Last updated: June 1, 2023

Privacy and Personal Data Protection Policy

The Controller informs you about its Privacy Policy regarding the processing and protection of personal data of users that may be collected during browsing through the Website: https://www.rosales-formentera.com

In this regard, the Controller guarantees compliance with current regulations on personal data protection, as reflected in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons (GDPR).

Use of the Website implies acceptance of this Privacy Policy, as well as the conditions included in the Legal Notice.

Identity of the Controller

Controller: Serra Mayans S.L.
Address: Carrer de Navarra, 7, 07800 Eivissa, Illes Balears. Spain
Website: https://www.rosales-formentera.com

Principles applied in data processing

In the processing of your personal data, the Controller will apply the following principles that comply with the requirements of the European General Data Protection Regulation (GDPR):

Principle of lawfulness, fairness, and transparency: The Controller will always require consent for the processing of personal data for one or more specific purposes, about which the Controller will inform the User in advance with absolute transparency.
Principle of data minimization: The Controller will request only the data strictly necessary for the purpose or purposes for which it is requested.
Principle of storage limitation: The Controller will keep personal data collected for the time strictly necessary for the purpose or purposes of processing. The Controller will inform the User of the corresponding retention period according to the purpose. For subscriptions, the Controller will periodically review the lists and remove records that have been inactive for a considerable time.
Principle of integrity and confidentiality: Personal data collected will be processed in a way that guarantees its security, confidentiality, and integrity. The Controller takes the necessary precautions to avoid unauthorized access or misuse of its users’ data by third parties.

Collection of personal data

You do not need to provide any personal data to browse the Website.

Cases in which you do provide your personal data are as follows:

When completing the booking process.
When contacting via contact forms or sending an email.
When signing up for a subscription form or a newsletter managed by the Controller via MailRelay.
When enrolling in the WELCOME BACK loyalty program.

Your Rights

The Controller informs you that regarding your personal data you have the right to:

Request access to stored data.
Request rectification or erasure.
Request the restriction of processing.
Object to processing.

You may not exercise the right to data portability.

The exercise of these rights is personal and must be carried out directly by the interested party, by requesting it directly from the Controller. This means that any customer, subscriber, or collaborator who has provided their data at any time may contact the Controller and ask for information about the data stored and how it was obtained, request the rectification of the data, object to the processing, restrict its use, or request the erasure of such data from the Controller’s files.

To exercise your rights, you must send your request along with a photocopy of your National Identity Document or equivalent to the following postal address:

Serra Mayans S.L. – Carrer de Navarra, 7, 07800 Eivissa, Illes Balears, Spain

The exercise of these rights does not include any data that the Controller is obliged to keep for administrative, legal, or security purposes.

You have the right to effective judicial protection and to file a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency (Agencia Española de Protección de Datos), if you consider that the processing of your personal data infringes the Regulation.

Purpose of processing personal data

When you connect to the Website to send an email to the Controller or subscribe to the newsletter, you are providing personal information for which the Controller is responsible. This information may include personal data such as your IP address, name and surname, physical address, email address, phone number, and other information. By providing this information, you consent to your information being collected, used, managed, and stored by Serra Mayans S.L. only as described in the Legal Notice and Privacy Policy.

Personal data and the purpose of processing by the Controller vary depending on the information capture system:

Contact forms: The Controller requests personal data, which may include: name and surname, email address, phone number, and website address for the purpose of answering User queries.

There are other purposes for which the Controller processes personal data:

To ensure compliance with the conditions outlined in the Legal Notice and applicable law.
To support and improve the services offered by this Website.
To analyze user browsing. The Controller collects other non-identifying data through the use of cookies downloaded to the User’s computer when browsing the Website, the characteristics and purpose of which are detailed in the Cookies Policy.
To manage social media. The Controller has a presence on social media. If you become a follower of the Controller’s social media pages, the processing of personal data will be governed by this section, as well as by those conditions of use, privacy policies, and access regulations belonging to the social network in each case, which you have previously accepted.

You can consult the privacy policies of the main social networks at these links:

Facebook | Twitter | LinkedIn | YouTube | Instagram

Data Security

To protect your personal data, the Controller takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Your data may be incorporated into a mailing list file, for which the Controller is responsible for management and processing.

Third-party content

The pages of this Website may include embedded content (e.g., videos, images, articles, etc.). Embedded content from other websites behaves exactly as if you had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking code, and monitor your interaction with that embedded content.

Cookies Policy

For this Website to function correctly, it needs to use cookies, which is information stored in your web browser.

You can consult all information regarding the collection and processing of cookies on the Cookies Policy page.

Legal basis for data processing

The legal basis for the processing of your data is the data subject’s consent.

Categories of personal data

The categories of personal data processed by the Controller are: Identifying data.

Data retention

Personal data provided to the Controller will be kept until you request its erasure.

Recipients of personal data

ActiveCampaign: A marketing automation and CRM platform service provided by ActiveCampaign, LLC, based at 1 N Dearborn St, 5th Floor, Chicago, IL 60602, USA.
Google Analytics: A web analytics service provided by Google, Inc., a Delaware company with its principal office at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, USA.

Web Browsing

When browsing the Website, non-identifying data may be collected, which may include IP address, geolocation, a record of how services and sites are used, browsing habits, and other data that cannot be used to identify you.

Accuracy and truthfulness of personal data

You undertake that the data provided to the Controller is correct, complete, accurate, and current, and to keep it duly updated.

Acceptance and consent

As a User of the Website, you declare that you have been informed of the conditions on the protection of personal data, and you accept and consent to the processing of such data by the Controller in the manner and for the purposes indicated in this Privacy Policy.

Changes to the Privacy Policy

The Controller reserves the right to modify this Privacy Policy to adapt it to new legislation or case law, as well as industry practices. These policies will remain in effect until modified by others duly published.

Controller Data

Company Name: Serra Mayans S.L. (hereinafter, the “Company” or the “Controller”).
Tax ID (CIF): B07608102
Address: Carrer de Navarra, 7, 07800 Eivissa, Illes Balears
Phone: +34 971 302 067
Email for Data Protection matters: info@smturistic.com

Applicable Law

Our Privacy Policy has been designed in accordance with the EU General Data Protection Regulation (GDPR) 2016/679 and Organic Law 3/2018.

Data Protection Officer

No Data Protection Officer has been appointed.

Purposes of processing

Providing information related to the products and services offered by our company.
Contracting our services through the acceptance of the corresponding quote/order and/or the signing of a commercial contract.
Sending you news and updates about our entity via email and/or post, as well as updates to our product and service catalog.

Data Security Measures

We have adopted the necessary technical and organizational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology and the nature of the data stored.

Data Transfers

No data sharing or international transfers of your data are foreseen, except for those authorized by tax, commercial, and telecommunications legislation, as well as in cases where required by a judicial authority.

Consent for electronic communications

Likewise, and in accordance with Law 34/2002 on Information Society Services and Electronic Commerce, by completing the data collection form and checking the “I accept the sending of electronic communications” box, you are granting express consent to send you information about the Company via email, telephone, or other electronic means.