Here we have placed information on the processing of personal data in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC – hereinafter referred to as “GDPR”.
Personal data administrator
The administrator of your personal data is Gran Canaria 4 You, based in Las Palmas de Gran Canaria, NIF Z0356055C, address: C/ Portugal 2, 35010, Las Palmas de Gran Canaria, operator of the website www.grancanaria4you.pl (hereinafter referred to as the “Administrator”).
Contact
Contact us if you want to obtain more information about the processing of your personal data or to exercise your rights. You can do this in two ways:
by letter to the address: C/ Portugal 2, 35010, Las Palmas de Gran Canaria, or
by e-mail to the address: info@grancanaria4you.pl
Rights
If we process your personal data, you have the right to:
access your personal data,
request its rectification,
delete it,
limit its processing,
object to the processing – if we process personal data on the basis of a legally justified interest,
to transfer data – if we process personal data in an automated manner based on consent or a contract.
In addition, you have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office in Poland (Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw) and in Spain the Agencia Española de Protección de Datos (C/ Jorge Juan, 6. 28001 – Madrid).
If the basis for the processing of personal data is consent, you have the right to withdraw it in any way, at any time, which does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
The remaining information has been divided according to the groups of people whose data is processed:
Customers and other contractors and their employees
People contacting via e-mail and contact form
Information on the processing of personal data for marketing purposes
Information on the processing of personal data on social networking sites
- IF YOU ARE OUR CUSTOMER, CONTRACTOR OR THEIR EMPLOYEE – THIS INFORMATION IS FOR YOU:
Purpose of processing personal data
We process your personal data for the purpose of performing the contract, as well as in connection with the performance of the Administrator’s obligations, in particular tax and accounting.
If you are a person designated by the Administrator’s contractor to perform the contract, we inform you that we process your personal data in the following scope: first name, last name, position, email address, telephone number. We obtained the above personal data from your employer, i.e. our contractor. We process your personal data in order to maintain contact with you for the purposes of performing the concluded contract.
In each case, we will also process your personal data for the purpose of determining, pursuing or defending against claims.
Legal basis for processing personal data
If you are our client or contractor
We will process your personal data on the basis of art. 6 sec. 1 letter b of the GDPR (necessity of processing for the performance of the contract) and on the basis of art. 6 sec. 1 letter c GDPR in connection with the relevant regulations imposing legal obligations on the Administrator.
If you are a person designated by the contractor to perform the contract
We will process your personal data on the basis of art. 6 sec. 1 letter f of the GDPR, i.e. on the basis of the legitimate interest of the Administrator consisting in maintaining contact for the purpose of performing the contract.
In each case, we process your personal data on the basis of art. 6 sec. 1 letter f of the GDPR, i.e. on the basis of the legitimate interest of the Administrator consisting in ensuring legal protection enabling the Administrator to determine, pursue or defend against claims.
Recipients of personal data
Your personal data may be made available to external entities providing services to the Administrator, e.g. accounting, legal or IT services. In addition, your personal data may be made available to public authorities authorized to do so.
We process your personal data only within the European Economic Area.
Duration of storage of personal data
We will store your personal data for the duration of the contract, and then for the limitation period for claims resulting from the provisions rights.
Obligation to provide personal data
Providing personal data is a condition for concluding a contract. Providing personal data is voluntary, but failure to provide it will prevent cooperation.
- IF YOU CONTACT US BY E-MAIL, PHONE OR CONTACT FORM – THIS INFORMATION IS FOR YOU:
Purpose of personal data processing
We process your personal data for the purpose of handling the application. Further processing is also possible for the purpose of determining, pursuing or defending against claims ami.
Legal basis for the processing of personal data
We will process your personal data on the basis of the legitimate interest of the Administrator, i.e. art. 6 sec. 1 letter f of the GDPR – which is the handling of received notifications and ensuring legal protection enabling the Administrator to determine, pursue or defend against claims.
Recipients of personal data
Your personal data may be made available to external entities providing services to the Administrator, e.g. legal, advisory or IT services. In addition, your personal data may be made available to public authorities authorized to do so.
We process your personal data only within the European Economic Area.
Duration of personal data storage
We will store your personal data for the period of handling the notification, and then for the limitation period for claims resulting from the provisions of generally applicable law.
Obligation to provide personal data
Providing personal data is voluntary, but failure to provide them will make it impossible to respond to an inquiry in which it is necessary to identify a person – e.g. a notification about the implementation of rights.
- INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR MARKETING PURPOSES
Purpose of personal data processing
We process your personal data for the purpose of conducting marketing activities, including primarily sending information about our activities. Further processing is also possible for the purpose of determining, pursuing or defending against claims.
Legal basis for personal data processing
We will process your personal data on the basis of previously granted consent, i.e. art. 6 sec. 1 letter a of the GDPR, which you can express by checking the checkbox under the contact form on the website https://www.grancanaria4you.pl/kontakt and on the basis of art. 6 sec. 1 letter f of the GDPR, i.e. on the basis of the legitimate interest of the Administrator consisting in ensuring legal protection enabling the Administrator to determine, pursue or defend against claims.
Remember that you can withdraw your consent at any time.
Recipients of personal data
Your personal data may be made available to external entities providing services to the Administrator, e.g. legal, advisory, marketing or IT services. In addition, your personal data may be made available to public authorities authorized to do so.
We process your personal data only within the European Economic Area.
Duration of storing personal data
We will process your personal data until you withdraw your consent, no longer than 10 years, and then for the limitation period for claims resulting from the provisions of generally applicable law.
Obligation to provide personal data
Providing personal data is voluntary, but failure to provide it will prevent you from receiving marketing content.
- INFORMATION ON THE PROCESSING OF PERSONAL DATA ON SOCIAL MEDIA PORTALS
We have profiles on the social networking sites Facebook and Instagram and therefore we will process the personal data of users who follow them.
In addition, the administrator of personal data is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. In order to familiarise yourself with the principles of personal data processing by this provider, please read the privacy policy provided by it.
Purpose and legal basis of personal data processing
Personal data of users of social media portals to the extent processed by the Administrator are processed for the purpose of:
informing users about our activities on the basis of art. 6 sec. 1 letter f of the GDPR, i.e. the legitimate interest of the Administrator consisting in promoting its activities,
providing answers to questions asked on the basis of art. 6 sec. 1 letter f of the GDPR, i.e. the legitimate interest of the Administrator consisting in communicating with users of social media portals.
Duration of storage of personal data
Your personal data will be stored until you follow our profile on the social media portal, and in the case of asking a question using it – for the time of providing the answer, and then until the limitation period for claims.
Recipients of personal data
Your personal data may be made available to external entities providing services to the Administrator, e.g. legal, accounting, marketing, consulting or IT services. In addition, your personal data may be made available to public authorities authorized to do so.
Obligation to provide personal data
Providing personal data is voluntary, if you do not follow our social media account or do not write to us using it, we will not process your personal data.