The data collected or voluntarily provided to us through the Website, whether by browsing it, as well as all those you may provide in the contact forms, via email or by telephone, will be collected and processed by the Data Controller, whose details are indicated below:

CÁLIDA IBIZA SA CIF: A07059058 Address: Paseo Juan Carlos I, 17, 07800, Ibiza Phone: 971806806 Data Protection Officer Email: gdpr@ibizagranhotel.com Registered in the Mercantile Registry of Illes Balears, Volume 322, Folio 89, Book 253, Section 3, Sheet 6068, 1st Inscription. If, for any reason, you wish to contact us on any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.

The data collected or voluntarily provided to us through the Website, whether by browsing it, as well as all those you may provide in the contact forms, via email or by telephone, will be collected and processed by the Data Controller, whose details are indicated below:

CÁLIDA IBIZA SA CIF: A07059058 Address: Paseo Juan Carlos I, 17, 07800, Ibiza Phone: 971806806 Data Protection Officer Email: gdpr@ibizagranhotel.com Registered in the Mercantile Registry of Illes Balears, Volume 322, Folio 89, Book 253, Section 3, Sheet 6068, 1st Inscription. If, for any reason, you wish to contact us on any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.

By the simple fact of browsing the Website, CÁLIDA IBIZA SA will collect information regarding:

• IP address.
• Browser version.
• Operating system.
• Duration of the visit or browsing the Website.

Such information is stored through Google Analytics and other third-party analysis tools. We refer to the privacy policies of said providers for the detailed processing of technical information. The technical information collected is not linked to specific users unless they log in to their private area.

The information we handle will not be related to a specific user and will be stored in our databases, for the purpose of performing statistical analysis, improvements to the Website, on our products and/or services and will help us improve our commercial strategy. The data will not be communicated to third parties.

To access certain products and/or services, it is necessary for the user to register on the Website or complete a form. To do this, in the registration form, a series of personal data is requested. The necessary and mandatory data to be provided by the user to carry out such registration are marked with the symbol *. In the event of not providing such fields, the registration will not be carried out. The username and password generated are personal and non-transferable, the user being responsible for their custody. We do not recommend that you write it down anywhere or notify it to third parties. In this case, the browsing data will be associated with the user's registration data, identifying the specific user who browses the Website. In this way, the offer of products and/or services that, in our opinion, best fits the user can be personalized, as well as recommending certain products and/or services.

Each user's registration data will be incorporated into the databases of CÁLIDA IBIZA SA, together with the history of operations carried out by the user, and will be stored in them as long as the registered user's account is not deleted. Once such account is deleted, said information will be separated from our databases, keeping separated for 10 years those data related to the transactions carried out, without accessing or altering them, in order to comply with the legally current terms. Data that are not linked to the transactions carried out will be maintained unless consent is withdrawn, in which case they will be deleted immediately (always taking into account the legal terms).

The legal basis for sending electronic commercial communications is the consent of the data subject. However, if there is a prior contractual relationship and the communications concern products or services similar to those contracted, the legal basis will be the legitimate interest of Cálida Ibiza SA, in accordance with article 21.2 of the LSSI, always allowing the user to oppose such processing in a simple and free way.

The purposes of the processing will be the following:

a) Manage the registration in the user registration area and their access to the Website.

b) Manage the purchase of products and/or services made available through the Website.

c) Keep you informed of the processing and status of your requests, purchases and/or reservations.

d) Respond to your request for information.

e) Manage all the utilities and/or services offered by the platform to the user.

Thus, we inform you that you may receive communications via email and/or on your telephone, in order to inform you of possible incidents, errors, problems and/or the status of your requests.

For the sending of commercial communications, the express consent of the user will be requested at the time of registration. In this regard, the user may revoke the consent given by contacting CÁLIDA IBIZA SA, making use of the means indicated above. In any case, in each commercial communication, you will be given the possibility to unsubscribe from receiving them, either by means of a link and/or email address.

In the event that the Website allows the option to subscribe to the CÁLIDA IBIZA SA Newsletter, it will be necessary for you to provide us with an email address to which it will be sent.

Such information will be stored in a database of CÁLIDA IBIZA SA, in which it will remain registered until the interested party requests the unsubscription from it or, as the case may be, the sending of it is ceased by CÁLIDA IBIZA SA.

The legal basis for the processing of these personal data is the express consent given by all those interested parties who subscribe to this service by checking the box intended for this purpose.

The email data will only be processed and stored for the purpose of managing the sending of the Newsletter by the users who request it.

For the sending of the Newsletter, the express consent of the user will be requested at the time of registration in it by checking the box intended for this purpose. In this regard, the user may revoke the consent given by contacting CÁLIDA IBIZA SA, making use of the means indicated above. In any case, in each communication, you will be given the possibility to unsubscribe from receiving them, either by means of a link and/or email address.

For what purposes are we going to process your personal data?

Perform a follow-up of your activity. Perform the corresponding transactions. Invoicing and declaration of the appropriate taxes. Control and recovery management.

What is the legitimation for the processing of your data?

The legal basis is of contractual origin, the acceptance of an agency contract.

For what purposes are we going to process your personal data?

Answer your inquiries, requests or petitions. Manage the requested service, answer your request, or process your petition. Information by electronic means, concerning your request. Commercial or event information by electronic means, provided there is express authorization.

What is the legitimation for the processing of your data?

The acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill out a form and "click" on the send button, the performance of the same will necessarily imply that you have been informed and have expressly granted your consent to the content of the clause attached to said form or acceptance of the privacy policy. All our forms have a checkbox with the following formula, in order to send the information: “□ I have read and accept the Privacy Policy.”

For what purposes are we going to process your personal data?

Preparation of the budget and follow-up of the same through communications between both parties. Information by electronic means, concerning your request. Commercial or event information by electronic means, provided there is express authorization. Manage the administrative, communications and logistics services carried out by the Data Controller. Invoicing. Perform the corresponding transactions. Invoicing and declaration of the appropriate taxes. Control and recovery management.

What is the legitimation for the processing of your data? The legal basis is the execution of the contract (art. 6.1.b GDPR) and compliance with legal obligations (art. 6.1.c GDPR), including tax regulations, prevention of money laundering, gaming regulations and Organic Law 4/2015 on the Protection of Citizen Security regarding the traveler registry.

For what purposes are we going to process your personal data?

Information by electronic means, concerning your request. Commercial or event information by electronic means, provided there is express authorization. Manage the administrative, communications and logistics services carried out by the Data Controller. Invoicing. Perform the corresponding transactions. Invoicing and declaration of the appropriate taxes. Control and recovery management.

What is the legitimation for the processing of your data?

The legal basis is the acceptance of a contractual relationship, or failing that, your consent when contacting us or offering us your products through some channel.

For what purposes are we going to process your personal data?

Answer your inquiries, requests or petitions. Manage the requested service, answer your request, or process your petition. Relate with you and create a community of followers.

What is the legitimation for the processing of your data?

The acceptance of a contractual relationship in the environment of the corresponding social network, and in accordance with its Privacy policies:

Facebook: http://www.facebook.com/policy.php?ref=pf

Instagram:https://help.instagram.com/155833707900388

Linkedin:http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

YouTube:https://www.youtube.com/yt/policyandsafety/es/policy.html

Whatsapp:https://www.whatsapp.com/legal/#privacy-policy

For how long are we going to keep the personal data?

We can only consult or unsubscribe your data in a restricted way by having a specific profile. We will process them for as long as you let us by following us, being friends or clicking “like”, “follow” or similar buttons. Any rectification of your data or restriction of information or publications must be carried out through the configuration of your profile or user in the social network itself.

For what purposes are we going to process your personal data?

Video surveillance of our facilities. Labor control. Guarantee the safety of people, goods and facilities. Prevent fraud, illegal conduct and risks associated with the activity of the casino. Comply with the legal and regulatory obligations applicable in terms of private security and gaming regulations. If applicable, make recordings available to the Security Forces and Corps, Courts and Tribunals when legally required.

What is the legitimation for the processing of your data?

The legal basis is the legitimate interest of the Data Controller in guaranteeing the safety of its facilities and preventing illegal activities (art. 6.1.f GDPR), as well as compliance with legal obligations applicable in terms of private security and gaming regulations (art. 6.1.c GDPR). Access to video-surveyed areas is duly signaled by informative posters in accordance with article 22 of the LOPDGDD. In certain areas of the Casino, video surveillance systems may also have the purpose of guaranteeing the transparency of the game, compliance with the applicable sectoral regulations and the correct operation of tables and gaming devices, in compliance with the regional regulations regulating the game.

For what purposes are we going to process your personal data?

Organization of selection processes for the hiring of employees. Schedule you for job interviews and evaluate your candidacy. If you have given us your consent, we can transfer it to collaborating or related entities, with the sole objective of helping you find employment.

What is the legitimation for the processing of your data?

The legal basis is your unequivocal consent, by delivering your CV to us and receiving and signing information relative to the processing we are going to carry out.

For how long are we going to keep the personal data?

The curriculum will be stored for a period of one year, after which, in the case of not having contacted you, it will be deleted.

Management of the labor relationship and the employee's file. Perform all those administrative, tax and accounting procedures necessary to comply with our contractual commitments, obligations in terms of labor regulations, Social Security, prevention of occupational risks, tax and accounting. Management of payroll payment through a financial institution. Time control through the access control system by means of fingerprint/card (if applicable). Management of group insurance / pension plan of the entity. Perform training actions both for subsidized and non-subsidized training.

What is the legitimation for the processing of your data?

The legal basis for the processing of your data is the execution of your labor contract. Compliance with relevant legal obligations. The consent of the interested party.

No, as a general rule we only process the data provided by the owners. In the case of providing data of third parties for the management of reservations, payments or contracting of services, the user guarantees having previously informed said persons of the content of this Privacy Policy.

Although our web services are directed to those over 18 years of age, the processing of data of minors will only be lawful if it is carried out with the consent of their parents or guardians for the management of accommodation reservations or specific spa services. In no case is access or processing of data of minors allowed in relation to the Casino's activity.

They will only be carried out to manage your request, if it is one of the contact means you have provided us with. If we carry out commercial communications, they will have been previously and expressly authorized by you.

You can be at ease: we have adopted an optimal level of protection of the Personal Data we handle, and we have installed all the means and technical measures at our disposal, according to the state of technology, to avoid loss, misuse, alteration, unauthorized access and theft of Personal Data.

CÁLIDA IBIZA SA does not use fully automated decision-making processes to enter into, develop or terminate a contractual relationship with the user. In the event that we use those processes in a particular case, we will keep you informed and communicate your rights in this regard if so prescribed by law.

In order to be able to offer you products and/or services in accordance with your interests and improve your user experience, we may prepare a "commercial profile" based on the information provided. However, automated decisions will not be made based on said profile. In the framework of payment services, certain providers may apply automated fraud detection systems based on transaction risk analysis, in order to prevent illegal or unauthorized operations. Such processing is carried out under their own responsibility or as data processors, in accordance with the applicable regulations.

Your data may be transferred to collaborating entities to offer the services offered on the web. Your data will also be transferred when there is a legal obligation. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial institutions for the collection of the service provided or product acquired, as well as to the data processors necessary for the execution of the agreement. In the event of purchase or payment, if you choose any application, web, platform, bank card, or any other online service, your data will be transferred to that platform or processed in its environment, always with maximum security. In particular, for the management of electronic payments, CÁLIDA IBIZA SA may contract payment service providers (PSP) who will act as data processors or, in certain cases derived from financial regulatory obligations, as independent data controllers. These providers will process the data strictly necessary for the authorization, processing, fraud prevention, management of returns and compliance with legal obligations in financial matters and prevention of money laundering. In compliance with citizen security regulations, traveler registration data (entry forms) will be mandatorily communicated to the State Security Forces and Corps. In the case of video surveillance, the images may be communicated to the State Security Forces and Corps or competent authorities when necessary for the investigation of illegal acts. In the event that you have given us your consent for the processing of your name and images and other information, related to the activity of CÁLIDA IBIZA SA, they will be disclosed in the different social networks and website of CÁLIDA IBIZA SA. Likewise, the user is informed that the technical management of reservations and auxiliary technological services is carried out through the Amadeus platform, which intervenes as a technological partner and data processor, without prejudice to its own terms and conditions and privacy policies that said entity may apply in its area of action and which will be made available to you during the contracting process.

In certain cases, for the provision of technological or payment services, it may be necessary for certain providers to access personal data from outside the European Economic Area (EEA). When international data accesses or transfers occur, CÁLIDA IBIZA SA will guarantee that such transfers are carried out in accordance with articles 44 and following of Regulation (UE) 2016/679, by adopting appropriate safeguards, such as: – Standard Contractual Clauses approved by the European Commission. – Binding corporate rules (BCR), where appropriate. – Adequacy decisions adopted by the European Commission. In no case will international transfers be based, as a general rule, on article 49 GDPR as an ordinary mechanism, except in exceptional cases provided for by law. You can request additional information about the specific guarantees applied in each case through the email of the Data Protection Officer.

To know if we are processing your data or not. To access your personal data. To request the rectification of your data if they are inaccurate. To request the erasure of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent granted. To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with current regulations. To port your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new data controller you designate. It is only valid in certain cases. To file a complaint with the Spanish Data Protection Agency, if you believe that we have not attended to you correctly. To revoke consent for any processing for which you have consented, at any time. If you modify any data, we thank you for communicating it to us to keep them updated.

We have forms for the exercise of your rights, ask us for them by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties. These forms must be signed electronically or be accompanied by a photocopy of the ID card. If someone represents you, you must attach a copy of their ID card, or have them sign it with their electronic signature. The forms can be presented in person, sent by letter or by mail to the address of the Data Controller at the beginning of this text. You have the right to file a complaint with the Spanish Data Protection Agency, in the event that you consider that the request for your rights has not been properly attended to.

The maximum term to resolve by CÁLIDA IBIZA SA is one month, counting from the effective receipt of your request by us.

You have the right to revoke at any time the consent for any of the processing for which you have granted it.

If we use other types of cookies that are not the necessary ones, you can consult the cookies policy in the corresponding link from the beginning of our website.

Personal data will be maintained as long as you remain linked to us. Once you unlink, the personal data processed in each purpose will be maintained during the legally provided terms, including the term in which a judge or court may require them attending to the limitation period of legal actions. The processed data will be maintained as long as the legal terms alluded to above do not expire, if there were a legal obligation of maintenance, or if such legal term does not exist, until the interested party requests their erasure or revokes the consent granted. We will maintain all the information and communications relative to your purchase or to the provision of our service, for as long as the guarantees of the products or services last, to attend to possible claims. In each processing or typology of data, we provide you with a specific period, which you can consult in the following table: