According to the data protection act of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and national legislation implementing in further detail the provisions of this privacy statement we inform you that VISIT GRAN CANARIA TICKET, trademark of AGRUPACIÓN EMPRESARIAL INNOVADORA, AEI TURISMO INNOVA GRAN CANARIA., with Tax Identification Code G-76064625, and with address in calle León y Castillo, 24-1ª planta, de Las Palmas de Gran Canaria, código Postal 35003, España (Spain) acts as the “data controller” or the “data processor” according to current legislation.
For the exercise of the rights that will be detailed later in this document, Visit Gran Canaria Ticket provides the interested party the following e-mail address: email@example.com
Personal data refers to the collection of information about an identified or identifiable natural person (the data subject); an identifiable natural person is a person whose identity can be verified, directly or indirectly, in particular, by means of an identifier, as an example, a name, identification number, address, telephone number or e-mail address.
Natural or legal person who, either alone or jointly or in common with other persons, determines the purposes for which and the manner in which any personal data are, or are to be processed.
Any natural or legal person who processes personal data on behalf of the data controller.
Visit Gran Canaria Ticket will collect the personal data of the interested party while the latter requests the provision of a service to Visit Gran Canaria Ticket, directly from the interested party or through a “data processor”. The personal data that Visit Gran Canaria Ticket needs to provide the service are: Name and Surname, address and postal code, telephone number and e-mail address. In addition, there is another data that are necessary for the provision of each of the services requested. Visit Gran Canaria Ticket will use all this data only to provide the service requested by the data subject, as well as to bill for these services. All these services will be stored in the files of Visit Gran Canaria Ticket during the time that the interested party appears as an active client of Visit Gran Canaria Ticket and at least for the period that we are legally obliged to keep this data in accordance with current legislation. For any other purpose other than the one described above, Visit Gran Canaria Ticket will request the prior explicit and unequivocal authorisation of the data subject, indicating the purpose of the request. In the event that the data subject has authorised the use of them for different purposes, such as sending advertising, the data will remain in the files of Visit Gran Canaria Ticket until the data subject request cancellation through the link that we will make available in each message. If the data is for a minor (under 14 years of age), Visit Gran Canaria Ticket will understand that the data provided are authorised by their parents or guardians as long as they carry out the activity together with the minor. In the event that the minor travels alone, they must justify by the appropriate means that those who give consent for the processing of the data are the holder of parental authority or guardianship over the child. Visit Gran Canaria Ticket may also collect data by other means such as the various websites Visit Gran Canaria Ticket have. In any case, the purpose of the processing will be the one described in this section.
Visit Gran Canaria Ticket will only transfer the data of the interested party to those third parties who need the data to be able to provide the services ordered by the interested party and only for that hired service. Therefore, any information that is not necessary for the provision of a specific service will not be transferred to that specific third party in any case. Third parties who require this data include transport companies, accommodation companies, car rental and complementary services companies, as well as other companies that mediate between the service provider (supplier) and Visit Gran Canaria Ticket. In the case of the companies that mediate between the service supplier and Visit Gran Canaria Ticket, these are only authorized by Visit Gran Canaria Ticket to use the data only and exclusively for the purposes described above, and under no circumstances may they use them for any other purpose. However, Visit Gran Canria Ticket cannot guarantee that the data provided to the service providers (suppliers) will not be used for any other purpose than that intended if the data subject (interested party) subsequently and directly authorizes the latter to use them for other purposes. The data subject authorizes Visit Gran Canaria Ticket to transfer this data to third parties with each service order or orders requested to Visit Gran Canaria Ticket in order to achieve this aim.
Visit Gran Canaria Ticket has taken all reasonable measures and precautions to ensure that your data cannot be reached or be used under any circumstances by persons who have not been authorized by the data subject. These same measures are required of third parties who handle this data on our behalf. In the event that we detect a data leak, Visit Gran Canaria Ticket will act immediately in accordance with existing regulations and will immediately inform the Data Protection Agency within 72 hours, as well as the data subject in the shortest possible time.
The data subject has the following rights:
The data subject has the right to obtain from us clear, transparent and understandable information about the personal data we hold about him/her, the purposes of the processing of his/her data, the data of the person responsible for the data: Visit Gran Canaria Ticket, with address at Calle León y Castillo, 24-1ª planta and PC 35003 in Las Palmas de Gran Canaria city; as well as the contact details: firstname.lastname@example.org
The data subject has the right to access this information as soon as him/her request it from us, once him/her has provided proof that they are the data subject, although in the event of repeated requests we may charge him/her a fee for administrative costs.
The data subject shall have the right to obtain without undue delay from the data controller the rectification of inaccurate personal data concerning him/her.
In certain cases, the data subject may exercise him/her right to have him/her personal data erased or deleted. However, this right will not apply if there are legal obligations in this case that oblige Visit Gran Canaria Ticket to retain the data for a certain period of time.
The data subject shall have the right to obtain from the data controller the limitation of the data processing when any of the following conditions are met:
1. That the interested party refutes the accuracy of the personal data, during the period of time that allows the data controller to verify the accuracy of them.
2. That the data processing is unlawful and the data subject objects to the deletion of the personal data and instead requests the limitation of their use.
3. That the data controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the formulation, exercise or defence of claims.
4. That the data subject has opposed processing pursuant to Article 21(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, while it is being verified whether the data controller’s legitimate reasons prevail over those of the data subject.
If you wish to exercise this right, please contact us by any of the means indicated above.
The data subject has the right to request that the data controller transfer the personal data collected from him/her in a structured, commonly used and machine-readable format to another data controller.
The data subject has the right to object to the processing of his/her data at any time, for reasons related to his/her particular situation and in accordance with the provisions of Article 6 of the Regulation. However, the controller may object to this right if they can establish compelling legitimate reasons which prevail over the interests, rights and liberties of the data subject.