Privacy Policy

This Privacy Policy shall be valid only for personal data obtained from www.macenasresort.com, not being applicable to information collected by third parties on other websites, even if these are linked to the Website.
With this, www.macenasresort.com expresses its commitment to maintain and guarantee commercial relations with the User in a secure manner by protecting their personal data and guaranteeing their right to privacy.

For the guestbook/opinions:

• Name: to identify the User.
• Email: to know the email from which the comment has been made.

For the blog:

If we have activated that Users can leave comments:

• Name: to identify the User
• Email: to know the email from which the comment was made.

For the online shop:

Only the data that are mandatory to process an order will be requested.

• Name and surname: to manage the order.
• NIF/tax code: to process the order.
• Address: to manage the order.
• Postal code: to manage the order.
• City: to manage the order.
• Province: to manage the order
• Country: to manage the order.
• Telephone: to manage the order.
• Email: to manage the order, to be able to send copies of the order and other communications related to the order.

For the private customer area:

The customer area is a private area. The person responsible for www.macenasresort.com will provide you with a username and password so that as a User you can access this restricted service, on the understanding that you accept all the legal conditions.

For the contact form:

• Name and surname: in order to be able to answer the query.
• Telephone: to be able to answer the query
• Email: to be able to answer the query.

To make online payments

In the event of using a credit or debit card or a PayPal account to make an online payment for a service or product, the banking or financial data of the User involved in the payment are always managed directly by the providers indicated in the section Services offered by third parties. www.macenasresort.com will never have access to the User’s banking data.

In addition, when you visit www.macenasresort.com certain information is automatically stored for technical reasons such as the IP address assigned by your Internet access provider.

Legitimacy

Thanks to your consent, we can process your data, which is a mandatory requirement for you to be able to access the services of www.macenasresort.com correctly.
The user has the right to be forgotten if he wants all his data to be deleted from our database.

Category of data

The data collected by www.macenasresort.com is not considered sensitive or protected data.
According to article 9.1 of the new EU General Data Protection Regulation (GDPR), personal data are considered sensitive or protected data if they reveal:

• Racial or ethnic origin.
• Political opinions.
• Religious or philosophical convictions.
• Trade union membership.
• The processing of genetic data.
• Biometric data intended to uniquely identify a natural person.
• Data concerning health.
• Data concerning the sex life or sexual orientation of a natural person.

We only work with the minimum identification data required to carry out our work: name, surname, address, telephone, email, VAT number.

The customer data: name, telephone number, postal address, email address, etc. will remain in our system for as long as legally and technically required for the normal operation of the Website, unless the User exercises their right to delete or update it.

Since 25 May 2018, the Website is governed by the General Data Protection Regulation (GDPR) of the European Union. https://www.boe.es/doue/2016/119/L00001-00088.pdf

Security measures

www.macenasresort.com is hosted in the systems operated by COSENTINO GROUP S.A., hereinafter Cosentino Group. The necessary technical and organisational security measures are in place to guarantee the security of the User’s personal data and thus prevent its alteration, loss and unauthorised processing and/or access. This taking into account the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or from the physical or natural environment. All of the above is in accordance with the provisions of the GDPR.

Likewise, Cosentino Group has established additional measures in order to reinforce the confidentiality and integrity of the information on this website. Continuously maintaining the supervision, control and evaluation of processes to ensure respect for data privacy.

Specifically, the measures adopted by Cosentino Group are:
Connection with SSL certificate on the WebsiteEncryption of keys and passwords using standard cryptographic algorithms.
Protection of the servers by means of firewalls, process isolation and other standard security measures.
Geographically distributed daily backups to ensure continuity of service in the event of an incident.

Exercise of rights

Users who have provided their data to www.macenasresort.com may contact the owner of the website in order to be able to exercise their right to access their data, rectify or delete, limit or oppose the data included in their files free of charge.

The method to be used by the User to communicate with www.macenasresort.com will be by means of their email account registered in our web service, or in writing.
Users may exercise their rights by writing to www.macenasresort.com with the reference “Data Protection”, specifying their data, accrediting their identity and the reasons for their request to the following address: info@macenasresort.com. Any information that we need to store by virtue of a legal, fiscal or contractual obligation will be blocked and only used for these purposes instead of being deleted.

Modification of the privacy policy

www.macenasresort.com reserves the right to modify the Privacy Policy, motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency.
Any modification of the Privacy Policy will be published at least ten days prior to its effective application.

Data controller and data processor

ARETE MACENAS RESIDECIAL S.L. is responsible for the data file.

Services offered by third parties To provide services strictly necessary for its proper functioning www.macenasresort.com uses the following service providers under their corresponding privacy conditions.

Social plugins On our website we offer links and services related to different social networks. If the User is a member of a social network and clicks on the corresponding link, the provider of the social network may link his/her profile data with the information from his/her visit to www.macenasresort.com.

The User must therefore be informed about the functions and policies of the respective social network regarding the processing of his or her personal data. Whether you access one of our web pages with one of your social network profiles or share information through them.

The User may access the privacy policies of the different social networks at any time, as well as configure their profile to guarantee their privacy.

Acceptance, consent and revocability

The User declares to have been informed of the present conditions on the protection of personal data, accepting and consenting to the processing of the same by www.macenasresort.com in the manner and for the purposes indicated in the Legal Notice.

The User may revoke his/her data at any time, but without affecting actions already carried out in the past, i.e. without retroactive effect.