This privacy policy is applicable to the website https://www.gourmet-market.com (hereinafter the Website).

Please read this policy carefully. Here you will find important information about how your personal data will be processed and your rights under the relevant legislation in force.

We reserve the right to update this privacy policy at any time due to business decisions and to comply with possible changes to legislation or case law. If you have any doubts or need further clarification with regards to this privacy policy or your rights, please contact us through the channels indicated below.

You declare that the information you provide, now and in the future, is correct and truthful and undertake to inform us of any changes to said information. When providing the personal data of a third party, you agree to obtain prior consent from the party in question and to inform them of the content of this policy.

Generally speaking, the fields on our forms that are marked as mandatory must be completed in order for us to process your requests.

1. Who is responsible for processing your personal data?

The data controller for processing your data collected via the website is IBEROSTAR HOTELES Y APARTAMENTOS, S.L., with registered address at C/ General Riera 154, 07010, Palma de Mallorca, Balearic Islands, Spain (hereinafter GRUPO IBEROSTAR).

The data controller for processing the booking data for the Restaurant, is GESTORA DE ACTIVOS EN LEASING, S.L.U. with registered office at Avenida Ernesto Sarti, 5, Adeje,Santa Cruz de Tenerife (hereinafter the Restaurant).

The aforementioned processing is regulated by that established in this privacy policy.

You can contact the Data Protection Officer of Iberostar Group at privacy.dpd@grupoiberostar.com.

The booking platform data accessible from the website https://www.gourmet-market.com is operated and managed by “El Tenedor” (hereinafter “El Tenedor”), in agreement with its privacy policies, consult https://www.eltenedor.es/legal.

2. Why do we process your data?

Website users’ data is processed by IBEROSTAR in order to manage its relationship with users, deal with their requests and queries, administer and manage the security of the website and fulfil IBEROSTAR’s legal obligations. This data will also be processed for Iberostar Group’s internal administrative purposes, statistics and quality assessment.

If you subscribe to our Newsletter, your personal data will be processed in order to manage your subscription, including the sending of information about our products or services through various means (such as email or, where appropriate, SMS).

3. Who can we share your data with?

Your data will only be provided to third parties under legal obligation, with your consent or when your request requires such communication.

4. Legal grounds for processing

The grounds for processing your data include the administration of the legal relationship established with you, the provision of requested and contracted services, and the fulfilment of legal obligations, especially in respect of the applicable legislation relating to accounting and tax.

The management of Website security is based on the premise of legitimate interest. The production of statistics is based on our legitimate interest in evaluating the quality of the website and our services.

The sending of offers and sales communications is based on the consent that has been requested, without the withdrawal of such consent conditioning the provision of the contracted services.

5. For how long will we store your data?

We generally store personal data for the duration of your relationship with us and always in accordance with the terms set forth in applicable legal regulations, such as for accounting and tax purposes, and for the duration necessary to handle any possible liabilities that arise as a result of data processing. We will delete your data once they are no longer relevant to, or necessary for, the purposes for which they were collected.

Data processed for commercial purposes will be stored in a valid manner as long as its deletion is not requested.  The media in which your consent for the processing of your data for these purposes is recorded, for example, the electronic form submission logs, will be kept for the entire period of processing and the applicable limitation periods.

6. What are your rights?

You have the right to receive confirmation of whether or not we are processing your personal data, and, in such case, to access them.  Likewise, you can request that any incorrect data be rectified or incomplete data be completed, as well as request removal of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, you can request that the processing of your data be limited. In such cases, we will only process the data required for filing, processing or responding to complaints, or with a view to protecting the rights of other parties. In certain situations, and for reasons related to your specific circumstances, you may object to the processing of your data. In this case, we will stop processing the data unless legitimate compelling grounds are given that prevail over your interests, rights and liberties, or in order to file, process or respond to complaints. Additionally and under certain circumstances, you may ask for the portability of your data so that it can be transferred to another data controller.

You can revoke the consent you have granted for certain purposes without this affecting the lawfulness of the processing undertaken before consent was withdrawn, and file a claim before the Agencia Española de Protección de Datos [Spanish Data Protection Agency].

The cancellation of the processing of the newsletter can be requested through the link “unsubscribe” in the newsletter received or by sending an email to the following email address: lopd@iberostar.com

In order to exercise your rights, you must send the person responsible for processing data a request together with a copy of your national identification document or another valid form of identification by post or by email to the addresses given in the “Who is responsible for processing your data?” section.

For further information about your rights and how to exercise them visit the Agencia Española de Protección de Datos website at http://www.aepd.es.