XCLUSIVE BESPOKE MALLORCA SL
PRIVACY POLICY

1. General Information on Data Protection

In accordance with the provisions of the General Data Protection Regulation GDPR EU 679/2016, Organic Law 3/2018, of 5 December, on data protection and guarantee of digital rights, as well as Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), You are provided with the following information about the processing of personal data on this website:

Who is the Data Controller on this website?

The data controller of your personal data is XCLUSIVE BESPOKE MALLORCA S.L., with registered office at Carrer de Sant Miquel 36 5º, 07002 Palma de Mallorca (Balearic Islands). You can contact us at the following email address: contact@xclusivemallorca.com or via the phone number +34664131904.

How do we record your data?

We collect your data as a result of you sharing your data with us. This may be, for example, information that you enter into our contact form.

Our computer systems automatically record other data when you visit our website. This data mainly comprises technical information (e.g. web browser, operating system or time the site was accessed). This information is automatically recorded when you access this website.

What are the purposes for which we use your data?

Your personal data is processed for the following purposes:

• To manage and respond to queries and requests for information made by users through the contact form, email address and/or contact methods provided on the website.
• To manage requests for information or requests for quotations for our services or products.
• If you have given your consent and in order to be able to offer you services related to your interests, your personal data may be used to create a commercial profile. No automated decisions will be made based on such profiling.

Some of the information is generated to ensure the error-free provision of the website. Other data may be used to analyze your user patterns.

How long will we keep your personal data?

Your personal data will be kept for as long as they are useful for the purposes indicated and, in any case, for the legally required periods and for the time necessary to meet the possible responsibilities arising from the processing of said data.

What is the legitimacy for the processing of your data?

The legitimacy to process your personal data is based on:

• Execute and maintain a contractual and commercial relationship with you, such as the procurement of the Organisation's products and services, and manage and process requests for quotations for the Organisation's products and/or services, all in accordance with the provisions of Article 6.1.b of GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December (LOPDPGDD).
• Compliance with various legal obligations, all in accordance with the provisions of Article 6.1.c of GDPR (EU) 679/2016 and Organic Law 3/2018, of 5 December (LOPDPGDD).

Who will your data be shared with?

In general, your personal data will not be shared with any third party outside the organization, unless there is a legal obligation to do so. However, you are informed that third-party providers may have access to your personal information as data processors in the context of providing a service for the data controller's organization.

International Data Transfers

The use of services such as Google Analytics and Google Maps involves the transfer of personal data to the United States. We apply Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of protection for your personal data.

What rights do you have regarding your information?

You have the right to obtain access to your personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request the deletion of the same when, among other reasons, the information is no longer necessary for the purposes for which it was obtained. In certain circumstances, you can request that the processing of your data be restricted, in which case we will only keep it for the purpose of making claims or defending it. In addition, and for purposes related to your particular situation, you may object to the processing of your data, in which case your personal information will no longer be processed for those purposes to which you have expressed your opposition. Where technically possible, you may request the portability of your data from another data controller.

To exercise these rights, you can send a letter by post, attaching a copy of a document proving your identity (DNI), to XCLUSIVE BESPOKE MALLORCA SL at Carrer de Sant Miquel 36 5º, 07002 Palma de Mallorca (Balearic Islands) or send an email to contact@xclusivemallorca.com

You have the right to lodge a complaint with the supervisory authority: the Spanish Data Protection Agency (www.agpd.es).

2. Content Hosting and Delivery Networks (CDNs)

External Hosting

This website is hosted by a third-party service provider (host). The personal data collected on this website is stored on the host's servers. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a website.

The hosting is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions regarding such data.

Performance of a data processing contract

In order to ensure processing in compliance with data protection regulations, we have entered into an order processing contract with our host.

3. Data Protection Policy

The controller applies the principle of active responsibility in the processing of personal data, maintaining constant updating and promoting the continuous improvement of the data protection system in accordance with the applicable legal requirements, guaranteeing in all cases:

• respect for the fundamental rights and freedoms of natural persons.
• That the data are processed in a lawful, loyal and transparent manner.
• that the data processed are accurate, adequate, relevant and limited in relation to the purposes for which they are collected.
• that the purposes for which they are collected are explicit and legitimate and that they are not processed in a manner incompatible with those purposes.

The purpose of this document is to inform users about what we do with their personal data, how they are collected, what they are used for, the rights that assist them, as well as all the necessary legal information established by current regulations.

Technical and organisational data protection measures

The media have the necessary technical and organisational measures to guarantee the confidentiality and conservation of the personal data obtained through the website.

The personal data collected from the website is processed using an HTML protocol with a valid SSL certificate.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries that you send to us as the website operator, this website uses an SSL or TLS encryption program. You can recognize an encrypted connection by checking if the browser's address line changes from "http://" to "https://" and also by the appearance of the lock icon on the browser line.

If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Rejection of unsolicited emails

We hereby object to the use of the published contact information in conjunction with the mandatory information to be provided in the "Information Required by Law" section to send us promotional and informational material that we have not expressly requested. The operators of this website and its pages expressly reserve the right to take legal action in the event of unsolicited sending of promotional information, e.g. via SPAM messages.

Objection to data being processed for advertising purposes

If you have given your consent for your data to be used for advertising purposes and you do not wish to continue receiving advertising, you can revoke the consent given at any time and by sending an email to the email of the person responsible contact@xclusivemallorca.com

Changes to the Privacy Policy

We reserve the right to update this Privacy Policy to adapt it to new legislation or jurisprudence. We will notify you of relevant changes to your privacy via the website or by email if applicable.

4. Data Logging on this Website

Cookies

Our websites and pages use what the industry calls "cookies". Cookies are small text files that do not cause any damage to your device. They are stored temporarily for the duration of a session (session cookies) or permanently archived on your device (permanent cookies). Session cookies are automatically deleted once your visit ends. Permanent cookies remain stored on your device until you actively delete them or until your web browser automatically deletes them.

In some cases, third-party cookies may be stored on your device once you enter our site (third-party cookies). These cookies allow you or us to take advantage of certain services offered by third parties (e.g. cookies for the processing of payment services).

Cookies have a variety of functions. Many cookies are technically essential, as certain features of the website would not function in the absence of cookies (e.g. shopping cart function or video viewing). The purpose of other cookies may be to analyse user patterns or to display promotional messages.

Cookies that are necessary for the completion of the electronic communications transaction or to provide certain functions that you wish to use (e.g. the shopping cart function) are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies in order to ensure the optimised and error-free provision of the operator's services. If the corresponding consent has been requested (e.g. an agreement for the storage of cookies), the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR; The agreement can be revoked at any time.

You have the option to set your browser in such a way that you are notified whenever cookies are placed and to allow the acceptance of cookies only in specific cases. You can also exclude the acceptance of cookies in certain cases or in general or activate the deletion function for the automatic deletion of cookies when the browser is closed. If cookies are disabled, the functions of this website may be limited.

In the event that third-party cookies are used or if cookies are used for analytical purposes, we will notify you separately together with this Data Protection Policy and, if applicable, ask for your consent.

Contact form

If you send us inquiries through our contact form, we will store the information provided in the contact form, as well as any contact information provided therein, to handle your inquiry and in case we have further questions. We will not share this information without your consent.

The processing of this data is based on Article 6(1)(b) GDPR, if your request is related to the performance of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if requested.

The information you have entered in the contact form will remain with us until you ask us to delete the data, revoke your consent to data archiving or if the purpose for which the information is archived no longer exists (e.g. after we have concluded our response to your query). This shall be without prejudice to mandatory legal provisions, in particular retention periods.

Request by email, phone or fax

If you contact us by email and/or telephone, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR, if your request is related to the performance of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Article 6(1)(a) GDPR) and/or on our legitimate interests (Article 6(1)(f) GDPR), as we have a legitimate interest in the effective handling of requests addressed to us.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to the storage or prescribe the purpose of the data storage (e.g. after completing your request). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

5. Analytics and Advertising Tools

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called cookies. Cookies are text files that are stored on your computer and that allow you to analyse the use of the website by users. The information generated by cookies in your use of this website is usually transferred to a Google server in the United States, where it is stored.

The storage of Google Analytics cookies and the use of this analysis tool are based on Article 6(1)(f) of the GDPR. The operator of this website has a legitimate interest in the analysis of user patterns in order to optimize both the services offered online and the advertising activities of the operator. If the corresponding consent has been requested (e.g. an agreement for the storage of cookies), the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR; The agreement can be revoked at any time.

IP anonymization

On this website, we have activated the IP anonymization function. As a result, Google will abbreviate your IP address within member states of the European Union or in other states that have ratified the Convention on the European Economic Area before it is transmitted to the United States. The full IP address will be transmitted to one of Google's servers in the USA and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google will use this information to analyse your use of this website, to generate reports on website activities and to provide other services to the operator of this website that are related to the use of the website and the internet. The IP address transmitted together with Google Analytics from your browser will not be combined with other data held by Google.

Browser Add-on

You have the option to prevent the cookie file by making the appropriate changes to the settings of your browser software. However, we must point out that in this case, you may not be able to use all the functions of this website to their full extent. In addition, you have the option of preventing the recording of the data generated by the cookie and associated with your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to data recording

You have the option to prevent the recording of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt-out cookie, which prevents the recording of your data during future visits to this website: deactivation of Google Analytics.

For more information about the processing of user data by Google Analytics, please refer to Google's Data Privacy Statement at: https://support.google.com/analytics/answer/6004245?hl=en.

Processing of contractual data

We have concluded a data processing agreement with Google and apply strict data protection provisions to the fullest when using Google Analytics.

Demographic parameters provided by Google Analytics

This website uses the "demographic parameters" feature provided by Google Analytics. It allows you to generate reports that provide information about the age, gender, and interests of website visitors. The sources of this information are advertising related to Google's interests as well as visitor data obtained from third-party providers. This data cannot be assigned to a specific person. You have the option to disable this feature at any time by making the relevant settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in the section "Objection to data collection".

Archiving period

User or incident level data stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising IDs) will be anonymised or deleted after 14 months. For more information, please click on the following link: https://support.google.com/analytics/answer/7667196?hl=en

6. Plug-ins and Tools

Google Maps (with consent)

This website uses Google Maps, a mapping/location service, via an API. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

To ensure data protection on this website, you will find that Google Maps has been deactivated when you visit this website for the first time. A direct connection to Google's servers will not be established until you have activated Google Maps autonomously (i.e. if you have given your consent in accordance with Article 6(1)(a) GDPR). This will prevent the transfer of your data to Google during your first visit to our website.

Once you have activated the service, Google Maps will store your IP address. As a rule, it is subsequently transferred to a Google server in the United States, where it is stored. The provider of this website has no control over this data transfer once Google Maps has been activated.

For more information on the processing of user data, please refer to Google's Data Privacy Statement at the following link: https://www.google.de/intl/de/policies/privacy/.