Privacy Policy

Privacy Policy

This Privacy Policy will apply to the following web domains: www.machotels.com, www.clubmac.es, www.macpuertomarina.com, www.paradisogarden.com and www.hoteldonjaime54.com (hereinafter, “Websites”), which are part of the HOTELES MAC SL group (hereinafter, MAC HOTELS), with VAT number B07117401, address GREMI TINTORERS 25A, 07009, PALMA DE MALLORCA, ILLES BALEARS, registered in the Mercantile Registry of Mallorca, Volume: 2102, Book: 0, Folio: 190, Sheet: PM-3094, Entry: 34, email dpo@mac-hotels.com and contact telephone +34 971 010930

 

MAC HOTELS informs that your personal data will be incorporated into the processing system owned by the following data controllers depending on the website the User visits: 

 

1. MEDITERRANEAN LUXURY HOTELS, S.A., with VAT number A07305477, address at GREMI TINTORERS 25A, 07008, PALMA DE MALLORCA, ILLES BALEARS, registered in the Mercantile Registry of Mallorca, in volume 771, folio 76, sheet PM-10514 and 5th entry, with email dpo@puresaltluxuryhotels.com contact telephone +34 971 433500. 

www.mac-hotels.com

www.macpuertomarina.com

www.paradisogarden.com

2. EXPLOBALTRES, S.L., with VAT number B07594559, address at GREMI TINTORERS 25A, 07008, PALMA DE MALLORCA, ILLES BALEARS, registered in the Mercantile Registry of Mallorca, in volume 1562,  book 0, folio 121, Sheet PM-8374, Entry 10, with email dpo@mac-hotels.com and contact telephone +34 971010930:

www.hoteldonjaime54.com

3. TRIAUNO, S.L., with VAT number B28278885, at GREMI TINTORERS 25A, 07008, PALMA DE MALLORCA, ILLES BALEARS, registered in the Mercantile Registry of Mallorca, in volume 2403, Book 0, Folio 123,  Sheet PM-3091, Entry 38, with email dpo@mac-hotels.com and contact telephone +34 971 010930

www.clubmac.es

Data Protection

In accordance with current and applicable regulations on the protection of personal data, the respective purposes, retention periods, and legal bases for the treatments carried out on the Websites are listed below. For those treatments that require it, information is also provided on the possible creation of profiles and automated decisions, as well as the possible transfers and international transfers that are planned to be made:

TREATMENTS PERFORMED

Website management web

Purpose: Treatment and management of the data necessary for the functionality of the website

Retention period: as long as the consent given lasts

Legal basis: The consent of the interested party

Type of Data: Solely identifying data

Transfers: Not foreseen

International transfers: Not foreseen

Profiling: Not foreseen

Formweb

Purpose: To attend to your inquiries and/or requests

Retention period: As long as the consent given is maintained.

Legal basis: The consent of the data subject

Data typology: Merely identifying data

Transfers: None

International transfers: Not foreseen

Profiling: Not foreseen

Compliance management

Purpose: Management and processing of the obligations and duties arising from compliance with the regulations to which the entity is subject

Retention period: retention of copies of the documents until the actions to claim possible liability are prescribed

Legitimate basis: Compliance with a law

Data typology: Merely identifying data

Transfers: Your data will be communicated if necessary to Bodies and/or public administration with competence in the matter in order to comply with the obligations established in the applicable regulations. It is also informed that the legitimizing basis of the transfer is to comply with the obligations established in the applicable regulations

International transfers: Not foreseen

Profile elaborations: Not foreseen

Newsletters

Purpose: Capture, record and process data for marketing purposes to send the corresponding Newsletter to which you have subscribed

Retention period: as long as the consent given is maintainedLegal basis: Consent of the interested party

Data Typology: Simply identifying data

Transfers: None

International Transfers: Not foreseen

Profile developments: Not foreseen

ActionsCommercial

Purpose: Recruitment, registration and processing of data for advertising and commercial prospection of our products and/or services

Retention period: As long as the consent given is maintained

Legal basis: The consent of the data subject

Data types: Merely identifying data

Transfers: None

International transfers: Not foreseen

Profile elaborations: Not foreseen

User registration

Purpose: Capture, record, and process data in order to register as a user

Retention period: As long as the consent given persistsLegal basis: The consent of the data subject

Type of Data: Merely identifying data

Transfers: Not foreseen

International transfers: Not foreseen

Profiling: Not foreseen

Promotions Management

Purpose: Capture, record and process data for the purpose of carrying out contests, awards and promotions

Retention period: for the strictly necessary period to fulfill the aforementioned purpose, unless legally required

Legal basis: Consent of the interested party

Data typology: Merely identifying data

Transfers: your data may be communicated to companies that sponsor the contests, awards and/or promotions if necessary

International transfers: Not foreseen

Profile elaborations: Not foreseen

Job board management

Purpose: Registration and processing of candidate data for the purpose of personnel selection for vacant positions of collaborating entities and management of the job bank 

Retention Period: For as long as the consent given persists Legal Basis: The consent of the interested party 

Type of Data: Merely identifying data 

Transfers: Your data will be communicated, if necessary, to Collaborating Entities for the purpose of managing the job bank and conveying the candidacy to the collaborating company. It is also informed that the legitimizing basis for the transfer is your consent 

International Transfers: Not foreseen

Management of the purchasing and/or hiring of services

Purpose:Capture, record and process data in order to manage your purchase, as well as for the correct development, compliance and execution of the contract between both parties

Retention period:during the necessary period to manage the purchase of the products or services purchased including possible returns, complaints or claims associated with the purchase of the particular product or service

Legitimate basis:Execution of a contract

Typology of Data:Merely identifying data

Transfers:your data may be communicated if necessary to companies that subsidize contests, prizes and/or promotions

International transfers:Not foreseen

Profile elaborations:Not foreseen

Financial and administrative management

Purpose: Administrative management, billing, accounting, and legal obligations

Retention period: 5 years in compliance with tax law and 10 years for tax documentation in compliance with L.O.7/2012

Legitimate basis: Consent of the data subject

Types of data: Solely identifying data

Disclosures: Your data will be disclosed, if necessary, to the Tax Agency, Banks, Boxes, and Organizations and/or public administrations with competence in the matter in order to comply with tax and fiscal obligations established in the applicable regulations. It is also informed that the legitimate basis for the disclosure is to comply with the obligations established in the applicable regulations

International transfers: Not foreseen

Profiling: Not foreseen

Reservations Management

Purpose: Registration and management of reservations

Retention period: 3 years, in compliance with Order INT/1922/2003, of July 3, on registration books and entry records of travelers in hospitality establishments and similar

Legitimate basis: Consent of the interested party

Data typology: Merely identifying data

Transfers: Your data will be communicated if necessary to the Tax Agency, Banks and Savings Banks, Public Security Forces and Authorities with the purpose of complying with the administrative and security obligations established in the applicable regulations. In addition, it is informed that the legitimizing basis of the transfer is to comply with the obligations established in the applicable regulations

International transfers: Not foreseen

Profile elaborations: Not foreseen

At the same time, we inform you that you can contact the Data Protection Officer by sending a written request to the email address dpo@mac-hotels.com.

Rights of the interested parties

MAC HOTELS informs Users that they may exercise their rights of access, rectification, limitation, deletion, portability, and opposition to the processing of their personal data before the Data Controller, as well as to withdraw the consent provided.

Right of Access: It is the user’s right to obtain information about their specific personal data and the processing that has been or is being carried out, as well as information available on the origin of such data and the communications made or planned regarding them.

Right of Rectification: It is the right of the data subject to have inaccurate or incomplete data modified. It can only be satisfied in relation to information under the control of the APP, for example, deleting comments published on the website, images, or web content containing the user’s personal data.

Right to Limit Processing: It is the right to limit the originally envisaged purposes of data processing by the data controller.

Right of Deletion: It is the right to delete the user’s personal data, except as provided for in the GDPR or other applicable regulations that determine the mandatory retention of such data, in terms of time and manner.

Right to Data Portability: The right to receive the personal data provided by the user in a structured, commonly used, and machine-readable format, and to transmit them to another data controller.

Right of Opposition: It is the user’s right to oppose the processing of their personal data or to request the cessation of such processing by the APP.

In order to exercise any of the rights described above, you must meet the following requirements:

  • Submission of a written request to the address GREMI TINTORERS 25ª 07009 PALMA DE MALLORCA (ILLES BALEARS) (attention: MAC HOTELS) or by email to dpo@mac-hotels.com
  • The written request sent by the data subject requesting the exercise must meet the following legal requirements:
    • Name, surname of the interested party and copy of ID/NIE or any identification document. In exceptional cases where representation is allowed, identification by the same means of the person being represented, as well as the document proving the representation, will also be necessary. The photocopy of the ID can be replaced as long as identity is proven by any other valid means in law.
    • Petition specifying the request. (Exercise in requesting the information you want to access). If it does not refer to a specific file, all information with personal data will be provided. If you request information from a specific file, only the information from that file will be provided. If you request information regarding a third party, it will never be provided. If you request it by phone, you will be advised to do so in writing and informed of how to do it and the address to

Finally, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency in case you become aware of or believe that an event may constitute a breach of the applicable data protection regulations.

MAC HOTELS undertakes to adopt the technical and organizational measures necessary, in accordance with the level of risks associated with the processing carried out by them and indicated in the section of the terms and conditions of use, in order to guarantee their integrity, confidentiality, and availability.

 

LAST UPDATED: April 28, 2023