PRIVACY POLICY

Privacy Policy-Expanded information
This privacy policy is a part of the General Terms and Conditions regulating the website www.palaciocanmarques.com together with the Cookie Policy and Legal notice.

Mosaic Development S.L. (Palacio Can Marques), reserves the right to modify or adjust this Privacy Policy at any time. We, therefore, encourage you to review it whenever you access the website. In the event that the user has registered on the website and logged into his/her account or profile, when accessing it, he/she will be informed whenever there have been substantial changes regarding the processing of personal data.

Who is responsible for processing your data?
The data that has been collected or that you have voluntarily provided through the website, whether by browsing it, or any data you may have given us via contact forms, via email or phone, will be collected and processed by the party responsible for the processing, whose identifying data is indicated below:

Mosaic Development S.L.
CIF: B16568743

Registered offices: C/Apuntadores 15, 07012 Palma de Mallorca, Illes Baleares

Registered in the Trade Registry of Palma de Mallorca, Volume 2766, book 0, folio 79, page PM84229 Date 09/03/2018

C/ Apuntadores 15, 07012 Palma de Mallorca, Illes Baleares
Tel. +34 871 520 290
Email: hotel@palaciocanmarques.com

If, for any reason, you want to get in touch with us regarding any issue related to the processing of your personal data or privacy (with our data protection commissioner), you can do so through any of the means indicated previously.

Which data do we collect through the website?
Just by browsing the website, Palacio Can Marques will be able to collect information relating to:
- IP address
- Browser version
- Operating system
- Duration of visit or website browsing

Such information is stored by Google Analytics, so we refer you to Google’s privacy policy, since it collects and processes said information. http://www.google.com/intl/en/policies/privacy/

Similarly, the website provides you with some Google Maps functions, which may have access to your location, should you give it permission, in order to facilitate a greater specificity about the distance and/ or routes connecting our locations. In this regard, we refer to the privacy used by Google Maps, in order to know how it uses and processes such data
http://www.google.com/intl/en/policies/privacy/

The information we handle is not linked to any specific user and it is stored in our databases, in order to carry out statistical analyses, improvements on the website, on our products or services, and it will help us improve our business strategy. The data will not be disclosed to third parties.

User registration at the website/ submitting forms
To access certain products or services, such as bookings or contact, it is necessary for the user to fill in a form. To do this, on the registration form, a series of personal data will be requested. The data are necessary and mandatory for carrying out said registration. Should you choose not to provide us with such data, the registration will not take place. In such case, the browsing data will be linked to the data on the user’s registration, identifying said specific user that is browsing the website. This way, we are able to personalize the products or services offerings that, in our opinion, best suit the user.

Each user’s registration data will be incorporated into the database of Palacio Can Marques, along with the transaction history of said user, and will be stored therein as the registered user’s account is not removed. Once said account has been removed, the information will be kept isolated form databases, and those relating to the transactions carried out will be kept 10 years, not being accessed or altered, in order to comply any statutory periods of retention in force. Data that are not linked to the transactions performed will be maintained unless consent is withdrawn, in which case they shall be deleted immediately (always with due regard to any statutory periods).
The legal basis for the processing data is the performance of a contract between the parties. In relation to the delivery of commercial communications and promotional offers by email and replying to requests for information, the legitimacy of the processing the data is the consent of the affected party.

The aims of the processing, shall be as follows:
(a) to manage your access to the website.
(b) to manage the purchase of the products and/or services made available to you through the website
(c) to keep you informed of the processing and status of your requests or bookings
(d) to respond to your requests for information
(e) to manage all functionalities and/or services that the platform provides to the user.

We hereby inform you that you can receive communications by email or on the phone, to inform you of potential incidents, errors, problems and/or the status of your requests.

For the sending of commercial communications, the express consent of the user at the time of registration will be requested. In this regard, the user may revoke the consent given by addressing Palacio Can Marques, in any of the ways listed above. In any case, in each commercial communication, you will be given the possibility to unsubscribe from receiving said communications, either through a link and/or email address.

Agents
For what purposes will we process your personal data?
- tracking your activity
- performing the corresponding transactions.
- billing and filling the appropriate tax returns.
- fraud and recovery management.

What is the legitimation for processing your data?
The legal basis is of contractual origin, acceptance of an agency agreement.

Web or Email contacts
For what purposes will we process your personal data?
- answering to your questions, requests or petitions.
- managing the service requested, answering your requests or processing your application.
- information by electronic means, related to your request.
-commercial information or information on events by electronic means, provided that there is expressed permission.

What is the legitimation for processing your data?
Acceptance and consent from the person concerned: In those cases where, in order to make a request, it is necessary to fill out a form and to click on the send button, doing so will necessarily imply that you have been informed and have expressly granted consent to the contents of the clause appended to said form or have accepted the privacy policy.

All of our forms have a checkbox with the following formula in order to express contending of the information  “I have read and accept the Privacy Policy” 

Customers
For what purposes will we process your personal data?
- budget preparation and monitoring through communications between the two parties.
- information by electronic means, related to your request.
- commercial information or information on events by electronic means, provided that there is express permission.
- managing administrative services, logistics and communications carried out by the responsible party.

Billing:
- performing the corresponding transactions.
- billing and filling the appropriate tax returns.
- fraud and recovery management.

What is the legitimation for processing data?
The legal basis is the acceptance of a contractual relationship, or failing that, your consent by contacting us or offering us your products by any means.

Social Networks Contacts
For what purposes will we process your personal data?
- answering your questions, requests or petitions.
- managing the service requested, answering your requests or processing your application.
- working together and creating a community of followers.

What is the legitimation for processing your data?
The acceptance of a contractual relationship in the environment of the pertinent social network and in accordance with their privacy policies:
Facebook http://www.facebook.com/policy.php?ref=
Instagram hit://es-la.facebook.com/help/instagram/1558337079000388

How long are we going to keep your personal data?
We can only check or remove your data to a limited extend, being that you have a specific profile. We will process them as long as you allow us by following us, being friends on social network or liking or following us or our posts, or in any other similar way.  You must make any rectification of your data or information or publications restriction through your profile or user settings in the social network itself.

Video Surveillance
For what purposes will we process your personal data?
- video surveillance of our premises.
- control of our employees.
- sometimes they can be transferred to the courts for applications legitimate actions.

Human Resources
What is the legitimation for processing your data?
- management of the employment relationship and workers record
- carrying out all these administrative, fiscal and accounting procedures required to meet our contractual commitments, obligations in the field of labor legislation, social security, occupational tax and accounting hazard prevention.
- payroll management by means of a financial institution
- T&A control by means of an access control system with fingerprint/card card capabilities- if needed
- management of the company’s group insurance policies/pension plans
- carrying out training actions both subsidized and non-subsidized

What is the legitimation for processing your data?
The legal basis for the processing of your personal data is the performance of a contract between the parties, compliance with the elevant legal obligations, the consent from the interested party.

Do we include personal data from third parties?
We do not, as a general rule, we only process data provided to us by the owners. If you give us data from third parties, you must previously inform and request the consent from said parties, otherwise we are exempt from any liability for breach of this requirement.

And data relating to minors?
We do not process data from minors under 14 years of age, therefore, refrain from providing us with your data if you are under 14.

Will we contact you electronically?
We will only contact you electronically to manage your requests, if it is one of the means of contact with which you have provided us.  If we make commercial communications, they will have been previously and expressly authorized by you. 

What security measures do we apply?
We have adopted an optimal level of protection of the personal data that we handle, and we have installed all the means and technical measures, according to the latest state-of-the-art technology, to prevent the loss, misuse, alteration, unauthorized access and theft of personal data.

To what extent will decision making processes be automated?
Palacio Can Marques does not use fully automated decision-making processes to engage, develop, or finish a contractual relationship with the user. If we use these processes in a particular case, we will keep you informed and will communicate you of your rights in this regard, if so required by the law.

Will there be profiling?
In order to offer you products and/or services according to your interests and enhance your user experience, we may develop a "business profile" based on the information provided. However, no automated decisions will be made based on that profile.

With whom will your data be shared?
Personal data will not be passed on to third parties unless it is to comply with statutory provisions. In particular, they shall be shared with the national tax administration agency and banks and financial institutions for the payment of the service provided or product purchased, as well as for the execution of the agreement.

In the case of a purchase or payment, if you choose any application, web, platform, credit card, or any other online service, your data will be transferred to said platform or will be processed in its environment, always with the maximum security.

In the event that you have given us your consent to the processing of your name and images and other information, relating to the activity of Palacio Can Marques, they will be published on the different social networks and the Palacio Can Marques website.

International transfers:
Whenever Palacio Can Marques needs to transfer data internationally, they shall only be made to entities enabled by the Privacy Shield European Union-United States agreement (further information: https://www.privacyshield.gov/welcome), to entities that have demonstrated compliance with the level of protection and offer guarantees in line with the parameters and expected requirements in the current legislation on data protection, such as the European Regulation, or when there is a legal authorization to carry out the international transfer.

What rights do you have?
- to know if we are processing your data or not.
- to access your personal data.
- to request the rectification of your data if they are inaccurate.
- to request the deletion of your data if they are no longer needed for the purposes for which they were collected or if you withdraw the consent you granted.
- to request the limitation of the treatment of your data in some cases, in which case only we will retain them in accordance with the regulations in force.
- to move your data, which will be provided to you, in a structured, common or machine-readable format. If you prefer, we can send them to the responsible party of your appointment. This only applies to certain cases.
- to file a complaint with the Spanish Data Protection Agency, if you think that we have not assisted properly.
- to revoke the consent at any time to any processing of data to which you have consented previously

If you modify any data, we would be grateful if you would let us know so that we can keep them up to date.

Would you like a form so that you can exercise your rights?
We have forms for you to exercise your rights, ask us by email or if you prefer, you can use the one drawn up by the Spanish Data Protection Agency or third parties. These forms must be signed electronically or be accompanied by a photocopy of your ID card. (DNI in Spanish).
 
If you are legally represented by someone, you must send us a copy of their Spanish National ID card (DNI in Spanish), or have them sign it electronically.
Forms can be submitted in person, sent by letter or by email to the address of the responsible body at the beginning of this text. You have the right to file a complaint with the Spanish Data Protection Agency, if you think that you have not assisted properly when it comes to your rights.
 
The deadline for Palacio Can Marques to reach a resolution is one month, starting from the effective reception of your request.
You are entitled to revoke your consent at any time for any of the processing of data to which you have consented.

Do we use cookies?
If we use any other type of cookies, aside from the necessary ones, you can consult our cookies policy on the corresponding link on our home page.
How long are we going to keep your personal data?
 
Your personal data will be kept as long as there is mutual interest.  Once you decide it is no longer in your interest, the processed personal data for whichever purposes will be kept for the legally prescribed term included the period in which a judge or court may require them in accordance with the period of limitation of legal proceedings.
 
The processed data will be kept as long as the aforementioned legal time limits do not expire, as well as if there were a legal obligation to keep them, or there is no such legal term, until the person concerned requests its deletion or revokes the consent granted.

We will keep all information and communications relating to your purchase or the performance of our service for as long as the warranties of our products or services last, to meet potential claims.

© Copyright 2019 Palacio Can Marques® - All Rights Reserved