A place to dream

PRIVACY POLICY

PRIVACY POLICY

OCEANS OLIVA

LAFINCA OCEAN ASSETS, S.L. (hereinafter, “LFOA” or the “Data Controller“) is committed to protecting your privacy. Through this privacy policy (hereinafter, the “Privacy Policy“) we inform you of how LFOA processes the personal data that you provide us with by any means and/or channel made available to you, including this website.

This Privacy Policy is applicable to the website www.oceansoliva.com (hereinafter the “Website”).

Please note that anonymised information or purely statistical data used by LFOA will not be considered personal data.

Please read this Privacy Policy carefully before accessing and using the Website.

  1. Who is the DATA CONTROLLER?

LAFINCA OCEAN ASSETS, S.L. It is the data controller for the processing of personal data, which means that we are responsible for taking care of the privacy of the same. We will use your personal data fairly, lawfully and transparently and in accordance with applicable regulations.

Our contact details are as follows:

  • Postal address: Paseo del Club Deportivo, 1, Edificio 11, bajo izquierda – Pozuelo de Alarcón (28223) Madrid
  • Phone: +34 916 021 200
  • Email of the Data Protection Officer: juridico@lafincagrupo.com

If you have any questions about this point, or any aspect related to the processing of personal data, you can contact the Data Protection Officer at the email address indicated above.

  1. Information and consent

By reading and accepting this Privacy Policy, the user (hereinafter, the “User” or “Users“) is informed about the circumstances in which its personal data will be processed. In addition, if it is the necessary legal basis for the processing of your data, your free, informed, specific and unequivocal consent will be requested so that the personal data you provide can be processed by LFOA, as well as the data derived from your browsing and any other data that you may provide in the future.

The data requested through the forms are generally mandatory (unless otherwise specified in the required field) to comply with the purposes for which they are being collected.

Therefore, if they are not provided or are not provided correctly, we will not be able to properly deal with your request.

  1. What kind of data do we process and WHERE DO WE GET YOUR PERSONAL DATA FROM?
    • Data about you that you have provided to us directly: this is the data you provide to us by filling in forms on the Website, or through any interaction you make with the Data Controller. The data we collect includes:
    • Identification data: name and surname
    • Contact and communication details: email address, telephone number and any details you provide to us when you contact us.
    • Payment Information
    • Data about you that we obtain from third parties:
    • Data on cookies: inserted on the Website, where applicable, and on the use of similar technologies (see Cookies Policy for more information).
    • Data received from suppliers or collaborators: personal data such as ID or passport provided by suppliers or collaborators of LFOA necessary for the provision of services.
    • Third-party data provided by you:
    • In the event that you provide us with personal data of third parties for any purpose, you guarantee that you have previously informed those affected and have obtained their consent for the communication of their data to the Data Controller.
    • The Data Controller will not collect or process personal data of minors under fourteen (14) years of age and/or disabled persons, without the express consent of their legal representatives. Therefore, you must refrain from providing personal data if you are under fourteen (14) years of age if you do not have the aforementioned consent or if you are not physically or legally capable of giving your consent.
    • The Data Controller may verify the consent of these affected parties through an email with non-commercial content requesting verification of the consent granted on their behalf by you.
    • In the event that liability arises from a breach of these terms by you, you will be responsible for the consequences of such breach.

We also inform you that your personal data will be processed in a lawful, loyal, transparent, adequate, relevant, limited, accurate and updated manner, so we undertake to adopt reasonable measures so that your data are rectified or deleted without delay, when they are inaccurate.

You guarantee the veracity of your personal data and undertake to communicate to the Data Controller, through the channels provided for this purpose or by email addressed to juridico@lafincagrupo.com, any variation thereof.

  1. FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

We will process your personal data for the following purposes:

PROCESSING AND PURPOSE

 LEGAL BASIS

MANAGEMENT, ADMINISTRATION AND CONTROL OF ACCESS TO AND USE OF THE WEBSITE AND ITS SERVICES

To manage access, use, any interaction of the User with the Website and the services offered therein.

Send you notifications related to the use of the Website and its services, e.g. booking reminders/updates.

The formalisation, execution and control of contractual relations or pre-contractual measures

SENDING AND MANAGING FORMS AND SATISFACTION SURVEYS ON THE WEBSITE AND SERVICES

To improve the quality and management of the Website and its services.

Legitimate interest in efficiently managing the Controller’s business

TRANSFER OF DATA TO AUTHORITIES

To meet the information requirements of the authorities and comply with the relevant regulations and legislation

Legal obligation

TRANSFER OF DATA TO ENTITIES OF THE LAFINCA GROUP, THIRD PARTIES AND SERVICE PROVIDERS OF THE DATA CONTROLLER

In order for the Website to function and for us to properly provide you with the services of the Website, some entities of the LaFinca Group, third parties and some service providers of the Data Controller need to have access to your personal data.

 

The formalisation, execution and control of contractual relations or pre-contractual measures

Legitimate interest in efficiently managing the Controller’s business

Legal obligation

SENDING COMMERCIAL COMMUNICATIONS

The sending, by any means (including digital), of commercial communications and information on products and/or services from any of the companies in the Controller’s business group and/or from third parties that may be based on automated individual decision-making through profiling.

The formalisation, execution and control of contractual relations or pre-contractual measures, provided that they are commercial communications about services/products similar to those available on the Website.

Otherwise, your consent will be obtained.

PROFILING

Profiling, through the analysis of your automated individual decisions, consists of the use of your personal data to evaluate certain personal aspects, such as the analysis and prediction of your economic situation, personal preferences, interests, behaviour, location, movements and attitudes; the logic applied to obtain these profiles being the use of different data science tools (among others artificial intelligence) and, the consequences of the processing, the sending of personalized communications of interest based on the results of the profiling obtained.

 

Your Consent

  1. WHO DO WE SHARE YOUR PERSONAL DATA WITH?
  • Entities of the Data Controller’s Business Group: we inform you that the personal data held by the Data Controller may be transferred to companies in the Data Controller´s business group so that these companies can send you commercial communications under the terms set out in this Privacy Policy, as well as for internal administrative purposes, based on legitimate interest. You can access the list of companies in the LaFinca Group by means of sending a request to the following email address: juridico@lafincagrupo.com.
  • Suppliers or collaborators who provide services on behalf of the Data Controller: for the purpose of managing the provision of the services of the Website. In this case, such access to personal data by suppliers or collaborators who provide services on behalf of the Data Controller will be regulated in the corresponding data processing agreement in compliance with the applicable regulations.
  • Third parties: personal data necessary for the provision of third-party services (such as Booking, Google, etc.) may be transferred. The third parties will act as data controllers of the personal data communicated by the Data Controller, assuming at their sole risk and responsibility the processing activities they carry out on this personal data, which are subject to the privacy policy of the third party.
  • Authorities: such as public authorities and official bodies for compliance with applicable legal obligations.
  1. WILL Personal Data be subject to international transfers?

No international data transfers are planned. In the event that international transfers of the User’s personal data are made, in the absence of an adequacy decision issued by the European Commission, the transfer will only be carried out if adequate safeguards are established in accordance with the provisions of the applicable data protection regulations (through Standard Contractual Clauses, Binding Corporate Rules, etc.).

  1. HOW LONG DO WE KEEP YOUR DATA?

Your personal data will be kept for the time strictly necessary to carry out the processing for which they have been provided, or until you exercise your right to object, delete, limit processing, and/or revoke your consent, as appropriate.

Once the relationship with you has ended, your data will be kept for as long as any legal liability may arise for the parties.

  1. HOW DO WE PROTECT YOUR PERSONAL DATA?

LFOA states that it has adopted all the necessary technical and organisational measures to guarantee the security and integrity of the personal data it processes, as well as to prevent its loss, alteration and/or access by unauthorised third parties.

  1. WHAT ARE YOUR RIGHTS?

When the basis of the processing is your consent, you may object to the granting of your consent or revoke it, at any time, by sending an e-mail to the following address: juridico@lafincagrupo.com. Refusal to grant consent will have no effect on the existing relationship.

In addition, we inform you that you may exercise your rights of access, rectification, erasure, portability, limitation and/or opposition under the terms established by current regulations on data protection, by directing your request to the postal address indicated in the section “Who is the data controller?”, free of charge by sending a letter addressed to the Data Controller  duly signed by you, identifying yourself and specifying the exercise of one or more of these rights.

You may also exercise your rights free of charge by sending a communication to the following email address: juridico@lafincagrupo.com, identifying yourself and specifying the exercise of one or more of these rights.

In the event that the Data Controller has reasonable doubts about your identity, the Data Controller may request a photocopy of your ID card or other equivalent document to confirm your identity.

Likewise, in the event that you consider that your rights have not been properly addressed, you may contact the competent Supervisory Authority (SDPA) to file the complaint you consider appropriate at www.aepd.es or at the postal address C/ Jorge Juan, 6, 28001 – Madrid.

  1. CHANGES TO THE PRIVACY POLICY

Our Privacy Policy may be updated, due to changes and legal needs, as well as due to improvements and changes included in the way we offer and provide our services and utilities. Therefore, we recommend that you visit and access our Privacy Policy periodically, in order to have access and learn about the latest changes that may have been incorporated.

In the event that such changes are related to the consent given, we will send you a separate and independent notice to obtain it again.

Last updated: 04/07/2024