Privacy policy
1. GENERAL INFORMATION
The purpose of this “Privacy and Data Protection Policy” is to disclose the conditions governing the collection and processing of your personal data by our entity or corporate group in order to safeguard your fundamental rights, honour and freedoms, all in compliance with the current regulations governing the Protection of Personal Data according to the European Union and the Spanish Member State.
In accordance with these regulations, we need to have your authorisation and consent for the collection and processing of your personal data, which is why below we provide you with all the details of interest to you regarding how we carry out these processes, for what purposes, which other entities may have access to your data and what your rights are.
For all of the above, once you have reviewed and read our Data Protection Policy, it is essential that you accept it as proof of your agreement and consent.
2. DATA CONTROLLER
Who collects and processes your data?
The Data Controller is the natural or legal person, of a public or private nature, or administrative body, which alone or jointly with others determines the purposes and means of the processing of personal data; in the event that the purposes and means of the processing are determined by the law of the European Union or of the Spanish Member State.
In this case, our identification details as Data Controller are as follows:
Antje Margarete Roenn Marder, C/ de Mestral, 4. 07250, Villafranca de Bonany (Islas Baleares).
Your personal data are processed by all the entities of our Group of Responsible Parties or mrcbalear Corporate Group.
How can you contact us?
Postal domicile:
Antje Margarete Roenn Marder, C/ de Mestral, 4. 07250, Villafranca de Bonany (Islas Baleares).
Who can help you with our Data Protection Policy?
We have a person or entity specialised in data protection, who is in charge of ensuring the correct compliance of our entity with the legislation and regulations in force. This person is called the Data Protection Delegate (DPO) or Data Protection Officer and, if you need to, you can contact him/her in the following way:
Antje Margarete Roenn Marder, C/ de Mestral, 4. 07250, Villafranca de Bonany (Islas Baleares). +34 650 784 462. info@mrcbalear.com.
3.SECURITY MEASURES
What do we do to ensure the privacy of your data?
Our entity or corporate group adopts the necessary organisational and technical measures to guarantee the security and privacy of your data, avoid its alteration, loss, processing or unauthorised access, depending on the state of the technology, the nature of the data stored and the risks to which they are exposed.
Among others, the following measures stand out:
1. Ensure the continued confidentiality, integrity, availability and resilience of processing systems and services.
2. Restore availability and access to personal data quickly, in the event of a physical or technical incident.
3. Regularly verify, evaluate and assess the effectiveness of the technical and organisational measures implemented to ensure the security of the processing.
4. Pseudonymise and encrypt personal data, in case of sensitive data.
4. PURPOSE OF PROCESSING
Why do we want to process your data?
We need your authorisation and consent to collect and process your personal data, which is why we detail the intended uses and purposes below. Even so, we will only carry out those that you have authorised us to do by means of the “Authorisation Form” of the Consent for data processing.
Invoicing and making reservations.
How long do we keep your data?
We use your data for the time strictly necessary to fulfil the purposes indicated above. Unless there is a legal obligation or requirement, the retention periods are as follows:
Your personal data will be kept for the time necessary to fulfil the purpose for which it was collected. If your data is used for several purposes which require us to keep it for different periods, we will apply the longest retention period.
In any case, we limit access to your data only to those persons who need to use it for the performance of their duties.
Our data retention periods are based on business needs, so in relation to personal data that is no longer required, access to it will either be limited to the fulfilment of strictly legal obligations or it will be securely destroyed.
5. LEGITIMISATION OF THE PROCESSING
Why do we process your data?
The collection and processing of your data is always legitimised by one or more legal bases, which are detailed below:
The use of your data under the conditions described above is permitted by European and Spanish data protection regulations in accordance with the following legal bases:
- You have given your consent (you have been presented with a consent form to consent to the processing of your data for certain purposes; you may withdraw your consent at any time);
- The processing of your data is necessary for the performance and maintenance of a contract entered into with you;
- The processing of your data is necessary to comply with our legal obligations;
- We use your data to pursue a legitimate interest and our reasons for doing so outweigh the possible prejudice to your data protection rights;
There may be purposes that are permitted under other legal bases; in such cases, we will make every effort to identify the legal basis in question and communicate it to you as soon as possible after we become aware of it.
6. RECIPIENTS OF YOUR DATA
To whom do we disclose your data within the European Union?
Occasionally, in order to comply with our legal obligations and our contractual commitment to you, we are obliged and required to transfer some of your data to certain categories of recipients, which are specified below (they will only appear if transfers are to be made):
Not applicable.
In addition to the categories of recipients to whom data is disclosed, we may also disclose data to the following organisations (they will only appear if data is disclosed to other organisations):
Not relevant.
Do we make International Transfers of your data outside the European Union?
In the processing of your data by us, we need to contract external services which may involve your data being stored and/or processed by organisations that are established or operating outside the European Union, which would involve us making international transfers of your data.
Full details of such international transfers are set out below (only if they take place):
Not applicable.
7.- ORIGIN AND TYPES OF DATA PROCESSED
Where do we obtain your data from?
Whenever you contact us directly, for example, through the website www.mrcbalear.com or through our customer service hotlines, to request information about our products and services.
You provide it to us yourself or when you make a booking with us.
In this respect, we will only collect and process your personal data if you are at least 14 years old.
Antje Margarete Roenn Marder reserves the right to carry out age checks on persons who provide personal data to us. Any data of a person under 14 years of age will be deleted.
We would appreciate it if you could help us to keep your personal data up to date by informing us of any changes to your contact details or preferences.
What types of data do we collect and process from you?
Through the various services and contact channels described in this Privacy Policy, the following types of data may be collected about you:
Contact Details: Name, address, telephone numbers, email address.
Preferences: information you provide about your preferences.
8. RIGHTS OF INTERESTED PARTIES
What rights do you have?
The data protection regulations in force protect you in a series of rights in relation to the use we make of your data. Each and every one of your rights are unipersonal and non-transferable, i.e. they can only be exercised by the owner of the data, subject to verification of his or her identity.
The following are the rights that you have:
- Request ACCESS to your personal data.
- Request the RECTIFICATION of your data.
- Request the DELETION or elimination of your data (right to be “forgotten”).
- LIMIT or OPPOSE our use of your data.
- Right to PORTABILITY of your data for telecommunications or internet services.
- Right to WITHDRAW your consent at any time.
- The right to file a data protection COMPLAINT with the Data Protection Authority
Control: Spanish Data Protection Agency.
How can you exercise your rights in relation to your data?
To exercise your rights of access, rectification, deletion, limitation or opposition, portability and withdrawal of your consent, you may do so as follows:
Antje Margarete Roenn Marder, C/ de Mestral, 4. 07250, Villafranca de Bonany (Islas Baleares). +34 650 784 462. info@mrcbalear.com.
How can you file a complaint?
In addition to your rights, if you believe that your data is not being collected or processed in accordance with current Data Protection legislation, you may lodge a complaint with the Supervisory Authority, whose contact details we indicate below:
Agencia Española de Protección de Datos
Calle Jorge Juan, 6, 28001 Madrid
Telephone: 901 100 099 – 912 663 517
Web: www.agpd.es
9. CONSENT AND ACCEPTANCE
Acceptance of this document indicates that you understand, accept all the clauses of our privacy policy and therefore authorise the collection and processing of your personal data under these terms. This acceptance is made by signing the “Data Processing Consent Authorisation Form”.