Privacy Policy
This privacy policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data (GDPR); Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD); and, to the extent not contrary to the above regulations, Organic Law 15/1999 on the Protection of Personal Data (LOPD) and its implementing regulations, and/or any regulations that may replace or update them in the future.
Our organization is committed to the privacy of your personal data. The personal data provided are necessary to provide our services and are processed lawfully, fairly, and transparently, ensuring appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by applying appropriate technical and organizational measures.
With this document, we aim to provide you with clear and fair information regarding how your personal data are processed by this organization.
I. DATA CONTROLLER
ENTITY: ZENSA ROOFTOP BEACHCLUB SL.
TAX ID (C.I.F./N.I.F.): B16407447
ADDRESS: Puerto Deportivo Marina de Denia. Calle Darsena de Babor, s/n, 03700 Dénia, Alicante.
PHONE: 966427747
EMAIL: info@zensa.es
II. RECIPIENTS OF PERSONAL DATA
The personal data provided will not be shared, except where specified in particular data processing activities.
Optionally, to contract cloud computing and/or communication and IT services (such as email delivery), personal data may be:
– Shared with IT service companies located within the European Economic Area (EEA), or
– Transferred to IT service companies located outside the EEA that are covered by the Privacy Shield framework, ensuring adequate safeguards for personal data protection. More info at: https://www.privacyshield.gov/welcomeOptionally, data may be provided to public administrations and other authorities when required to comply with legal obligations.
III. LEGAL BASIS FOR PROCESSING PERSONAL DATA
For each specific data processing activity, we will inform you of the corresponding legal basis.
IV. RIGHTS
RIGHT OF ACCESS
The right to obtain confirmation from the data controller on whether your personal data are being processed and, if so, access to the data and the following information: the purposes of processing, categories of personal data, recipients or categories of recipients, data retention period or criteria used to determine it, the existence of rights to request rectification or erasure, to restrict or object to processing, the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the existence of automated decision-making including profiling, and if data are transferred to third countries, information on the safeguards applied.
RIGHT TO RECTIFICATION
The right to request correction of inaccurate personal data and to complete incomplete data. You guarantee that any personal data provided to us are accurate and agree to inform us of any changes. Any damage resulting from inaccurate or incomplete information on website forms will be your sole responsibility.
RIGHT TO ERASURE
The right to request the deletion of your personal data when they are no longer necessary for the purposes for which they were collected, if they are processed unlawfully, or if you withdraw consent. Deletion will not proceed when processing is necessary to comply with legal obligations or to establish, exercise, or defend legal claims.
RIGHT TO RESTRICTION OF PROCESSING
The right to request the temporary suspension or extended retention of your personal data in specific cases, for example, while contesting the accuracy of your data.
RIGHT TO WITHDRAW CONSENT
You may withdraw the consent you previously provided by checking “I have read and accept the privacy policy” at any time as described in the “Exercise of rights” section or relevant communication/newsletter processing. Withdrawal of consent will not affect the lawfulness of processing based on prior consent. Withdrawal does not apply where processing is required to comply with legal obligations, fulfill or maintain a contractual relationship, or establish, exercise, or defend legal claims.
RIGHT TO DATA PORTABILITY
The right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller, provided the processing is based on your consent and carried out by automated means.
RIGHT TO OBJECT
The right to object to processing based on our legitimate interest. We will stop processing your personal data unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe we are improperly processing your data, you may contact us or file a complaint with the Spanish Data Protection Agency (AEPD):
https://www.agpd.es/portalwebAGPD/index-ides-idphp.php
EXERCISING YOUR RIGHTS
You may exercise your rights by sending a letter to the postal address indicated above or via email to info@aliceblue-toad-765734.hostingersite.com, in both cases attaching a copy of your ID/Passport or equivalent document.
V. PERSONAL DATA PROCESSING – GENERAL PROVISIONS
The personal data requested in each specific processing activity are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed, in compliance with the data minimization principle.
Refusal to provide the requested personal data may make it impossible to provide the requested service.
The disclosure of personal data described in each specific processing activity may be necessary to execute and maintain a contract or to comply with legal obligations applicable to the data controller.
DIGITAL ASSISTANT – “CHATBOT” OR “ONLINE CHAT”
If this website uses chatbot software to offer a self-service solution for quick responses to common queries and improve customer service, the following data may be processed during the chatbot conversation: IP address and other personal data entered into the chatbot conversation function.
The data collected will not be used to personally identify website visitors or merged with any other personal data unless voluntarily provided during the chat. The legal basis for this processing is Article 6(1)(f) of the GDPR.
CONTACT FORM
Personal data will be processed to handle user or customer requests for information, suggestions, and complaints.
Legal basis: Express consent given by checking “I have read and accept the privacy policy.”
Data will be retained for two years from the time processing ends, without prejudice to your rights as a data subject.
E-COMMERCE FORM
Personal data will be processed to manage your online purchases by processing orders and returns, sending delivery status notifications or issue alerts, handling payments, managing complaints or warranty issues, verifying legal age to contract, and potentially for the establishment, exercise, or defense of claims.
Legal basis: Express consent by checking “I have read and accept the privacy policy.”
Data will be shared with the delivery company to send your order and with payment service providers.
Data will be retained until consent is withdrawn, unless necessary to maintain the contractual relationship or comply with legal obligations.
COMMERCIAL COMMUNICATIONS OR NEWSLETTER FORM
Personal data will be processed to manage newsletter subscriptions and send personalized or general information about our products or services through different means: phone, email, SMS, mobile apps, or similar methods. This may include user profiling to better tailor content to your interests.
You can unsubscribe using:
– Email: Via the link included in each email communication.
– WhatsApp/Other Apps: By requesting unsubscription.
– SMS: By requesting unsubscription.
Legal basis: Express consent provided by checking “I have read and accept the privacy policy” on the website, via a physical document, or by email, depending on the case.
Note: If WhatsApp is used, personal data will be shared with WhatsApp Ireland Limited, located within the EEA.
Data will be retained until consent is withdrawn, as described above.