Privacy policy

INTRODUCTION

Your privacy is important to us, which is why this document explains what data we collect from users, how we use it and for what purpose, among other things. Users over 14 years of age may register as users without the prior consent of their parents, guardians or legal representatives. In the case of children under 14 years of age or identified as ‘legally competent’, we will always require parental consent, or the consent or a guardian or legal representative.

For your information, we will never request more information than we actually need for the services required; we will never share it with third parties, except by legal obligation or with your prior authorisation, and we will never use your data for any other purpose not previously indicated.

As a user, you should read this policy carefully on a regular basis and whenever you enter your personal data, as this document may be subject to changes as the provider may modify any information that may appear on the website in order to comply with regulations or update the policy, without the obligation to pre-notify or inform users of these obligations, with publication on the website of the provider considered sufficient.

DATA CONTROLLER

Identity: ARECASA (also the provider)

Tax Identification Number:  A08550006

Postal address: Carrer de sa Torol·lera s/n
07740 Arenal d’en Castell
MENORCA (Islas Baleares)

Email: hola@vivalapepamenorca.es

ARECASA, as the entity responsible for the Website, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (RGPD), Organic Law 3/2018 of 5 December (LOPDGDD) and other current legislation on the protection of personal data, and by Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce (LSSICE), informs you that it has implemented the necessary technical and organisational security measures to ensure and protect the confidentiality, integrity and availability of the data entered.

METHOD FOR COLLECTING DATA AND THE DATA THAT WE COLLECT: The data we collect and how we obtain it is as follows:

  1. Through the contact form: name, email, age, telephone
  2. Through the newsletter subscription form: name, email

No specially protected categories of data are processed.

PURPOSE OF DATA PROCESSING

Your personal data will only be used for the following purposes, with your consent for each of the purposes in the corresponding section of the website:

  1. Contact form:to respond to queries and/or provide information required by the User
  2. Newsletter subscription form: to send commercial advertising communications by email, SMS, social communities or by any other electronic or physical means, if the User has expressly consented to it.
  3. Other purposes:

o To carry out the commercial, administrative, fiscal and accounting processes that are necessary under current legislation

o To know the opinion of our Users and to improve the services provided by the Website

o To perform profiling and usability analysis of the website, through cookies (mentioned in the cookies policy)

o Social media: the use of social media is explained in more detail in the corresponding section

Use of photographs: The photographs that are posted on the website are the property of ARECASA, including those of minors, for which, in order to obtain them, the prior consent of parents, guardians or legal representatives has been obtained by signing the forms made for this purpose by the centres in which the minors are part of. However, parents, guardians, or representatives of minors, as holders of the exercise of their rights, may indicate, always through prior formal written request, their refusal for the image of the minor to be used. In this case, the image will be shown pixelated.

You may revoke your consent at any time in writing by sending an email with the subject ‘Unsubscribe’ to the above-mentioned email address.

In accordance with LSSICE, ARECASA does not carry out SPAM practices, therefore, it does not send commercial communications by email that have not been previously requested or authorised by the User. Consequently, in all communications that you will receive from the provider, the User has the possibility to revoke their express consent to receive our communications.

We will not process your personal data for any purpose other than those described except by legal obligation or court order.

You will not be subject to decisions based on automated processing that have an impact on your data.

LEGITIMACY OF PROCESSING

The legal basis for the processing of data is your consent given at the time of supplying your data in the corresponding form for the above-mentioned purposes, when ticking the relevant check box.

The prospective or commercial offer of products and services is based on the consent requested from you, without, under any circumstances, the withdrawal of this consent conditioning the execution of the subscription contract.

Failure to provide the personal data requested or failure to accept this privacy policy implies that the above-mentioned purposes will not be able to be carried out.

In cases in which there is a prior contractual relationship between the parties, the legitimacy for the development of administrative, tax and accounting obligations that are necessary under current legislation will be considered the prior existence of a business relationship established between both parties.

DATA RETENTION PERIOD:

Your data will be kept for the duration of the business relationship with us or if you exercise your right of cancellation, opposition or revocation of consent. Even if you have exercised your rights correctly, we must keep your data duly blocked for the duration of the periods legally provided for in applicable provisions.

RECIPIENTS OF ASSIGNMENTS OR TRANSFERS:

ARECASA does not carry out transfers or communications of data either within or outside of the EU. The provider will only provide information to law enforcement agencies under court order or by obligation of statutory regulations, without prejudice to blocking or cancelling your account according to the indications of the commission or due to a crime by the User. The information provided will be only that which is available to the provider at the time.

The information that you provide us through this website will be hosted on ARECASA’s servers, contracted to the company that provides the web hosting service. The processing of the entity’s data is regulated by means of a data processor contract between the provider and this company.

RIGHTS OF DATA SUBJECTS:

As a user-data subject, you may request the exercise of the following rights from ARECASA in writing by sending a letter to the postal address in the heading or by sending an email to hola@vivalapepamenorca.es, indicating in the subject line: ‘DATA PROTECTION: RIGHTS OF DATA SUBJECTS’, attaching a photocopy of your ID card or any other similar means, as indicated by law.

Rights:

  • Right of access: allows the data subject to know and obtain information about their personal data that is subject to processing.
  • Right of rectification or deletion: allows for the correction of errors and the modification of data that is inaccurate or incomplete
  • Right of cancellation: allows for the deletion of data that is inadequate or excessive.
  • Right of opposition: the data subject’s right not to have their personal data processed or to have it stopped.
  • Limitation of processing: entails the marking of the personal data that is retained in order to limit its future processing, for the exercise or defence of claims.
  • Data portability: the provision of the data that is subject to processing to the data subject so that they can transfer it to another data controller, unimpeded.
  • Right not to be subject to automated individual decisions (including profiling):the right not to be subject to a decision based on automated processing that produces effects or significantly affects the data subject.

As a user, you have the right to withdraw your consent at any time. The withdrawal of consent will not affect the lawfulness of the processing carried out prior to the withdrawal of consent.

You also have the right to lodge a complaint with the supervisory authority if you consider that your rights in relation to the protection of your data may have been infringed (www.aepd.es).

SECURITY MEASURES:

The data you provide will be treated confidentially. The provider has adopted all technical and organisational measures and all levels of protection necessary to ensure security in the processing of data and to avoid its alteration, loss, theft, treatment or unauthorised access, according to the state of the art and the nature of the data stored. Likewise, it is also guaranteed that the processing and registration in files, programmes, systems and equipment, premises and centres comply with the requirements and conditions of integrity and security established in current regulations.

LANGUAGE

The language applicable to this privacy policy is Spanish. Therefore, in the event of any contradiction in any of the versions provided in other languages, the Spanish version shall prevail.

PROFILE ANALYSIS

The information provided in the different forms, during the interaction with the website and any other data provided during navigation, including the information provided by in the cookies in relation to browsing habits, entails the acceptance of the processing of this data, in order to be segmented or categorised for the purpose of applying them to the activity related to the management of general administration, information, marketing of advertising space, profiling, analysis of proposals requested by users/customers, statistical study of services and content used, tastes and preferences, surveys and forms. The data used in the creation of these profiles are not data that allow for users to be identified but only show in a graph the type of person that interacts with the website, their age, their country, their gender, etc.

The user who visits this website explicitly consents to the use of this generic information for the profiling, segmentation and categorisation of data for the purposes described in the previous section.

SOCIAL MEDIA

We inform you that ARECASA may have presence on social media. The processing of data carried out by people who become followers on social media (and/or link themselves or connect through social media) of the official pages of ARECASA will be governed by this section, as well as for those conditions of use, privacy policies and access regulations belonging to the social media that apply in each case and is previously accepted by the user.

ARECASA will process your data for the purposes of properly managing its presence on the social media platform, informing of the activities, products or services of the provider, as well as for any other purpose that the regulations of the social media platform allow.

The publication is strictly forbidden of content:

– That is allegedly unlawful by national, community or international regulations or that perform allegedly unlawful activities or contravene the principles of good faith.

– That is a threat to the fundamental rights of persons, shows a lack of courtesy towards other users, disturbs or generates negative opinions in our users or third parties and in general any content that ARECASA considers inappropriate.

– And that in general contravenes the principles of legality, honesty, responsibility, protection of human dignity, protection of minors, protection of public order, protection of private life, consumer protection and intellectual and industrial property rights.

Likewise, ARECASA reserves the right to remove, without prior notice, from the website or the business social media, content that is considered inappropriate.

In any case, if you send personal information through the social media network, ARECASA shall be exempt from liability in relation to the security measures applicable to this platform. If the user wishes to be informed of these measures, they should consult the corresponding particular conditions of the network in question.

SENDING CVS

In case the user sends their CV through our website, they are informed that the data provided will be processed so they can participate in the selection process that may take place, carrying out an analysis of the applicant’s profile with the aim of selecting the best candidate for the vacant position offered by the Data Controller. We inform you that this is the only official procedure for accepting your CV and that CVs sent by other means will not be accepted. In case of a modification to the data, please inform us in writing as soon as possible, in order to keep your data properly updated.

The data will be kept for a maximum period of one year, after which the data will be deleted, guaranteeing total respect for confidentiality both in the processing and in its subsequent destruction. In this sense, after this period, and if you wish to continue participating in the selection processes of the Data Controller, please send us your CV again.

The data may be processed and/or communicated to the companies in our group during the time of collection of your CV and for the same purposes previously mentioned.

SUBSCRIPTION TO THE BLOG

In case the user subscribes to the blog, we inform you that the data provided will be processed to manage your subscription to the informative blog with notice of any updates and will be kept as long as there is a mutual interest in maintaining the purpose of processing. When it is no longer necessary for this purpose, it will be deleted using appropriate security measures to guarantee the pseudonymisation of the data or total destruction of the data. The data will not be communicated to third parties, unless legally obliged to do so.

PARTICIPATION IN FORUMS

If the user wishes to participate in the website forums, we inform you that the data provided will be processed to regulate participation in the forum. Any registration or transmission of personal data provided by the user of this forum implies knowledge and unequivocal acceptance of the Legal Notice and Privacy Policy displayed on the website. The data will be kept as long as there is a mutual interest in maintaining the purpose of the processing and when it is no longer necessary for such purpose, it will be deleted using appropriate security measures to guarantee the pseudonymisation of the data (if any) or total destruction of the data. Postings will be publicly displayed to users of the online forum.

ARECASA is not responsible for any content posted on the forum entered by any registered user. The content posted only expresses the point of view of its author. The author of the content agrees not to use this blog to post or link to defamatory, abusive, hateful, threatening, offensive, abusive, spam or analogous content, adult content or content that infringes copyright or the law and public order in general. If, in the opinion of the moderators, the uploaded content could harm and/or violate the rights of third parties or the law, it may be removed without explanation.

PUBLICATION OF REVIEWS

If the user wishes to publish their opinion on the website, we inform you that the data provided will be processed to address the proposed suggestions, experiences or opinions regarding the products and/or services to be published on the website and thus be able to help other users. The data will be kept as long as there is a mutual interest in maintaining the purpose of the processing and when it is no longer necessary for such purpose, it will be deleted using appropriate security measures to guarantee the pseudonymisation of the data or total destruction of the data. Reviews will be published on our website. The only data that will be published about the reviewer will be their name.

CHANGES TO THIS PRIVACY POLICY

ARECASA reserves the right to modify this privacy policy to adapt it to new legislation or jurisprudence.

REVOCABILITY

The consent given, both for the treatment and for the transfer of the data of the data subject, is revocable at any time by communicating this to ARECASA according to the terms established in this Policy for the exercise of rights. This revocation shall in no case be retroactive.

LEGISLATION

In general terms, relations between ARECASA and the Users of its online services, on this website, are subject to Spanish legislation and jurisdiction to which the parties expressly submit themselves, with the Courts of Law of the Balearic Islands competent for the resolution of all conflicts derived or related to its use.