Privacy policy

1. USER INFORMATION

Who is responsible for the processing of your personal data?

VINCI ACTIVE SPORT, S.L is responsible for the processing of the user's personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).

 What type of data do we request and process?

Depending on the form or mode of obtaining your data, we always ask for the minimum necessary to fulfill the purposes detailed in each case.

What do we process your personal data for and why do we do it?

Depending on the form where we have obtained your personal data, we will treat them confidentially to achieve the purposes:

In the Contact form

  • To answer queries or any type of request made by the user through any of the contact forms made available on the website of the controller (for the legitimate interest of the controller, art. 6.1.f GDPR).
  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enable commercial communications. These communications will be made by the responsible party and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data (by consent of the data subject, 6.1.a GDPR).
  • Conduct statistical analysis and market research (for the legitimate interest of the data controller, art. 6.1.f GDPR) In the Newsletter form Send newsletters, news, offers and online promotions (for the consent of the data subject, 6.1.a GDPR).

In the Newsletter form

  • To send newsletters, news, offers and online promotions (by consent of the data subject, 6.1.a GDPR).

In the Request a quotation form

  • Send commercial quotations on products and services (for the execution of a contract or pre-contract, 6.1.b GDPR).
  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enable commercial communications. These communications will be made by the responsible party and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data (by consent of the data subject, 6.1.a GDPR).

In the Online Forum form

  • Participate in online forums proposed by the data controller (by consent of the data subject, 6.1.a GDPR).

In the Resume form

  • To involve the data subject in personnel selection processes and to analyze the applicant's profile with the aim of selecting a candidate for the vacant position of the person responsible (by consent of the data subject, 6.1.a GDPR).

In the Testimonial form

  • Moderate and publish on the website the user's experiences, opinions and suggestions about a product or service (by consent of the data subject, 6.1.a GDPR).

In the Comments form

  • Moderate and publish on the website opinions on a publication (by consent of the data subject, 6.1.a GDPR).

In the Ethical or Whistleblower Channel form

  • Properly manage the ethics channel, processing the corresponding irregularities reported through it, and deciding whether to initiate an investigation, in order to detect possible offenses and prevent the imposition of any type of liability, as well as to avoid any type of conduct contrary to the internal or external regulations of the entity (for compliance with a legal obligation, 6.1.c GDPR).

In the User Registration form

  • Manage the user's account to provide personalized access to the website and the interactive services it offers (by consent of the data subject, 6.1.a GDPR).

In the E-commerce form

  • Manage your purchase or online order, process the payment and proceed with the shipment or activation of the same, on the basis of the general terms and conditions (for the execution of a contract or pre-contract, 6.1.b GDPR).
  • To manage, maintain, improve or develop the services provided (for the performance of a contract or pre-contract, 6.1.b GDPR).
  • Conduct satisfaction and quality surveys (for the legitimate interest of the responsible party, art. 6.1.f GDPR).

In the Loyalty Card form

  • Manage the loyalty card if requested (by consent of the data subject, 6.1.a GDPR).
  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enable commercial communications. These communications will be made by the responsible party and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data (by consent of the data subject, 6.1.a GDPR).
  • Conduct statistical analysis and market research (for the legitimate interest of the data controller, art. 6.1.f GDPR).

In the Sweepstakes and Promotions form

  • Participate in sweepstakes, contests, promotions or other services offered by the controller (by consent of the data subject, 6.1.a GDPR).
  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enable commercial communications. These communications will be made by the responsible and will be related to their products and services, or its partners or suppliers, with which it has reached an agreement to promote. In this case, third parties will never have access to personal data (by consent of the data subject, 6.1.a GDPR).

In the Contest Entry Form

  • To process and manage participation in competitions organized by the controller (by consent of the data subject, 6.1.a GDPR).

In the Volunteer Registration form

  • Manage enrollment in volunteering through the different programs carried out by the organization (by consent of the data subject, 6.1.a GDPR).

In the Membership Registration form

  • Manage and process any type of request for information, including those aimed at becoming a member. Keeping partners informed of the actions we take. Disclosure of activities (for the execution of a contract or pre-contract, 6.1.b GDPR).
  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enable commercial communications. These communications will be made by the responsible party and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data (by consent of the data subject, 6.1.a GDPR).
  • Conduct statistical analysis and market research (for the legitimate interest of the data controller, art. 6.1.f GDPR).

In the Reservations form

  • Formalize reservations at the establishment of the responsible party (for the execution of a contract or pre-contract, 6.1.b GDPR).
  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, to customers, which enable commercial communications concerning products or services that are similar to those that were initially contracted with the customer (art. 21.2 LSSI). (for the legitimate interest of the data controller, art. 6.1.f GDPR).

In the Appointments form

  • Schedule appointments and meetings with the data controller (for the legitimate interest of the data controller, art. 6.1.f GDPR).

In the Donations form

  • To manage and fulfill legal obligations arising from the donation you make (for the fulfillment of a legal obligation, 6.1.c GDPR)

In the Social Networks form

  • Contact through Social Networks in order to maintain a relationship between the User and the Responsible that may include the following operations: - To process your requests and queries. - Inform about activities and events. - Inform about products and/or services. - Interact through official profiles. The user has a profile on the same social network and has decided to join the social network of the Responsible, thus showing their interest in the information published therein, therefore at the time of requesting to follow our official page, you provide your consent to the processing of your data. The User can access at any time to the privacy policies of the social network itself, as well as configure your profile to ensure your privacy. The User once is a follower or has joined the social network of the Responsible, may publish in the same comments, links, images, photographs or any other content supported by the same. The User, in all cases, must be the owner of the content published, enjoy the copyright and intellectual property rights or have the consent of the third parties concerned. - Sending commercial communications relating to the activities of Group companies, as well as external companies with which commercial agreements of collaboration or intermediation have been established (with the consent of the interested party, 6.1.a GDPR).

In the Instant Messaging form

  • Schedule appointments and meetings with the data controller (for the legitimate interest of the data controller, art. 6.1.f GDPR).
  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, to customers, which enable commercial communications concerning products or services that are similar to those that were initially contracted with the customer (art. 21.2 LSSI). (for the legitimate interest of the data controller, art. 6.1.f GDPR).
  • To manage, maintain, improve or develop the services provided (for the performance of a contract or pre-contract, 6.1.b GDPR).
  • Manage your purchase or online order, process the payment and proceed with the shipment or activation of the same, on the basis of the general terms and conditions (for the execution of a contract or pre-contract, 6.1.b GDPR).
  • Send commercial quotations on products and services (for the execution of a contract or pre-contract, 6.1.b GDPR).
  • Send commercial advertising communications by e-mail, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that enable commercial communications. These communications will be made by the responsible party and will be related to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data (by consent of the data subject, 6.1.a GDPR).
  • To answer queries or any type of request made by the user through any of the contact forms made available on the website of the controller (for the legitimate interest of the controller, art. 6.1.f GDPR).

In the Video Surveillance form

  • Purpose Security and access control, labor and internal activity control Legitimation Public interest for security and access control and Legitimate interest of the Controller based on Art. 20.3 of the Workers' Statute Conservation A maximum of 30 days (by consent of the data subject, 6.1.a GDPR)

In the form Images and recordings

  • File with static and/or dynamic images. Includes publication in the media of the data controller or third parties (by consent of the data subject, 6.1.a GDPR).

In the form Customers and suppliers

  • Commercial management with customers and suppliers (for the legitimate interest of the responsible party, art. 6.1.f GDPR).

In the Advertising Exclusion form

  • Data management to avoid sending commercial communications to those who have expressed their refusal or opposition to receiving them (to comply with a legal obligation, 6.1.c GDPR).

In the Commercial Advertising form

  • Advertising management and commercial prospecting. Includes data from legitimate publicly available sources (for the legitimate interest of the data controller, art. 6.1.f GDPR).

In the form Right of the interested parties

  • To comply with requests from citizens in the exercise of rights under the GDPR (for compliance with a legal obligation, 6.1.c GDPR).

In the form Web users, app and other platforms of the responsa

  • Identification data of users accessing the corporate website (for the legitimate interest of the data controller, art. 6.1.f GDPR).

In the form Training, courses, workshops, activities or similar, please fill in the following fields

  • Management of the conditions of access and use (for the legitimate interest of the responsible party, art. 6.1.f GDPR).

In the Wifi network connection form

  • To carry out statistical analysis and market research (for the legitimate interest of the responsible party, art. 6.1.f GDPR).
  • Conduct satisfaction and quality surveys ( for the legitimate interest of the data controller, art. 6.1.f GDPR ) (for the consent of the data subject, 6.1.a GDPR).

In the form Child or Vulnerable Data

  • The data controller will not collect or process personal data of minors under fourteen years of age, without giving full compliance with the requirements established in the applicable data protection regulations, in relation to compliance with the duty to inform and obtaining those consents that may be necessary. The data collected will be processed for the management of the purposes reported. The data controller has the appropriate security measures for the security of these data (by consent of the data subject, 6.1.a GDPR).

In the form Legal representatives and contact persons

  • In the event that you are a legal representative or contact person of one of the entities or persons with which the Foundation has a relationship, the data controller will process your data to monitor the development of the intended relationship (by consent of the data subject, 6.1.a GDPR).

They will be kept for no longer than necessary to maintain the purpose of the processing or there are legal prescriptions that dictate their custody and when it is no longer necessary for that purpose, they will be deleted with appropriate security measures to ensure the anonymization of the data or the total destruction of the data.

Who do we provide your personal data to?

No communication of personal data to third parties is foreseen, except, if necessary for the development and execution of the purposes of the processing, to our service providers related to communications, with whom the data controller has signed confidentiality and data processor contracts required by the privacy regulations in force.

Do we do international transfers?

In accordance with the provisions of article 44 of the GDPR, authorization for the international transfer of data to a country that has not been declared as a country with an adequate level of protection may only be granted if sufficient guarantees are obtained. Thus, it may be granted if the controller provides a written contract, concluded between the data exporter and the data importer, containing the necessary guarantees of respect for the protection of data subjects and ensuring the exercise of their rights. It is possible that the data controller may use the services of suppliers who have servers or headquarters in other locations and, therefore, these transfers are carried out. To consult the updated list of suppliers, please consult with the responsible party or through finance@jc-mc.com.

What are your rights?

The user's rights are as follows:

  • Right to withdraw consent at any time.
  • Right of access, rectification, portability, deletion of your data, limitation or opposition to its processing.
  • The right to lodge a complaint with the supervisory authority (www.aepd.es) if you consider that the processing does not comply with the regulations in force.

Contact information to exercise your rights:

VINCI ACTIVE SPORT, S.L.

C/ Ca´n Calafat, 33, 2º, Pta 33, - 07610 Palma (Illes Balears).

E-mail: finance@jc-mc.com

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by checking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to fulfill their request, by the provider, being voluntary the inclusion of data in the remaining fields. The user guarantees that the personal data provided to the responsible are truthful and is responsible for communicating any changes to them.

The responsible informs that all data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the user. If all the data is not provided, there is no guarantee that the information and services provided will be completely tailored to your needs. If by any means, you provide us with personal data of other people, the responsible warns that you must do so with their consent and have informed, in advance, of the points contained in this Privacy Policy. Likewise, the person responsible undertakes to provide any third party whose data you provide us with the relevant information, in accordance with the provisions of Article 14 of the General Regulation.

3. SECURITY MEASURES

That in accordance with the provisions of the regulations in force on personal data protection, the controller is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The responsible party guarantees that it has implemented appropriate technical and organizational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of users and has provided them with the appropriate information so that they can exercise them. For more information about privacy guarantees, you can contact the responsible through:

VINCI ACTIVE SPORT, S.L.

C/ Ca´n Calafat, 33, 2º, Pta 33, - 07610 Palma (Illes Balears).

E-mail: finance@jc-mc.com

4. EFFECT

This privacy policy is effective as of 11/07/2024 The responsible reserves the right to modify this policy to adapt it to future legislative or jurisprudential updates that may be applicable, or for other technical, operational, commercial, corporate, etc. reasons. If as a result of the changes, the rights of users are affected, the responsible undertakes to inform about the reasons.