Data Privacy
Data Protection Policy
This policy aims to inform you as to the type, extent and purpose of the collection and use of personal data during your use of our website and our VivaMallorca services.
- GENERAL
- Controller for the data processing
The controller in respect of data collection, processing and use in connection with the use of our website, VivaMallorca, is Dot Online GmbH, Friedrichstr. 171, 10117 Berlin.
- Contact for questions regarding data protection
Questions and comments on the topic of data protection can also be sent by email to privacy@dotonline.com.
- Personal data
Personal data within the meaning of European Union data protection law is all information which refers to an identified or identifiable natural person ("Data Subject"). A natural person is deemed to be identifiable if they can be directly or indirectly identified.
- Automated decision-making
There is no automated decision-making.
- Controller for the data processing
- General data processing during use of VivaMallorca
- Accessing the website and logfiles
Explanation and purpose of processing:
We automatically process the following information every time you visit our website:
- the IP address of your computer or other end device (e.g. tablet PC or smartphone) and the request(s) sent by your browser
- the volume of data transmitted, the browser type, browser version, browser language, the screen resolution and the operating system used.
The IP address and information on the request(s) from your internet browser are necessary, for technical reasons, for you to visit and use the website; without this data being processed, the website cannot be accessed and webpages cannot be displayed. The processing of the IP address is anonymized by way of abbreviation or deleted once it is no longer required for technical reasons for you to access/use the website.
Information on the volume of data transmitted, the type and version of browser used, the screen resolution and the operating system used is collected and processed in order to optimize how content is displayed, determine the system capacity and make future modifications and improvements to the website, on the basis of statistical analyses where applicable.
The data is deleted as soon as it is no longer required to achieve the purpose of its collection. Where data is collected in order to provide the website, this is the case once the respective session is ended. Logfiles are deleted or anonymized after seven days at the latest, such that an attribution to the requesting client is no longer possible.
Legal basis:
The legal basis for the processing is Art. 6(1) first sentence (f) of the GDPR. The legitimate interest in processing the relevant data is that it makes accessing the website technically possible, optimizes how the content is displayed for the user and enables the continued improvement/optimization of the internet service in the future.
Right to Object:
As far as data processing based on Art. 6(1) first sentence (f) of the GDPR is concerned, you have a right to object, notwithstanding other rights. On this point, see below ("Rights of the Data Subject").
- Cookies
General information on cookies:
Our website uses cookies. Cookies are small text files which are stored locally, during each visit to our website, on the user's end device (e.g. PC, smartphone, tablet). They can contain a range of information about the end device used as well as about usage behaviour and are sent back to the cookie-setting web server with the aim of recognizing a returning user and their settings.
You can prevent cookies being stored by adjusting your browser settings accordingly. Moreover, you can delete stored cookies using your browser. Preventing or deleting cookies may, in some circumstances, render the use of certain functions of the website impossible or inconvenient. You can also, however, set suitable preferences regarding the various cookies directly via our website (on this point, see the remarks below).
Categories of cookies and legal basis:
The cookies used on our website can originate either from us or from third party service providers whose tools we have integrated into our website and serve various different purposes. We have categorized these as follows:
- Necessary cookies: these are cookies which are essential for proper access, smooth use and proper display of the content of our website.
- Functionality cookies: these cookies serve to make the use of our website more comfortable for users (e.g. avoid unnecessary multiple settings).
- Statistics cookies: these cookies collect information on how our website is used. They help us to statistically evaluate the use, in particular for the purpose of future improvement and optimization of the website and of our services.
- Targeting cookies: these cookies help, by way of storage and processing of user and usage information, tailor a range of content and functions of the website to the interests of the user of the website in order to increase the individuality of the services.
Details on the specific cookies used can be found in the cookie consent tool (see below). More detailed information on cookies of third party suppliers can also be found below. The cookie tool also contains information on what the consequences are if you do not grant the consent or if you withdraw the consent.
The use of necessary cookies is also based on a legitimate interest as per Art. 6(1) first sentence (f) of the GDPR. The legitimate interest in processing the data is that it enables the functions of our website to be properly displayed and used.
As far as data processing based on Art. 6(1) first sentence (f) of the GDPR is concerned, you have a right to object, notwithstanding other rights. On this point, see below ("Rights of the Data Subject").
The use of all other categories of cookies is based on your consent as per Art. 6(1) first sentence (a) of the GDPR by way of the cookie consent tool (see next section).
Cookie consent tool
When you first visit our website using a browser and after deletion of cookies in the browser, a banner is displayed containing information on the individual cookies and enabling the user to set their preferences in respect of the use of cookies. Within this tool, you can consent to the use of cookies, either entire categories or individual cookies within the categories, by ticking the relevant fields. The same does not apply in respect of necessary cookies, the use of which is not based on your consent but based on a legitimate interest (see above); as far as the necessary cookies are concerned, you have a right to object (on this point, see “Rights of the Data Subject” below).
This granting of consent is voluntary and can be withdrawn at any time by changing the settings accordingly with effect for the future. To this end, you can change the cookie settings at any time using a link in the footer which can be found on every page of our website, and withdraw your consent by deactivating the respective cookie. Withdrawing consent has no influence on the legitimacy of the processing carried out on the basis of the consent prior to the withdrawal.
- Matomo Web Analysis
Explanation and purpose of processing:
We use the open source software Matomo provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, to analyse and statistically evaluate the use of the website. We employ the tracking measures to ensure a tailored design and continued optimization of our website. We also use the tracking measures to collect statistics on the use of our website and evaluate these statistics for the purpose of optimizing our service.
This web analysis is realized by way of cookies (explanation, see above). The information generated by the cookies regarding the use of the website is summarized in pseudonymized usage profiles. The information will not be passed on to any third parties. Under no circumstances will the IP address be associated with other data related to the user. The IP addresses are anonymized such that they can not be identified (IP masking).
Legal basis and right of withdrawal:
The legal basis for data processing using Matomo is your consent as per Art. 6(1) first sentence (a) of the GDPR, which you can grant using the cookie consent tool described above. The granting of consent is voluntary and can be withdrawn at any time using the same tool with effect for the future. To this end, you can change the cookie settings at any time using a link in the footer which can be found on every page of our website, and withdraw your consent by deactivating the respective cookie.
You can alternatively set an opt-out cookie through this LINK (https://matomo.org/faq/general/faq_20000/), which will prevent Matomo from collecting your information in the future when you visit our website. Please note that if you delete this cookie, this opt-out cookie must be re-set.
- Google Analytics
Explanation and purpose of processing:
We use Google Analytics on our websites, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA ("Google"). On the basis of a data processing agreement with us, certain user and usage information is collected by Google, summarized into pseudonymized usage profiles and stored in cookies (see above). This includes, for example, information on the browser type/version used, the operating system used, the screen resolution, referrer URL (the website visited prior to this one), anonymized IP address of the computer used to access the website, time of server request, files downloaded, videos watched, advertising banners clicked on, orders placed, sequence of clicks, frequency of page impressions, first and last page visited, time spent on individual pages etc. This occurs for the purpose of statistical evaluation in view of the future optimization of the website design and its content.
This information is transmitted to a Google server which may be located in the USA and stored there. Google has committed to complying with the Privacy Shield Agreement published by the US Department of Commerce between the EU and the USA regarding the collection, use and storage of personal data from EU Member States, which ensures an adequate level of protection for transfer of data to the USA. The certificate can be viewed at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .
We have activated an IP anonymisation tool, which means that your IP address is, in Member States of the European Union or in other states which are party to the Agreement on the European Economic Area, abbreviated by Google beforehand and thus transmitted in anonymized form. As a third-party data processor as per Art. 28 of the GDPR, Google is a recipient of the personal data.
The information collected is collected in order to statistically evaluate the use of the website in aggregated form, to create reports on the website activities and behaviour of users on our website and to provide us with other analysis services related to the website and its use, e.g. on the effect of online marketing campaigns. That serves to tailor our website to the needs of users and continuously optimize it. The IP address transmitted by your browser in the scope of Google Analytics will not be associated with other data by Google.
We have activated the "Google Signals" extension offered by Google. This allows cross-device tracking, i.e. tracking across multiple devices, and offline tracking. With cross-device tracking, the data of your online behaviour on different end devices (e.g. PC, smartphone, tablet PC) can be linked. Offline tracking includes tracking of, for example, your visits to offline shops. Both is only done if you have enabled the "personalized advertising" option in your Google Account settings. You can activate and deactivate the option "personalised advertising" at any time in your Google user account. Processing is carried out with IP masking activated, i.e. the IP address of users within the member states of the EU and the European Economic Area is processed in a shortened form, which makes it impossible to draw conclusions about the identity of an individual user. We only receive statistical evaluations from Google. We would like to point out, however, that Google may be able to process these data in a personalised manner, over which we have no influence.
The maximum period of storage for data collected by Google Analytics selected by us is 14 months. After this period has expired, the data will be automatically deleted.
Legal basis and right of withdrawal:
The legal basis for data processing using Google Analytics is your consent as per Art. 6(1) first sentence (a) of the GDPR, which you can grant using the cookie consent tool described above. The granting of consent is voluntary and can be withdrawn at any time using the same tool with effect for the future. To this end, you can change the cookie settings at any time using a link in the footer which can be found on every page of our website, and withdraw your consent by deactivating the respective cookie.
If you do not want your data to be tracked and processed in Google Analytics, you can install a browser add-on to deactivate Google Analytics, which you can download and install here: https://tools.google.com/dlpage/gaoptout/. If you do not wish to or cannot install this add-on (e.g. on mobile devices), you can alternatively use this LINK (https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable) to set an opt-out cookie that will prevent Google Analytics from collecting your data in the future when you visit our website. Please note that this process must be repeated if you delete this cookie.
- Facebook Pixel
Explanation and purpose of processing:
We have integrated into our website, for marketing and optimization purposes, the marketing tool “Facebook Pixel” provided by Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA (hereinafter: “Facebook”). Facebook Pixel uses, among other things, cookies (see above).
The use of Facebook Pixel means that our advertisements on the facebook.com platform (so-called “Facebook Ads”) will only be shown to those Facebook users who have previously visited our website or have indicated, through their usage behaviour, that they are interested in certain topics or products. The integration of Facebook Pixel also allows us to see whether a user has reached our website by clicking on one of our Facebook Ads. Users logged into Facebook will have the visit to our website stored by Facebook against their Facebook user profile. Even if the user is not registered with or logged into Facebook, there is the possibility that Facebook will learn and store your IP address and possibly other identifiers.
The integration of Facebook Pixel leads to data being transferred to Facebook servers which may be located in the USA. Facebook has committed to complying with the Privacy Shield Agreement published by the US Department of Commerce between the EU and the USA regarding the collection, use and storage of personal data from EU Member States, which ensures an adequate level of protection for transfer of data to the USA. The certificate can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Further information on Facebook Pixel:
More information on the terms of use and privacy can be found at the following link:
- https://www.facebook.com/about/privacy
- https://www.facebook.com/business/help/651294705016616
You can also obtain further information on your rights with Facebook in this regard and settings options to protect your privacy.
Legal basis and right of withdrawal:
The legal basis for data processing using Facebook Pixel is your consent as per Art. 6(1) first sentence (a) of the GDPR, which you can grant using the cookie consent tool described above. The granting of consent is voluntary and can be withdrawn at any time using the same tool with effect for the future. To this end, you can change the cookie settings at any time using a link in the footer which can be found on every page of our website and withdraw your consent by deactivating the respective cookie.
- Newsletter subscription
Explanation and purpose of processing:
You can register via our website to receive our newsletter in the future. To this end, you must provide your email address and consent to the use of that email address for the future sending of the newsletter. The email address and - if stated - name provided by you via the dedicated newsletter registration form will be used solely for the purpose of registering you to receive the newsletter, of sending the newsletter and of cancelling the newsletter.
The management of recipient data for our newsletter and its sending is performed via “MailChimp” an online tool provided by the US service provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The Rocket Science Group, LLC also processes the personal data in the USA. That company is subject to the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active), which ensures an adequate level of protection for the transfer to the USA.
The newsletters contain a so-called “web beacon”, i.e. a pixel sized file which is accessed by the MailChimp server when the newsletter is opened. When this web beacon is accessed, technical information is collected, including information on the browser and your system, as well as your IP address and the time of access. This information is used for the technical improvement of the content and design of the newsletter, based on the technical data or the target groups and of your reading behaviour, based on the places of access (ascertainable with the help of the IP address) or the times of access. The statistical data collected also includes ascertaining whether the newsletters are opened, when they are opened and which links are clicked. This information can, for technical reasons, theoretically be attributed to the individual newsletter recipients. However, it is neither our intention nor that of MailChimp to monitor individual users. Instead, any evaluation performed helps us recognize the reading habits of our users and to adjust our content accordingly or to send different content in line with the interests of our users.
The privacy policy of MailChimp can be found here:
https://mailchimp.com/legal/privacy.
Voluntary nature of the consent and right of withdrawal
The granting of the consent necessary to receive the Newsletter is voluntary and can be withdrawn by way of a simple declaration at any time with effect for the future (e.g. by email to privacy@dotonline.com). Moreover, there is a link at the end of every newsletter which you can click to have yourself removed from the email mailing list and thus withdraw your consent. Withdrawing consent has no influence on the legitimacy of the processing carried out on the basis of the consent prior to the withdrawal. It is not possible to receive the newsletter without granting consent.
Duration of storage:
The data transferred in the course of the newsletter registration is processed for as long as the user remains registered to receive the newsletter.
Legal basis:
The legal basis for this data processing is Art. 6(1) first sentence (a) of the GDPR and for the transfer of data to MailChimp and the evaluation of the web beacon is Art. 6(1) first sentence (f) of the GDPR. The legitimate interest is in the effective management of the newsletter and the newsletter recipients and as far as the use of the web beacon is concerned in the analysis of user behaviour to improve the content and design of future newsletters.
Right to Object:
As far as data processing based on Art. 6(1) first sentence (f) of the GDPR is concerned, you have a right to object, notwithstanding other rights.
- Information emails to registered users
Explanation and purpose of processing:
Even if you do not subscribe to the newsletter, we can send information emails to registered VivaMallorca users containing offers from VivaMallorca, if and to the extent that we can assume that these will be of interest to you and that there are no indications that you would not wish to receive such emails or that you have objected to receiving such emails. There will be a link at the end of every information email which you can use to have yourself removed from the email mailing list.
Moreover, you can use the user area to select the types of messages you would like to receive or deactivate the types of messages you would not like to receive.
Legal basis:
The legal basis for this data processing is Art. 6(1) first sentence (f) of the GDPR. The legitimate interest is in advertising our own products and services to our customers.
Right to Object:
As far as data processing based on Art. 6(1) first sentence (f) of the GDPR is concerned, the user has a right to object, notwithstanding other rights, specifically without incurring any costs other than the costs of sending according to the basic rates. On this point, see below ("Rights of the Data Subject"). A deactivation of the receipt of certain types of messages in the user area will be deemed an objection. As explained above, the emails will, however, always contain a link for removing yourself from the email mailing list.
- Contact form
Explanation and purpose of processing:
You can contact us with any questions or requests by way of our online contact form. In doing so, the personal data transmitted by you will be processed by us electronically in order to answer your question or deal with your request.
The personal data collected in this context will be deleted when its storage is no longer necessary or, to the extent legal obligations to retain records exist, its processing is limited, unless further processing is required by law, such as on the basis of retention obligations under commercial or tax law.
Legal basis:
The processing of your personal data when you contact us is undertaken on the basis of Art. 6(1) first sentence (f) of the GDPR. The legitimate interest is in responding to requests sent to us. Under certain circumstances, the processing of data could also be undertaken on other legal bases. In certain cases, the processing of that data could also be allowed or required on other legal bases, such as Art. 6(1) first sentence (c) of the GDPR (legal obligations e.g. retention periods under commercial or tax law) or Sec. 24(1) no. 1 of the German Federal Data Protection Act [BDSG] (assertion of/defence of civil law claims).
Right to Object:
As far as data processing based on Art. 6(1) first sentence (f) of the GDPR is concerned, you have a right to object, notwithstanding other rights. On this point, see below ("Rights of the Data Subject").
- Accessing the website and logfiles
- Registration with and use of VivaMallorca as registered user
- Registration with VivaMallorca
Explanation of the data processing in relation to the registration
Registration is not obligatory for the use of basic VivaMallorca functions. The complete use of the VivaMallorca services requires prior registration. In the registration process, the user sets a username and password (login details) and provides a valid email address. It also requires a verification by the user, either in the course of a double opt-in process by email or via a mobile telephone number. The purpose of this verification is to ensure that the registration is effected by a natural person (and not automated), that this person can be contacted by us by email or via the mobile telephone number and helps prevent misuse.
The use of paid services requires, in addition to the provision of a username and a password, the provision of contractually relevant data of the user, such as first name and surname, address, payment data etc. (full registration). The basic data collected during the registration process is processed to set up, deliver and bill the services and are stored in association with the created user account. This data can be viewed via the user account and if necessary changed by the user.
Duration of storage
The data collected at registration is deleted after expiry of the statutory documentation and data retention periods (in particular those set out under tax and commercial law). Insofar as there are no documentation and data retention periods in this regard (e.g. because the user does not use any paid services), the deletion will be performed immediately upon deletion of the respective user account, unless, in individual cases, a longer storage period is permitted or required (e.g. due to the assertion of/defence against civil law claims).
Legal basis
The processing of the data collected at registration is required in order to set up a user account and to supply, perform and bill our contractual services to the user. The legal basis for this is Art. 6(1) first sentence (b) of the GDPR.
The legal basis for the storage and processing of this data in the user account is Art. (1) first sentence (f) of the GDPR. The legitimate interest is in enabling the user to use VivaMallorca comfortably as well as to view and where necessary correct the registered data.
The legal basis for the storage of the data for the duration of the statutory documentation and data retention periods is Art. 6(1) first sentence (c) of the GDPR and for the assertion of/defence against legal claims is Sec. 24 (1) no. 1 BDSG.
Right to Object:
As far as data processing based on Art. 6(1) first sentence (f) of the GDPR is concerned, you have a right to object, notwithstanding other rights. On this point, see below ("Rights of the Data Subject").
- Data processing during the use of services of VivaMallorca
Explanation, purpose of processing and duration of storage
In the course of the use of the VivaMallorca services, it is natural that content and usage data will be generated which is processed by us and stored to the respective user account. The purpose of this processing is the performance of our contractual obligations to the user.
The processing of the content and usage data will continue until such time as the user deletes the respective data, until deletion upon a request by the user to delete the respective user account or until the deletion of the respective user account after termination.
Legal basis
The legal basis for the processing described above is Art. 6(1) first sentence (b) of the GDPR.
- Places of data processing and transfer to third countries
Explanation
VivaMallorca uses servers in various locations in order to ensure optimal performance of the services provided. The data processing by VivaMallorca in respect of VivaMallorca users based in the European Union (EU) and the European Economic Area (EEA) is performed on servers located within the EU such that the personal data provided by EU users to VivaMallorca is processed by VivaMallorca within the EU.
For the data processing for VivaMallorca users based outside the EU/EEA, the data processing can possibly also be performed on servers located outside the EU/EEA. The required level of data protection for the associated transfer to third countries is provided in that VivaMallorca exclusively uses servers from server operators which are members of the EU-US Privacy Shield Framework. The European Commission issued a so-called adequacy decision in relation to the EU-US Privacy Shield under Art. 45(1) first sentence of the GDPR by way of a decision of 12 July 2016, which confirms that the EU-US Privacy Shield ensures an adequate level of protection for a data transfer.
Beyond this, VivaMallorca naturally has no influence over which third parties the user communicates with via email. If a user based in the EU/EEA sends, for example, emails personal data to recipients in third countries (e.g. in the USA), data will be transferred to those locations accordingly. In such cases, a transfer to third countries will take place in order to perform the services VivaMallorca is contractually obliged to provide to user (legal basis: Art. 6(1) first sentence (b) in conjunction with Art. 49(1) second sentence (b) of the GDPR.
- Payment for services via Stripe
Explanation and purpose of processing:
Our services can be paid for by credit card using the payment service provider Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA (stripe.com) respectively for residents of the European Economic Area (EEA), the UK and Switzerland: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin. For this purpose (payment for the services) we will transmit the credit card details, which have been provided via the VivaMallorca platform, together with other contractually relevant information (name, address, email address, order number, prices etc.) to Stripe.
We hereby advise that Stripe might pass the transferred data, for the purposes of carrying out the payment, to third parties, such as service providers, subcontractors or other associated companies to the extent necessary to perform its contractual obligations arising from your order or to the extent the person data is to be processed by a third party processor. Under certain circumstances, the personal data transmitted to Stripe will also be transmitted to credit reporting agencies. This transmission is for the purposes of verifying identity and creditworthiness in relation to the order you have placed.
Further information on Stripe:
More information on the terms of use and privacy policy of Stripe can be found at the following link: https://stripe.com/gb/privacy
Legal basis:
The legal basis for this data processing is Art. 6(1) first sentence (b) GDPR; the purpose of the processing is to implement the agreement.
- Payment for services via PayPal
Explanation and purpose of processing:
Our services can also be paid for using the payment service provider PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxemburg (www.paypal.com).
For this purpose (payment for the services) we will transmit the contractually relevant information (name, address, email address, order number, prices etc.), which has been provided via the VivaMallorca platform, to PayPal. The transmitted data will possibly be transmitted to credit reporting agencies for the purposes of verifying identity and creditworthiness.
Further information on Paypal:
More information on the terms of use and privacy policy of PayPal can be found at the following link: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Legal basis:
The legal basis for this processing of data is Art. 6(1) first sentence (a) of the GDPR; the processing is performed for the purpose of implementing the agreement.
- Support requests (Zendesk)
Explanation and purpose of processing:
In order to process support requests and enable communication with users in this regard, we use the support management tool, Zendesk, which is provided by the company Zendesk Inc., 1019 Market Street San Francisco, CA 94103. Details regarding support requests are stored and processed in Zendesk in order to effectively process your request. In the course of this, personal data is transferred to the servers of Zendesk.
Zendesk has committed to complying with the Privacy Shield Agreement published by the US Department of Commerce between the EU and the USA regarding the collection, use and storage of personal data from EU Member States, which ensures an adequate level of protection for transfer of data to the USA. The certificate can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000TOjeAAG&status=Active.
Legal basis:
The processing of your personal data with Zendesk is undertaken on the basis of Art. 6(1) first sentence (f) of the GDPR. The legitimate interest is in the effective collection, processing and response to support requests. Under certain circumstances, the processing of data could also be undertaken on other legal bases. In certain cases, the processing of that data could also be allowed or required on other legal bases, such as Art. 6(1) first sentence (c) of the GDPR (legal obligations e.g. retention periods under commercial or tax law) or Sec. 24(1) no. 1 of the German Federal Data Protection Act [BDSG] (assertion of/defence of civil law claims).
Right to Object:
As far as data processing based on Art. 6(1) first sentence (f) of the GDPR is concerned, you have a right to object, notwithstanding other rights. On this point, see below ("Rights of the Data Subject").
- Registration with VivaMallorca
- Recipients of personal data and rights of the data subject
- Recipients of personal data
In connection with the provision of our website and our services it can occur - strictly only for specific purposes - that personal data is disclosed to third parties, including third party processors as per Art. 28 of the GDPR, whereby such third parties will fall into the following categories:
- Data centre/server operators
- System administration
- The providers of third party tools incorporated by VivaMallorca as mentioned above.
- Rights of the Data Subject
-
You have the right to request confirmation from us on whether we are processing personal data concerning you. If this is the case, you have a right to information regarding this personal data to the extent stipulated under the law (Art. 15 of the GDPR in conjunction with Sec. 34 BDSG). This does not apply if the data
- is only stored because it may not be deleted due to data retention rules set out in the law or the company statutes or
- is for the exclusive purpose of backing up data or data protection monitoring
and the provision of information would require a disproportionate cost and effort and any processing for other purposes has been excluded using appropriate technical and organizational measures.
-
You also have the right to request that inaccurate personal data be rectified and where applicable - taking into account the purposes of the processing - incomplete personal data be completed, including by means of a supplementary statement (Art. 16 of the GDPR).
-
Moreover, in the cases laid out in Art. 17(1) (a) to (f) of the GDPR, you have a right to request that personal data be deleted, provided no exception as per Art. 17(3) of the GDPR applies, as well as a right to restriction of processing in the cases laid out in Art. 18(1) of the GDPR.
-
There is also a right to have data portability ensured in the cases laid out in Art. 20 (1) of the GDPR.
-
You have the right to appeal to the competent supervisory authority, if you are of the opinion that the processing of your personal data violates the GDPR. The competent supervisory authority is the
Berlin Commissioner for Data Protection and Freedom of Information [Berliner Beauftragte für Datenschutz und Informationsfreiheit]
Friedrichstr. 219, 10969 Berlin
Tel.: +49 (0)30 13889-0, Fax: +49 (0)30 2155050
Email: mailbox@datenschutz-berlin.de
-
The right to object to processing on the basis of legitimate interests
To the extent the processing of data is based on Art. 6(1) (f) of the GDPR ("legitimate interests"), you have the right to lodge an objection at any time, for reasons related to your particular situation, to the processing of personal data concerning you.
- Recipients of personal data
This Data Protection Policy may be modified at any time in the future in line with changing circumstances, in particular to conform to changes to legal requirements, the practice of public authorities or case law. The current version can be found at www.vivamallorca.com/data-protection.htm
Version: 14 July 2020