Privacy Policy

Updated on 10-23-2023

BUSINESS GROUP OF BALEARIC TRAVEL AGENCIES

1.- INFORMATION TO THE USER

Who is responsible for the processing of your personal data?
BUSINESS GROUP OF BALEARIC TRAVEL AGENCIES is responsible for the processing of the personal data of the user and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016 / 679, OF 27 April (GDPR), and Organic Law 3/2018, of  December 5 (LOPDGDD).

What type of data do we request and process?

Depending on the form or way of obtaining your data, we always ask for the minimum necessary to comply with the detailed purposes in each case.

What do we process your personal data for and why do we do it?
Depending on the form where we have obtained your personal data, we will treat it confidentially to achieve the purposes:
In the Contact form

  •  Respond to queries or any type of request made by the user through any of the contact that are made available on the  website of the person responsible.
          (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other  electronic or physical means electronic or physical means, present or future that makes it possible to carry out commercial communications. Are Communications will be made by the person responsible and will be related to their products and services, or its collaborators or suppliers, with whom it has reached a promotion agreement. In this case, Third parties will never have access to personal data.
          (by the consent of the interested party, 6.1.a GDPR)

  • Carry out statistical analysis and market studies.
           (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

In the Newsletter form

  • Send newsletters, news, offers and online promotions.
          (by the consent of the interested party, 6.1.a GDPR)

In the Request quote form

  • Send commercial quotes about products and services.
          (for the execution of a contract or pre-contract, 6.1.b GDPR)

  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that makes it possible to carry out commercial communications. Are Communications will be made by the person responsible and will be related to their products and services, or its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, Third parties will never have access to personal data.
          (by the consent of the interested party, 6.1.a GDPR)

In the CV form

  • Involve the interested party in the personnel selection processes and analyze the applicant's profile with the objective of selecting a candidate for the vacant position of the manager.
           (by the consent of the interested party, 6.1.a GDPR)

In the Testimonial form

  • Moderate and publish on the website the user's experiences, opinions and suggestions about a product or service.
          (by the consent of the interested party, 6.1.a GDPR)

In the Comments form

  • Moderate and publish opinions about a publication on the website.
          (by the consent of the interested party, 6.1.a GDPR)

In the Ethical or Complaints Channel form

  • Adequately manage the ethical channel, processing the corresponding irregularities reported through of the same, and deciding on the appropriateness of initiating an investigation, in order to detect possible crimes and prevent the imposition of any type of liability, as well as to avoid any type of conduct contrary to the internal or external regulations of the entity.
          (for compliance with a legal obligation, 6.1.c GDPR)

In the User Registration form

  • Manage the user's account to provide personalized access to the website and services interactive features it offers.
          (by the consent of the interested party, 6.1.a GDPR)

In the Reservations form

  • Make reservations at the establishment of the person responsible.
          (for the execution of a contract or pre-contract, 6.1.b GDPR)

  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future to clients, that makes it possible to carry out commercial communications  referring to products or services that are similar to those that were initially contracted with  the client (art. 21.2 LSSI).
          (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

  • In the Appointments form

  • Schedule appointments and meetings with the person in charge.
          (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

Social networks

Contact through Social Networks in order to maintain a relationship between the User and the Controller which may include the following operations: - Process your requests and queries. - Inform about activities and events. - Inform about products and/or services. - Interact through official profiles. The user has a profile on the same social network and has decided to join the Controller's social network, thus showing   your interest in the information published therein, therefore at the time of requesting to follow our official website, provides us with your consent for the processing of your data. The User can access everything  moment to the privacy policies of the social network itself, as well as configure your profile to guarantee your privacy. Once the User is a follower or has joined the Controller's social network, they may publish on the  same comments, links, images, photographs or any other type of content supported by it. The User, in all cases, must be the owner of the published content, enjoy the copyright and intellectual property or have the consent of  the affected third parties. - Sending communications commercial information relating to the activities of the Group companies, as well as companies external to it, with the that commercial collaboration or intermediation agreements have been established.

(by the consent of the interested party, 6.1.a GDPR)

Instant messaging

  • Schedule appointments and meetings with the person in charge.
          (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other  electronic or physical means, present or future to clients, that makes it possible to carry out commercial communications
          referring to products or services that are similar to those that were initially contracted with  the client (art. 21.2 LSSI).

          (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

  • Manage, maintain, improve or develop the services provided.
          (for the execution of a contract or pre-contract, 6.1.b GDPR)

  • Manage your purchase or order online, process the payment and proceed to ship or activate it, based on the general contracting conditions.
          (for the execution of a contract or pre-contract, 6.1.b GDPR)

  • Send commercial quotes about products and services.
          (for the execution of a contract or pre-contract, 6.1.b GDPR)

  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that makes it possible to carry out commercial communications. Are Communications will be made by the person responsible and will be related to their products and services, or its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, Third parties will never have access to personal data.
          (by the consent of the interested party, 6.1.a GDPR)

  • Respond to queries or any type of request made by the user through any of the contact forms that are made available on the website of the person responsible.
          (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

Video surveillance

  • Purpose Security and access control, labor control and internal activity Legitimation Public interest for security and access control and legitimate interest of the Controller based on Art. 20.3 of the Statute of  Workers Conservation A maximum of 30 days
          (by the consent of the interested party, 6.1.a GDPR)

Images and recordings

  • File with static and/or dynamic images. Includes publication in the media of the person responsible for treatment or third parties.
          (by the consent of the interested party, 6.1.a GDPR)

Clients and suppliers

  • Commercial management with clients and suppliers
          (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

Advertising exclusion

  • Data management to avoid sending commercial communications to those who have expressed their refusal or opposition to receive them.
          (for compliance with a legal obligation, 6.1.c GDPR)

Commercial advertising

  • Advertising management and commercial prospecting. Includes data from legitimate publicly accessible sources.
          (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

Right of interested parties

  • Respond to citizens' requests in the exercise of the rights established by the GDPR
          (for compliance with a legal obligation, 6.1.c GDPR)

Web, app and other responsa platforms users

  • Identification data of users who access the corporate website.
         (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

Training, courses, workshops, activities or similar

  • Management of access and use conditions.
         (for the legitimate interest of the person responsible, art. 6.1.f GDPR)

Connection to the Wi-Fi network

  • Carry out statistical analysis and market studies. (for the legitimate interest of the person responsible, art. 6.1.f GDPR)
  • Conduct satisfaction and quality surveys. (for the legitimate interest of the person responsible, art. 6.1.f GDPR)
         (by the consent of the interested party, 6.1.a GDPR)

Minor or vulnerable data

  • The person responsible will not collect or process personal data of minors under fourteen years of age, without fully complying  to the requirements established in the applicable data protection regulations, regarding compliance with the duty to inform and obtain any necessary consents. The data collected  They will be processed for the management of the reported purposes. The person in charge has security measures  appropriate for the security of this data.
          (by the consent of the interested party, 6.1.a GDPR)

Legal representatives and contact persons

  • In the event that you are a legal representative or contact person of any of the entities or people  with which the Foundation relates, the person responsible will process your data to control the development of the relationship intended.
          (by the consent of the interested party, 6.1.a GDPR)

How long will we keep your personal data?

They will be kept for no longer than necessary to maintain the purpose of the treatment or there are legal requirements that dictate its custody and when it is no longer necessary for this, they will be deleted with appropriate security measures to guarantee the anonymization of the data or the total destruction of the same.

Who do we provide your personal data to?

No communication of personal data to third parties is planned except if necessary for the development and execution of the purposes of the treatment, to our providers of services related to communications, with whom the person responsible has signed the confidentiality and data processor contracts required by current privacy regulations.

Do we make international transfers?

In accordance with the provisions of article 44 of the GDPR, the authorization of international data transfer to a country that has not been declared as a country with an adequate level of protection may only be granted if sufficient guarantees. Thus, it may be granted if the person responsible for the treatment provides a written contract, concluded between the exporter and the importer of data, which contain the necessary guarantees of respect for the protection of data interested parties and the exercise of their rights is guaranteed. It is possible that the person responsible has services from providers that have servers or headquarters in other places and, Therefore, these transfers are made. To consult the updated list of suppliers, consult with the responsible or through secretaria@aviba.es

What are your rights?

The rights that assist the user are:

- Right to withdraw consent at any time.
- Right of access, rectification, portability and deletion of your data, and limitation or opposition to its processing.
- Right to file a claim with the supervisory authority (www.aepd.es) if you consider that the treatment is not  complies with current regulations.

Contact information to exercise your rights:

BUSINESS GROUP OF BALEARIC TRAVEL AGENCIES. C/ Aragón, 215 1 floor, premises 7 - 07008 Palma (Balearic Islands).

 Email: secretaria@aviba.es


2.- MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by checking the corresponding boxes and entering data in the fields, marked with a sterisk (*) in the contact form or presented in download forms, expressly and freely accept and unequivocally, that your data is necessary to respond to your request, by the provider, the inclusion of data being voluntary in the remaining fields. The user guarantees that the personal data provided to the person responsible is true and is responsible to communicate any modification thereof.
The person responsible informs that all data requested through the website are mandatory, since they are necessary for the provision of optimal service to the user. If all data is not provided, there is no guarantee that the information and services provided are completely adjusted to your needs.
If, by any means, you provide us with personal data of other people, the person responsible warns that you must do so with your consent and having previously informed you of the points contained in this Privacy Policy.
Likewise, the person responsible undertakes to provide any third party whose data provides us with the information that results relevant, in accordance with the provisions of Article 14 of the General Regulations.

3.- SECURITY MEASURES

That in accordance with the provisions of current regulations on the protection of personal data, the person responsible is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of your personal data responsibility, and manifestly with the principles described in article 5 of the GDPR, by which they are treated in a manner lawful, loyal and transparent in relation to the interested party and adequate, relevant and limited to what is necessary in relation to the purposes for those who are treated.
The person responsible guarantees that he has implemented appropriate technical and organizational policies to apply security measures that establish the GDPR and the LOPDGDD in order to protect the rights and freedoms of users and has communicated the adequate information so that they can exercise them.
For more information about privacy guarantees, you can contact the person responsible through AGRUPACIÓN EMPRESARIAL DE BALEARIC TRAVEL AGENCIES. C/ Aragón, 215 1 floor, premises 7 - 07008 Palma (Balearic Islands). Email: secretaria@aviba.es

4.- VALIDITY

This privacy policy is effective as of 10/23/2023

The person responsible reserves the right to modify this policy to adapt it to future legislative updates or jurisprudence that results from application, or for other technical, operational, commercial, corporate reasons, etc. Yes to
As a result of the changes, the rights of the users would be affected, the person responsible undertakes to inform about the reasons
bligaciones dispuestas en la Ley 34/2002, de 11 de julio, de Servicios de la Sociedad de la  Información y de Comercio Electrónico (LSSICE), BOE N º 166, así como informar a todos los usuarios del sitio web. Toda persona que acceda a
este sitio web asume el papel de usuario, comprometiéndose a la observancia y cumplimiento riguroso de las disposiciones aquí dispuestas, así como a cualquier otra disposición legal que fuera de aplicación.