VINCI ACTIVE SPORT, S.L. is responsible for processing the personal data of the data subject and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). Below is the relevant information regarding data processing:
Purpose of Processing
Economic and accounting management, tax management, administrative management, invoicing management, customer and supplier management, payment collection, payments, and related services, history of business relationships, video surveillance of facilities, and maintaining business relationships. Management of enrollment in complementary offers developed by the data controller, such as competitions, sweepstakes, promotional activities, and other organized events.
Data Types
Only the minimum necessary data for the intended purposes will be requested. This may include, but is not limited to: name, address, date of birth, phone number, email address, scanned copy of passport or identity document, bank account or credit card details, etc. If you wish to know the specific purpose of a particular data item, you may request it at finance@jc-mc.com.
Legal Basis for Processing
The legal basis for processing is the explicit, unequivocal, and informed consent of the data subject and the legitimate interest of the data controller, where applicable. If the data subject, in exercising their rights, chooses not to provide the necessary information to the data controller, the business relationship cannot be maintained.
Data Retention Criteria
Data will be retained no longer than necessary to fulfill the purpose of processing or as required by legal obligations. Once no longer needed, data will be securely deleted to ensure anonymization or complete destruction.
Data Communication
No data will be shared with third parties unless necessary for the development and execution of the stated processing purposes with our service providers related to the contract or requested services. In such cases, confidentiality and data processing agreements compliant with current privacy regulations will be established.
International Transfers
According to Article 44 of the GDPR, authorization for international data transfers to a country that has not been declared as having an adequate level of protection can only be granted if sufficient guarantees are obtained. This may be achieved through a written contract between the data exporter and importer, ensuring necessary safeguards for the protection of the data subjects and their rights. The data controller may use service providers with servers or headquarters in different locations, potentially resulting in such transfers. For an updated list of providers, please contact the data controller at finance@jc-mc.com.
DATA PROTECTION CLAUSE FOR ID COPY
Purpose of Processing
A copy of your National Identity Document (ID) will be retained for the purpose of online check-in, incident management, and compliance with applicable legal requirements related to the services provided by our company.
Legal Basis
The processing of your data is necessary to comply with a legal obligation under Article 6.1(c) of the GDPR.
Retention Period
Your ID copy will be retained for one month to fulfill the purpose for which it was collected and as long as a contractual or business relationship with our company exists. Subsequently, your data will be blocked and only accessible to authorities for the purpose of legal liabilities, within the legally established periods.
Security Measures
VINCI ACTIVE SPORT, S.L. adopts the necessary technical and organizational measures to ensure the security of your personal data and prevent alteration, loss, unauthorized access, or processing, in accordance with the risk level and as established in the GDPR.
Data Communication
The data subject may authorize or deny processing by marking “X” in the appropriate box for YES (I give consent) or NO (I do not give consent) for the following recipient categories.
Rights of the Data Subject
- The right to withdraw consent at any time.
- The right to access, rectify, transfer, and delete your data, and to restrict or oppose processing.
- The right to file a complaint with the Supervisory Authority (aepd.es) if you believe the processing does not comply with current regulations.
Contact details for exercising your rights:
VINCI ACTIVE SPORT, S.L., B01606003, C/ Ca´n Calafat, 33, 2º, Pta 33, – 07610 Palma (Illes Balears), finance@jc-mc.com
To carry out the described data processing, the data controller requires your explicit consent or that of your legal representative. The data subject consents to the processing of their data under the stated terms.