In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of These data (RGPD), as well as in compliance with the provisions of Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the following related points are reported below. with the processing of personal data through this website:
Who is responsible for the data processing?
| DATA PROCESSING RESPONSIBLE | Depending on the accommodation selected by the User, their data may be processed, as Data Controller, by:
When the user selects the reservation, the name of the company that will process the process and, therefore, will act as Data Controller will be indicated. Likewise, we inform you that in relation to the processing of data for commercial purposes, the Data Controller will be New Cars Costa del Sol S.L.. |
What is the purpose of the processing of your data?
Depending on the different forms, services or content you access, your data may be processed for the following purposes:
| DEPARTMENT | PURPOSE |
|---|---|
| BOOKINGS | In the event that the User completes the reservation process, their data will be used for the purpose of managing the requested reservation. |
| COMMERCIAL COMMUNICATIONS | In the case of clients, we will use the identification and contact data to send personalized information about products similar to those that have been contracted. Notwithstanding the foregoing, the client may indicate his/her refusal to receive such commercial communications by clicking here.
Likewise, in each commercial communication sent, the interested party will be given the option to unsubscribe through an agile, simple and free procedure. |
What is the basis that legitimizes the processing?
The legal basis for the processing of personal data collected by MARBESOL is based on different legal precepts, depending on the context of the collection and processing:
| DATA COLLECTION PROCESS | BASIS THAT LEGITIMATES THE PROCESSING |
|---|---|
| BOOKING | In relation to the personal data collected during the online reservation process, the basis that legitimizes the processing is the execution of the contractual relationship between the parties, in the terms provided in article 6.1 b) of the RGPD. |
| COMMERCIAL COMMUNICATIONS | The basis that legitimizes the processing is the legitimate interest of the Data Controller to carry out promotional activities by sending commercial communications related to products and services aimed at its clients, as recognized in article 21.2 of the LSSI. . Notwithstanding the above, both at the time of data collection and in each sending of commercial communication, we will give you the option to object to the processing of data for these purposes. |
Who is your data communicated to?
During the booking process, your bank details will be processed directly by the entity that manages the payment gateway. Likewise, in relation to the management of the tourist rental service, the identification and contact data of the guests will be communicated to the security forces and bodies, in compliance with the provisions of Royal Decree 933/2021, of October 26, which establishes the obligations of documentary registration and information of natural or legal persons who carry out lodging and motor vehicle rental activities.
Are international data transfers made?
We inform the User that the processing of information collected through this website does not imply international data transfer.
How long is my data stored?
The data storing period will vary depending on the type of processing:
| DATA COLLECTION PROCESS | STORING PERIOD |
|---|---|
| BOOKINGS | Personal data will be kept for the period necessary to manage the reservation. Subsequently, the data will be duly blocked during the period of prescription of legal actions and after this period it will be deleted. |
| COMMERCIAL COMMUNICATIONS | The information of recipients of commercial communications will be kept indefinitely unless the User requests to unsubscribe from receiving new communications, in which case, we will proceed to unsubscribe their data and include them in our Robinson List in order to guarantee that no new commercial shipments are made. |
How do we protect your data?
This website uses technologies appropriate to the current state of the art, to protect your data and personal information, thus our website is stored on secure servers protected against the most common types of attacks; Likewise, technical and organizational measures have been adopted to guarantee the security of personal data and prevent its alteration, loss, processing or unauthorized access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.
What are your data protection rights?
The General Data Protection Regulation recognizes different rights of the interested party in relation to the processing of their personal data. Below, we inform you about each of these rights and indicate the channels through which you can direct, if applicable, the corresponding request:
| TYPE OF RIGHT | DESCRIPTION |
|---|---|
| DELETION | You will have the right to delete your personal data when any of the following circumstances occur:
|
| ACCESS | You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, as well as access to the following information: the purposes of the processing; the categories of data being processed; the recipients or categories of recipients to whom they have been or will be communicated; if possible, the envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine this period |
| RECTIFICATION | You have the right to obtain rectification of inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of an additional declaration. To do this, you must tell us in your request what data you are referring to and the correction we must make; Likewise, you will have to attach, when necessary, documentation justifying the inaccuracy or incompleteness of the data being processed. |
| RESTRICTION | You have the right to obtain the limitation of data processing when any of the following conditions are met:
|
| PORTABILITY | You will have the right to receive the personal data that concerns you, that you have provided to the Company, in a structured, commonly used and machine-readable format, and to transmit it to another person responsible for the treatment without being prevented by the Company, when the treatment is based on consent, and is carried out by automated means. By exercising your right to data portability, you will have the right to have personal data transmitted directly from controller to controller when technically possible. This right to portability will not apply to processing that is necessary for the fulfillment of a mission carried out in the public interest or in the exercise of public powers. The right to portability will not extend to data that the Company has inferred from data that derive directly from the use of the services provided. |
| OPPOSITION | You will have the right to object to the processing of data that concerns you, at any time, including profiling. If you exercise this right, the Company will stop processing your personal data, unless we prove compelling legitimate reasons for the processing to prevail over your interests, rights and freedoms, or for the formulation, exercise or defense of claims. |
| AUTOMATED DECISIONS | The interested party will have the right not to be subject to a decision based solely on automated processing, including the creation of profiles that produce legal effects on the school, that significantly affects them in a similar way. |
Channels to exercise these rights:
To exercise any of the rights indicated in the previous sections, the User may send an email to [email protected] or send a letter to the following address: Calle García Morato, 50 Local 2, 29004 Málaga, Spain.
In cases in which you consider that your rights regarding data protection have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a claim with the Spanish Data Protection Agency. Below we indicate the contact information for this control authority:
- Postal address: Calle Jorge Juan nº 6, CP 28001, Madrid
- Web address: www.aepd.es
- Telephones: 901 100 099/ 91.266.35.17
Veracity and updating of the information provided
All information provided by the User must be true and exact. For these purposes, the User must ensure the authenticity of all data provided as a result of completing the corresponding forms. To register and/or fill out any form, the User will have to provide all the data that appears in said forms as mandatory, guaranteeing that the data provided is accurate and appropriate to reality. The change in your data must be notified as soon as possible. In any case, the User will be solely responsible for any false or inaccurate statements made, and for any damages caused by the information they provide.
Changes to this privacy policy
We reserve the right to modify this Privacy Policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, we will announce the changes introduced on this page with reasonable advance notice of their implementation.
Last update: 15 December 2022