This is a courtesy translation. In the event of any discrepancy, the Spanish version shall prevail.
PRIVACY POLICY OF www.petazeta-park.com
PRIVACY POLICY
At OBICORNIO ESPACIAL SL (hereinafter, PETA ZETA PARK), we care about privacy and transparency.
Below, we set out in detail the processing of personal data that we carry out, together with all the information relating to it.
PERSONAL DATA PROTECTION – PRIVACY
The service provider is deeply committed to complying with personal data protection legislation and guarantees full compliance with the obligations laid down therein, as well as the implementation of technical and organisational security measures, as established in Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and in Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
The service provider makes the entity's Privacy Policy available to users, informing them of the following aspects:
- Details of the Data Controller.
- Purpose.
- Legal basis.
- Recipients.
- Source of the data.
- Additional information.
Whenever we need to obtain personal information from you, you will always be asked to provide it voluntarily and expressly.
In compliance with personal data protection legislation, you explicitly consent to the personal data provided being processed under our responsibility for the following purposes:
- To manage our relationship and offer you the personalised service requested.
- The handling of queries, advice, commissions, requests or any type of petition made by the User through any of the contact methods made available to the User on the PETA ZETA PARK website.
- The sending of advertising and commercial communications about our products by e-mail, fax, SMS, MMS, social communities or any other electronic or physical means, present or future, that enables commercial communications to be made.
All the data requested are mandatory; if they are not provided, it would be impossible to carry out the purpose for which they are requested in each case.
INFORMATION ON THE PROCESSING
In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the User must receive timely and specific information about the Data Controller and the uses and purposes of the processing. To this end, the following information is provided:
Who is the Data Controller for your data?
- OBICORNIO ESPACIAL SL.
- B44755114.
- AVDA. DE ELVAS S/N CAMPUS UNIVERSITARIO, EDIFICIO PCTEX OFICINA 2.1 – 06006 BADAJOZ (ESPAÑA).
- (+34) 698 992 995.
- reservas@petazeta-park.com
For what purpose do we process your personal data?
At PETA ZETA PARK we process the information provided to us by data subjects for the following purposes:
- CUSTOMER MANAGEMENT: Carrying out tax, accounting and administrative management, the collection of fees and the sending of informative communications about our services and/or products.
- SUPPLIER MANAGEMENT: The administrative, accounting and tax management of the services contracted, as well as of contact persons.
- MANAGEMENT OF THE DATA OF THE PARTIES INVOLVED IN THE PROTOCOL FOR THE PREVENTION OF SEXUAL HARASSMENT OR HARASSMENT ON GROUNDS OF SEX: Management of the protocol for the prevention of sexual harassment or harassment on grounds of sex; regulation of the procedure, handling of complaints, collection of personal data and interviews with the parties concerned.
- MANAGEMENT OF THE EXERCISE OF DATA SUBJECTS' RIGHTS: managing and responding to requests from data subjects exercising the rights established in data protection legislation.
- CONTACT FORMS: In relation to the contact forms on our website, responding to your request.
If you do not provide your personal data, we will not be able to perform the functions described above.
How long will we keep your data?
The data will be kept:
- For as long as the contractual relationship continues or for the years necessary to comply with legal obligations.
- For the management of the protocol for the prevention of sexual harassment or harassment on grounds of sex, the data will be erased after two years, unless their retention is necessary to determine any liability that may arise from possible claims made by those affected.
- For the processing of data relating to the exercise of rights, the data will be kept for the time necessary to resolve the requests and for at least three years in order to deal with possible claims.
- With regard to data obtained through the contact forms, for as long as you do not request their erasure.
What is the legal basis for processing your data?
We set out below the legal basis for processing your data:
CUSTOMER MANAGEMENT:
- Performance of a contract: Carrying out administrative, accounting and tax management and the services provided. (GDPR Art. 6(1)(b)).
- Legitimate interest of the Data Controller: The use of the instant messaging social network WhatsApp as a means of communication. (GDPR Art. 6(1)(b)); The sending of informative communications that we consider to be of interest to you. (GDPR Recital 47; Art. 21(2) of Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, LSSI-CE).
SUPPLIER MANAGEMENT:
- Performance of a contract: Carrying out the administrative, accounting and tax management of the services contracted. (GDPR Art. 6(1)(b)).
- Legitimate interest of the Data Controller: The use of the instant messaging social network WhatsApp as a means of communication. (GDPR Art. 6(1)(b)). Management of professional contact details. (LOPDGDD Art. 19, GDPR Art. 6(1)(f)).
MANAGEMENT OF THE DATA OF THE PARTIES INVOLVED IN THE PROTOCOL FOR THE PREVENTION OF SEXUAL HARASSMENT OR HARASSMENT ON GROUNDS OF SEX:
- Compliance with a legal obligation: Organic Law 3/2007 of 22 March on the Effective Equality of Women and Men (Art. 48); Royal Decree 901/2020 of 13 October; Law 31/1995 of 8 November on the Prevention of Occupational Risks (Art. 14).
MANAGEMENT OF THE EXERCISE OF DATA SUBJECTS' RIGHTS:
- Compliance with a legal obligation: managing and responding to requests from data subjects exercising the rights established in data protection legislation (GDPR, Art. 6(1)(b)).
CONTACT FORMS:
- Performance of a contract: Management of prospective customers who have shown an interest in our products and/or services. (GDPR, Art. 6(1)(b)).
- Legitimate interest of the Data Controller: Management of professional contact details (LOPDGDD Art. 19, GDPR Art. 6(1)(f)).
To which recipients will your data be disclosed?
The data will be disclosed to the following recipients:
CUSTOMER MANAGEMENT:
- Tax authorities, in order to comply with legal obligations (legal requirement).
- Financial institutions, in order to issue the corresponding direct debits (contractual requirement).
- WhatsApp Ireland Limited, for the use of the application as a means of communication (contractual requirement).
SUPPLIER MANAGEMENT:
- Tax authorities, in order to comply with legal obligations (legal requirement).
- Banks, in order to make the corresponding payments (contractual requirement).
- WhatsApp Ireland Limited, for the use of the platform as a means of communication (contractual requirement).
MANAGEMENT OF THE DATA OF THE PARTIES INVOLVED IN THE PROTOCOL FOR THE PREVENTION OF SEXUAL HARASSMENT OR HARASSMENT ON GROUNDS OF SEX:
- State Security Forces and Corps; judicial bodies; Public Prosecutor's Office, in order to report the possible commission of an offence (legal requirement).
MANAGEMENT OF THE EXERCISE OF DATA SUBJECTS' RIGHTS:
- Supervisory authorities, public administration bodies and the Ombudsman (Defensor del Pueblo), where applicable, in order to manage and respond to requests and any complaints (legal requirement).
CONTACT FORMS: No data will be disclosed to third parties, except where required by law.
Will data be transferred to third countries?
The following transfers of data to third countries are envisaged as a result of the use of the instant messaging tool WhatsApp as a means of communication and of the social networks detailed below for the publication of the organisation's content:
- Facebook Ireland Limited (Facebook and Instagram), for the purpose of social network services for the publication of content. The safeguard for this transfer has been established through: Explicit consent of the data subject. Further information is available at: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; https://www.facebook.com/help/contact/540977946302970; https://es-es.facebook.com/about/privacy/update.
- LinkedIn Ireland Unlimited Company, for the purpose of social network services for the publication of content. The safeguard for this transfer has been established through: Explicit consent of the data subject. Further information is available at: https://es.linkedin.com/legal/privacy-policy; https://www.linkedin.com/help/linkedin/ask/ppq.
- WhatsApp Ireland Limited, for the purpose of providing social network services for sending instant messages as a means of communication. The safeguard for this transfer has been established through: Standard data protection clauses. Further information is available at: Privacy policy, 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland; https://www.whatsapp.com/contact/?subject=privacy&eea=1; https://www.whatsapp.com/legal/#privacy-policy.
What are your rights when you provide us with your data?
Everyone has the right to obtain confirmation as to whether or not PETA ZETA PARK is processing personal data concerning them.
Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, to request their erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected. They also have the right to data portability.
In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will retain them only for the exercise or defence of claims.
In certain circumstances and on grounds relating to their particular situation, data subjects may object to the processing of their data. In this case, PETA ZETA PARK will stop processing the data, except for compelling legitimate grounds or the exercise or defence of possible claims.
You may exercise your rights in practice as follows: by writing to reservas@petazeta-park.com or to Campus Universitario, Avda. de Elvas S/N Edificio PCTEX Oficina 2.1, 06006 Badajoz (España).
Where commercial communications are sent on the legal basis of the Data Controller's legitimate interest, the data subject may object to the processing of their data for that purpose.
The consent given covers all the purposes indicated whose legal basis is the data subject's consent. You have the right to withdraw such consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
If you feel that your rights in relation to the protection of your personal data have been infringed, especially where you have not obtained satisfaction in the exercise of your rights, you may lodge a complaint with the competent Data Protection Supervisory Authority through its website: www.aepd.es.
How did we obtain your data?
The personal data we process at PETA ZETA PARK come from the data subject or their legal representative.
The categories of data processed are:
- Identification data.
- Postal and e-mail addresses.
- Commercial information.
- Financial data.