Data Protection

1. Party responsible for database and data processing

Responsible: Comunidad de Propietarios del C.C. Habaneras
Address: Avd. Rosa Mazón Valero 7, 03184 Torrevieja (Alicante)
Telephone: 965 712 300
Email: gerencia@habaneras.es

2. Treatments

The CDP from Habaneras S.C., only treats the personal data indicated below:

3. Data collected through the website

Purpose: Answer the requests for information and contact sent through emails and contact forms on the website.
Conservation: The personal data will be kept until the person interested applies for its deletion and in any case for a maximum period of five years.
Legitimation: Data subject´s consent
Recipients: The communication of personal data is not provided except in those cases established by a legal obligation.
Ways to Obtain: The personal data we process has been obtained from the interested party
The categories of data processed are the following:

- Identification data
- Contact information

Specially protected data is not treated

4. Coordination of Business Activities

Purpose: Coordination of business activities and management of the shopping center
Conservation: The data will be kept during the prescription periods established by the Infractions and Sanctions Law in the social order (4 years).
Legitimation: Compliance with a legal obligation. Art. 24 of Law 31/1995 on Occupational Risk Prevention and R.D. 171/2004
Recipients: The communication of personal data is not provided except in those cases established by a legal obligation.
Forms of Obtaining: The personal data we process has been obtained from the interested party or the legal person in charge of the company.
The categories of data processed are the following:

- Identification data
- Contact information

Specially protected data is not treated

5. Leasing Contracts

Purpose: Gestión y ejecución de los contratos de arrendamiento de locales de negocio y espacios comunes
Conservation: Los datos se conservarán durante la duración del contrato de arrendamiento y los quince años posteriores según los plazos de prescripción establecidos en la Ley de Arrendamientos Urbanos
Legitimation: Ejecución del contrato de arrendamiento suscrito entre ambas partes
Recipients: No está prevista la comunicación de datos personales salvo en los supuestos establecidos por una obligación legal.
Forms of Obtaining: Los datos personales que tratamos han sido obtenidos del propio interesado o el responsable legal de la entidad arrendadataria
The categories of data processed are the following:

- Identification data
- Contact information
- Income data and bank details

Specially protected data is not treated

6. Provision of Services.

Purpose: Provision of services for shopping center’s customers (Ex. Pushchair, wheelchairs, umbrella…)
Conservation: The data will be kept for 1 year.
Legitimation: Execution of the contract to provide the services requested by the interested party.
Recipients: The communication of personal data is not provided except in those cases established by a legal obligation.
Ways to Obtain: The personal data we process has been obtained from the interested party
The categories of data processed are the following:

- Identification data
- Contact information

Specially protected data is not treated

7. Suggestions and Claims

Purpose: The data provided through the suggestions or claims forms will be treated for the suggestion or claim management made by the interested party.
Conservation: The data will be kept for 1 year. (Art. 1968 Civil Code) unless these data may be needed to deal with a claim or exercise of rights. In that case, it will be maintained until the end of it.
Legitimation: The legitimacy of the treatment is based on the satisfaction of legitimate interest by the Party responsible for the database treatment, consisting on the response and improvement about customer’s satisfaction who make their complaints. Regarding claims involving some type of personal or property damage, the legitimacy for the treatment is based on compliance with a legal obligation (art. 1902 Civil Code) and Law 50/1980 of the Insurance Contract
Recipients: The data obtained from complaints and suggestion forms will not be communicated to third parties except in the cases expressly contemplated by current legislation. The data obtained from claim forms will be communicated to the insurance companies and brokerages necessary for the processing of the claim, as well as in the other cases established by a legal obligation
Ways to Obtain: The personal data we process has been obtained from the interested party
The categories of data that are processed are the following:

- Identification data
- Contact information
- Data related to the complaint or claim
- Personal damages suffered (only in claims with personal damages)

In the case of claims that include personal injury, those data related to people’s health may be treated. Ex. Injuries report.

8. Kids Area Service

Purpose: The personal data collected through this service will be treated in order to provide and manage the playroom service
Conservation: The data will be kept for a maximum period of one year unless that data will be necessary to deal with a claim or exercise of rights, in that case they will be maintained until the end of it.
Legitimation: The legitimacy of the treatment is based on the execution of the contract for the provision of the playroom services requested by the interested party.
Recipients: No data will be transferred to third parties except by legal obligation.
Obtaining Forms: The personal data we process has been obtained from the interested party and / or the father, mother, or caregiver of the minor
The categories of data processed are the following:

- Identification data of the father, mother, guardian or caregiver of the child
- Identification data of the child

Specially protected data is not treated

9. Events, contests, offers or promotions

Purpose: The personal data collected through the participation forms in the events, contests or promotions will be treated in order to manage the participation of the interested party in them. Likewise, if you give us your consent, we will use the information provided, in order to send you information about activities, offers and promotions of the shopping center or the businesses installed.
Conservation: Personal data for sending information will be kept until the interested party applies for its deletion. The rest of information will be kept for a maximum period of five years.
Legitimation: The legitimacy of the treatment is based on the consent of the interested party provided during the process of collecting their data.
Recipients: : No data will be transferred to third parties except by legal obligation
Ways to Obtain:No data will be transferred to third parties except by legal obligationo
The categories of data that are processed are the following:

- Identification and contact information

Specially protected data is not treated

10. Mobile Application

Finalidad: We will process the personal data of the users of our mobile application in order to provide you with information about news, offers, promotions, events and contests of the shopping center or the businesses installed in it. If you allow our app to access your location, the data we collect will be treated in order to inform you about offers, promotions, news, events and promotions of our shopping center. The data collected through our app will be used to develop a business profile based on this information. This profile will be used to inform the interested party about offers, promotions, news that best suits your hobbies and interests
Conservation: Los datos personales del interesado se conservarán hasta que no se solicite la supresión por el interesado.
Legitimation: La legitimación del tratamiento se basa en el consentimiento del interesado facilitado durante el proceso de instalación de la aplicación
Recipients: No se cederán datos a terceros salvo obligación legal
Forms of Obtaining: The personal data we process has been obtained from the interested party.
The categories of data processed are the following:

- Identification data
- Geopositioning data

Specially protected data is not treated

11. Video surveillance systems

Purpose: personal data collected by our video surveillance system will be treated in order to preserve the safety of facilities, goods and people of the Shopping Center
Preservation: The personal data of the interested party will be kept for a maximum period of 30 days, unless such data are necessary to deal with a claim or exercise of rights in which case they will be kept until the end of the same
. Legitimation: The legitimacy of the processing is based on the legitimate interest of the data controller (protection of facilities, goods and persons in the Shopping Centre
Recipients: In the event of criminal acts, the images obtained will be communicated to the state security forces. Outside these cases, no data will be transferred to third parties unless there is a legal obligation
. Ways of Obtaining: The personal data processed were obtained from the interested party through the video surveillance system. The categories of data treated are the following:

- Images

Specially protected data is not treated

12. Employee Identification Card

Purpose: Shopping centre management and access control
Preservation:The data will be kept for a maximum period of one year, unless such data are necessary to deal with a claim or exercise rights in which case they will be kept until the end of the same.
Legitimation: Legitimate Interest
Recipients:The communication of data to third parties is not foreseen except in the case of compliance with a legal obligation


13 .Subscribers to the email list

Purpose:

- Sending information of your interest about activities, offers and promotions of the mall or the businesses installed in Habaneras S.C.
- Preparation of a commercial profile to send information adapted to your tastes and interests about activities, promotions and news of the shopping center more suited to your tastes and interests

Preservation: The personal data will be kept until the interested party applies for its deletion..
Legitimation: interested party´s consent
Recipients: The communication of personal data is not foreseen except in the cases established by a legal obligation.
Ways of Obtaining: The personal data that we treat have been obtained from the interested party
The categories of data treated are the following:

- Identification data
- Contact information

Specially protected data is not treated

14 . Subscribers to the email list subscribed before May 25, 2018

Purpose:

- Sending information of your interest about activities, offers and promotions of the mall or the businesses installed.
- Preparation of a commercial profile to send information adapted to your tastes and interests about activities, promotions and news of the shopping center more suited to your tastes and interests.

Conservation: The personal data will be kept until the interested party applies for its deletion.
Legitimation: Legitimate interest of the controller
Recipients: The communication of personal data is not provided except in the cases established by a legal obligation.
Ways to Obtain: The personal data we process has been obtained from the interested party
The categories of data processed are the following:

- Identification data
- Contact information

Specially protected data is not treated

15 .Users of Free Wi-Fi Service

Purpose:The personal data collected through the connection’s forms Wi-Fi service will be treated in order to facilitate access and connection to the free Wi-Fi service for customers. In addition, if you give us your consent, we will use your data to send you information about activities, offers and promotions of the mall or the businesses installed.
Conservation: Personal data related to users connected to the Wi-Fi service will be kept for a maximum period of one year.
The personal data for sending information via email about activities and information of the shopping center will be kept until the interested party applies for its deletion. Legitimation: The legitimacy of the treatment is based on the execution of the contract to provide Wi-Fi service to shopping center’s customers
Recipients: : No data will be transferred to third parties except by legal obligation
Ways to Obtain: The personal data we process has been obtained from the interested party
The categories of data processed are the following:

- Identification data
- Identification data of the terminal or equipment from which it is connected

Specially protected data is not treated

16 .Social Networks

Purpose: : We inform you that the data obtained through Habaneras accounts, profiles or different social networks, will be treated within the social network itself in order to interact and maintain contact and information with the followers. In the case that we programmed activities on these social networks that involve a different treatment of data, we will inform about the privacy policy applicable.
Conservation: The personal data obtained will be kept as long as the interested party remains interested in the contents generated by our accounts or social networks and remains as a follower.
Legitimation: The legitimacy of the treatment is based on the unequivocal consent of the user.
Recipients: : No data will be transferred to third parties except by legal obligation
Ways to Obtain: : No data will be transferred to third parties except by legal obligation
The categories of data processed are the following:

- Identification data

Specially protected data is not treated

17. . Personnel Selection

Purpose:Participate in the personnel selection processes of our company
Conservation:The personal data will be kept until the interested party applies for its deletion or in any case, for a maximum period of two years.
Legitimation: Consent of the interested party.
Recipients:Only if you permit, your data will be communicated to the businesses installed in Habaneras Shopping Center in order to participate in your personnel selection processes.
Forms of Obtaining: The personal data that we process are obtained from the interested party through CV, forms or selection interviews with us.
The categories of data processed are the following:

- Identification data
- Personal characteristics
- Academic data
- Data related to employment history

Specially protected data is not treated

18 .Rights of the Interested Party

- You have the right to obtain confirmation about whether we are treating personal data that concerns you.
- Users have the right to access their personal data, as well as to request the rectification of inaccurate data or to request its deletion when they consider the data is no longer necessary for the purposes that were collected.
- Under certain circumstances, the interested parties may request the limitation of the processing of their data, in that case, we will only keep them for the exercise or defense of claims.
- Under certain circumstances and for particular reasons, the interested parties may object to the processing of their data. In these cases, the data will not be processed except for legitimate reasons or for the exercise or defense of possible claims.
- Under certain circumstances, you will have the right to receive the personal data that concerns you in a structured format for common use and mechanical reading

You can exercise your rights through the means of contact indicated in this policy (Email address or in person), as well as obtain more information about your rights and access models at the following web address:

http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/derechos/index-ides-idphp.php

Likewise, we inform you about your right to file a claim with the Spanish Agency for Data Protection if the request to exercise any right has not been satisfied correctly or for any other reason you consider that your personal data is not being treated correctly. To do this, you can go to the following web address:

https://sedeagpd.gob.es/sede-electronica-web/vistas/formSpam/spamDenuncia.jsf;jsessionid=3FC268F548C59FFD4F289FCC645855EA