PRIVACY POLICY
- WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
The entity responsible for processing your personal data and operating the website https://www.casitablancaibiza.com is TURÍSTICA PITYUSA S.L., a business entity with its registered office at Calle Menéndez Pidal, 14, CP 07820 San Antonio de Portmany, Balearic Islands, Spain, with CIF (VAT number) B07652282. The company is registered in the Commercial Register of Ibiza, Volume 33, Page 154, Section IB 1560, Entry 3 (04/02/21). The Balearic Islands Tourism Registry number is HA-0058-E.
Contact Information:
Calle Menéndez Pidal, 14
San Antonio de Portmany, 07820, Ibiza, Spain
+34 971 34 61 46
Email: info@casitablancaibiza.com
- WHAT PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?
The data we collect, how we obtain it, and the purpose of its processing are as follows:
Contact Forms or Information Requests:
Data required: Name, email, phone number.
Purpose: To respond to inquiries or provide requested information.
Legal basis: User consent.
When Making a Reservation via Our Website:
Data required: Name, surname, address, email, phone number, date of birth, credit or debit card information.
Purpose: Managing the reservation.
Legal basis: User consent.
For Contractual and Administrative Purposes:
Data required: Name, surname, phone number, address, identity card or passport, email, signature.
Purpose: Managing commercial, tax, and administrative tasks in compliance with applicable legislation.
Legal basis: Consent and contractual obligations.
For Guest Check-In:
Data required: Name, surname, phone number, address, ID/passport.
Purpose: Complying with legal check-in obligations.
Legal basis: Compliance with the Organic Law on Citizen Security (LPSC).
Other Data We May Collect:
Data provided during phone reservations, emails, or booking engines.
CCTV footage for security purposes within the property.
Information such as IP addresses, browser types, operating systems, and browsing behaviour when using our website.
- WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
Consent: For enquiries, marketing communications, and newsletter subscriptions.
Contractual relationships: For reservations, employee data processing, and supplier management.
Legal obligations: For compliance with laws, including tax and administrative requirements.
Legitimate interest: For security purposes, including CCTV monitoring.
- HOW LONG DO WE RETAIN YOUR DATA?
Your data will be retained for as long as necessary to fulfill the purpose for which it was collected:
CCTV footage: Retained for 30 days unless required longer for legal purposes.
Newsletter subscriptions: Retained until you unsubscribe.
Employee records: Retained during employment and for legally required periods thereafter.
Other data: Retained for the duration of the contractual relationship and for legal limitation periods.
Once the retention period ends, data will be securely deleted unless required to comply with legal obligations.
- WHO WILL YOUR DATA BE SHARED WITH?
Your data may be shared with:
Internal Personnel: Authorised staff within the organisation.
Third-Party Service Providers: IT providers, consultants, and others supporting business operations.
Public Authorities: To comply with legal obligations.
Security Firms: For access to CCTV footage when required.
All third parties will have signed confidentiality agreements and will process your data in accordance with applicable data protection laws.
- WHAT ARE YOUR RIGHTS REGARDING YOUR DATA?
You have the following rights under data protection regulations:
Access: Obtain confirmation about whether your data is being processed.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of data in specific circumstances (e.g., when no longer needed).
Portability: Request transfer of data to another entity in a structured, machine-readable format.
Restriction: Limit the processing of your data under certain conditions.
Objection: Oppose processing based on legitimate interests or for direct marketing purposes.
To exercise your rights, email info@casitablancaibiza.com with the subject line specifying the right you wish to exercise and attach a copy of your ID or passport.
- HOW DO YOU FILE A COMPLAINT?
If you believe your rights have been violated, you can file a complaint with the Spanish Data Protection Agency (AEPD):
Address: Calle Jorge Juan, 6, 28001 Madrid, Spain
Contact number: +34 901 100 099 or +34 912 663 517
Website: https://www.aepd.es
- APPLICABLE LAW AND JURISDICTION
This Privacy Policy is governed by:
Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR).
Organic Law 3/2018 on Data Protection and Digital Rights.
Law 34/2002 on Information Society Services and E-Commerce.
Users of this website expressly submit to the jurisdiction of the courts in Ibiza, Spain.
- ADDITIONAL INFORMATION
Security Measures:
We process your data confidentially and have implemented all technical and organisational measures required to prevent unauthorised access, loss, or alteration of your data.
Social Media:
If you interact with us on social media, your data will be processed in accordance with this Privacy Policy and the respective social platform’s policies.
CCTV Monitoring:
Footage is retained for 30 days unless required longer for legal reasons. Signs are displayed where cameras are in use.
- UPDATES
This Privacy Policy was last updated in November 2024. We recommend reviewing it periodically to stay informed about any changes.