1.USER INFORMATION
Who is responsible for processing your personal data?
TERRA CASA AW, S.L. is responsible for the processing of the user’s personal data and informs you that this data will be
processed in accordance with the provisions of Regulation (EU) 2016/679, of 27 April (GDPR) and Organic Law 3/2018, of 5 December (LOPDGDD).
What kind of data do we collect and process?
Depending on the form or method of obtaining your data, we will always request the minimum necessary to fulfil the purposes indicated in each case.
What do we process your personal data for and why?
Depending on the form in which we have collected your personal data, we will treat it confidentially in order to achieve the purposes:
In the contact form
To respond to queries or any type of request made by the user through any of the contact forms available on the Data Controller’s website.
(for the legitimate interest of the data controller, art. 6.1.f GDPR)
Sending commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that allow commercial communications. These communications will be carried out by the responsible party and will relate to its products and services or those of its collaborators or suppliers with whom it has an advertising agreement. In this case, third parties will never have access to personal data.
(with the consent of the data subject, 6.1.a GDPR)
To carry out statistical analysis and market research (for the legitimate interest of the data controller, art. 6.1.f GDPR).
In the newsletter form
To send newsletters, news, offers and promotions online (with the consent of the data subject, 6.1.a GDPR).
In the Online Forum form
To participate in online forums offered by the data controller (with the data subject’s consent, 6.1.a GDPR).
On the Curriculum form
To involve the data subject in recruitment processes and to analyse the applicant’s profile in order to select a candidate for the data controller’s vacant position (with the data subject’s consent, 6.1.a GDPR).
In the form of testimonials
To moderate and publish on the website the user’s experiences, opinions and suggestions about a product or service (with the data subject’s consent, 6.1.a GDPR).
In the Ethical or whistleblowing channel form
Proper management of the ethical channel, processing the corresponding irregularities reported through it and deciding on the appropriateness of opening an investigation in order to detect possible violations and prevent the imposition of any type of liability, as well as avoiding any type of conduct contrary to the internal or external regulations of the entity (for compliance with a legal obligation, 6.1.c GDPR).
In the user registration form
To manage the user’s account in order to provide the user with personalised access to the website and the interactive services it offers.
(with the data subject’s consent, 6.1.a GDPR)
On the reservation form
To make reservations at the premises of the data controller (for the execution of a contract or pre-contract, 6.1.b GDPR).
To send commercial advertising messages to customers by e-mail, fax, SMS, MMS, social networks or any other current or future electronic or physical means that allow commercial communications to be made about products or services similar to those originally contracted with the customer (art. 21.2 LSSI). (for the legitimate interest of the data controller, art. 6.1.f GDPR).
In the Appointments form
To schedule appointments and meetings with the data controller (for the legitimate interest of the data controller, art. 6.1.f GDPR).
Social Media
Contact through social networks in order to maintain a relationship between the user and the data controller, which may include the following operations – Processing your requests and queries. -Informing you about activities and events. -Informing you about products and/or services. -Interacting through official profiles. The user has a profile on the same social network and has decided to join the social network of the data controller, thus showing interest in the information published therein, and therefore, at the time of requesting to follow our official page, gives us his or her consent to the processing of his or her data. The user may at any time consult the privacy policy of the social network itself and configure their profile in order to guarantee their privacy. Once the User is a follower or has joined the social network of the Responsible Party, he/she may publish comments, links, images, photographs or any other type of content supported by the same. In all cases, the user must be the owner of the published content, own the copyright and intellectual property rights or have the consent of the third parties concerned. – Sending commercial communications relating to the activities of the companies of the Group, as well as external companies with which commercial agreements of collaboration or mediation have been established (with the consent of the interested party, 6.1.a GDPR).
Instant messaging
To arrange appointments and meetings with the data controller (based on the data controller’s legitimate interest, Art. 6.1.f GDPR).
Sending commercial advertising communications to customers by email, fax, SMS, MMS, social networks or any other current or future electronic or physical means that allow commercial communications to be made about products or services similar to those originally contracted with the customer (art. 21.2 LSSI). (for the legitimate interest of the data controller, art. 6.1.f GDPR).
To manage, maintain, improve or develop the services provided (for the performance of a contract or pre-contract, art. 6.1.b GDPR).
Manage your online purchase or order, process the payment and proceed with the shipment or activation of the same on the basis of the general terms and conditions (for the performance of a contract or pre-contract, 6.1.b GDPR).
Send commercial offers of products and services (for the performance of a contract or pre-contract, 6.1.b GDPR).
Send commercial advertising messages by e-mail, fax, SMS, MMS, social networks or any other current or future electronic or physical means that allow commercial communications. These communications will be carried out by the responsible party and will relate to its products and services or those of its collaborators or suppliers with whom it has an advertising agreement. In this case, third parties will never have access to the personal data (with the consent of the data subject, 6.1.a GDPR).
To respond to queries or any type of request made by the user through one of the contact forms available on the controller’s website (for legitimate interest of the controller, art. 6.1.f GDPR).
Video surveillance
Purpose Security and access control, control of work and internal activities Legitimation Public interest in security and access control and legitimate interest of the controller based on art. 20.3 of the Workers’ Statute Retention Maximum 30 days (with the consent of the data subject, 6.1.a GDPR)
Images and recordings
File containing static and/or dynamic images. Including publication in the media of the controller or third parties (with the consent of the data subject, 6.1.a GDPR).
Customers and suppliers
Commercial management with customers and suppliers (for legitimate interest of the controller, Art. 6.1.f GDPR)
Advertising opt-out
Data management to prevent the sending of commercial communications to those who have expressed their refusal or objection to receiving them (to comply with a legal obligation, 6.1.c GDPR).
Commercial advertising
Advertising management and commercial prospecting. Includes data from publicly accessible lawful sources (for the controller’s legitimate interest, Article 6.1.f GDPR).
Data subject rights
To comply with requests from citizens in the exercise of their rights under the GDPR (to comply with a legal obligation, 6.1.c GDPR).
Prevention of money laundering
Data management for the prevention of money laundering and terrorist financing (to comply with a legal obligation, 6.1.c GDPR)
Users of responsa’s web, app and other platforms
Identifying data of users accessing the company’s website (for the controller’s legitimate interest, Article 6.1.f GDPR).
Data of minors or vulnerable persons
The controller will not collect or process personal data of children under the age of fourteen, without fully complying with the requirements of the applicable data protection legislation regarding compliance with the duty to inform and obtaining the necessary consents. The data collected will be processed for the management of the purposes indicated. The controller has appropriate security measures for the security of this data (with the consent of the data subject, 6.1.a GDPR).
Legal representative and contact
If you are a legal representative or contact person of one of the entities or persons with whom the Foundation has a relationship, the controller will process your data in order to manage the development of the intended relationship (by consent of the data subject, 6.1.a GDPR).
Credit Information
Credit Information Policy *Before you contract our services, we will necessarily process the personal data you have provided to us, as well as the data we obtain from the Asnef file. During the customer registration process, we will process your personal data for the following purposes 1- To manage your request for registration as a customer and to apply the appropriate measures to manage the contracting of the service. 2- To assess your financial solvency and creditworthiness by consulting the Asnef, Cirbe and similar files, where we will assess your ability to meet the economic obligations envisaged. 3- To assist you in the process of contracting the services you wish to use. 4- To analyse your current income and your current financial situation, all your assets and liabilities, including the data you provide us on your family unit or any other data you provide us with, as well as the data we may request, such as pay slips, tax returns, etc. In addition, we will analyse your current assets and liabilities. In addition, we will also analyse the information you provide to us as a guarantor or surety during the mortgage process (with the data subject’s consent, 6.1.a GDPR).
How long do we keep your personal information?
It will be kept for no longer than is necessary for the purpose of the processing or where there is a legal requirement for it to be kept and when it is no longer necessary for that purpose, it will be deleted with appropriate safeguards to ensure anonymisation of the data or complete destruction of the data.
With whom do we share your personal data?
No communication of personal data to third parties is foreseen, except when necessary for the development and execution of the purposes of the processing, to our service providers related to communication, with whom the Controller has signed the confidentiality and data processing contracts required by the privacy regulations in force.
Do we make international transfers?
In accordance with the provisions of Article 44 of the GDPR, authorisation for the international transfer of data to a country that has not been designated as providing an adequate level of protection may only be granted if sufficient guarantees are obtained. Thus, it may be granted if the data controller provides a written contract between the data exporter and the data importer, which contains the necessary guarantees to respect the protection of data subjects and ensure the exercise of their rights.
It is possible that the data controller may use the services of suppliers who have servers or offices in other locations and therefore these transfers may take place. An updated list of such suppliers may be obtained from the Data Controller or via info@terracasa.es.
What are your rights?
The rights of the user are
The right to withdraw consent at any time.
The right of access, rectification, portability and deletion of your data, as well as the right to restrict or oppose its processing.
The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with current legislation.
Contact details for exercising your rights:
TERRA CASA AW, S.L. C/ Calma 6B – 07160 Peguera (Illes Balears).
E-mail: info@terracasa.es
2. COMPULSORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
By ticking the appropriate boxes and entering the data in the fields marked with an asterisk (*) in the contact form or in the download forms, the user expressly, freely and unequivocally accepts that his or her data is necessary for the provider to deal with his or her request, the provision of data in the remaining fields being optional. The user guarantees that the personal data provided to the data controller is true and is responsible for communicating any changes to it.
The Data Manager informs that all the data requested through the website are obligatory, as they are necessary to provide an optimal service to the user. If all the data is not provided, there is no guarantee that the information and services provided will be fully adapted to your needs.
If, by any means, you provide us with personal data relating to other persons, the Data Controller points out that you must do so with their consent and that you have previously informed us of the points contained in this Privacy Policy. Likewise, the Data Controller undertakes to provide the relevant information to any third party whose data you provide us with, in accordance with the provisions of article 14 of the General Regulations.
3. SECURITY MEASURES
In accordance with the provisions of the applicable regulations on the protection of personal data, the data controller guarantees that, for the processing of personal data under its responsibility, it complies with all the provisions of the GDPR and the LOPDGDD, as well as with the principles described in Article 5 of the GDPR, namely that the data is processed lawfully, fairly and transparently in relation to the data subject, and that it is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.
The controller guarantees that it has implemented appropriate technical and organisational measures to apply the security measures established by the GDPR and the LOPDGDD to protect the rights and freedoms of users, and has provided them with the appropriate information to exercise them.
For more information about the guarantees of privacy, you can contact the responsible party through TERRA CASA AW, S.L. C/ Calma 6B – 07160 Peguera (Illes Balears).
E-mail: info@terracasa.es
4. VALIDITY
This privacy policy is valid from 23/06/2023.
The responsible party reserves the right to modify this policy in order to adapt it to future legislative or jurisprudential updates that may be applicable, or for other technical, operational, commercial, corporate, etc. reasons. If, as a result of these changes, the rights of the users are affected, the Data Controller undertakes to inform them of the reasons.