Privacy Policy

Who is responsible for this website?

Identity of the Data Controller: JUAN VICENTE CARDET BORILLO.

Trade name: NAVEGA Y DISFRUTA

NIF/CIF: 52795816Y

Address: Callejón Explanada de Castillete S/N, atraque 170, Puerto de Mogán, cp. 35139, Gran Canaria

Email: info@navegaydisfruta.com

Activity:Tourism

Contact details of the data controller or representative, and the data protection officer, if applicable: Callejón Explanada de Castillete S/N, atraque 170, Puerto de Mogán, cp. 35139, Gran Canaria / info@navegaydisfuta.com

What personal data is collected on this website?

For the purposes set out in this Privacy Policy, NAVEGA Y DISFRUTA collects and processes the following Personal Data, depending on the different products or services requested on this Website:

Identifying data: name, surname.

Contact information: postal address, email address, mobile phone number.

Navigation data: IP address, device type and identification, browser type, domain through which the website is accessed, browsing data, activity on the website.

What is the legal basis for processing this data?

We process your personal data based on the following legal bases:

• The performance of a contract with NAVEGA Y DISFRUTA, for the provision of services/sale of products.
• The user’s consent regarding contact, subscription to content, and sending of commercial communications via email, cookies, or messaging systems.
• The legitimate interest of the data controller in protecting users of the NAVEGA Y DISFRUTA website from abuses and fraud in the use of our services.

For what purposes will we process your data?

On this website, there are different forms, and the information collected from each form will be used as follows:

Contact form: There is a contact form for inquiries, suggestions, or professional contact. In this case, the email address will be used to respond to inquiries and send the requested information through the website.

Subscription form: There is a form to activate newsletter subscription.. The provided data will be used exclusively to send the newsletter and keep you updated on news and occasional offers, exclusive to subscribers of navegaydisfruta.com.

Retention period of personal data

Customer data: The retention period of personal data will vary depending on the service the customer contracts. In any case, it will be kept for the minimum necessary period, up to:

– 4 years: Law on Social Offenses and Sanctions (obligations regarding affiliation, registration, deregistration, contribution, salary payment, etc.); Arts. 66 and onwards. General Tax Law (accounting books, etc.).

– 5 years: Art. 1964 of the Civil Code (personal actions without a special deadline).

– 6 years: Art. 30 of the Commercial Code (accounting books, invoices, etc.).

– 10 years: Art. 25 of the Law on Prevention of Money Laundering and Financing of Terrorism.

Subscriber data: from the moment the user subscribes until they unsubscribe.

Potential customer data: the data will be kept for the duration of the established commercial relationship and, once concluded, for two years unless the user requests deletion earlier.

What are your rights regarding the use of data?

Any person has the right to obtain confirmation as to whether we are processing personal data concerning them or not.

Interested individuals have the right to:

• Request access to personal data concerning the data subject.
• Request the rectification or erasure of personal data.
• Request the cancellation of personal data.
• Request the limitation of the processing of personal data.
• Object to the processing of personal data.
• Request the portability of personal data.

If you have given your consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

If you believe that your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority through its website: https://www.aepd.es/es

To exercise these rights, you can write to info@navegaydisfruta.com.

There is a form available to exercise your rights, which you can request by email or, if you prefer, you can use the ones prepared by the Spanish Data Protection Agency or third parties.

These forms must be electronically signed or accompanied by a photocopy of your ID card.

If you are representing someone, you must attach a copy of their ID card or it must be signed with their electronic signature.

The forms can be submitted in person, sent by mail, or emailed to the address of the data controller indicated at the beginning of this text.

What are your rights regarding the use of data?

Any person has the right to obtain confirmation as to whether we are processing personal data concerning them at NAVEGA Y DISFRUTA or not.

Interested individuals have the right to:

• Request access to personal data concerning the individual.
• Request the rectification or erasure of personal data.
• Request the cancellation of personal data.
• Request the limitation of the processing of personal data.
• Oppose the processing of personal data.
• Request the portability of personal data.

If you have given consent for a specific purpose, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

If you believe that your rights regarding the protection of your personal data have been violated, especially if you have not obtained satisfaction in the exercise of your rights, you have the right to lodge a complaint with the competent Data Protection Authority through its website: https://www.aepd.es/es

To exercise these rights, you can write to info@navegaydisfruta.com.

There is a form available to exercise your rights, which you can request via email, or if you prefer, you can use those provided by the Spanish Data Protection Agency or third parties.

These forms must be electronically signed or accompanied by a photocopy of your ID card (DNI).

If you are representing someone, you must attach a copy of their ID card (DNI), or it must be signed with their electronic signature.

The forms can be submitted in person, sent by mail, or by email to the address of the data controller indicated at the beginning of this text.

Remarketing actions: Google Ads

Google Ads is a platform by Google designed for advertisers who want to advertise on Google. At navegaydisfruta.com, we use Google Ads, the advertising platform by Google that allows creating campaigns and ads to display them on other websites. When generating an ad, the audience can be targeted based on:

• Location
• Demographics (age, gender, etc.)
• Interests (activities, hobbies, etc.)
• Online and offline purchase behavior
• Etc.

The data obtained through Google Ads is subject to this privacy policy from the moment the user submits their data on this website or accepts cookies. Under no circumstances will the information from Google be used for a different purpose.

Remarketing actions: Facebook/Meta Ads

This website uses Facebook and Instagram Ads from META:

Facebook Ads allows targeting the audience for ad delivery.

Through Facebook’s custom audience feature, we can create an audience based on user data and subscribers of this website. To do so, it is necessary to share the databases with Facebook to later create custom audiences and direct ads to people with similar profiles.

For ad targeting according to Facebook’s policies, no sensitive personal information is used or shared with third parties or other advertisers. Facebook will delete this information once the process is completed, and it will ensure confidentiality.

Facebook’s ad system allows displaying relevant and useful ads without revealing your identity to advertisers, reaching specific groups of people with determined profiles.

As a user, you can revoke your consent at any time through https://www.facebook.com/settings?tab=ads, where you can configure ad preferences. Additionally, you can indicate that you do not want interest-based ads from Facebook or other companies through the European Interactive Digital Advertising Alliance (EDAA) of Your Online Choices (http://www.youronlinechoices.com/es/) or through the settings of your computer or mobile device.

To use the custom audience feature, this website utilizes Facebook’s Website Custom Audience tool, which makes use of the anonymized Facebook pixel that tags visitors to this website. If you wish to opt out of the use of Facebook’s Website Custom Audiences, you can do so at: https://www.facebook.com/ads/website_custom_audiences/.

For more information about the scope and purpose of data collection by Facebook and its subsequent processing, as well as to configure your privacy settings, you can visit the following links:

https://www.facebook.com/privacy/explanation.

Facebook Conversion Tracking Pixel

For optimizing advertising campaigns on ads displayed on Facebook and for statistical purposes, the Facebook Conversion Tracking Pixel from Facebook Inc., 1601 s. California Ave, Palo Alto, CA 94304, is used to track user actions after they click on an ad.

The data obtained through this pixel is anonymous and does not refer to identified individuals, nor is it stored or used to create profiles with personal data.

This data may be stored and processed by Facebook, and Facebook may link this data to your Facebook account and use it for its own advertising purposes, in accordance with Facebook’s data usage policy, which you can find at https://www.facebook.com/about/privacy/, recently updated at https://www.facebook.com/about/privacy/update.

By using Facebook and its partners, you can enable the display of advertising both on and off Facebook, and a cookie may be stored on your computer for this purpose.

Breach notification and disclosure

Security Notification and Breach Disclosure

At JUAN VICENTE CARDET BORILLO, we take appropriate security measures commensurate with the level of risk to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and the nature of personal information. However, if JUAN VICENTE CARDET BORILLO determines that your service data has been misused (even by an employee of JUAN VICENTE CARDET BORILLO), exposed due to a security breach, or acquired incorrectly by a third party, JUAN VICENTE CARDET BORILLO will promptly notify you of such security breach, unauthorized appropriation, or acquisition.

To which recipients will your data be communicated?

Third-Party Providers and Data Sharing

Many tools used on this website for data management are contracted through third-party providers. In order to provide strictly necessary services for the development of our activities, JUAN VICENTE CARDET BORILLO shares data with the following providers under their respective privacy conditions:

External service providers (e.g., analytics, marketing campaign management, website management, email distribution, and other similar service providers) to enable them to perform business functions on behalf of JUAN VICENTE CARDET BORILLO. Current provider: Chroma Branding, S.L.

The web development and maintenance company, as well as the hosting company, may have occasional access to this website. Both parties have signed a service provision contract that obligates them to maintain the same level of privacy as applied to the data processing on this website.

Any international data transfers resulting from the use of tools or service providers will adhere to the Privacy Shield agreement, which ensures that American software companies comply with European data protection policies regarding privacy, confidentiality, and data security.

Specifically, this website uses the following tool:

• Email marketing tool: Mailchimp

Confidentiality and security of the data

Accuracy and truthfulness of the data

Revocability

The consent given, both for the processing and the transfer of personal data of the interested parties, can be revoked at any time by notifying JUAN VICENTE CARDET BORILLO (NAVEGA Y DISFRUTA) in accordance with the terms established in this Policy for the exercise of ARCO rights. This revocation will in no case have retroactive effect.

Change in the Privacy Policy

JUAN VICENTE CARDET BORILLO reserves the right to modify this policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, it will announce the changes on this page with reasonable advance notice before their implementation.