Privacy policy

1. Controller

Controller

PARQUE MAGICO DE NAVIDAD, S.L.

Tax number (CIF)

B21757489

Address

C/ Reina Esclaramunda 5, Entresuelo C, 07003 Palma de Mallorca, Illes Balears

Contact

info@parcdenadal.com

Data Protection Officer

Parque Mágico de Navidad S.L.

2. What data we process, and why

a) Visiting this website

This page is informational and contains no forms. When you visit it, the server automatically records the usual technical connection data: IP address, date and time, page requested, response code, browser type and operating system. This is used solely to provide the service, maintain security and detect faults.

Legal basis: legitimate interest in the security and correct operation of the site (Art. 6(1)(f) GDPR). Retention: server logs are kept for a maximum of [[log retention period, e.g. 30 days]].

b) Enquiries by email

If you write to us at info@parcdenadal.com, we process your name, email address and the content of your message for the sole purpose of answering your enquiry.

Legal basis: pre-contractual steps or legitimate interest in replying (Art. 6(1)(b) and (f) GDPR). Retention: for the duration of the correspondence and thereafter for the applicable limitation periods.

c) Applications for chalets and sponsorship

Applications to take part as an exhibitor or sponsor are made in the partner area, a separate service from this page. It processes identification and contact details of the company and the person responsible, project details, photographs supplied and the documentation required to take part in the market.

Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR). Retention: for the duration of the relationship and thereafter for the applicable tax and commercial periods (generally six years).

d) Photographs and recordings during the event

General photographs and recordings of the grounds may be made during the market for information and publicity purposes. Where an individual is identifiable as the main subject, their consent will be obtained (Art. 6(1)(a) GDPR). For general shots of the public, the basis is the legitimate interest in documenting and publicising the event (Art. 6(1)(f) GDPR); you may object at any time by writing to info@parcdenadal.com.

3. Recipients and processors

Data is not shared with third parties except where legally required. The following act as processors:

• Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (Alemania). Servers located in the European Union.
• Email delivery: Resend (Plus Five Five, Inc.), San Francisco, EE. UU.. This may involve an international transfer covered by the standard contractual clauses approved by the European Commission.
• Corporate mailbox: [[email provider, e.g. Microsoft 365 — to be confirmed]].

4. International transfers

Apart from the above, no transfers take place outside the European Economic Area. Where they do, they rely on an adequacy decision or appropriate safeguards under Chapter V of the GDPR; you may request a copy of those safeguards at info@parcdenadal.com.

5. Retention periods

Data is kept for as long as it is needed for the purpose for which it was collected, and thereafter blocked for the limitation periods of any claims that might arise. Once those periods have passed, it is securely deleted.

6. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing, portability, and the right not to be subject to automated decisions. You may also withdraw consent previously given, without affecting the lawfulness of processing carried out beforehand.

To do so, write to info@parcdenadal.com or to the postal address given, identifying yourself and stating which right you wish to exercise. We will reply within one month.

If you believe your data is not being handled properly, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es).

7. Security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or alteration: encrypted traffic (HTTPS), access control, backups and data minimisation.

8. Cookies

This page uses no analytics or advertising cookies. The details are set out in the cookie policy.

9. Changes to this policy

This policy may be updated if the services or the applicable rules change. The version in force is always the one published on this page, with its update date.