In accordance with Article 13 of Regulation (EU) 2016/679 (hereinafter referred to as the “Regulation”), this document describes the methods for processing the personal data of users who consult and use the services of the website, accessible electronically at www.marbiancoluxuryapartments.com.
In compliance with the provisions of the Regulation, the processing of personal data will be based on the principles of lawfulness, correctness, transparency, purpose limitation and storage, data minimization, accuracy, integrity and confidentiality.
This information does not concern other sites, pages or online services that can be reached via hypertext links that may be published on this site.
Owner data processing
The owner of personal data processing is THOMGEST GRAN CANARIA S.L. with a registered office at Avenida de Tirajana n.37, Mercurio building, Torre 1, 5D – 35100 Maspalomas de San Bartolomè de Tirajana, Gran Canaria – ES. C.I.F. B-10.926.889 which may be reached at email@example.com.
Personal data being processed
- Navigation data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers and terminals used by users who connect to the site, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site (most visited pages, number of visitors per hour or per day, geographical areas of origin, etc.), as well as to check its correct functioning and to identify any anomalies and/or abuses.
Surfing data does not persist for more than 7 days (except in the event of the need to ascertain crimes by the judicial authorities).
- data provided voluntarily by the user
The optional, explicit and voluntary sending of messages by filling out the contact form, as well as the information necessary for the possible booking and use of the services provided by THOMGEST GRAN CANARIA S.L., entail the acquisition and subsequent processing of the user’s personal data.
Purpose and legal basis of the processing. Compulsory or optional nature of the provision of personal data.
Personal data provided voluntarily by the user will be processed for the following purposes:
- to provide the information requested by filling out the contact form;
- to confirm the booking and provide the services requested;
- to fulfill legal obligations in the fields of accounting, tax and public security;
- to assert or defend rights in court, in the event of abuse in the use of this site or for contractual or non-contractual disputes relating to the services purchased.
For the purposes referred to in points 1 and 2, the legal basis is represented by art. 6.1.b) of the Regulations in that the processing of the user’s personal data is necessary in order to provide a response to the request for information and/or for the provision of the services requested by the same. Providing personal data for these purposes is optional, but failure to do so would make it impossible to activate the services requested.
For the purpose referred to in point 3, the legal basis is represented by Article 6.1.c) of the Regulation insofar as the processing of the user’s personal data is necessary to comply with legal obligations to which the owner of personal data processing is subject.
For the purpose referred to in point 4, the legal basis is represented by Article 6.1.f) of the Regulation insofar as the processing of the user’s personal data is necessary for the pursuit of a legitimate interest of the owner of personal data processing.
In the event that the user has purchased services from THOMGEST GRAN CANARIA S.L , the user’s personal data may also be processed for the purpose of direct mailing of advertising material in relation to services similar to those purchased, without the user’s consent. For this purpose, in fact, the legal basis is represented by Article 6.1.f) of the Regulation as the processing is necessary for the pursuit of a legitimate interest of the owner of personal data processing. In any case, the user, pursuant to Article 21 of the Regulation, may object to such processing at any time, by writing to the owner of personal data processing, as well as obtain feedback confirming the immediate termination of such processing.
Methods of personal data processing
The processing will be carried out, mainly by means of IT tools, with logic strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of the personal data processed, through the adoption of specific security measures aimed at minimizing the risks of destruction or loss, even accidental, of the personal data being processed, of unauthorized access, of processing that is not permitted or does not comply with the Regulations.
Recipients of personal data
Users’ personal data may be communicated, for the purposes indicated above, to:
- employees and collaborators of the owner of personal data processing, specifically authorized pursuant to art. 29 of the Regulation, who act on the basis of specific instructions.
- OMNIAWEB ITALIA S.r.l. as hosting provider, which acts as external manager of personal data processing pursuant to article 28 of the Regulation
- VB-VERTICAL ZUCCHETTI S.r.l. as supplier of the Vertical Booking platform through which the online reservations of the services are managed, which acts as external manager of personal data processing pursuant to article 28 of the Regulation.
Rights of site users
Users of this site and of the services provided, in their capacity as data subjects, have the right to obtain from the Owner of personal data processing, in the cases provided for, access to their personal data and the rectification or erasure of the same or the restriction of processing concerning them or to object to processing (Art. 15 et seq. of the Regulation), by sending an appropriate request to the following email address: firstname.lastname@example.org
Right to complain
Interested parties who believe that the processing of personal data relating to them is in violation of the provisions of the Regulation also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), or to take legal action.