Privacy Policy

This legal text offers details about how we collect and process your personal data when you use our website www.thepalmexperiencehotels.com, including any information you may send to us through the site when contracting a service, registering for our information bulletin or providing your contact data on the form created for this purpose.

When providing the data, you must guarantee that you are over the age of 18.

  1. Data handler.

Data handler contact data: SPAIN TOURISTIK INVESTMENTS SL with CIF/NIF B55543995 and company address in AVDA DEL MAR N7 BENALMADENA COSTA 29630 MÁLAGA  and e/mail: info@thepalmexperiencehotels.com

SPAIN TOURISTIK INVESTMENTS SL, is responsible for your data. (Hereinafter “us” or “our”).

  1. What data do we collect?

According to article 4 of the General Data Protection Regulation 679/2016/EU (GDPR), personal data means any information relating to an identified or identifiable natural person (“data subject”), i.e. any information that can enable a person to be identified. This does not include anonymous data.

We can process certain kinds of personal data, which could include:

  • Identity data: Name, surname and username.
  • Contact Details: E-mail or billing address.
  • Financial data: Bank details and other details about purchases made
  • Technical data: Session start data, Internet protocol addresses, browser type and version, configuration and location of time zone, operating system, Browser plug-in types and versions and any other technology used by the device to access the website.
  • Profile data: Username and password, purchases made. Comments and answers to questionnaires.
  • Usage data: Information about how you use our website, products and services.
  • Marketing and communications data: Preferences for receiving marketing from us and preferred communication channel.

We do not collect and data regarding special categories of personal data (those that reveal ethnic or racial origin, political opinions, religious or philosophical convictions, union membership and information on your health and genetic or biometric data).

If we request personal data required by law or contractual terms and you refuse to supply this data, it may not be possible to implement the contract or supply the service. You should inform us of this beforehand. 

  1. How do we collect your personal data?

The means we use to collect personal data are:

  • Through the form on our website, through our contact e-mail addresses, by telephone or the postal service, when you:
    • Request information about our products or services
    • Contract our services or purchase our products
    • Ask for an estimate
    • Subscribe to any of our services or publications
    • Send comments

To ensure the quality of our portal, we reserve the right to reject any registration request or suspend or cancel a previously accepted registration if we consider that you do not comply with these requirements or regulations or any other law or regulation. If this were to happen, we will try to explain the reasons for our decision, but this may not be possible in all cases.

  • Through automated technology or interactions: From our website, we can automatically collect technical data about your equipment, browser actions and usage patterns. This data is collected via cookies or similar technologies. For more information, you can consult our cookies policy here (link)
  • Through third parties:
    • Google: Analytical or search data. Outside the European Union.
    • Social Networks: (Facebook, Instagram, Twitter, LinkedIn…) outside the European Union.
    • PayPal or any other means of payment: Contact, financial and transaction data with suppliers of technical services, for payment and delivery.

 

  1. Purpose and legitimacy for using the data.

The most common uses for your personal data are:

  • To formalize a contract with companies collaborating with SPAIN TOURISTIK INVESTMENTS SL and you.
  • When you consent to the processing of your data
  • When we need to use the data in compliance with a legal or regulatory obligation
  • When it is necessary for our legitimate interests or those of a third party.

At any time, the User may withdraw consent by sending a mail to info@thepalmexperiencehotels.com or consulting the section on exercise of rights below.

Here you can see a table detailing how we use your personal data and the legitimacy for this, as well as what type of personal data we are going to process. We may have to process some personal data for additional legal reasons, for further details about this; you can send an e-mail to info@thepalmexperiencehotels.com

 

Purpose

Type of Data

Legitimacy for processing it

To request information through the contact form

–       Name

–       Surnames

–       Email

 

Consent of the interested party

To register as a client on the website

 

–       User:

–       Password

 

Contract formalization

To manage our relations with you

–       Name

–       Surnames

–       Email

–       Address

–       Telephone

–       Company or

Self-employed

 

Contract formalization

For commercial communications, supplying relevant content that could be of interest.

–       Name

–       Surnames

–       Email

Consent of the interested party

To administer and protect our business and our website

–       Technical data:

–       Name

–       Surnames

–       Email

Legitimate interest

To supply you with the service or product

–       Name

–       Surnames

–       Management

–       DNI (ID card No.)

–       Email

–       Telephone

–       Bank information

Contract formalization

Commercial communications: You will only receive communications if

  • You requested information or ordered a product or service from us.
  • If you provided your data, accepting by clicking on the corresponding box in our form.
  • If you have not expressed your will to stop receiving these communications.
  • If you filled in the form created for this purpose on our website.

We will obtain your express consent before sending you any communication and you may request that we stop sending you communications at any time by sending an email to info@thepalmexperiencehotels.com

If you decide not to receive our communications, your personal data will continue to be stored as a result of our business relationship and legal requirements.

Purpose: We will only use your data for the purposes for which it was collected, unless we consider it reasonable to use it for other purposes, notifying you in advance to inform you of the legal reason for processing the data and as long as the purpose is compatible with the original intention.

Storage time: The time the data will be stored varies according to the services the client has made use of, as short a time as is necessary. It can be stored for:

  • 6 years in compliance with article 30 of the Code of Commerce (accounting books, bills…)
  • 5 years according to article 1964 of the Civil Code (personal actions without a special deadline)
  • 12 months according to article 5 of Law 25/2007, on the storage of electronic communication data and public communications networks.
  • 4 years: Law 5/2002, on Social Infractions and Sanctions (obligations regarding affiliation, new incorporations, cancellations, payment of salaries). Article 66 and subsequent. General Taxation Law (Accounts books…)

Subscribers’ data obtained via e-mail or form : From the moment the user subscribes until they cancel the subscription.          

User data uploaded by SPAIN TOURISTIK INVESTMENTS SL to their Social Networks or website pages: From the moment the user gives consent until it is withdrawn.

 

  1. Your Data Protection Rights

How can you exercise your rights? Users can contact the company address of SPAIN TOURISTIK INVESTMENTS SL or use the e-mail address info@thepalmexperiencehotels.com, including in either case a copy of your D.N.I or other similar ID document, to exercise the following rights:

  • Accessing your personal data: You can ask SPAIN TOURISTIK INVESTMENTS SL if they are using your personal data.
  • You can request correction of data, if erroneous, or exercise your right to be forgotten regarding this data.
  • When requesting limitation of processing, SPAIN TOURISTIK INVESTMENTS SL will only store the data necessary for the exercise of and defence from complaints.
  • To oppose processing: SPAIN TOURISTIK INVESTMENTS SL will stop processing the data as you request, except if, for legitimate reasons or for the exercise of defence from possible complaints, we must continue processing said data.
  • To portability of data: If you want your data to be processed by another firm, SPAIN TOURISTIK INVESTMENTS SL will facilitate the portability of your data to the new data handler.

You can use the forms made available by the Spanish Data Protection Agency to exercise the aforementioned rights here 

Complaints directed to the AEPD: If you think that there is a problem with how SPAIN TOURISTIK INVESTMENTS SL is processing your data, you can file a complaint before the corresponding control authority, in Spain this is: Agencia Española de Protección de Datos.

We may have to ask you for specific information to confirm your identity and guarantee your right to access your personal data (or exercise any of the other aforementioned rights). This is a security measure to guarantee that the personal data is not disclosed to unauthorised people.

All requests will be resolved within the legally established period of one month. Nevertheless, it may take longer than a month if your request is particularly complex or a series of actions have already been carried out. In this case you will be notified and kept updated.

  1. Transfer of personal data

In our work, we may have to transfer your data to third parties:

  • Service providers that offer systems administration and IT services.
  • Professional consultants, including lawyers, auditors and insurers, banking, legal and accounting consultants.
  • Companies collaborating with SPAIN TOURISTIK INVESTMENTS SL

You will be notified in advance in case of any of these transfers and we inform you that we will require all those that process your data to respect the security of your personal data and handle it according to GDPR. We will only allow these third parties to process your data for specific purposes and following our instructions.

  1. Data security

We have implemented adequate security measures to avoid your data being accidentally lost, used, modified, disclosed or accessed by unauthorised people. Moreover, we limit access to your personal data to employees, agents, contractors and other third parties that commercially need to know the data in question. Your personal data will only be processed according to our instructions and will be subject to confidentiality.

We have implemented procedures to deal with any suspicion of breach of your personal data and both you and the Control Authority will be informed if this were to happen, as regulated in the GDPR in articles 33 and 34: breach of security.

  1. International transfers

Countries outside the European Economic Area (EEA) do not always provide the same levels of protection for your personal data; therefore, European legislation forbids transfers of personal date outside the EEA unless the transfer complies with certain requirements.

Some of our external service suppliers are outside the European Economic Area (EEA), therefore the processing of your personal data will imply transfer of data outside the EEA.

  • Social Networks: SPAIN TOURISTIK INVESTMENTS SL uses social networks Facebook, Instagram, LinkedIn and Twitter, all based in the USA.
  • Email: The electronic mail service of SPAIN TOURISTIK INVESTMENTS SL is supplied using the services of GLOBAL.
  • Stored and encrypted. SPAIN TOURISTIK INVESTMENTS SL uses the following external supplier for storing your personal data: CITRIX and PRESTIGE.
  • Payment services. To enable the client to pay through REDSYS, sending the data strictly necessary to the payment processor for issuing the corresponding payment request.

For more information regarding the specific mechanism we use to transfer data outside the EEA, you can contact us by writing to the following address: info@thepalmexperiencehotels.com