Privacy policy
WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?
Data controller for reservations at SHA Spain: AlbirHills Resort, S.A.U.
- TIN: A54081518
- Address: Calle Verderol, 5 (El Albir), 03580, L’ Alfas Del Pi, Alicante (Spain)
- DPO email: [email protected]
Data controller for reservations at SHA Mexico: ShaClinicMexico S.A.
- TIN:
- Address:
- DPO email: [email protected]
WHAT KIND OF DATA DO WE PROCESS?
Depending on the products, services or functionalities that you want to enjoy at any time, we will need to process some data or others. In general, said data will be, depending on the case, the following:
- Your identification data: name, surname, TIN, foreigner identity number or passport, language, country from which you interact with us, etc.
- Contact details: telephone number, mailing address, email, etc.
- Financial and transactional data: your payment or card details, information on your purchases, orders, returns, etc.
- Connection, geolocation and browsing data (for example, if you interact with us from your mobile phone).
- Commercial information if you are subscribed to our newsletter.
- Data about your tastes and preferences.
Remember that when we ask you to fill in your personal data to give you access to a functionality or service on the website, we will mark some fields as mandatory since they are data that we need to be able to provide the service or give you access to the functionality in question.
Please note that if you decide not to provide us with this information, you may not be able to complete your registration as a user or you may not be able to enjoy those services or features.
FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?
Depending on how you interact with our website, we will process your personal data for the following purposes:
- For developing, fulfilling and performing the provision of the service
This purpose includes processing your data mainly for:
Contacting you regarding updates or informative communications related to the service purchased, including sending quality surveys about the products provided.
Managing the payment of the products you purchase, regardless of the payment method used.
Activating the mechanisms required to prevent potential fraud against you and ourselves during the purchase process. If we believe that a transaction may be fraudulent, this processing may result in blocking it.
Managing possible returns once you have made a purchase and managing requests for information about the availability of different products.
Invoicing and for making receipts, invoices and any other document showing payment for the purchases you have made on our platform available to you.
- For attending to requests or queries that you make through the different means incorporated into our platform.
We only process the personal data that is strictly necessary to manage or resolve your request or query.
- For your registration on our website
If you decide to register on our website, we need to process your data to identify you as a user of it and to give you access to the different functionalities, products and services that are available to you as a registered user. You can cancel your registered user account by contacting us through our Customer Service department.
- For marketing purposes.
When you subscribe to our newsletter, your personal data will be used for the periodic sending of company newsletters.
Remember that you can unsubscribe from the newsletter, at any time and free of charge, by contacting us through the email of the data controller or by following the instructions that we will offer you in each of our communications.
- Usability and quality analysis to improve our services (cookies)
If you access our platform, we inform you that we will process your browsing data for analytical and statistical purposes, that is, to understand how users interact with our platform to thus be able to improve it. Likewise, on occasion, we carry out quality actions and surveys aimed at finding out the level of satisfaction of our customers and users and detecting areas in which we can improve.
- For managing social media
If you follow us or contact us through the different social networks where we are present, we will process the data you provide us through them with the sole purpose of responding to your messages or comments and managing our contact list.
- For handling the complaints channel.
We process your data to handle your complaint and provide you with adequate protection from retaliation.
WHAT IS THE LEGAL BASIS FOR THE PROCESSING OF YOUR DATA?
The legal basis that allows us to process your personal data also depends on the purpose for which we process them. In this way, we will find different legal bases by virtue of the following purposes:
- Developing, fulfilling and performing the provision of the services.
It is necessary to process your data for performing the services that connect us with you. We believe that processing this data is positive for all parties involved in the payment of a purchase and, in particular, for you as it allows us to put in place appropriate measures to protect you against fraud attempts by third parties.
- Customer Service.
We believe that we have a legitimate interest in responding to the requests or queries that you submit to us through the various existing contact options. We believe that processing this data is also beneficial to you as it allows us to serve you properly and resolve the queries raised. When you contact us, especially for handling incidents related to products purchased through the platform, processing is necessary to perform the provision of services. When your query is related to exercising the rights that we inform you about below or complaints related to our products or services, what gives us a legal basis to process your data is that we are fulfilling legal obligations on our part.
- For your registration on our website
The legal basis is providing your consent when registering on our website.
- Marketing
The legal basis for processing your data for marketing purposes is your consent.
For example, when you agree to receive personalised information through various means, when you authorise us to send you newsletters, or when you accept the legal bases to participate in a promotional action.
To show you personalised information, we believe that we have a legitimate interest to carry out profiling with the information we have about you (your browsing, preferences or purchase history) and the personal data you have provided us such as your age range or language; we understand that the processing of this data is also beneficial to you because it allows you to improve your user experience and access information based on your preferences.
- Usability and quality analysis
We believe that we have a legitimate interest in analysing the usability of the platform and the level of user satisfaction; we believe that processing this data is also beneficial to you because our aim is to improve the user experience and provide a higher quality service.
- Social media
The legal basis is informed consent to respond to queries made through the social network and the moment when you follow us and want to be on our contact list.
Complaints channel.
Our legal basis is the fulfilment of a legal obligation.
FOR HOW LONG WILL WE KEEP YOUR DATA?
- Developing, fulfilling and performing the provision of the services.
We will process your data for the time needed to manage the purchase of the products or services you have purchased and the legally established deadlines afterwards for fulfilling our tax obligations. Sometimes we will only process some data until you decide, for example, in the case of payment data (bank card) that you ask us to store for possible purchases in the future.
- Customer Service
We will process your data for as long as it is necessary to handle your request or query.
- For your registration on our website
We will process your data for as long as you remain a registered user (i.e., until you decide to deregister).
- Marketing
We will process your data until you request to deregister or cancel your subscription to the newsletter. If you participate in promotional actions, we will keep your data for a period of six (6) months after the end of the action.
Regardless of the fact that we process your data for the time strictly necessary to fulfil the corresponding purpose, we will subsequently keep them duly stored and protected for as long as liabilities arising from the processing may arise, in compliance with the regulations in force at any given time. Once the limitation period is up for possible actions in each case, we will proceed to delete your personal data.
- Social media
We will process your data for as long as it is necessary to handle your request or query and while you are a follower of our profile.
- Complaints channel.
The data of the person making the complaint and of the employees and third parties will be stored in the reporting system only for the time needed to decide whether to initiate an investigation into the facts reported.
If it is proven that the data provided, or part of the data, are false, they will immediately be deleted as soon as such circumstance comes to light, unless this lack of truthfulness may constitute a criminal offence, in which case the data shall be stored for the time needed during legal proceedings.
In all cases, three months after the data have been entered, they shall be deleted from the complaint system, unless the data are kept as evidence of the system’s operation.
WILL WE SHARE YOUR DATA WITH THIRD PARTIES?
Personal data will not be transferred or communicated to third parties, except under legal obligation, when we obtain your express consent or we understand that there is a legitimate interest on our part, which will be duly communicated.
To fulfil the purposes indicated in this Privacy Policy, we must allow third parties that provide us with support for the services that we offer you to access your data. We list these third parties below:
- Financial entities for handling payments
- Technology service providers that provide us with support
- Logistics, transportation and delivery service providers and partners.
- WhatsApp: https://www.whatsapp.com/legal/updates/privacy-policy/?lang=es
- Companies of the ‘Group’ on the legal basis of the legitimate interest of Albir Center S.L., AlbirHills Resort S.A.U., Sha Clinic Mexico S.A. for administrative management. In some cases, informed consent will be requested, when the handling has another purpose.
We also inform you that we are present on the following social media networks to keep our followers informed about the company’s news and services: Facebook, LinkedIn, Twitter and YouTube.
You can access these social networks voluntarily through the links available on the website itself or by visiting them directly and on your own from the browser or app you have installed.
You should know that this website is not responsible for the use of data that these social media websites can make. However, when this data is generated in the social media website and derives from an interaction with our official account, we will be jointly responsible for the processing together with the social media website.
Creating an account on a social network by this company does not mean that you must consent to the processing of data without first being informed of the scope of this.
To consent to our transfer from this website and the processing of your data, you should carefully read the privacy policy of the social network you would like to access:
- Facebook: https://es-es.facebook.com/privacy/explanation
- LinkedIn: https://es.linkedin.com/legal/privacy-policy
- YouTube: https://www.youtube.com/intl/es/about/policies/#community-guidelines
- Twitter: https://twitter.com/es/privacy
- Pinterest: https://help.pinterest.com/es/topics/privacy-safety-and-legal
- Instagram: https://about.instagram.com/es-la/safety
This way, before clicking on the logos of the social networks that are on our website, you can get information and voluntarily do a redirect with prior knowledge on how your data is processed.
In the data collected through the complaints channel, data may be communicated to third parties when necessary for implementing corrective measures in the entity or processing disciplinary or criminal proceedings, where relevant.
WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?
We commit to respect the confidentiality of your personal data and to guarantee the exercise of your rights.
You can exercise them free of charge by sending us an email to [email protected], simply indicating the reason for your request and the right you want to exercise.
In the event that we consider it necessary to be able to identify you, we may request a copy of a document proving your identity. In particular, regardless of the purpose or legal basis under which we process your data, you have the right to:
Ask us for access to your data that we have.
Ask us to rectify the data we already have. Keep in mind that, by actively providing us with your personal data by any means, you guarantee that they are true and accurate and you agree to notify us of any changes or modifications to them.
Ask us to delete your data to the extent that they are no longer necessary for the purpose for which we need to treat them as we have previously informed you, or to the extent that we no longer have the legitimacy to do so.
Ask us to limit the processing of your data, which means that in certain cases you can ask us to temporarily suspend the processing of the data or to keep it beyond the necessary time when you may need it. If you have given us your consent for the processing of your data for any purpose, you also have the right to withdraw it at any time.
Receive personal data that concern you and that you have provided us, in a structured format, for common use and mechanical reading, as well as to transmit them to another data controller.
On the other hand, when the processing of your data is based on our legitimate interest, you will also have the right to oppose the processing of your data.
Finally, we inform you of your right to file a claim with the relevant data protection control authority, in particular, with the Spanish Data Protection Agency https://www.agpd.es/portalwebAGPD/index- ides-idphp.php
CHANGES TO THE PRIVACY POLICY.
We may modify the information contained in this Privacy Policy when we deem it appropriate. In the event that we do so, we will notify you in different ways through the platform, or even communicate it to your email address when the change in question is significant for your privacy, so that you can review the changes, evaluate them and, where appropriate, oppose or unsubscribe from any service or functionality.
INFORMATION ABOUT COOKIES
We use cookies and similar devices to facilitate your navigation on the platform, to know how you interact with us and, in certain cases, to be able to show you advertising based on your browsing habits. Please read our Cookies Policy to learn more about the cookies and similar devices we use, their purpose and other information of interest.