1. USER INFORMATION
In accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (RGPD) and Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights, you will be informed of the identity of the data controller, the purpose of the processing, the legitimacy of the processing of your data, the categories of recipients of transfers of your data (if any), the origin of your processed data if different from your voluntary indication and the rights you have as a data subject.

2. INFORMATION ON THE CONTROLLER OF THE PROCESSING OPERATION
Name of the responsible person: Roy Richter
NIE: Y-8451117-B
Postal address: Avinguda d’Amèrica, 7 – 07590 Cala Ratjada (Illes Balears)
Phone: +34 871 855 711
E-mail: info@activo-calarajada.es

3. INFORMATION ON THE PURPOSE AND LAWFULNESS OF PROCESSING
The following operations are foreseen to carry out the processing:
In the legitimate interest of the controller:

• Economic and accounting management, fiscal management, administrative management, invoicing management, management of customers and suppliers, management of collections, payments and related services, history of commercial relations, compliance with the due diligence measures of Law 10/2010 on the Prevention of Money Laundering and Terrorist Financing.

By explicit, unambiguous and informed consent of the data subject:

• All necessary procedures for formalising the purchase and sale of real estate.
• Sending commercial advertising messages by email, fax, SMS, MMS, in social communities or by any other present or future electronic or physical means that enable commercial communications. These communications are carried out by the RESPONSIBLE and relate to its products and services or those of its employees or suppliers with whom it has a promotional agreement. In this case, third parties never have access to personal data.
• Conducting statistical studies.
• Processing of orders, requests or enquiries of any kind made by the user via one of the forms of contact made available to him/her.
• To send the website newsletter.

Data retention criteria: The data will be retained for the duration of the business relationship between the parties. After the termination of this business relationship, the data will be blocked to prevent the possibility of access and only released in the event that this data is requested by a legal authority (tax, commercial, labour or judicial authority) from the data controller, and only until the date of expiry or legal limitation. The data is then destroyed in an appropriate manner and with the appropriate safeguards to make its recovery impossible.

4. INFORMATION ON THE TRANSMISSION OR COMMUNICATION OF DATA
The personal data may be communicated to tax, accounting and commercial advisors, banks, savings banks and financial institutions, tax authorities and other competent public bodies, notaries and land registry offices and other intermediaries for the purchase and sale of real estate in order to maintain the business relationship and/or carry out operations. The data will not be passed on to other third parties unless we are legally obliged to do so. No data is transferred to third countries outside the European Economic Area or to international organisations.

5.INFORMATION ABOUT THE DATA SUBJECT’S RIGHTS AND HOW TO EXERCISE THEM
Rights of the user and their exercise:
The data subject has the right to: Access to their data, rectification of their data, erasure of their data, portability of their data, restriction of the processing of their data, objection to the processing of their data, withdrawal of their consent, lodge a complaint with the supervisory authority, lodge an appeal.
object to the processing of your data, revoke the consent given, lodge a complaint with the supervisory authority, bring a legal action.

You can exercise these rights by sending a reasoned letter to the data controller or its representative stating which right you wish to exercise and a photocopy of your identification document. You can also ask the controller in advance to provide you with a standard form for the right you wish to exercise.

Exercising the rights does not involve any administrative costs for the data subject, with the exception of postage costs if you choose to send them by post.
You can exercise your rights:

• In person at the premises of the data controller, where you must identify yourself with your identity card or equivalent document.
• By e-mail to the address indicated in the section on identification of the data controller and enclosing a photocopy of your identity card or equivalent document.
• By post (preferably as a certified copy) to the address indicated in the section on identification of the data controller, together with a photocopy of your identity card or equivalent document.

Contact details for exercising your rights:

Avinguda d’Amèrica, 7 – 07590 Cala Ratjada (Illes Balears), info@activo-calarajada.es

6. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
By ticking the appropriate boxes and entering data in the fields marked with an asterisk (*) in the contact form or download forms, users expressly and freely and unequivocally accept that their data is required for the provider to fulfil their request, with the entry of data in the other fields being voluntary. The user guarantees that the personal data provided to the RESPONSIBLE is true and is responsible for notifying any changes to this data.
The RESPONSIBLE party expressly informs and guarantees users that their personal data will not be disclosed to third parties under any circumstances and that the express, informed and unequivocal consent of users will be obtained beforehand for any type of disclosure of personal data. All data requested via the website is mandatory, as it is necessary for the provision of an optimal service to the user. If not all data is provided, it cannot be guaranteed that the information and services offered are fully tailored to your needs.

7. SAFETY MEASURES
That the RESPONSIBLE party, in accordance with the applicable rules on the protection of personal data, complies with all the provisions of the GDPR for the processing of personal data under its responsibility and manifestly adheres to the principles described in Article 5 of the GDPR, according to which the data are processed lawfully, fairly and transparently vis-à-vis the data subject and are adequate, relevant and limited to what is necessary for the purposes for which they are processed.
The OPERATOR guarantees that it has taken appropriate technical and organisational measures to apply the security measures laid down by the GDPR in order to protect the rights and freedoms of users and that it has provided them with the relevant information to enable them to exercise them.