Privacy Policy

Privacy Policy

PRIVACY POLICY – EXTENDED INFORMATION

LAST MODIFICATION: 01/05/2023

The Privacy Policy forms part of the General Terms and Conditions governing the Website www.ilusionhotels.com,together with the Cookies Policy and Legal Notice.

ILUSION HOTELS ILLES SL (ILUSION HOTELS & RESORTS)reserves the right to modify or adapt this Privacy Policy at any time. Therefore, we recommend that you review it every time you access the Website. In the event that the user has registered on the website and accesses their account or profile, upon accessing it, they will be informed if there have been substantial modifications regarding the processing of their personal data.

Who is responsible for processing your data?

The data collected or provided voluntarily through the Website, either by browsing it, as well as all those that you can provide to us in the contact forms, via e-mail or telephone, will be collected and processed by the Data Controller, whose details are given below:

ILUSION HOTELS ILLES SL,Tax ID (CIF): B57960163

Address: Vía Asima, 20, Despacho 14, 07009, Palma de Mallorca, Balearic Islands

Registered in the Mercantile Registry of Palma de Mallorca under Volume 2653, Folio 104, Sheet PM-78464.

HOTEL ILUSION MARKUS & SPA

HOTEL ILUSION CALMA & SPA

HOTEL ILUSION MOREYO

HOTEL ILUSION VISTA BLAVA

Contact details for ILUSION HOTELS ILLES SL regarding the protection of your personal data

Vía Asima 20, Despacho 22A, 07009, Palma de Mallorca, Balearic Islands

Tel.: +34 871 704 306

E-mail: dpd@ilusionhotels.com

If, for any reason, you wish to contact us with any question related to the processing of your personal data or privacy (with our Data Protection Officer), you can do so through any of the means indicated above.

What data do we collect through the website?

By simply browsing the Website, ILUSION HOTELS ILLES SL will collect information relating to:

- IP address.

- Browser version.

- Operating system.

- Duration of the visit or time spent browsing the Website.

This information is stored by Google Analytics; therefore, we refer to the Privacy Policy of Google as it collects and processes this information. http://www.google.com/intl/en/policies/privacy/

Likewise, the Website provides the utility of Google Maps, which may have access to your location, if you allow it to do so, in order to provide you with greater specificity about the distance and/or routes to our locations. In this regard, we refer to the Privacy Policy used by Google Maps in order to know how these data are used and processed http://www.google.com/intl/en/policies/privacy/

The information that we handle will not be related to a specific user and will be stored in our databases for the purpose of conducting statistical analyses, improving the website, improving our products and/or services and helping us to improve our business strategy. The data will not be communicated to third parties.

User registration on the website/Submission of forms

In order to access certain products and/or services, such as booking/contact requests, the user must fill in a form. For this purpose, the registration form requests a series of personal data. The data are necessary and mandatory to carry out such registration. If these fields are not provided, the registration will not be completed.

In this case, the browsing data will be associated with the user’s registration data, identifying the specific user browsing the Website. In this way, it will be possible to customise the offer of products and/or services that, in our opinion, best suits the user.

The registration data of each user will be incorporated into the databases of ILUSION HOTELS ILLES SL, along with the history of operations carried out by them and will be stored therein until the registered user’s account is deleted. Once the account has been deleted, this information will be removed from our databases, keeping separate the data relating to transactions made for 10 years, without them being accessed or altered, in order to comply with the legal deadlines in force. Data that are not linked to transactions made will be kept unless you withdraw your consent, in which case they will be deleted immediately (always taking into account the legal deadlines).

The legal basis for the processing of your personal data is the execution of a contract between the parties.

With regard to the sending of communications and promotions electronically and the response to requests for information, the legitimacy of the processing is the user’s consent.

The purposes of the processing will be as follows:

a) To manage your access to the Website.

b) To manage the purchase of products and/or services made available to you through the Website.

c) To keep you informed of the processing and status of your requests or bookings.

d) To respond to your request for information.

e) To manage all the utilities and/or services offered by the platform to the user.

Thus, we inform you that you will be able to receive communications via e-mail and/or by phone in order to inform you of possible incidents, errors, problems and/or the status of your requests.

In order to send commercial communications, the user’s express consent will be requested at the time of registration. In this regard, the user may revoke the consent given by contacting ILUSION HOTELS ILLES SL using the means indicated above. In any case, in each commercial communication you will be given the opportunity to unsubscribe from receiving them, either through a link and/or your e-mail address.

Sending of Newsletters

In the event that the Website offers the option of subscribing to a Newsletter, you will need to provide us with an e-mail address to which the Newsletter will be sent.

This information will be stored in a database of ILUSION HOTELS ILLES, in which it will be registered until the data subject requests to unsubscribe from it or, where appropriate, ILUSION HOTELS ILLES SL stops sending it.

The legal basis for the processing of this personal data is the express consent given by all data subjects who subscribe to this service by ticking the box provided for this purpose.

The data from the e-mails will only be processed and stored for the purpose of managing the sending of the Newsletter by users who request it.

In order to send the Newsletter, the user’s express consent will be requested when registering for the Newsletter by ticking the box provided for this purpose. In this regard, the user may revoke the consent given by contacting ILUSION HOTELS ILLES SL using the means indicated above. In any case, in each communication you will be given the opportunity to unsubscribe from receiving them, either through a link and/or your e-mail address.

If you are one of the following groups, please consult the drop-down information:

            + WEBSITE OR E-MAIL CONTACTS

For what purposes will we process your personal data?

• To answer your queries, applications or requests.
• To manage the requested service, answer your request or process your request.
• To send information related to your request electronically.
• To send commercial information or information about events electronically, provided that express authorisation has been given.

What is the legitimacy for the processing of your data?

The acceptance and consent of the data subject: In those cases where it is necessary to fill in a form and click on the send button in order to make a request, the completion of the form will imply that you have been informed and have expressly given your consent to the content of the clause attached to the form or acceptance of the privacy policy.

All our forms have a verification box or checkbox with the following formula, in order to send the information: “□ I have read and accept the Privacy Policy.”

            + CUSTOMERS

For what purposes will we process your personal data?

• To manage the quote and follow up on it via communications between both parties.
• To send information related to your request electronically.
• To send commercial information or information about events electronically, provided that express authorisation has been given.
• To manage the administrative, communications and logistics services carried out by the Data Controller.
• To make the corresponding transactions.
• To invoice and declare the appropriate taxes.
• Control and collection procedures.

What is the legitimacy for the processing of your data?

            The legal basis is your consent and the execution of a contract.

            + SUPPLIERS

For what purposes will we process your personal data?

• To send information related to your request electronically.
• To send commercial information or information about events electronically, provided that express authorisation has been given.
• To manage the administrative, communications and logistics services carried out by the Data Controller.
• Invoicing.
• To make the corresponding transactions.
• To invoice and declare the appropriate taxes.
• Control and collection procedures.

What is the legitimacy for the processing of your data?

            The legal basis is the acceptance of a contractual relationship or, failing that, your consent when contacting us or offering us your products by any means.

            + SOCIAL NETWORK CONTACTS

For what purposes will we process your personal data?

• To answer your queries, applications or requests.
• To manage the requested service, answer your request or process your request.
• To engage with you and create a community of followers.

What is the legitimacy for the processing of your data?

Acceptance of a contractual relationship in the relevant social network environment and in accordance with its privacy policies:

            Facebook           http://www.facebook.com/policy.php?ref=pf

            Instagram          https://help.instagram.com/155833707900388

For how long will we keep personal data?

We can only consult or unsubscribe your data on a restricted basis when you have a specific profile. We will process them for as long as you allow us to do so by following us, being a friend or clicking “like”, “follow” or similar buttons.

Any rectification of your data or restriction of information or publications must be done through the settings of your profile or user on the social network itself.

            + VIDEO SURVEILLANCE

For what purposes will we process your personal data?

• Video surveillance of our facilities.
• To control our employees.
• Occasionally they may be transferred to courts and tribunals for the exercising of legitimate actions.

What is the legitimacy for the processing of your data?

            The unequivocal consent of the data subject when accessing our facilities after viewing the information sign of the area under video surveillance.

            + JOB SEEKERS

For what purposes will we process your personal data?

• To organise selection processes for the recruitment of staff.
• To invite you to job interviews and assess your application.
• If you have given us your consent, we may pass it on to collaborating or related companies for the sole purpose of helping you find a job.

What is the legitimacy for the processing of your data?

            The legal basis is your unequivocal consent, by providing us with your CV and receiving and signing information regarding the processing we will carry out.

For how long will we keep personal data?

Your CV will be stored for a period of one year, after which, if we have not contacted you, it will be deleted.

             + HR

For what purposes will we process your personal data?

• To manage the employment relationship and the employee’s file.
• To perform all the administrative, tax and accounting procedures necessary to comply with our contractual commitments, obligations in terms of labour regulations, Social Security, occupational risk prevention, tax and accounting.
• To manage the payment of wages through a financial institution.
• To control the clocking in and out of staff through the fingerprint/card access control system (if applicable).
• To manage the company’s collective insurance/pension plan.
• To perform training activities for both subsidised and non-subsidised training.

What is the legitimacy for the processing of your data?

            The legal basis for the processing of your data is the execution of your employment contract. Compliance with the relevant legal obligations. The consent of the data subject.

 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Do we include personal data of third parties?

            No, as a general rule we only process the data provided to us by the owners. If you provide us with data of third parties, you must previously inform and request their consent, otherwise we are exempt from any liability for failure to comply with this requirement.

What about data of minors?

            We do not process data of children under 14 years of age, so please refrain from providing them if you are under that age.

Will we send communications electronically?

• They will only be made to process your request if it is one of the means of contact you have provided us with.
• If we send commercial communications, they will have been previously and expressly authorised by you.

What security measures do we apply?

            You can rest assured: we have adopted an optimal level of protection over the personal data we handle, and we have installed all the technical means and measures at our disposal, according to the state of technology, to prevent the loss, misuse, alteration, unauthorised access and theft of personal data.

To what extent will decision-making be automated?

            ILUSION HOTELS ILLES SL does not use fully automated decision-making processes to enter into, develop or terminate a contractual relationship with the user. Should we use such processes in a particular case, we will keep you informed and notify you of your rights in this respect, if prescribed by law.

Will profiling take place?

            In order to be able to offer you products and/or services according to your interests and improve your user experience, we may create a “marketing profile” based on the information provided. However, no automated decisions will be made based on this profile.

To which recipients will your data be disclosed?

            Your data will not be passed on to third parties, unless legally obliged to do so. Specifically, they will be communicated to the Spanish Tax Administration Agency and to banks and financial institutions for payment of the service provided or product purchased, as well as to the data processors necessary for the execution of the agreement.

            In the event of purchase or payment, if you choose any application, website, platform, bank card or any other online service, your data will be transferred to that platform or processed in its environment, always with maximum security.

             If you have given us your consent to process your name and images and other information related to the activity ofILUSION HOTELS ILLES SL, they will be disclosed on the different social networks and on our website.

International transfers.

             Should it be necessary forILUSION HOTELS ILLES SL to make international data transfers, it will ensure that these transfers are possible in accordance with the General Data Protection Regulation, or any other requirement established by the applicable regulations. For this purpose, the company will adopt the necessary agreements to guarantee a level of data protection equivalent to that established in the European regulations.

If working in a shared folder system in applications such as Dropbox, Google Drive, Microsoft OneDrive, Amazon, Apple, HubSpot, etc., an international transfer will be made to the United States under the authorisation of article 49.c) of the General Data Protection Regulation or any other mechanism that guarantees a level of data protection equivalent to that established in the European regulations.

What are your rights?

• To know whether or not we are processing your data.
• To access your personal data.
• To request the rectification of your data if they are inaccurate.
• To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
• To request the limitation of the processing of your data, in certain cases, in which case we will only keep them in accordance with the regulations in force.
• For data portability, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new data controller that you designate. This is only valid in certain cases.
• To file a complaint with the Spanish Data Protection Agency if you believe that we have not attended to you correctly.
• To revoke your consent for any processing that you have consented to, at any time.

If you modify any data, please let us know so that we can keep them up to date.

Do you want a form for exercising your rights?

• We have forms for exercising your rights, ask us for them by e-mail or, if you prefer, you can use the forms prepared by the Spanish Data Protection Agency or third parties.
• These forms must be signed electronically or be accompanied by a photocopy of your ID.
• If someone is representing you, you must attach a copy of their ID, or have them sign it electronically.
• The forms can be submitted in person, sent by letter or by e-mail to the address of the Data Controller indicated at the beginning of this text.

You have the right to file a complaint with the Spanish Data Protection Agency if you believe that your rights have not been properly addressed.

The maximum period for ILUSION HOTELS ILLES SLto resolve your request is one month, counting from the effective receipt of your request by us.

You have the right to revoke your consent for any of processes that you had previously consented to at any time.

Do we process cookies?

If we use other types of cookies that are not necessary, you can consult the cookies policy in the corresponding link at the top of our website.

For how long will we keep your personal data?

• Personal data will be kept for as long as you remain linked to us.
• Once you are no longer linked to us, the personal data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require them in accordance with the statute of limitations for legal action.
• The data processed will be kept until the aforementioned legal periods expire, if there is a legal obligation to keep them, or, if there is no such legal period, until the data subject requests their deletion or revokes the consent granted.
• We will keep all information and communications relating to your purchase or the provision of our service for the duration of the guarantees of the products or services, in order to deal with possible claims.
• For each processing or type of data, we provide you with a specific period, which you can consult in the following table: