INFORMATION OBLIGATION OF THE OPERATOR

according to Art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter also referred to as  “the Regulation”)

Introduction.    What is personal data?

Personal data shall mean any information relating to an identified or identifiable natural person (hereinafter also referred to as “DATA SUBJECT“); an identifiable natural person is a person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

I. The entity that processes your personal data as an operator in accordance with the Regulation is our company:

Business name                  :  Can Burgos de Andratx, S.L.U.

Main office:                         :  C/Andalucia 23, 071 50 Andratx, Španielsko

CIF                                           :  B07762818

(hereinafter also referred to as “OPERATOR” or “WE” in all grammatical forms)

II. If you are a natural person and we process your personal data, you are the data subject. As a data subject, you can contact us with your comments and requests regarding the processing of personal data, as follows:

1. by e-mail at booking@mov.kesu.sk
2. by phone at tel. no.+34971136368

At the same time, we kindly ask you to read the following information and the conditions of processing your personal data, where you will find out all the necessary details, including your claims and rights.

III. As the Operator, we process your personal data for the following purposes:

1. conclusion of a lease agreement on a legal basis according to Art. 6 par. 1 letter b) Regulation;
2. marketing communication (direct marketing) on ​​a legal basis according to Art. 6 par. 1 letter f) Regulation;
3. management of the contractual agenda of the operator on a legal basis pursuant to Art. 6 par. 1 letter f) Regulation;
4. bookkeeping on a legal basis pursuant to Art. 6 par. 1 letter c) Regulation;

IV. The processing time of your personal data for individual purposes is determined in the range of:

1. for the purpose of the processing under paragraph III. letter a. until the objection is lodged by the data subject, but at least for the period required by law;
2. pri for the purpose of the processing under paragraph III. the letter b. until the objection is lodged by the data subject, but at least for the period required by law;
3. for the purpose of the processing under paragraph III. letter c. until the objection is lodged by the data subject, but at least for the period required by law;
4. for the purpose of the processing under paragraph III. letter d. until the objection is lodged by the data subject, but at least for the period required by law;

V. Processing of your personal data according to par. III letter (a) necessary for the conclusion of the contract. In the event that you do not provide us with your personal data, we cannot enter into a contract with you and, due to the above, will not process your order. The provision of personal data is, therefore, necessary to conclude a purchase contract. We process your personal data to the extent of: name, surname, residential address, e-mail address, telephone number, ID card number or other identification and/or travel card.

VI. When processing personal data according to par. III letter b) We want to inform you about our various offers and promotions as our contractual partner. It is direct marketing, and such processing of personal data is our legitimate interest. We process your personal data to the extent of: name, surname, telephone number and e-mail address.

VII. Processing of personal data according to par. III letter c) is in our legitimate interest. In this case, we process your personal data for the purpose of recording concluded contracts and sent orders in case of asserting claims and defending our rights. We process your personal data to the extent of: name, surname, residential address, e-mail address, telephone number, ID card number.

VIII. Processing of personal data according to par. III letter d) is our legal obligation. In this case, we are required to process your personal data in accordance with legal regulations on bookkeeping. We process your personal data to the extent of: name, surname, residential address, date of birth.

IX. As the data subject, you have the right to access your personal data. Based on your request, we will issue you a confirmation as to whether your personal data is being processed. If we process your personal data, we will issue you a copy of this personal data based on your request.

X. Issuance of the first copy according to par. IX is free. For any additional copies you request, we will charge you a fee corresponding to the administrative costs we will incur with the issuance of the copy. If you request information by electronic means, it will be provided to you in a commonly used electronic form, by e-mail, unless you request otherwise. However, we may refuse to provide you with the copy referred to in this paragraph if this right of yours would adversely affect the rights and freedoms of others.

XI. As the data subject, you have the right to correct your personal data if we record incorrect personal data about you. At the same time, you have the right to supplement incomplete personal data. As the Operator, we will correct or supplement personal data without undue delay after you ask us to do so.

XII. As the data subject, you have the right to have the personal data concerning you deleted, provided that:

1. personal data are no longer needed for the purposes for which they were obtained or otherwise processed;
2. as a data subject, you withdraw the consent based on which the processing is carried out;
3. as the data subject, you object to the processing of personal data pursuant to para. XXII et seq.;
4. personal data were processed illegally;
5. the reason for the deletion is the fulfilment of an obligation arising from a law, a special regulation or an international agreement by which Spain is bound, or
6. personal data were obtained in connection with the offer of information society services to a person under 16 years of age.

As the data subject, you will not have the right to delete personal data provided that their processing is necessary:

7. to exercise the right to freedom of expression and information;
8. to fulfil an obligation under the law, special regulation or an international agreement by which Spain is bound, or to fulfil a task carried out in the public interest or in the exercise of official authority conferred on the Operator;
9. for reasons of public interest in the field of public health;
10. to archive in the public interest, for scientific or historical research or for statistical purposes, where the right of deletion is likely to make it impossible or seriously difficult to achieve the objectives of such processing, or
11. to prove, assert or defend the legal claims of the Operator.

XIII. As the Operator, we will delete your personal data as the data subject based on the request, without undue delay, after we evaluate that your request is justified.

XIV. As the data subject, you have the right to restrict the processing of personal data if:

1. you challenge the accuracy of personal data by objecting to para. XIX, during the period enabling us, as the Operator, to verify the accuracy of personal data;
2. processing is illegal and, as the data subject, you request a restriction on their use instead of deleting personal data;
3. if we no longer need personal data for processing purposes but need it as a data subject to prove, assert or defend legal claims;
4. as the data subject, you object to the processing of personal data based on a legitimate claim of the Operator until verification that the legitimate reasons on our part as our Operator outweigh the legitimate reasons on your part as a data subject.

XV. If, as the data subject, you request a restriction on the processing of your personal data, we, as the Operator, will not perform any processing operations with the data concerned, other than storage, without your consent.

XVI. As the data subject, we will inform you if the restriction on the processing of this data is lifted.

XVII. As the data subject, you have the right to the transfer of personal data, which means obtaining the personal data you have provided to us. You have the right to transfer this data to another operator in a normally usable and machine-readable format, provided that the personal data was obtained with your consent or based on a contract, and their processing takes place in the form of automated means.

XVIII. As the data subject, you have the right to object at any time to the processing of your personal data on grounds relating to your specific situation.

XIX. We, as the Operator, will assess the objection received in a reasonable time. As the Operator, we must not further process your personal data unless we demonstrate the necessary legitimate interests for processing such personal data, which prevail over your rights or interests, or the reasons for asserting a legal claim.

XX. As the data subject, you have the right to withdraw your consent to the processing of personal data at any time, as long as the processing of personal data was based on this legal basis.

XXI. As the person concerned, you can withdraw your consent by contacting us as the Operator with your request in any chosen way.

XXII. However, the lawfulness of processing personal data based on the granted consent is not affected by its revocation.

XXIII. As the person concerned, he or she has the right to apply to the competent supervisory authority, the Agencia Española Protección Datos, if you believe that your personal data protection rights have been infringed.

XXIV. When processing personal data, there is no automated processing, including profiling or behavioural advertising.

XXV. When processing personal data, there is no cross-border transfer of personal data to third countries, i. e. outside the European Union or the European Economic Area.

XXVI. We may provide your personal information to third parties to process external accounting services. In such a case, the third party is in an intermediary position and ensures all requirements for properly protecting your personal data as the data subject.