GDPR

Data protection

The principles, rights and safeguards applied to personal-data processing.

01

Data-protection principles

Binissafullet Vell processes personal data in line with the GDPR principles:

Lawfulness, fairness and transparency

We process data on a valid legal basis and provide clear information.

Purpose limitation

We collect data for specified, explicit and legitimate purposes.

Data minimisation and accuracy

We use only necessary data and take steps to keep it accurate.

Storage limitation

We retain data only for as long as necessary or required by law.

Integrity and confidentiality

We protect data using appropriate technical and organisational measures.

Binissafullet Vell

Controller
Annarosa Bendetti
CIF
Y5977559B
Address
Carretera de Binissafullet 64, Sant Lluís, Balearic Islands, Spain
02

Data-subject rights

You may request access, rectification, erasure, restriction, objection and portability; you may also withdraw consent and ask not to be subject to decisions based solely on automated processing where the legal requirements are met.

How to exercise your rights

Email binissafullet@binissafullet.com or send a request to the property address, providing what is needed to verify your identity.

Response period

We will reply within one month, subject to extensions allowed by law for complex requests.

03

Data security

We apply access controls, HTTPS communications, updates, backups and organisational procedures proportionate to the risks. Authorised staff and suppliers are bound by confidentiality duties.

Prevention

Measures against unauthorised access, loss, destruction, alteration and improper disclosure.

Incident management

Procedures to assess and report personal-data breaches where and when the law requires it.

04

Retention periods

At the end of the applicable period, data is securely deleted or anonymised unless a further legal retention obligation applies.

Bookings and invoicing

For the duration of the relationship and afterwards for the applicable tax, accounting and legal periods.

Contact enquiries

For as long as needed to reply and manage any pre-contractual relationship.

Marketing

Until consent is withdrawn or the period stated in the specific notice expires.

Technical data

For the period strictly needed for security and according to the applicable cookie lifetimes.

05

Contact and supervisory authority

For questions or to exercise your rights, use the controller’s details below. If you believe the processing infringes data-protection law, you may complain to the Spanish Data Protection Agency (AEPD), www.aepd.es, C/ Jorge Juan 6, 28001 Madrid.

Binissafullet Vell

Controller
Annarosa Bendetti
CIF
Y5977559B
Address
Carretera de Binissafullet 64, Sant Lluís, Balearic Islands, Spain