Privacy Policy

IBIRIDE SOLUTIONS SL must ensure that the personal data of the data subject collected on the website are treated in accordance with the principles relating to processing:

Treated lawfully, fairly, and transparently in relation to the data subject (‘lawfulness, fairness and transparency’).
Collected for specified, explicit, and legitimate purposes, and not further processed in a manner that is incompatible with those purposes (‘purpose limitation’).
Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed (‘data minimization’).
Accurate and, where necessary, kept up to date, taking all reasonable steps to ensure that inaccurate data is erased or rectified without delay regarding the purposes for which they are processed (‘accuracy’).
Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (‘storage limitation’).
Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures (‘integrity and confidentiality’).
Thus, IBIRIDE SOLUTIONS SL shall be responsible for compliance with the above and shall be able to demonstrate it thereafter (‘proactive responsibility’).

In the same way, the processing carried out by the entity will only be lawful if it meets at least one of the following conditions (‘lawfulness of processing’):

the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
processing is necessary for compliance with a legal obligation to which the controller is subject;
processing is necessary in order to protect the vital interests of the data subject or of another natural person;
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. The legitimate basis shall not apply to processing carried out by public authorities in the performance of their tasks. Where processing is based on consent, the controller should be able to demonstrate that the data subject has consented to the processing of his or her personal data.

If the data subject’s consent is given in the context of a written statement that also refers to other matters, the request for consent shall be presented in a way that is clearly distinguishable from the other matters, in an intelligible and easily accessible form, using clear and plain language.

The data subject shall have the right to withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Before giving consent, the data subject shall be informed of this. It shall be as easy to withdraw consent as to give it.

IBIRIDE SOLUTIONS SL shall include in the forms used for the collection of personal data the information to comply with the duty to inform as set out in Articles 13 and 14 of the General Data Protection Regulation (hereinafter GDPR).

In this context, IBIRIDE SOLUTIONS SL must adapt to the relevant data protection regulations when obtaining personal data directly from a data subject. To do this, the company will need to:

Provide the identity and contact details of the Data Controller and, if applicable, their representative, the contact details of the Data Protection Officer, if applicable, and the purposes of the processing for which the personal data are intended, as well as the legal basis for the processing.
Specify the legitimate interests of the controller or a third party when the processing is necessary for the satisfaction of those interests. Provided that, such interests do not prevail over the interests or fundamental rights and freedoms of the data subject.
Provide the recipients or categories of recipients of the personal data and, if applicable, the intention of the controller to transfer personal data to a third country or international organization and the existence or absence of a Commission adequacy decision.
Indicate the period for which the personal data will be stored or the criteria used to determine the retention period.
Inform about the existence of the right to request the Data Controller access to personal data concerning the data subject, their rectification or erasure (‘right to be forgotten’), the restriction of processing or the right to object to processing, as well as the right to data portability.
Inform about the possibility of withdrawing consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal. As well as informing them of the possibility of lodging a complaint with a Supervisory Authority.
Specify whether the communication of personal data is a legal or contractual requirement, or a requirement necessary to enter into a contract, and whether the data subject is obliged to provide personal data and inform them of the possible consequences of not providing such data.
Inform about the existence of automated decisions, including profiling, and, at least in such cases, inform about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

When IBIRIDE SOLUTIONS SL does not obtain the personal data of the data subject, it will have to provide the information described in the previous section. As well as the categories of personal data being processed, the source from which they originate, and, if applicable, whether they come from public sources.

IBIRIDE SOLUTIONS SL must include in the forms or documents used for the collection of personal data, including those established on the website owned by IBIRIDE SOLUTIONS SL, the information to comply with the duty to inform as set out in Articles 13 and 14 of the General Data Protection Regulation (hereinafter GDPR), and, if necessary, record the consent given by the data subject.

To make it compatible with the greater requirement of information that must be provided to the data subject whose personal data are to be processed, the possibility of presenting the information in layers or levels is established, which must be in line with the requirement that the information must be provided in a clear, simple, concise, transparent, understandable, and easily accessible manner.

Article 11 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD), regulates the basic information required in a first layer.

The information in layers consists of:

Presentation of Basic Information (1st layer): consists of presenting basic information at a first level, in a summarized manner, at the same time and in the same medium where the data is collected.
Referral to Additional Information (2nd layer): Consists of presenting in detail and complete information, in a suitable, structured, concise, and precise manner. The way of presenting this additional information depends on the characteristics of the medium used to inform, it can be presented in paper format or in electronic format.

Basic information about website

Data Protection Basics- Online reservation management

Responsible: IBIRIDE SOLUTIONS SL

Purpose: Registering and managing online reservations

Rights: Access, rectify, and delete data, as well as other rights, as explained in the additional information

Additional Information: You can consult additional and detailed information on Data Protection on our website, in the Privacy Policy section.

Data Protection Basics – Commercial web form actions

Responsible party: IBIRIDE SOLUTIONS SL

Purpose: Capturing, registering, and processing data for the purpose of answering your inquiries and/or requests, as well as for advertising and commercial prospecting.

Rights: Access, rectify, and delete data, as well as other rights, as explained in the additional information.

Additional information: You can consult additional and detailed information on Data Protection on our website, under the Privacy Policy section.

Data Protection Basics – Web user management

Responsible: IBIRIDE SOLUTIONS SL

Purpose: Capturing, recording, and processing user data.

Rights: Access, rectify, and delete data, as well as other rights, as explained in the additional information.

Additional information: You can consult additional and detailed information on Data Protection on our website, in the Privacy Policy section.

Data Protection Basics – Cookies installation

Responsible Party: IBIRIDE SOLUTIONS SL

Purpose: Cookies management and installation.

Rights: Access, rectify, and delete data, as well as other rights, as explained in the additional information.

Additional Information: You can consult additional and detailed information on Data Protection on our website, Privacy Policy section.

Data Protection Basics – Web Form Management

Responsible: IBIRIDE SOLUTIONS SL

Purpose: To address your inquiries and/or requests.

Rights: To access, rectify, and delete data, as well as other rights, as explained in the additional information.

Additional Information: You can consult the additional and detailed information on Data Protection on our website, in the Privacy Policy section.

Website Privacy policy

www.ibiride.com PRIVACY POLICY

Website owner’s data:

CORPORATE NAME: IBIRIDE SOLUTIONS SL

TAX ID: B10607737

DOMAIN: WWW.IBIRIDE.COM

POSTAL ADDRESS: XARRACA, 13 ESC 2 1º PTA 3,07800 EIVISSA (ILLES BALEARS)

EMAIL ADDRESS: [email protected]

PHONE NUMBERS: 642454868

REGISTRATION NUMBER/ADDITIONAL DATA:

Data Protection

In accordance with current data protection regulations applicable to personal data, we inform you that your data will be included in the processing system owned by IBIRIDE SOLUTIONS SL with tax ID number B10607737 and registered address located at XARRACA, 13 ESC 2 1º PTA 3, 07800 EIVISSA (BALEARIC ISLANDS). Below, we provide the most relevant aspects of the processing carried out:

Performed Treatments

Online reservation management:

Purpose: Registration and management of online reservations.
Storage period: for the strictly necessary time to fulfill the aforementioned purpose.
Legal basis: The consent of the data subject.
Data types:
Basic data: Name and surname, ID number, Postal address, Email address, Economic or insurance data.
Transfers: Your data will be communicated to the Tax Agency, Banks and Savings Banks, Security Forces and Authorities if necessary, in order to comply with the administrative and security obligations established in the applicable regulations. Additionally, it is informed that the legal basis for the transfer is compliance with a law.

Commercial web form actions:

Purpose: Capture, registration, and processing of data for the purpose of responding to your inquiries and/or requests, as well as for advertising and commercial prospecting.
Storage period: for as long as the consent given is maintained, unless legal obligations apply.
Legal basis: The consent of the data subject.
Data types:
Basic data: Name and surname, Email address.

Web users management:

Purpose: Capture, registration, and processing of user data.
Storage period: for as long as the consent given is maintained, unless legal obligations apply.
Legal basis: The consent of the data subject.
Data types:
Basic data: Name and surname, Email address.

Cookies installation:

Purpose: Cookie management and installation.
Storage period: for as long as the consent given is maintained.
Legal basis: The consent of the data subject.
Data types:
Basic data: Email address, IP address.

Newsletter:

Purpose: Management of newsletter subscription, in order to send the corresponding communications.
Storage period: for as long as the consent given is maintained.
Legal basis: The consent of the data subject.
Data types:
Basic data: Name and surname, Email address.

Web form management:

Purpose: Respond to your inquiries and/or requests.
Storage period: for as long as the consent given is maintained.
Legal basis: The consent of the data subject.
Data types:
Basic data: Name and surname, Email address, IP address.

Interested part rights

IBIRIDE SOLUTIONS SL informs Users that they may exercise the rights of access, rectification, limitation, deletion, portability, opposition to the processing of their personal data and the right not to be subject to automated decisions, including profiling, before the Data Controller, as well as the withdrawal of consent given.

Access Right: It is the user’s right to obtain confirmation as to whether their data is being processed and, if so, the specific personal data being processed and the legal information about the processing (purposes, legal basis, retention periods, transfers, data source, etc.).

Rectification Right: It is the right of the data subject to have inaccurate or incomplete data corrected. In relation to the website, it can only be satisfied with respect to information under the control of the website, for example, deleting comments posted on the website, images or website content containing the user’s personal data.

Limitation of processing Right: It is the right to limit the originally intended processing purposes by the data controller in certain cases.

Deletion Right: It is the right to delete the user’s personal data, except as provided for in the GDPR itself (freedom of expression and information, retention obligations, formulation, exercise or defense of claims, etc.).

Portability Right: The right to receive the personal data provided by the user in a structured, commonly used and machine-readable format, and to transmit them to another controller when the processing is based on consent or the performance of a contract and is carried out by automated means.

Opposition Right: It is the user’s right not to have their personal data processed or for the processing to be stopped by the website when the processing is based on legitimate interest or public interest or when it concerns direct marketing processing.

Right not to be subject to automated decisions, including profiling: When processing is not necessary for the conclusion or performance of a contract, nor authorized by the European Union law or the law of the Member States nor based on consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or significantly affects you in a similar way.

Withdraw consent Right: For any processing based on your consent, you have the right to withdraw it at any time and free of charge.

To exercise any of the rights regarding data protection described above, you must follow the following instructions:

Filing a written request to the address XARRACA, 13 ESC 2 1º PTA 3,07800 EIVISSA (ILLES BALEARS) (Attention: IBIRIDE SOLUTIONS SL) or by email to [email protected].
The written request submitted by the data subject (interested party) requesting the exercise of rights must take into account the following:
- Must be properly identified and, in case of doubts about the identity of the requester, they will be asked to rectify the request (e.g. by requesting more information, such as the ID number, ID document, email provided, etc.).
- The request can be made by the legal or voluntary representative, when duly identified and authorized by the data subject (through an express authorization from the data subject to exercise the very personal rights regulated in the regulations on personal data protection).
- Specific request specifying the right(s) to be exercised. If it does not refer to a specific treatment, a response will be provided regarding all treatments involving your personal data. If you request information about a specific treatment, only information about that treatment will be provided. If requested by phone, you will be instructed to submit it in writing and informed of how to do so and the address to send it to. Information will never be given over the phone.
- Postal or email address for notifications.
- Supporting documents for the request, if necessary.
- The requester must use any means that allows to prove the sending and receipt of the request.

Finally, we inform you that you have the right to file a complaint with the Spanish Data Protection Agency in case you become aware or believe that an event may constitute a breach of the applicable data protection regulations.

IBIRIDE SOLUTIONS SL undertakes to adopt the necessary technical and organizational measures, according to the level of risks associated with the processing carried out by them and indicated in the section of the terms and conditions of use, to ensure their integrity, confidentiality, and availability.