Data Protection Policy

In compliance with the General Data Protection Regulation (UE Regulation 2016/679), we wish to inform you about our use of your personal data and provide further information that may be of interest to you.

In this Data Protection Policy, "personal information" or "personal data" is understood to be any information relating to an identified or identifiable person. For example, this may include, among other details, your name, your address, e-mail address, or any other information gathered during your interactions with us via the website.  

We recommend you read our Data Protection Policy carefully to ensure that you understand how your personal data is used when you visit our website.

Who is the data controller?

The "Data controller" is the person or entity that is legally responsible for managing your personal data. The data controller will decide how and for what purpose your data is used. In the case of this Data Protection Policy, the data controller is Aubamar Pabisa Hotels & Properties S.L.U

  • Aubamar Pabisa Hotels & Properties S.L.U
  • Address: Avenida Fra Joan Llabrés, 10, 07600, Palma de Mallorca
  • Telephone: +34 971 74 32 66
  • Mercantile Register of Mallorca: Folio 27, Book 2694, Page nº PM-4428, Inscription 30
  • Tax Identification Number: B-07561558
  • E-mail: privacy@pabisa.com

What is the legitimate reason and purpose for the collection and use of your personal data?

Pabisa collects and uses the personal data you have voluntarily provided when you visit our website and/or use our apps, in particular:

  • when requesting information by using our contact form
  • when subscribing to our newsletter
  • when making a booking
  • when sending your CV to apply for employment
  • when checking in

Information about you that Pabisa collects and will process includes:

a) Identifying data: name, surname, ID document information (fiscal ID number or code, foreign resident ID number, passport number or residence permit number), date of birth, nationality.

b) Contact details: postal address, e-mail address, landline telephone number, mobile telephone number.

c) Financial data: bank details.

d) Electronic data: IP address, type and identification of your device, type of browser and language, domain through which you access the website, browsing information, and website activity.

We use your personal information for the following purposes:

  • to communicate with you and respond to your requests and queries
  • to process and manage your employment application
  • to manage your newsletter subscription
  • to market our services, adapt our sales and marketing activity to your interests, and keep you informed about promotions and special offers
  • to process a booking
  • o manage and complete check-in
  • to comply with any applicable laws and regulations and for business operational purpose

More information about data processing purposes:

To communicate with you and respond to any requests or queries sent to Pabisa.

When you contact us (for example, by using the contact form on the website, by sending an e-mail, or by visiting social media platforms), we process information about you to enable us to reply to your requests or queries. We also process your personal information so we can interact with you on third-party social media.

To manage and process your employment application.

If you apply to work with us at Pabisa, we must use your personal data to manage and process your application.

To manage subscriptions to the Pabisa newsletter.

If you subscribe to our newsletter, we will use information about you to manage your subscription.

To market our services and adapt our sales and marketing activities.

Pabisa uses your information to keep you informed about new services and updates, prices, conditions, special offers, campaigns, and associated promotions (including via the newsletter).  We do everything we can to adapt your visit to our website, your marketing experience, and our communication with you, to the interests that you have expressed.

To process a booking.

When you book your stay through the website, Pabisa processes information about you to manage and confirm the booking.

To manage the check-in process.

If you have a booking and want to use the web check-in facility, Pabisa will use your information to manage and complete the check-in process.

To comply with applicable laws and regulations and for business operational purposes.

Sometimes, we need to process personal information to comply with legal requirements. For example, to respond to a petition from a regulating body, or to defend a legal claim. We also need to process personal information for business operational purposes, such as audits and Internal investigations, or for financial and accounting reasons, file keeping, and insurance.

How long do we store your data?

Pabisa will store your personal data for the length of time necessary to complete the purpose for which it was collected, provided you do not exercise your right to erase your data.

When your data is no longer needed for the purpose for which it was collected, it will generally be deleted, except when, temporarily, it is required for legal reasons. Your data will also be deleted if you withdraw your consent, except in the event of an exception foreseen by law.

To determine the appropriate period for storage of your data, we apply the following criteria:

  • The data we use to send you the newsletter and marketing communications will be processed until such time as you withdraw your consent or advise us that you no longer wish to receive these communications, in accordance with the applicable legal provisions and statutes of limitations foreseen in current legislation.
  • Data relating to services provided by Pabisa will be stored for the duration of the service contract. Data necessary to provide information requested by you will be stored for the length of time required to process and respond to said requests, in accordance with the applicable legal provisions and statutes of limitations foreseen in current legislation.
  • Data relating to the check-in process will be stored for five years, in accordance with current legislation.
  • Data provided in employment applications will usually be kept for six months, in accordance with the applicable legal provisions and statutes of limitations foreseen in current legislation.
  • When cookies are placed on your device, this data will be stored in accordance with the applicable legal provisions and the recommendations prescribed by the corresponding competent authorities.

 

Who do we share your data with?

We only use, transfer, or share personal data with third parties according to the terms established in the Data Protection Policy. Pabisa does not sell or lend your personal data to third parties and will only send it to other persons or companies if it has your explicit prior consent, or to comply with applicable legislation when said consent is not required for a specific transfer of data.

We will share your personal data, or allow access by a third party, when this is necessary to fulfil one of the obligations described below in compliance with current legislation.

a) Our suppliers: Pabisa will send or allow access to your data by companies that supply you with a service under contract when it is necessary for the purposes described in the previous section. Should one of these suppliers need to access your personal data, they will do so only for the purpose of providing a service and in accordance with our instructions. We insist that they maintain confidentiality and the safety of your data and that this is returned or destroyed when it is no longer needed.

b) Legal obligations: Pabisa may send your personal data when authorised to do so by law, or when deemed necessary to comply with a legal obligation, including sending your data to the competent authorities, judges, courts, and tribunals. This includes compliance with petitions from the authorities in accordance with Law 10/2010, from the 28th of April, regarding the prevention of money-laundering practices and financing terrorism. Law 4/2015, from the 30th of March, regarding public safety, establishes that within the special powers of the administrative security police, there is a documentary registration requirement for any person or company that carries out an activity relevant to public safety, such as providing accommodation, with an obligation to provide said documentary registration and information as established by the applicable legal provisions. As such, establishments providing accommodation must inform the state security services (National Police, Guardia Civil, etc.) and provide the guest entry information within 24 hours of the guest arriving at the accommodation. The registration book must be always available for members of the security forces with competence in this matter, and establishments must allow access to the register when requested.

c) International data transfer: Your personal data will not be sent outside the European Economic Area (EEA). If it was necessary to send your data to a country where the level of data protection may not be the same as in Spain, to comply with any of the purposes described in the Data Protection Policy, Pabisa will inform you and comply with the applicable legal provisions, request your consent, or provide an adequate guarantee of safety.

What are your rights when you provide us with your data?

You should know that, with regards to your personal data, you have certain rights which are as follows:

  • You can request access to all the personal data we are processing (right of access).
  • You have the right to rectify your data, whether it is because the data held is incorrect or because it has changed (right to rectification).
  • You can also request the erasure of your data when our professional relationship with you has ended. In some circumstances, erasure cannot be complete because the law demands that we store certain data for a period of five years (right to be forgotten).
  • You have the right to object to the processing of your data (right to object).
  • You can request that we restrict the use of your data in the following cases (right to restrict the processing of your data):
  • Finally, you have the right to request that we provide you with your data in electronic format, in a format that is manageable for you (right to portability).

 

Security cameras

Who is responsible for processing your data?

Aubamar Pabisa Hotels & Properties S.L.U

Tax Identification Number: B07561558

Avda. Fra Joan Llabrés, 10, 07600, Playa de Palma

What is the legitimate reason and purpose for the collection and use of your personal data?

We process the data obtained from the security cameras installed on the premises, for the purpose of video surveillance and safety on our premises.

How long do we store your data? 

Data will be deleted after a maximum period of one month from the moment in which it was collected, without prejudice to its storage for the periods foreseen in the applicable legal provisions, for example, to provide evidence of activity that threatens the integrity of any person, property, or facility.

Who do we share your data with?

Your data will not be shared with any third party, except when legally protected.

What are your rights when you provide us with your data?

You should know that, with regards to your personal data, you have certain rights which are listed to follow:

  • You can request access to all the personal data we are processing (right of access).
  • You have the right to rectify your data, whether it is because the data held is incorrect or because it has changed (right to rectification).
  • You can also request the erasure of your data when our professional relationship with you has ended. In some circumstances, erasure cannot be complete because the law demands that we store certain data for a period of five years (right to be forgotten).
  • You have the right to object to the processing of your data (right to object).
  • You can request that we restrict the use of your data in the following cases (right to restrict the processing of your data):
    • During the review of a challenge to the accuracy of your data.
    • If the processing is illegal, you object to the erasure of the data.
    • When we do not need your data, but you need it to present or defend a claim.
    • If you have objected to the processing of your data for reasons of legitimate or public interest, and we are evaluating whether our reasons to process the data outweigh your interests.
  • Finally, you have the right to request that we provide you with your data in electronic format, in a format that is manageable for you (right to portability).

Data security

At Pabisa, we take the appropriate technical and organisational measures, in compliance with current legislation, to protect your personal data against any misuse, destruction, loss, accidental or illicit modification, disclosure, or unauthorised access, including the necessary measures to deal with any suspected data breach.

Policy updates

This policy will be reviewed and updated periodically and so we recommend you visit our website occasionally to see if any of the changes affect you. In any event, we will contact you by e-mail at the address you have provided if there are any significant changes.

This is the latest version of the Data Protection Policy.

By ticking this box, I expressly authorise the processing of my data for the purposes and under the conditions specified in the Data Protection Policy.