The Privacy Policy is part of the General Conditions that govern the Website www.mallorcakiteboarding.com together with the Cookies Policy and the Legal Notice.
MALLORCA KITEBOARDING & SUP S.L., reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it each time you access the Website. In the event that the user has registered on the Website and accesses their account or profile when accessing it, they will be informed if there have been substantial modifications in relation to the processing of their personal data.

Who is responsible for the processing of your data?
The data that is collected or voluntarily provided to us through the Website, either by browsing it, as well as all those that you can provide us in the contact forms, via email or by phone, will be collected and processed by the responsible person, whose details is indicated below:

Mallorca Kiteboarding & SUP S.L.   CIF: B57851966
Address: C/ Cecilio Metelo 29 bajos, 07460 Pollensa
Registered in the Mercantile Registry of Palma de Mallorca, Volume 2568, Folio 60, Sheet PM-73676, insc. one

Contact in MALLORCA KITEBOARDING & SUP S.L. for the protection of your personal data
C/ Cecilio Metelo 29 bajos, 07460 Pollensa
Tfno: 696094743
Mail: perico@mallorcakiteboarding.com
If, for any reason, you want to contact us in any matter related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.

What data do we collect through the Website?

By simply browsing the Website, MALLORCA KITEBOARDING & SUP S.L. will collect information regarding:

- IP adress..
- Browser version.
- Operating system.
- Duration of the visit or browsing of the Website.

Such information is stored by Google Analytics, so we refer to Google's Privacy Policy, since it collects and processes such information. http://www.google.com/intl/en/policies/privacy/
Similarly, the Website provides the utility of Google Maps, which can have access to your location, if you allow it, in order to provide you with greater specificity about our distance and / or paths venues. In this regard, we refer to the Privacy Policy used by Google Maps, in order to know the use and treatment of such data http://www.google.com/intl/en/policies/privacy/

The information that we handle will not be related to a specific user and will be stored in our databases, for the purpose of statistical analysis, improvements to the Website, about our products and / or services and will help us improve our commercial strategy. The data will not be communicated to third parties.

User registration on the website / Sign-up forms

To access certain products and / or services, such as the reservation / contact request, the user must fill in a form. To do this, in the registration form, a series of personal details are requested. The details are necessary and mandatory to carry out such registration. In the case of not providing such fields, the registration will not be carried out.
In this case, the browsing data will be associated with the user's registration, identifying the same specific user who browses the Website. In this way, the offer of products and / or services that, in our opinion, best suits the user can be personalised.

The registration details of each user will be incorporated into the databases of MALLORCA KITEBOARDING & SUP S.L. together with the history of operations carried out by them, and will be stored as long as the account of the registered user is not deleted. Once said account is eliminated, said information will be removed from our databases, keeping data related to the transactions carried out for 10 years, without accessing or altering them, in order to comply with the legally valid deadlines. The data that are not linked to the transactions carried out will be kept unless consent is withdrawn, in which case they will be deleted immediately (always taking into account the legal deadlines).

The legal basis for the processing of your personal data is the execution of a contract between the parties. In relation to the sending of communications and promotions electronically and the response to requests for information, the legitimacy of the treatment is the consent of the user.

The purposes of the treatment will be the following:
a) Manage your access to the Website.
b) Manage the contracted services made available to you through the Website.
c) Keep you informed of the processing and status of your requests.
d) Respond to your request for information.
e) Manage all the utilities and / or services offered by the platform to the user.

Thus, we inform you that you will be able to receive communications via email and / or on your phone, in order to inform you of possible incidents, errors, problems and / or status of your requests.

For the sending of commercial communications, the express consent of the user will be requested at the time of registration. In this regard, the user may revoke the consent given, by contacting MALLORCA KITEBOARDING & SUP S.L., using the means indicated above. In any case, in each commercial communication, you will be given the possibility of unsubscribing when receiving them, either through a link and / or email address.

 

If you are any of the following groups, check the drop-down information:

               + WEB OR EMAIL CONTACTS
For what purposes are we going to treat your personal data?

1. Answer your questions, requests or requests.
2. Manage the requested service, answer your request, or process your request..
3. Information by electronic means, related to your request.
4. Commercial or event information by electronic means, provided there is express authorisation.

What is the legitimacy for the processing of your data?
The acceptance and consent of the interested party: In those cases where to make a request it is necessary to fill in a form and click on the send button, the completion of the same will necessarily imply that you have been informed and have expressly granted your consent to the content of the clause attached to said form or acceptance of the privacy policy.
All our forms have a checkbox with the following formula, in order to send the information: "□ I have read and accept the Privacy Policy."

               + CLIENTS
How are we going to treat your personal data?

1. Preparation and follow up of a quote through communications between both parties.
2. Information by electronic means, related to your request.
3. Commercial or event information by electronic means, provided there is express authorisation.
4. Manage the administrative, communications and logistics services performed by the person(s) in charge.
5. Carry out the corresponding transactions.
6. Timely billing and declaration of taxes.
7. Control and recovery procedures.

What is the legitimacy for the processing of your data?
The legal basis is your consent and the performance of a contract.

+ SUPPLIERS.
How are we going to treat your personal data?

1. Information by electronic means, related to your request.
2. Commercial or event information by electronic means, provided there is express authorisation.
3. Manage the administrative, communications and logistics services performed by the Responsible.
4. Billing and invoicing.
5. Carry out the corresponding transactions.
6. Timely billing and declaration of taxes.
7. Control and recovery procedures.

What is the legitimacy for the processing of your data?
The legal basis is the acceptance of a contractual relationship or failing that, your consent when contacting us or offering us your products in any way.
              
               + SOCIAL MEDIA CONTACTS
How are we going to treat your personal data?

1. Answer your questions, requests or requests.
2. Manage the requested service, answer your request, or process your request.
3. Relate to you and create a community of followers.

What is the legitimacy for the processing of your data?
The acceptance of a contractual relationship in the environment of the corresponding social network, and in accordance with its Privacy policies:
Facebook          http://www.facebook.com/policy.php?ref=pf
Instagram          https://help.instagram.com/155833707900388
Twitter              http://twitter.com/privacy
Google*             http://www.google.com/intl/es/policies/privacy/
YouTube                       http://www.youtube.com/yt/policyandsafety/es/policy.html
*(Google+ y Youtube)

                         
How long are we going to keep personal data?
We can only consult or cancel your data in a restricted way by having a specific profile. We will treat them as long as you leave us following us, being friends or giving “like”, “follow” or similar buttons.
Any rectification of your data or restriction of information or publications must be done through the configuration of your profile or user in the social network itself.

               + JOB APPLICANTS
How are we going to treat your personal data?

1. Organise the selection processes for hiring employees.
2. Appoint you for job interviews and evaluate your candidacy.
3. If you have given us your consent, we may transfer it to collaborating or related entities, with the sole purpose of helping you find a job.

What is the legitimacy for the processing of your data?
The legal basis is your unequivocal consent when you give us your CV and receive information regarding the treatments that we are going to carry out.
How long are we going to keep personal data?
The curriculum will be stored for a period of one year, after which, if we have not contacted you, it will be deleted.

             + RRHH
How are we going to treat your personal data?

1. Management of the employment relationship and the worker's file.
2. Carry out all those administrative, fiscal and accounting procedures necessary to comply with our contractual commitments, obligations in terms of labor regulations, Social Security, prevention of occupational, fiscal and accounting risks.
3. Payroll payment management through a financial institution.
4. Time control through the fingerprint / card access control system (if applicable).
5. Management of group insurance / pension plan of the entity.
6. Carry out training activities for both subsidised and non-subsidised training.

What is the legitimacy for the processing of your data?
The legal basis for the processing of your data is the execution of your employment contract. Compliance with the relevant legal obligations. The consent of the interested party.

 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Do we include personal data of third parties?
No, as a general rule, we only process the data provided by the individual. If you provide us with third-party data, you must first inform and request their consent from said persons, otherwise, you exempt us from any responsibility for the breach of this requirement.

And data of minors?
We do not process the data of minors under 14 years old, therefore, please refrain from providing this data if this applies.

Will we communicate by electronic means?

1. 1. Only to manage your enquiry, if it is one of the means of contact that you have provided us.
2. 2. If we carry out commercial communications, they will have been previously and expressly authorised by you.

What security measures do we apply?
You can be rest assured: We have adopted an optimal level of protection of the personal data that we handle, and we have installed all the means and technical measures at our disposal, according to the state of technology, to avoid loss, misuse, alteration, access not authorised and theft of personal data.
To what extent will decision making be automated?
MALLORCA KITEBOARDING & SUP S.L. does not use fully automated decision-making processes to enter into, develop or terminate a contractual relationship with the user. In the event that we use these processes in a particular case, we will keep you informed and communicate your rights in this regard if prescribed by law.
Will profiling take place?
In order to be able to offer you products and / or services in accordance with your interests and to improve your user experience, we may prepare a "commercial profile" based on the information provided. However, no automated decisions will be made based on that profile.

To which recipients will your data be communicated?
To the companies that make up the group MALLORCA KITEBOARDING & SUP S.L.
Your data will not be transferred to third parties, except legal obligation. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial entities for the collection of the service provided or product purchased, as well as to those in charge of the necessary treatment for the execution of the agreement.
In case of purchase or payment, if you choose an application, website, platform, bank card, or any other online service, your data will be transferred to that platform or will be processed in its environment, always with maximum security.
In the event that you have given us your consent for the treatment of your name and images and other information, related to the activity of MALLORCA KITEBOARDING & SUP S.L., they will be disclosed on the different social networks and website of MALLORCA KITEBOARDING & SUP S.L. 
International transfers..
If it is necessary to carry out international data transfers by MALLORCA KITEBOARDING & SUP S.L. , they will only be made to entities under the authorisation of the US-European Union Privacy Shield agreement (more information: https://www.privacyshield.gov/welcome), to entities that have demonstrated that they comply with the level of protection and guarantees of agreement with the parameters and requirements set forth in current regulations on data protection, such as the European Regulation, or when there is a legal authorisation to carry out the international transfer.

What rights do you have?

1. 1. To know if we are treating your data or not.
2. 2. To access your personal data.
3. 3. To request the rectification of your data if they are inaccurate.
4. 4. To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent granted.
5. 5. To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with current regulations.
6. 6. To carry your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new manager that you designate. It is only valid in certain cases.
7. 7. To file a claim with the Spanish Agency for Data Protection, if you think we have not treated you correctly.
8. 8. To revoke consent for any treatment for which you have consented, at any time.

If you modify any information, we appreciate that you communicate it to us to keep it updated.

Do you want a form for the exercise of Rights?

1. 1. We have forms for the exercise of your rights, ask us by email or if you prefer, you can use the ones prepared by the Spanish Agency for Data Protection or third parties.
2. 2. These forms must be signed electronically or be accompanied by a photocopy of the DNI / ID.
3. 3. If someone represents you, you must attach a copy of their ID, or sign it with their electronic signature.
4. 4. The forms can be presented in person, sent by letter or by mail at the address of the Responsible at the beginning of this text.

You have the right to file a claim with the Spanish Data Protection Agency, in the event that you consider that the request for your rights has not been adequately addressed.

The maximum term to resolve by MALLORCA KITEBOARDING & SUP S.L. It is one month, counting from the effective receipt of your request by us.

You have the right to revoke your consent at any time for any of the treatments for which you have granted it.

Do we treat cookies?
If we use other types of cookies than the necessary ones, you can consult the cookie policy in the corresponding link from the beginning of our website.

How long are we going to keep your personal data?

1. 1. Personal data will be kept as long as you remain linked with us.
2. 2. Once you disassociate yourself, the personal data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them, taking into account the limitation period for legal actions.
3. 3. The processed data will be kept as long as the aforementioned legal terms do not expire, if there is a legal obligation to maintain it, or if there is no such legal term, until the interested party requests its deletion or revokes the consent granted.
4. 4. We will keep all the information and communications related to your purchase or the provision of our service, while the guarantees of the products or services last, to attend to possible claims.