Privacy Policy
Together with the Cookies Policy and the Legal Notice, the Privacy Policy forms part of the General Terms and Conditions that govern the Website www.ilusionhotels.com.
ILUSION HOTELS & RESORTS reserves the right to amend or adapt this Privacy Policy at any time. For that reason, we recommend that you check this policy every time you access the Website. In the event that the user has registered on the website and accesses their account or profile, they will be informed if substantial amendments have been made in relation to how their personal data are processed when accessing said account or profile.
Who is the data controller?
The data that are collected and that you willingly provide us with through the Website, whether or not you are browsing the website, and any data that you may provide us with via the contact forms, email or telephone, will be collected and processed by the Data Controller, whose details are described below:
- ILUSION HOTELS & RESORTS
- ILUSION HOTELS ILLES S.L.
- CIF: B57960163
- Address: Vía Asima 20 – 2º, despacho 14, 07009 Palma de Mallorca
- Telephone: +34 871 704 306
- Data Protection Officer: dpd@ilusionhotels.com
Business Registry of Palma de Mallorca, Volume 2653, Page 104, Sheet PM-78464, reg. 1
If, for any reason, you wish to contact us for any questions about privacy or how your data is processed (with our Data Protection Officer), you can do so using any of the means indicated above.
What data do we collect through the website?
Simply by a user browsing the Website, ILUSION HOTELS & RESORTS will collect information relating to:
- IP Address
- Browser version
- Operating system
- Duration of the Website visit or browsing session.
This information will be stored using Google Analytics. As the party collecting and processing this information, please see Google’s Privacy Policy here: http://www.google.com/intl/en/policies/privacy/
In the same manner, the Website uses the Google Maps facility, which can access your location, if you permit it, with the aim of providing you with more specific information about the distances and/or journeys you can take to our locations. In this respect, we recommend reading the Privacy Policy used by Google Maps in order to understand how such data is used and processed http://www.google.com/intl/en/policies/privacy/
The information that we manage will not be related to a specific user and will be stored in our databases in order to conduct statistical analyses, improve the Website and our products and/or services, and help us improve our business strategy. The data will not be communicated to third parties.
Registering the user on the website/Form transmission
In order to access certain products and/or services, such as a reservation or contact request, the user must complete a form. To do so, a series of personal data will be requested on the registration form. This data are necessary and obligatory in order to register the user. If these fields are not completed, the user will not be registered.
In this case, browsing data will be associated with the user’s registration data, thereby identifying the individual user who is browsing the Website. In this manner, the products and/or services offered can be personalised so as to, as per our criteria, better match the user.
Each user’s registration data will be incorporated into the ILUSION HOTELS & RESORTS databases, together with information about the user’s past browsing actions. The data will be stored in these databases until the registered user’s account is deleted. Once the account has been deleted, this information will be removed from our databases, and any data relating to performed operations will be kept separate for 10 years, with no possibility of being accessed or altered. This complies with the legally stipulated time frames. Data that are not related to performed operations will be kept unless consent for such is withdrawn, in which case the data will be immediately deleted (in any case, in compliance with the legally stipulated time frames).
The lawful basis for processing these personal data is the enforcement of an agreement between the parties.
In relation to the electronic dispatch of communications and promotions and the response to information requests, the legal basis for such processing is the consent of the affected party.
The data will be processed for the following purposes:
a) To manage your access to the Website
b) To manage your purchasing of products and/or services made available to you via the Website
c) To keep you informed of the status of your requests and reservations and how they are being processed
d) To respond to your information request
e) To manage all of the tools and/or services that the platform offers to the user.
In this respect, we hereby inform you that you may receive communications via email and/or telephone with the aim of informing you of possible events, errors, problems and/or the status of your requests.
Express consent for commercial communications will be requested from the user when they register. In this respect, the user may revoke their consent by contacting ILUSION HOTELS & RESORTS through the aforementioned channels. In any event, each commercial communication will give you the chance to unsubscribe when receiving such communications, whether by clicking a link and/or contacting an email address.
If you are a member of one of the following groups, please check the drop-down information:
+ WEBSITE OR EMAIL ADDRESS CONTACTS
Why do we process your personal data?
- To answer your queries, applications or requests.
- To manage the requested service, answer your request or process your request.
- To contact you about your request using electronic means.
- To inform you of business or events news using electronic means, provided that you have given us express consent to do so.
What is the legal basis for processing your data?
Acceptance and consent from the interested party: In the event that it is necessary to complete a form and click on a ‘send’ button in order to perform a request, doing so will imply that the interested party has been informed of and expressly agreed to the contents of the clause attached to said form or accepted the privacy policy.
All of our forms have a tick box which follows the following formula, which enables the information to be sent: ‘□ I have read and I accept the Privacy Policy.’
Why do we process your personal data?
- To draw up a quote and follow up on such quote by means of communication between both parties.
- To contact you about your request using electronic means.
- To inform you of business or events news using electronic means, provided that you have given us express consent to do so.
- To manage the administrative, communicative and logistics services performed by the data controller.
- To perform the corresponding tasks.
- To invoice and declare the relevant taxes.
- Debt monitoring and recovery management.
What is the legal basis for processing your data?
The legal basis is your consent and the enforcement of an agreement.
Why do we process your personal data?
- To contact you about your request using electronic means.
- To inform you of business or events news using electronic means, provided that you have given us express consent to do so.
- To manage the administrative, communicative and logistics services performed by the data controller.
- For invoicing purposes.
- To perform the corresponding tasks.
- To invoice and declare the relevant taxes.
- Debt monitoring and recovery management.
What is the legal basis for processing your data?
The legal basis is the acceptance of a contractual relationship, or failing that your agreement to contact us and offer us your products through any means.
Why do we process your personal data?
- To answer your queries, applications or requests.
- To manage the requested service, answer your request or process your request.
- To connect with you and create a community of followers.
What is the legal basis for processing your data?
Acceptance of a contractual relationship within the corresponding social media setting, and in accordance with the relevant Privacy Policy:
- Facebook http://www.facebook.com/policy.php?ref=pf
- Instagram https://help.instagram.com/155833707900388
- Twitter http://twitter.com/privacy
- Linkedin http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
- Pinterest https://about.pinterest.com/es/privacy-policy
- Google* http://www.google.com/intl/es/policies/privacy/
- YouTube http://www.youtube.com/yt/policyandsafety/es/policy.html
- *(Google+ y Youtube)
How long will we keep your personal data for?
We can only consult or deregister your data in a limited manner as per a specific profile. We will process your data for as long as you continue to follow us, stay friends with us or click ‘like’ or ‘follow’ or similar buttons.
Any amendments to your data or restrictions of information or publications must be made by configuring your profile or user page on the social media site.
Why do we process your personal data?
- CCTV in our facilities.
- To monitor our employees.
- On occasion, data may be sent to courts or tribunals for legal purposes.
What is the legal basis for processing your data?
The interested party’s unequivocal consent, provided when entering our facilities after reading the informative notice pertaining to the CCTV area.
Why do we process your personal data?
- To organise employee selection processes.
- To organise job interviews with you and evaluate your application.
- If you have given us your consent, we may be able to transfer the consent to collaborating or related entities for the sole purpose of helping you find work.
What is the legal basis for processing your data?
The legal basis is your unequivocal consent, provided when sending us your CV and receiving and signing on information relating to the processes that we will undertake.
How long will we keep your personal data for?
Your CV will be stored for a period of one year, after which, if we have not been in contact with you, it will be deleted.
Why do we process your personal data?
- To manage working relationships and the employee’s documentation.
- To perform all those administrative, fiscal and accountancy processes necessary in order to comply with our contractual commitments and obligations pertaining to employment law, Social Security, workplace risk prevention, taxes and accountancy.
- To manage salary payments through the bank.
- To monitor timetables through the access monitoring system using a fingerprint or card (if applicable).
- To manage collective insurance or the entity’s pension plan.
- To hold sessions for training programmes with or without grants.
What is the legal basis for processing your data?
The legal basis for processing these personal data is the enforcement of an employment agreement, compliance with the relevant legal obligations and consent from the interested party.
Do we include personal data from third parties?
No, as a general rule we only process data that the data owners provide us with. If you provide us with third party data, you must inform these persons of this and request their prior consent. Failing that, we are exempt from any liability incurred due to non-compliance with this requisite.
What about the data of underage persons?
We do not process the data of those under 14 years of age. Therefore, please do not send us your data if you are younger than 14.
Will we send communications via electronic means?
- We will only do so in order to manage your request, if it is one of the contact methods that you have informed us of.
- If we send any business communications, we will only do so with your prior and express authorisation.
What safety measures do we apply?
Please don’t worry: We have adopted an optimal level of protection for the personal data that we manage, and we have put in place all of the technical means and measures available to us, as current technology allows, to avoid personal data from being lost, maliciously used, altered, accessed without authorisation or stolen.
In what way will the decision-making process be automated?
ILUSION HOTELS & RESORTS does not use solely automated decision-making processes to initiate, develop or end a contractual relationship with the user. In the event that we use these processes in a particular case, we will keep you informed of such and will inform you of your rights in this respect as prescribed by law.
Creating a profile
In order to offer you products and/or services in accordance with your interests and to improve your user experience, we may create a ‘business profile’ based on the information provided. Nevertheless, no automated decisions will be made based on this profile.
Who will receive your data?
The Companies that comprise the ILUSION HOTELS & RESORTS group.
Your data will not be transferred to third parties unless there is a legal obligation to do so. In particular, the data will be communicated to the State Tax Administration Agency and to banks and financial entities for the payment of the service rendered or product acquired, in addition to the data processors necessary for the agreement to be enforced.
In the event of a purchase or payment, or if you select any app, website, platform, bank card or any other online service, your data will be sent to that platform or processed in such setting, always as securely as possible.
In the event that you have given us your consent to process your name and images and other information related to the business activity of ILUSION HOTELS & RESORTS, these data will be disclosed across the various social media sites and the website of ILUSION HOTELS & RESORTS.
International transfers
In the event that it is necessary for ILUSION HOTELS & RESORTS to make international data transfers, they will only do so to entities within the US-EU Privacy Shield agreement (more information: https://www.privacyshield.gov/welcome), to entities who have demonstrated that they can match the level of protection and guarantees that meet the criteria and requisites provided for in the data protection regulations, such as the European Regulation, or where there is legal authorisation to perform an international transfer.
Your rights
- To know whether or not we are processing your data.
- To access your personal data.
- To request that your data be amended if they are incorrect.
- To request that your data be deleted if they are not necessary for the purposes for which they were collected or if you withdraw the consent you granted us.
- To request that the processing of your data be restricted, in some cases, and if so we will only keep the data in accordance with the regulations in force.
- To the portability of your data, which will be provided to you in a structured, readily usable or machine-readable format. If you prefer, we can send these data to the new data controller if you inform us of such. This is only valid in certain cases.
- To file a complaint with the Spanish Data Protection Agency if you believe that we have not dealt with your request(s) correctly.
- To withdraw your consent to any processing action that you have consented to, at any time.
- If any of your data changes, we would be grateful if you could let us know so that we can keep your data up to date.
Do I need to complete a form in order to exercise my Rights?
- We have forms for you to use in order to exercise your rights. Please ask us for them via email or if you prefer, you can use the forms created by the Spanish Data Protection Agency or third parties.
- These forms must be signed electronically and accompanied by a photocopy of your ID.
- If you are representing someone, you must attach a copy of their ID, or have them sign the form electronically.
- Forms can be submitted in person, sent by post or sent by email to the Data Controller’s address described at the top of this document.
You have the right to file a complaint with the Spanish Data Protection Agency in the event that you believe that your request to exercise your rights has not been sufficiently dealt with.
ILUSION HOTELS & RESORTS has a maximum of one month from receiving your request to resolve the matter.
You have the right to withdraw your consent for any of the processing actions that you had consented to at any time.
Do you process cookies?
If we use a type of cookie that is not necessary, you can consult the cookies policy found at the corresponding link at the top of our website.
How long will you keep my personal data for?
- Personal data will be kept while you still have a connection with us.
- Once you have stopped connecting with us, the personal data processed for each purpose will be kept for the legally stipulated periods, including the period in which a judge or court may require the data in accordance with the time limit for legal processes.
- The processed data will be kept as long as the aforementioned legal time frames have not expired, if there was any legal obligation to keep such, or if there is no legal time frame, until the interested party requests that the data be deleted or withdraws their consent.
- We will keep all of the information and communications relating to your purchase or our services rendered for the duration of the guarantee periods for such products or services, in order to deal with any potential complaints.