The personal data of our Customers is managed in accordance with transparency, purpose limitation, data minimisation, accuracy, integrity and confidentiality, and in compliance with other obligations and guarantees within the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the open movement of such data. To ensure compliance with the Regulation, our Privacy Policy has been updated: Data controller: Weichlein GmbH, Tax ID No: DE129491633, address: Fürstenrieder Str. 279, 81377 Munich, Germany email: info@barcelona-yachts.com
a. Purpose of processing: we handle your personal information to provide you with the services you require, to keep you updated about purchased or similar products and to issue invoices.
b. Origin and category of data processed: the personal data that we gather is from the personal information that you provide during the registration process on our website.
c. Storage time: the personal data provided will only be kept for as long as necessary; for the duration of the contractual relationship or for the necessary number of years to comply with our legal responsibilities.
d. Legitimacy: we only process your data in accordance with our data protection policy and only if we have your express permission and informed consent.
e. Recipients: your data will not be shared with third parties, except where there is a legal obligation to do so. However, to fulfil certain necessary aspects of the service, your data may be handled by third parties who act as data processors and are contractually required to comply with their legal obligations to keep information confidential and secret.
f. International transfers: you are informed that the Company contracts out the management of certain functions that are necessary to provide the service to data processors located outside the EU and that these promise an adequate level of personal data protection.
g. Rights: your personal data rights: – Right to request access to personal data. – Right to request correction or deletion. – Right to request restriction of processing or to object to processing. – Right to data portability.
To exercise your rights, you can email info@barcelona-yachts.com, specifying the right you wish to exercise.
We also notify you that you can file a rights protection claim with the Federal Commissioner for Data Protection and Freedom of Information (BfDI) , whose address is Graurheindorfer Str. 153 53117 Bonn Germany
Introduction
The personal data of our Customers is managed in accordance with transparency, purpose limitation, data minimisation, accuracy, integrity and confidentiality, and in compliance with other obligations and guarantees within the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the open movement of such data.
To ensure compliance with the Regulation, our Privacy Policy has been updated, which is shown below:
1. Who is the data controller of your data?
2. For what purpose do we process your data and under what legitimacy?
3. What categories of data do we process and where do we obtain that data?
4. Who are the recipients of your data and how do we store it?
5. How long do we keep your data?
6. What are your rights and how can you exercise them?
7. Changes to the Privacy Policy.
1. WHO IS THE DATA CONTROLLER OF YOUR DATA?
The Data Controller is the company Weichlein GmbH, Tax ID No: DE129491633, address: Fuerstenrieder Str. 279, 81377 Munich, Germany email: info@barcelona-yachts.com, represented by Marina Parra Carrasco, as Managing Director. The company is registered in Munich, Germany under the number HRB64796. Telephone: +49 89 85636630. The Company is involved in the rental of pleasure boats and we offer our services through the brand Barcelona Yachts. (Hereinafter, the ‘Company’).
2. FOR WHAT PURPOSE DO WE PROCESS YOUR DATA AND UNDER WHAT LEGITIMACY?
The information that you stipulate via the website or application process may differ depending on the services you request or the actions that you specifically allow us to perform. In general, we can process your data for the following reasons: a. To supply you with pleasure boat rental services, register you as a Customer and manage our contractual relationship. The legitimising basis of this principle is the contractual relationship between you, the Customer, and us, the Company, and your requirement to register. b. To contact you about contracted or similar services by email. If you do not wish to receive such messages, you can, unsubscribe by replying to the email or contacting our customer service team. The legitimising basis of this principle is the contractual relationship between you, the Customer, and us, the Company, and your consent.. c. To issue an invoice for our service. The legitimising basis of this principle is the contractual relationship between you, the Customer, and us, the Company.
3. WHAT CATEGORIES OF DATA DO WE PROCESS AND WHERE DO WE OBTAIN THAT DATA?
The personal data we process is the identification information that you present during the registration process on our website or via other means, such as general enquiries or complaints made to our customer service department. The personal data that is processed includes the following categories: • Identification information: first name and surname, address, email address, telephone number, passport or accepted identity document number and information. • Payment information: credit/debit card details or other payment information. • Location: if you use location-based functions and have location services enabled in your computer or mobile settings, your real-time geographical location and your IP address, as well as Wi-Fi hotspot and telephone relay antenna locations. The Company will never, under any circumstances, accept liability for the use of false, inaccurate, incomplete or out-of-date information provided by the Customer.
4. WHO ARE THE RECIPIENTS OF YOUR DATA AND HOW DO WE STORE IT?
4.1. Recipients: Your data provided to us will never be transferred to third parties, except to public authorities, judges, the courts or the police, if we are legally required to do so.
4.2. Data processors: to carry out certain necessary tasks to provide the Company’s services, your data may be processed by third parties who represent data processors and are contractually required to comply with their legal obligations to keep all information confidential.
4.3. International transfers: the data that we collect about you is usually stored within the European Economic Area (EEA), but it may also be managed in a country outside the EEA using the cloud storage model. You are informed notified that any transfer to a location outside the EEA is only made to companies that belong to the EU-US Privacy Shield, which guarantees satisfactory levels of personal data protection. Further information is available at:https://www.privacyshield.gov/welcome.
4.4. Categories: The categories of recipients that may process your data for the reasons shown and according to the legitimising basis are listed below:
| RECIPIENT | TYPE OF DATA | LEGITIMISING BASIS |
|---|---|---|
| Public authorities, judges, the courts, the police | Identification information | Compliance with a legal obligation |
| Hosting and cloud storage services | Identification information | Management of the contractual relationship |
| Postal, distribution and messaging services | Identification information | Management of the contractual relationship |
5. HOW LONG DO WE KEEP YOUR DATA?
The data provided will be kept for the duration of the contractual relationship with you, the Customer. When your data is no longer necessary for the purpose for which it was gathered, it will be securely stored and will only be available to public authorities, judges, the courts, public prosecutors, etc., upon their request, for the required time to comply with legal obligations, after which it will be completely erased.
6. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?
6.1. Rights. Our data protection regulations allow you the following rights: a. Right of access: to find out what data of yours we are processing. b. Right of correction: to request the correction of any of your data that is wrong or untrue. c. Right of deletion: to request the deletion of your data when processing is no longer necessary. d. Right of restriction: to restrict the future processing of your data. e. Right of objection: to decline receipt of commercial communications. f. Right of portability: to enable you to receive your personal data in a commonly used, format so that it can be transferred, copied or transmitted to another data controller.
6.2. Right of withdrawal of consent. You can withdraw the consent that you have given by notifying us by email at info@barcelona-yachts.com or by post at Weichlein GmbH, Fuerstenrieder Str. 279, 81377 Munich, Germany
6.3. Right not to be the subject of a decision based solely on the automated processing of data. You can request that no processing of personal data be carried out which involves the data controller making decisions that could considerably affect you based on automated processing of data without human intervention.
6.4. Exercise of rights. The Company guarantees that the necessary measures will be implemented to ensure that these rights can be exercised for free. To exercise your rights, notify us by email at info@barcelona-yachts.com, specifying the right you wish to implement.
6.5. Right to file a claim with the supervisory authority. We notify you that you can file a rights protection claim with the Federal Commissioner for Data Protection and Freedom of Information (BfDI) , whose address is: Graurheindorfer Str. 153 53117 Bonn Germany 7. CHANGES TO THE PRIVACY POLICY. Our Privacy Policy is changed periodically; therefore the updated version can always be found on our website.
