Privacy Policy
This Privacy Policy forms part of the General Conditions governing this Website.
Who is the controller responsible for the processing of your data?
FUERTEVENTURA CATAMARAN EXCURSION, S.L.
CIF.: B76175793
C/ Juanita Morales Nº 23 – Puerto del Rosario – Fuerteventura
Mail: administracion@obycatamaran.com
You may contact us by any means whatsoever to communicate with us.
We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of any modifications.
What data do we collect through the Website?
We may process your IP address, which operating system or browser you use, and even the duration of your visit, in an anonymous manner.
If you provide us with data in the contact form, you will identify yourself so that we may contact you, should it be necessary.
For what purposes are we going to process your personal data?
- To respond to your queries, requests or petitions.
- To manage the requested service, respond to your request, or process your petition.
- Information by electronic means relating to your request.
- Commercial information or information about events by electronic means, provided that there is express authorisation.
- To carry out analyses and improvements to the Website, regarding our products and services. To improve our commercial strategy.
What is the legitimate basis for the processing of your data?
The acceptance and consent of the data subject: In those cases where, in order to make a request, it is necessary to complete a form and click on the send button, the completion thereof shall necessarily imply that you have been informed and have expressly granted your consent to the content of the clause annexed to said form or acceptance of the privacy policy.
All of our forms feature the symbol * on the mandatory data. If you do not provide those fields, or do not check the privacy policy acceptance checkbox, the submission of the information will not be permitted. It normally takes the following form: “□ I am over 14 years of age and have read and accept the Privacy Policy.”
For what purposes are we going to process your personal data?
- Preparation of the quotation and follow-up thereof by means of communications between both parties.
- Information by electronic means relating to your request.
- Commercial information or information about events by electronic means, provided that there is express authorisation.
- To manage the administrative, communications and logistics services carried out by the Controller.
- Invoicing and declaration of the relevant taxes.
- To carry out the corresponding transactions.
- Control and debt-recovery management.
For what purposes are we going to process your personal data?
- Information by electronic means relating to your request.
- Commercial information or information about events by electronic means, provided that there is express authorisation.
- To manage the administrative, communications and logistics services carried out by the Controller.
- Invoicing.
- To carry out the corresponding transactions.
- Invoicing and declaration of the relevant taxes.
- Control and debt-recovery management.
What is the legitimate basis for the processing of your data?
The legal basis is the acceptance of a contractual relationship, or failing that, your consent upon contacting us or offering us your products by any means.
For what purposes are we going to process your personal data?
- To respond to your queries, requests or petitions.
- To manage the requested service, respond to your request, or process your petition.
- To engage with you and create a community of followers.
What is the legitimate basis for the processing of your data?
The acceptance of a contractual relationship within the environment of the relevant social network, and in accordance with its Privacy policies:
Facebook http://www.facebook.com/policy.php?ref=pf
Instagram https://help.instagram.com/155833707900388
Twitter http://twitter.com/privacy
Tripadvisor https://tripadvisor.mediaroom.com/ES-privacy-policy
For how long are we going to retain the personal data?
We can only consult or unsubscribe your data in a restricted manner by virtue of having a specific profile. We will process them for as long as you allow us by continuing to follow us, being friends or clicking “like”, “follow” or similar buttons.
Any rectification of your data or restriction of information or of publications must be carried out by you through the settings of your profile or user account on the social network itself.
For what purposes are we going to process your personal data?
- Organisation of selection processes for the recruitment of employees.
- To summon you for job interviews and evaluate your candidacy.
- If you have given us your consent, we may transfer it to collaborating or affiliated companies, with the sole purpose of helping you find employment.
- If you check the privacy policy acceptance checkbox, you give us your consent to transfer your job application to the entities that make up the group of companies for the purpose of including you in their personnel selection processes
Likewise, we hereby inform you that, once one year has elapsed from the receipt of your curriculum vitae, we will proceed to its secure destruction.
What is the legitimate basis for the processing of your data?
The legal basis is your unequivocal consent, given by sending us your CV.
Do we include personal data of third parties?
No; as a general rule we only process the data provided to us by the data subjects themselves. If you provide us with data of third parties, you must, beforehand, inform and request the consent of such persons, failing which you exempt us from any liability for the breach of this requirement.
And data of minors?
We do not process data of minors under 14 years of age. Therefore, please refrain from providing such data if you are not of that age or, where applicable, from providing data of third parties who are not of the aforementioned age. FUERTEVENTURA CATAMARAN EXCURSIÓN S.L. disclaims any liability for the breach of this provision.
Will we carry out communications by electronic means?
- They will only be carried out in order to manage your request, if it is one of the means of contact that you have provided to us.
- If we carry out commercial communications, they will have been previously and expressly authorised by you.
What security measures do we apply?
You may rest assured: We have adopted an optimal level of protection for the Personal Data that we handle, and we have installed all the means and technical measures at our disposal according to the state of the art in order to prevent the loss, misuse, alteration, unauthorised access and theft of the Personal Data.
To which recipients will your data be disclosed?
Your data will not be transferred to third parties, save by legal obligation. Specifically, they will be disclosed to the State Tax Administration Agency and to banks and financial institutions for the collection of payment for the service rendered or product acquired, as well as to the data processors necessary for the execution of the agreement.
In the event of a purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed within its environment, always with the utmost security.
When we so instruct, the web development and maintenance company, or the hosting company, will have access to our website. They will have signed a service provision contract obliging them to maintain the same level of privacy as ourselves.
Any international transfer of data when using American applications shall be adhered to the Privacy Shield agreement, which guarantees that American software companies comply with the European data protection policies on privacy matters.
What means of payment may I use
When using the Virtual POS to make payment by card, you are redirected to a page controlled by the Banking Institution in order to make the payment through its payment gateway.
We hereby inform you that the Banking Institution's Virtual POS integrates the Secure Electronic Commerce (CES) functionality during the buyer's process as the legitimate cardholder, with the purpose of providing the purchase process with a high level of security and protection of payments. During the electronic payment operation, the Banking Institution will collect information relating to the connection and IP address, device information, email address, mobile telephone, browsing data and transaction data, as well as other accessible data of the online connection and of the channel required by the VISA Secure / Mastercard Identity Check Security protocols, with the purpose of detecting and preventing unauthorised or fraudulent payment operations.
Recipients of the information/With whom we share your data
During the payment process by card, the following personal data will be collected by the Banking Institution that owns the Virtual POS: connection type, date and time, IP address, device information, email address, mobile telephone, browsing data, transaction data and data required by the 3D Secure security protocols, for the sole purposes of detecting and preventing unauthorised payment operations. You have further information available at {include link to the specific banking institution's virtual POS/link to its data processing policy if this service collects it}.
What Rights do you have?
- To know whether or not we are processing your data.
- To access your personal data.
- To request the rectification of your data if it is inaccurate.
- To request the erasure of your data if it is no longer necessary for the purposes for which it was collected or if you withdraw the consent granted to us.
- To request the restriction of the processing of your data, in certain cases, in which event we will only retain it in accordance with the regulations in force.
- To port your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send it to the new controller that you designate to us. This is only valid in certain cases.
- To lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority, if you believe that we have not attended to you correctly.
- To revoke the consent for any processing to which you have consented, at any time.
If you modify any data, we would be grateful if you would notify us thereof in order to keep it up to date.
Would you like a form for the exercise of Rights?
- We have forms for the exercise of your rights; request them from us by email or, if you prefer, you may use those drawn up by the Spanish Data Protection Agency or by third parties.
- These forms must be signed electronically or be accompanied by a photocopy of the DNI (National Identity Document).
- If you are represented by someone, you must attach to us a copy of their DNI, or have them sign it with their electronic signature.
- The forms may be submitted in person, sent by letter or by email to the address of the Controller set out at the beginning of this text.
How long do we take to respond to your Exercise of Rights?
It depends on the right, but at most within one month from your request, and two months if the matter is very complex and we notify you that we need more time.
Do we process cookies?
If we use any other type of cookies which are not strictly necessary, you may consult the cookies policy in the corresponding link from the home page of our website.
For how long are we going to retain your personal data?
- The personal data will be retained for as long as you remain linked to us.
- Once you cease to be linked, the personal data processed for each purpose will be retained for the legally established periods, including the period during which a judge or court may require them, having regard to the limitation period for legal actions.
- The processed data will be retained for as long as the aforementioned legal periods have not expired, if there is a legal obligation of retention, or, in the absence of such legal period, until the data subject requests its erasure or revokes the consent granted.
- We will retain all information and communications relating to your purchase or to the provision of our service for as long as the warranties of the products or services last, in order to address possible claims.