The purpose of this policy is to inform data subjects about the various processing operations carried out by this organisation through the website and which affect their personal data, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights.

1. IDENTIFICATION AND CONTACT DETAILS OF THE PERSON RESPONSIBLE

JOSE ANTONIO RIBAS RIBAS, residing at CTRA. CALA BASSA FINAL (07829 SANT AGUSTÍ DES VEDRÁ) ISLAS BALEARES, with NIF 46954803G, contact telephone 971344599 and e-mail [email protected].

2. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA

• USERS/NAVIGATORS OF THE WEBSITE OF THE RESPONSIBLE PARTY

We will process the personal data provided in order to:

• To deal with requests, complaints and incidents transferred through our contact channels incorporated in the website.
• To understand the behaviour of the surfer within the website in order to detect possible computer attacks on our website.
• To comply with the legal obligations that are directly applicable to us and regulate our activity.
• Protect and exercise our rights or respond to claims of any kind.
• Where appropriate, sending commercial communications relating to the goods or services that make up our activity and/or news or bulletins related to our sector. Your refusal to provide us with authorisation will make it impossible for the company to send you information.
• Where appropriate, manage their participation in competitions and promotions carried out by the entity. Your refusal to provide us with authorisation will make it impossible for you to participate.
• Where appropriate, send satisfaction and/or quality surveys. Your refusal to provide us with authorisation will make it impossible for us to evaluate the service provided.

• CUSTOMERS

In addition to the purposes indicated in the section “users/users of the website”, we will process the personal data provided for the following purposes:

• Managing the business relationship.
• Manage the provision of the services you have contracted.
• Carrying out administrative, accounting and tax formalities.

3. LEGAL BASIS FOR PROCESSING

• USERS/NAVIGATORS OF THE WEBSITE OF THE RESPONSIBLE PARTY
• In the consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• To comply with the legal obligations that apply to us. In this case, the data subject may not object to the processing of personal data.
• In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although he or she may exercise, where appropriate, the rights recognised in the “rights” section of this policy.

• CUSTOMERS
• Execution of a contract to which it is a party or application of pre-contractual measures. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• In the consent you have given us to process your data for purposes unrelated to the development or execution of the existing contract. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
• To comply with the legal obligations that apply to us. In this case, the data subject may not object to the processing of personal data.
• In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although he or she may exercise, where appropriate, the rights recognised in the “rights” section of this policy.

4. WEBSITE ADD-ONS AND TOOLS

• Google reCAPTCHA

We use the Google reCAPTCHA service to detect, on the basis of legitimate interest, whether the website is being used by bots, in order to protect the portal and prevent abusive and fraudulent practices, such as sending spam.

You can access our provider’s privacy policy by clicking here.

• Stripe

As part of our services, we use the Stripe payment gateway to process financial transactions and ensure that your payments are made securely and efficiently. We recommend that you first review Stripe’s privacy policy to understand how they handle your personal information by clicking here.

• Redsys

As part of our services, we use the Redsys payment gateway to process financial transactions and ensure that your payments are made securely and efficiently. We recommend that you first review Redsys’ privacy policy to understand how they handle your personal information by clicking here.

5. TIME LIMITS OR CRITERIA FOR DATA RETENTION

The personal data provided will be kept for the time necessary to fulfil the purposes for which they were originally collected.

Once the data are no longer necessary for the processing in question, they will be kept duly blocked in order to, where appropriate, make them available to the competent Public Administrations and Bodies, Judges and Courts or the Public Prosecutor’s Office, during the period of limitation of the actions that may derive from the relationship maintained with the customer and/or the legally stipulated retention periods.

Data blocking period:

• THE CIVIL CODE.   Between 1 and 5 years depending on the case, in accordance with the provisions of articles 1964.2 and 1968.2 of the aforementioned body of law.
• THE COMMERCIAL CODE. For 6 years, in accordance with the provisions of article 30 of the aforementioned legal body. It applies to commercial information related to (invoices issued and received, receipts, corrective invoices, bank documents, etc.).
• THE GENERAL TAX LAW. For 4 years in accordance with the provisions of articles 66 to 70 of the aforementioned legal body. It applies to information related to tax obligations.

6. AUTOMATED DECISIONS AND PROFILING

The website does not make automated decisions or create profiles.

7. TARGET

For the duration of the processing of your personal data, the organisation may transfer your data to the following recipients:

• Judges and Courts.
• State Security Forces and Corps.
• Other competent public authorities or bodies, where the controller is under a legal obligation to provide the personal data.
• Where applicable, to those Processors who provide services to us.
• Banks and Financial Institutions.

8. INTERNATIONAL DATA TRANSFERS

The organisation does not carry out any International Data Transfer. Should it subsequently become necessary to carry out international data transfers, the degree of protection of the destination country will be verified and the guarantees required by the regulations will be adopted.

9. SOCIAL NETWORKS

In order to make you participate in our activity, and so that you can be aware of our news, we inform you that JOSE ANTONIO RIBAS RIBAS has created a profile on Social Networks.

All users have the opportunity to join our social networks or groups. However, you should be aware that, unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid way), your data will belong to the corresponding Social Network, so we recommend that you carefully read their terms of use and privacy policies, as well as, be sure to configure your preferences regarding the processing of data.

Below, we detail the link to the privacy policy of the different Social Networks in which we are present, so that you can access at all times to the privacy policies and configure your profile to ensure your privacy:

Facebook: https://www.facebook.com/people/Camping-Cala-Bassa/100063744635533/#

Instagram: https://www.instagram.com/camping_cala_bassa/

10. RIGHTS

Data subjects may request further information about the processing of their personal data and may at any time, free of charge, exercise their rights of access, rectification and erasure, as well as request restriction of the processing of their personal data, object to the processing, request portability of their personal data (where technically feasible) or withdraw their consent and, where appropriate, not to be subject to a decision based solely on automated processing, including profiling.

To do so, you can use the forms provided by the organisation, or send a letter to the postal address or e-mail address mentioned in the heading. For the appropriate purposes, we inform you that you may be asked for your ID card or any other similar document, in order to prove your identity, provided that this cannot be done by other less intrusive means.

In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Supervisory Authority (Spanish Data Protection Agency), through its website www.aepd.es.

11. VERACITY OF DATA

The interested party guarantees that the data provided are true, accurate, complete and up to date, and undertakes to inform of any change in the data provided, through the channels provided for this purpose and indicated in point one of this policy. He/she shall be liable for any damage or harm, both direct and indirect, that may be caused as a result of non-compliance with this obligation.

In the event that the user provides data of third parties, he/she declares that he/she has the consent of the interested parties and undertakes to provide them with the information contained in this clause, exempting the organisation from any liability arising from failure to comply with this obligation.

12. MODIFICATIONS AND UPDATING

This privacy policy may be modified/updated according to the established legal requirements or in order to adapt said policy to the instructions issued by the Spanish Data Protection Agency, or as a result of changes to our website. For this reason, we advise users to periodically visit our Privacy Policy.

If you have any doubts about this policy, you can contact JOSE ANTONIO RIBAS RIBAS using the forms provided by the organisation, or send a letter to the postal address or e-mail address mentioned in the heading.

Last revised 02 May 2024