PRIVACY POLICY - EXTENDED INFORMATION
LAST MODIFICATION: 04/07/2019 The Privacy Policy is part of the General Conditions governing the Website: www. martonhotelvalldemossa.com-mallorca.com/ together with the Cookies Policy and the Legal Notice. FORMULA BALEAR SA reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Website. In the event that the user has registered on the website and accesses his account or profile, upon accessing the same, he will be informed in the event that there have been substantial changes in relation to the processing of his personal data.
who is responsible for the processing of your data?
The data collected or provided voluntarily through the Website, either by browsing it, as well as all those that you may provide in the contact forms, via email or telephone, will be collected and processed by the Data Controller, whose data are indicated below: FÓRMULA BALEAR S.A CIF: A07605207 Address: Paseo Marítimo, 37, 6ºD, 07014, Palma de Mallorca Registration data in the Companies Registry: Companies Registry of Palma de Mallorca, Entry 402, Diary 61, entry 413 of 15-02-93
Contact at FORMULA BALEAR SA for the protection of your personal data
C/ Paseo Marítimo, 37, 6ºD, 07014, Palma de Mallorca Phone: 971 612 626 Mail:
[email protected] If, for any reason, you wish to contact us on any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.
what data do we collect through the website?
By the simple fact of browsing the Website, FORMULA BALEAR SA, will collect information regarding:
IP address.
Browser version.
Operating system.
Duration of the visit or browsing of the Website.
This information is stored by Google Analytics, so we refer to Google's Privacy Policy, as it collects and processes such information. http://www.google.com/intl/en/policies/privacy/ Similarly, the Website provides the utility of Google Maps, which may have access to your location, if you allow it, in order to provide you with greater specificity about the distance and / or paths to our headquarters. In this regard, we refer to the Privacy Policy used by Google Maps, in order to know the use and processing of such data http://www.google.com/intl/en/policies/privacy/ The information we handle, will not be related to a specific user and will be stored in our databases, in order to perform statistical analysis, improvements in the Web Page, about our products and / or services and help us improve our business strategy. The data will not be communicated to third parties.
User registration on the web page / Sending of forms
In order to access certain products and/or services, such as booking, it is necessary for the user to fill out a form. To do so, in the registration form, a series of personal data are requested. The data are necessary and mandatory to carry out such registration. In the case of not providing such fields, the registration will not be carried out. In this case, the navigation data will be associated with the user's registration data, identifying the specific user who navigates the Web Page. In this way, it will be possible to personalize the offer of products and/or services that, at our discretion, best suits the user. The registration data of each user will be incorporated into FORMULA BALEAR SA's databases, along with the history of transactions made by the user, and will be stored therein until the registered user's account is deleted. Once such account is deleted, such information will be removed from our databases, keeping the data related to the transactions made for 10 years, without accessing or altering them, in order to comply with the legal deadlines in force. The data that are not linked to the transactions made will be kept unless you withdraw your consent, in which case they will be deleted immediately (always taking into account the legal deadlines). The legal basis for the processing of your personal data is the performance of a contract between the parties. In relation to the sending of communications and promotions by electronic means and the response to requests for information, the legitimacy of the treatment is the consent of the user.
The purposes of the treatment will be the following:
To manage your access to the Web Page.
To manage the purchase of the services made available to you through the Web Page.
To keep you informed of the processing and status of your requests, purchases and/or reservations.
Respond to your request for information.
Manage all the utilities and / or services offered by the platform to the user.
Thus, we inform you that you may receive communications via email and / or on your phone, in order to inform you of possible incidents, errors, problems and / or status of your requests. For the sending of commercial communications, the express consent of the user will be requested at the time of registration. In this regard, the user may revoke the consent given by contacting FORMULA BALEAR SA, using the means indicated above. In any case, in each commercial communication, the user will be given the opportunity to unsubscribe from receiving them, either through a link and/or email address.
Sending of Newsletter
On the Website, you have the option of subscribing to FORMULA BALEAR SA's Newsletter. To do so, you must provide us with an e-mail address to which the Newsletter will be sent. This information will be stored in a FORMULA BALEAR SA database, in which it will remain registered until the interested party requests to unsubscribe or, where appropriate, FORMULA BALEAR SA ceases to send it. The legal basis for the processing of this personal data is the express consent given by all interested parties who subscribe to this service by checking the box provided for this purpose. The e-mail data will only be processed and stored for the purpose of managing the sending of the Newsletter by users who request it. For the sending of the Newsletter, the express consent of the user will be requested at the time of registration by checking the box provided for this purpose. In this regard, the user may revoke the consent given by contacting FORMULA BALEAR SA, using the means indicated above. In any case, in each communication, you will be given the opportunity to unsubscribe from receiving them, either through a link and / or email address.
Newsletter Sending
On the Website, you have the option to subscribe to the FORMULA BALEAR SA Newsletter. To do so, you must provide us with an e-mail address to which the Newsletter will be sent. This information will be stored in a FORMULA BALEAR SA database, in which it will remain registered until the interested party requests to unsubscribe or, where appropriate, FORMULA BALEAR SA ceases to send it. The legal basis for the processing of this personal data is the express consent given by all interested parties who subscribe to this service by checking the box provided for this purpose. The e-mail data will only be processed and stored for the purpose of managing the sending of the Newsletter by users who request it. For the sending of the Newsletter, the express consent of the user will be requested at the time of registration by checking the box provided for this purpose. In this regard, the user may revoke the consent given by contacting FORMULA BALEAR SA, using the means indicated above. In any case, in each communication, you will be given the opportunity to unsubscribe from receiving them, either through a link and / or email address.
If you are one of the following groups, please consult the drop-down information:
WEB OR EMAIL CONTACTS
for what purposes will we process your personal data?
To answer your queries, requests or requests.
To manage the requested service, answer your request, or process your request.
Information by electronic means, related to your request.
Commercial or event information by electronic means, as long as there is express authorization
what is the legitimacy for the processing of your data? The acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill out a form and click on the send button, the completion of the same will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to the form or acceptance of the privacy policy. All our forms have a verification box or checkbox with the following formula, in order to send the information: "□ I have read and accept the Privacy Policy."
CUSTOMERS
for what purposes are we going to treat your personal data?
Elaboration of the budget and follow-up of the same by means of communications between both parties.
Information by electronic means, concerning your request.
Commercial information or events by electronic means, as long as there is express authorization.
Manage administrative, communications and logistics services performed by the Responsible.
To carry out the corresponding transactions.
Invoicing and declaration of the appropriate taxes.
Control and collection procedures.
what is the legal basis for the processing of your data? The legal basis is your consent and the execution of a contract.
SUPPLIERS.
for what purposes will we process your personal data?
Information by electronic means, concerning your request.
Commercial or event information by electronic means, as long as there is express authorization.
To manage administrative, communications and logistics services carried out by the Responsible.
To carry out the corresponding transactions.
Invoicing
Control and collection management.
what is the legal basis for the processing of your data? The legal basis is the acceptance of a contractual relationship, or otherwise your consent to contact us or offer us your products by any means.
SOCIAL MEDIA CONTACTS.
for what purposes we will treat your personal data?
To answer your queries, requests or requests.
To manage the requested service, answer your request, or process your request.
To get in touch with you and create a community of followers...
what is the legitimacy for the processing of your data? Acceptance of a contractual relationship in the relevant social network environment, and in accordance with its privacy policies. How long will we keep personal data? We can only consult or unsubscribe your data in a restricted way by having a specific profile. We will treat them as long as you let us following us, being friends or giving "like", "follow" or similar buttons. Any rectification of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.
VIDEO SURVEILLANCE.
for what purposes we will treat your personal data?
Video surveillance of our facilities.
Control of our employees.
Sometimes they can be transferred to courts and tribunals for the exercise of legitimate actions.
what is the legitimacy for the processing of your data? The unequivocal consent of the person concerned when accessing our facilities after viewing the information sign of the video-surveilled area.
JOB SEEKERS.
for what purposes will we process your personal data?
Organization of selection processes for the recruitment of employees.
To summon you for job interviews and evaluate your application.
If you have given us your consent, we may pass it on to collaborating or related entities, for the sole purpose of helping you find a job.
what is the legal basis for the processing of your data? The legal basis is your unequivocal consent, by giving us your CV and receiving and signing information regarding the processing we are going to carry out. How long will we keep the personal data? The CV will be stored for a period of one year, after which, if we have not contacted you, it will be deleted.
HR
for what purposes will we process your personal data?
Management of the employment relationship and the employee's file.
To carry out all those administrative, fiscal and accounting procedures necessary to comply with our contractual commitments, obligations in terms of labor regulations, Social Security, occupational risk prevention, tax and accounting.
Payroll payment management through a financial entity.
Time control through the access control system by fingerprint/card (if applicable).
Management of group insurance / pension plan of the entity.
To carry out training activities both for subsidized and non subsidized training.
what is the legal basis for the processing of your data? The legal basis for the processing of your data is the execution of your employment contract. Compliance with the relevant legal obligations. The consent of the data subject.
do we include personal data of third parties?
No, as a general rule we only process the data provided by the owners. If you provide us with data of third parties, you must previously inform and request their consent to such persons, otherwise you exempt us from any liability for failure to comply with this requirement.
what about children's data?
We do not process data from children under 14 years of age, so please refrain from providing them if you are not that age.
will we communicate with you by electronic means?
They will only be made to manage your request, if it is one of the means of contact that you have provided us. If we send commercial communications, they will have been previously and expressly authorized by you.
what security measures do we apply?
You can rest assured: We have adopted an optimal level of protection for the personal data we handle, and we have installed all the technical means and measures at our disposal, according to the state of technology, to prevent the loss, misuse, alteration, unauthorized access and theft of personal data.
to what extent will the decision-making process be automated?
FORMULA BALEAR SA, does not use fully automated decision-making processes to enter into, develop or terminate a contractual relationship with the user. In the event that we use such processes in a particular case, we will keep you informed and inform you of your rights in this regard if required by law.
will profiling take place?
In order to be able to offer you products and/or services according to your interests and to improve your user experience, we may develop a "business profile" based on the information provided. However, no automated decisions will be made on the basis of such a profile.
to whom will your information be disclosed?
Your data will not be disclosed to third parties, unless legally required. In particular, they will be communicated to the State Agency of Tax Administration and to banks and financial institutions for the collection of the service provided or product purchased, as well as to the persons in charge of the processing necessary for the execution of the agreement. In case of purchase or payment, if you choose any application, web, platform, bank card, or any other online service, your data will be transferred to that platform or will be treated in their environment, always with maximum security. In the event that you have given us your consent to the processing of your name and images and other information related to the activity of FORMULA BALEAR SA, they will be disclosed in the various social networks and website of FORMULA BALEAR SA
International transfers.
In case it is necessary for FORMULA BALEAR SA to carry out international data transfers, they will only be made to entities under the US-EU Privacy Shield agreement (more information: https://www.privacyshield.gov/welcome), to entities that have demonstrated that they comply with the level of protection and guarantees in accordance with the parameters and requirements set out in the current regulations on data protection, such as the European Regulation, or when there is a legal authorization to carry out the international transfer.
what rights do you have?
To know if we are processing your data or not.
To access your personal data.
To request the rectification of your data if it is inaccurate.
To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with the regulations in force.
To submit your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send it to the new person in charge that you designate. This is only valid in certain cases.
To file a complaint with the Spanish Data Protection Agency, if you believe that we have not served you properly.
To revoke consent for any processing for which you have consented, at any time. If you change any data, please let us know so that we can keep them updated.
do you want a form to exercise your rights?
We have forms for the exercise of your rights, ask us for them by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
These forms must be signed electronically or be accompanied by a photocopy of your ID.
If someone represents you, you must attach a copy of their ID card, or have them sign it with their electronic signature.
The forms can be submitted in person, sent by letter or by mail to the address of the person in charge at the beginning of this text.
You have the right to file a complaint with the Spanish Data Protection Agency, in the event that you consider that the request of your rights has not been properly addressed. FORMULA BALEAR SA, has a maximum of one month to resolve your complaint, counting from the effective receipt of your request by us. You have the right to revoke your consent at any time for any of the processing for which you have given it.
do we use cookies?
If we use other types of cookies that are not necessary, you can consult the cookies policy in the corresponding link at the top of our website.
how long will we keep your personal data?
Personal data will be kept for as long as you remain linked to us.
Once you disengage, the personal data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them in accordance with the statute of limitations for legal action.
The data processed will be kept as long as the aforementioned legal terms do not expire, if there is a legal obligation to maintain them, or if there is no such legal term, until the interested party requests their deletion or revokes the consent given.
We will keep all the information and communications related to your purchase or to the provision of our service, while the guarantees of the products or services last, to attend possible claims.
In each treatment or type of data, we provide you with a specific period, which you can consult in the following table:
FileDocument and conservation
Customers
Invoices10 years
Forms and coupons15 years
Contracts5 years
Human Resources
Payrolls, TC1, TC2, etc.10 years
ResumesUntil the end of the selection process, and 1 more year with your consent
Employee's fileUp to 5 years after leaving the company.
Severance pay documents. Contracts. Temporary workers data.4 years
Marketing
Databases or web visitors for the duration of the treatment.
Suppliers
Invoices10 years
Contracts5 years
Access control and video surveillance
List of visitors30 days
Videos30 days blocking 3 years destruction
Accounting
Accounting books and documents. Shareholders and board of directors agreements, company bylaws, minutes, board of directors regulations and delegated commissions. Financial statements, audit reports Records and documents related to subsidies6 years
Fiscal
Information on intra-group price establishments18 years 8 years 8 years for intra-group transactions for price agreements
Management of the entity's administration, rights and obligations relating to the payment of taxes. Administration of dividend payments and withholding taxes.10 years
Health and Safety
Medical Records5 years
Environmental
Chemical or Substantially Hazardous Substance Information10 years
Documents relating to environmental permits While the activity is being carried out.3 years after closure of the activity 10 years (statute of limitations)
Records on recycling or waste disposal3 years
Grants for clean-up operations must retain records of rights and obligations, receipts and payments.4 years
Accident reports5 years
Health and Safety
Insurance policies6 years (general rule) 2 years (damage) 5 years (personal) 10 years (life)
Purchases
Registration of all deliveries of goods or provision of services, intra-community acquisitions, imports and exports for VAT purposes.5 years
Legal
Intellectual and Industrial Property Documents. Contracts and agreements.5 years
Permits, licenses, certificates6 years from the expiration date of the permit, license or certificate. 10 years (criminal statute of limitations)
Confidentiality and non-competition agreementsAlways the term of the obligation or confidentiality
Protection of personal data
Processing of personal data, if different from the processing notified to the AEPD3 years
Personal data of employees stored in networks, computers and communications equipment used by employees, access controls and internal management/administration systems 5 years.