent, you may withdraw it at any time. At that time we will cease processing your data or, if appropriate, we will stop doing it for that specific purpose. If you decide to withdraw your consent, this will not affect any processing that has taken place while your consent was in effect.

These rights may be limited; for example, if in order to meet your request we had to disclose information about another person, or if you ask us to remove some records that we are obliged to maintain due to a legal obligation or a legitimate interest, such as the defence of claims. Or even in those cases where the right to freedom of expression and information should prevail.

You may contact us through any of the means set out in the Data Controller section of this privacy policy, providing a copy of a document that proves your identity (usually the National ID Card (DNI)).

Another of your rights is not to be the subject of a decision based solely on automated processing, including profiling that produce legal effects or which affects you.

Faced with any violation of your rights, such as, for example, if we have failed to deal with your request, you have the right to file a claim with the Supervisory Authority regarding data protection. This may be the authority in your country (if you live outside Spain) or the Spanish Data Protection Agency - AEPD - (if you live in Spain).

Further information

Processing of your data outside the European Economic Area.

For the processing specified we may employ the service of the following providers outside the European Economic Area, but under the Privacy Shield agreement, approved by the EU data protection authorities.

GOOGLE: Cloud services and email. Further information: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
MICROSOFT: Cloud services, Skype and email. Further information: https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK
AMAZON: Cloud services. Further information: https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4
DROPBOX: Cloud storage, synchronization and file sharing. Further information: https://www.privacyshield.gov/participant?id=a2zt0000000GnCLAA0
MAILCHIMP: Management of emails. Further information: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG
WHATSAPP: Instant messaging service and sending files. Further information: https://www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG

 

Links to third-party websites

Our website may, on occasion, contain links to other websites. It is your responsibility to make sure you read the data protection policy and the legal conditions that apply to each site.

Third-party data

If you furnish us with data from third parties, you accept the responsibility of informing them in advance pursuant to the provisions of article 14 of the GDPR.

Contact

© 2018 C/ Deessa Tanit 21.
Playa d'en Bossa 07817,
Sant Jordi - Ibiza
Nº Registro turístico -  A-2077-PM