In accordance with the provisions of the General Data Protection Regulation (EU GDPR) 679/2016 and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, the following information is provided regarding the processing of your personal data:
Who is responsible for processing your personal data?
Data Controller: L’ARANCINA MALLORCA S.L. NIF/CIF: B02851566 Address: PLAZA NAVEGACIÓN, 18, 07013 PALMA Phone: 603230359 Email: [email protected]
What data do we process?
At L’ARANCINA MALLORCA S.L., we process the personal data you provide via our web forms, data generated from the provision or contracting of our services or products, and personal data arising from your commercial relationship with us. We also process data generated through your interaction with our website, including browsing data.
It is important to keep your personal data up to date. You are responsible for notifying us of any changes or errors as soon as possible by contacting: [email protected].
What is the purpose of processing your personal data?
Purpose: L’ARANCINA MALLORCA S.L. may process your personal data for the following purposes:
-Managing and maintaining services provided through the website.
-Managing and responding to inquiries and requests for information submitted via the contact form. The email address and personal data you provide through the website’s contact form will be used solely to respond to your inquiries.
-Compliance with applicable legal obligations.
-Sending commercial communications and newsletters, as well as advertisements about our services and products.
-Managing the contracting of our services and/or products.
-Receiving and processing your Curriculum Vitae to participate in our recruitment processes.
-Managing requests for information or quotes about our services or products.
-If you have given your consent, we may use your personal data to create a commercial profile to offer you services according to your interests. No automated decisions will be made based on that profile.
We retain your personal data in our systems and files for the time necessary to fulfill the purposes of the processing and to comply with applicable legal obligations. Your data will be kept while there is a contractual and/or commercial relationship with you, or until you exercise your right to deletion and/or restriction of processing. The retention period may vary depending on the processing purpose:
-Personal data provided in connection with contracting our services or products will be kept for the duration of the contractual relationship and, once ended, for the period necessary to address any resulting legal claims.
-Data provided via the contact form will be retained until you request its deletion or cancellation.
-Data provided for subscription to our newsletter or information bulletins will be retained until you request deletion, opposition, or restriction.
-Personal data will be retained for no longer than 1 year.
-Browsing and consumption habits data, as well as commercial profiles, will be retained until deletion or cancellation is requested.
Your personal data will be kept as long as it is useful for the indicated purposes, and in any case, for the legal periods and the time necessary to address potential responsibilities arising from the processing.
Data security.
We implement appropriate technical and organizational security measures to protect your personal data from unauthorized or unlawful processing, and against accidental loss, destruction, or damage, ensuring its integrity and confidentiality. These measures ensure: ongoing confidentiality, integrity, availability, and resilience of processing systems and services; prompt restoration of data availability and access in the event of a physical or technical incident; and regular testing, assessment, and evaluation of the effectiveness of these measures.
These security measures are designed based on our IT infrastructure, current technological standards and practices, the cost of implementation, and the nature, scope, context, and purposes of the processing, as well as the risks of varying likelihood and severity to your personal data.
What is the legal basis for processing your data?
Legal basis: The processing of your personal data is based on:
-The execution and maintenance of a contractual and commercial relationship with you, such as the contracting of products and services, or the request and management of quotes, in accordance with Article 6.1(b) of the GDPR (EU) 679/2016 and Organic Law 3/2018 of December 5.
-Your express consent for one or more purposes, such as sending advertising communications, newsletters, CV management, or participation in activities or contests, in accordance with Article 6.1(a) of the GDPR (EU) 679/2016 and Organic Law 3/2018.
-Compliance with legal obligations, in accordance with Article 6.1(c) of the GDPR (EU) 679/2016 and Organic Law 3/2018.
– The pursuit of legitimate interests by the data controller or a third party, such as for security reasons, service improvement, or to manage your requests or inquiries.
During data collection, and on each web form where personal data is requested, users will be informed—either via a hyperlink or by including the relevant statement in the form itself—about whether the data is mandatory.
Personal data requested on the website forms is generally mandatory (unless otherwise specified). If the required data is not provided, or is incorrect, the requested service cannot be provided.
You are required to provide personal data in cases of service/product contracting or when requesting quotes or offers.
The sending of advertising communications or newsletters is based on your consent, and the withdrawal of such consent will not affect your contractual or commercial relationship with us.
If you have authorized us to send advertisements of our services/products, we may use your data to send promotional offers and newsletters by electronic means. In such cases, Articles 20 and 21 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, will apply.
If you have opted in to receive advertising or subscribed to our newsletter, you may cancel this option at any time.
Who will receive your data?
Recipients: In general, your data will not be disclosed to third parties outside the organization, unless legally required. However, third-party service providers may have access to your data as data processors, in the context of providing services to the data controller. You may request a full list of recipients acting as data processors or third-party transferees by emailing: [email protected]. In addition, the organization may disclose personal data to public authorities where legally required.
-International data transfers:
To carry out the data processing activities described above, we may transfer data to countries outside the European Economic Area (EEA) and store it in physical or digital databases managed by entities acting on our behalf. These transfers are carried out strictly for processing purposes and in accordance with applicable data protection laws. Where data is transferred outside the EEA, the company will apply suitable contractual safeguards, such as standard contractual clauses adopted by the European Commission.
What are your rights regarding your personal data?
Rights: You have the right to access your personal data, request rectification of inaccurate data, or request deletion when the data is no longer necessary for the original purposes. In certain cases, you may request the restriction of processing, in which case we will only retain your data for legal claims. You may also object to the processing for reasons related to your particular situation, in which case we will cease processing your data for those specific purposes. Where technically feasible, you may request data portability to another controller. To exercise your rights under current legislation, please contact us by postal mail (including a copy of your ID) at: L’ARANCINA MALLORCA S.L., PLAZA NAVEGACIÓN, 18, 07013 PALMA, or by email: [email protected]. You have the right to lodge a complaint with the Spanish Data Protection Agency (www.agpd.es).
You expressly agree to the inclusion of personal data collected during website browsing or provided through any form, as well as data derived from a commercial relationship, into the entity’s automated personal data files.
The organization guarantees the confidentiality of your personal data. However, it will disclose personal data to competent public authorities as required by applicable legal and regulatory provisions. Personal data may be retained in files owned by L’ARANCINA MALLORCA S.L. even after the commercial relationship has ended, exclusively for the aforementioned purposes and during legally established periods, available to administrative or judicial authorities.
Use of social media.
When you interact with our website through social networks (e.g., liking, following, or sharing our content), we may receive information from those networks, including your profile information, user ID, and any other public information you allow to be shared with third parties.
We use social media to promote our services and share information about events and activities. We do not collect personal data from social media users unless explicitly authorized.
This data is only used within the social network platform and is not integrated into any data processing system.
Social networks have their own terms of use and privacy policies that you must review and comply with when using them.