PRIVACY  

 

Basic Information on Data Protection
Joint controllers	Universo Pacha, S.A.  Universo Pacha, S.A.
Purpose	To provide the service of accessing, using and enjoying the Website; to manage the provision of Pacha services; and, subject to your consent, to send you personalized commercial communications based on your interests profile.
Legal grounds	Performance of the contract  Compliance with legal obligations  Legitimate interest  Consent
Recipients	Pacha Group entities listed in the additional information.  To the data processors listed in the additional information.
Rights	Access, rectify and delete data, as well as other rights, as explained in additional information.
Additional information	Additional and detailed information on Data Protection can be found in our Privacy Notice.

 

Privacy Policy 

I. – Who processes your personal data? 

Pacha has appointed a data protection officer (DPO). If you want to contact our DPO directly, you may use the following contact details:

DPO: Unai Berbel

Dirección: Avda. 8 de agosto, 27, 07800 Ibiza.

Email: dpo@pacha.com

 

 

II. – What kind of personal data do we process? 

Subject to the specific services provided by Pacha that you decide to use, to your choices and, where applicable, your device settings (regarding, in particular, to cookies and other trackers), the personal data about you collected and processed by Pacha may include: your first name and last name, email address, phone number, postal address and telephone number, photographs of you (subject to your prior explicit consent), your bank account or credit card details, details of your previous bookings and your table, accommodation or service preferences, as well as subject to your consent your lifestyle interests, your hobbies, your profession/sector or your birthday. 

While browsing through our Website or hiring our services, we may request you to identify yourself by creating an user account or request you further information about. In such case, any personal data that is necessary for the provision of the particular service will be marked as such. Without such data, we may not be able to render our services properly. 

Please note that when you book a reservation through the services of a third-party, we may obtain the data detailed above directly from them (e.g. booking websites, travel agencies, concierges, etc.). Their processing of your personal data would be explained in detail in their corresponding privacy notices. 

 

III. – For what purposes do we process your personal data? 

Your personal data will be collected and processed by Pacha under the legal bases mentioned below to fulfill the following purposes: 

• Based on the performance of the relevant contracts executed between you and Pacha; in particular: 

• to ensure your access, use and enjoyment of the functions of the Website. 

The downloading of, installation of, browsing through and otherwise use of our Website is subject to the applicable terms and conditions. 

• to respond to and manage requests for booking our services, including the management of the payment. 

Please note that the reservation, booking and enjoyment of our services is subject to the applicable terms and conditions. 

• to manage the provision of the service you contracted, as well as any additional service booked by you or on your behalf, including the management of the payment. 

Please note that the reservation, booking and enjoyment of our services is subject to the applicable terms and conditions. 

• Based on our compliance with applicable legal obligations, including, among others: 

• in case you stay in one of our hotels or other accommodation services, to log information about your identity and your stay in our facilities into our record of travelers, as required by applicable regulations. 

• to comply with regulations preventing money laundering and the financing of illegal activities. 

• to comply with applicable tax regulations. 

• Based on our legitimate interests (more information on the weighing of interests is available upon request), in particular: 

• to answer questions you may send via online forms or to meet any other requests from your side, following our legitimate interest in providing a high-quality customer care. 

• to ensure the security of your online transactions, to prevent fraud and payment defaults, following our legitimate interest in fighting and preventing fraud and payment defaults. 

• to share your personal data with other entities within the Pacha Group to attend your request and provide your services, following our legitimate interest in carrying out a uniform and comprehensive administration of the business activity of the Pacha Group.  

• Based on your prior and explicit consent, in particular: 

• to create a profile based on your booking and purchase history and on the preferences you may have disclosed to Pacha when enjoying our services in the past, in order to adjust our services to your preferences and/or to offer more personalized advertising. 

• to send you commercial communications based on your profile via email, phone, SMS, push notifications and traditional mail; with information about offers, news and events from Pacha and the relevant entities of the Pacha Group. 

• to disclose your personal data to social media partners like Facebook, Google or Amazon to create a profile based on your preferences, including the combination of external sources, in order to personalize the user's experience and/or to offer you more personalized advertising.  

The use and/or combination of our Social Media Partners external databases and tools intended to carry out segmented and customized marketing activities allows us to have a more detailed knowledge about your preferences in order to offer you individualized, customized and accurate advertising according to your specific interests and your habits.  

These social media partners generally operate as independent data controllers, and are responsible for their own compliance with the applicable data protection laws. You should refer to their respective privacy notices for more information on how they process personal data. 

 

V. – Do we share your personal data? 

Generally, your personal data shall not be transferred or made accessible to any third party. However, in order to fulfill the purposes described above, Pacha may need to disclose on a need-to-know basis your personal data to third parties of the Pacha Group listed here. 

Pacha may also need to disclose your personal data to third parties that support us in the provision of services we offer you, such as financial service providers, technology and security service providers, marketing and advertising related service providers. They will process your personal data as data processors under specific contractual terms and subject to the applicable data protection regulations. 

 

VI. – Do we transfer your personal data abroad? 

The recipients of your personal data may be located abroad, including outside the European Economic Area. Any transfer of your personal data outside the European Economic Area will only take place under the execution of the Contractual Clauses of the European Commission, in accordance with applicable data protection laws and regulations.  

For more information on how your personal data will be disclosed to recipients abroad, please contact us by writing lopd@pacha.com. You also have the right to contact us for more information about the safeguards implemented by Pacha to guarantee adequate protection of your personal data when it is transferred as described above. 

 

VII. – What are your rights when you provide us with your data? 

Pursuant to the provisions of the applicable data protection laws and regulations, you may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as your right to withdraw your consent to the processing of your personal data.  

We, as Joint Controllers, have agreed that you may exercise your rights by simply contacting us through lopd@pacha.com or by sending a letter by regular post to C/ Canarias 37, Ed. Cetis, Torre 4, Pta. 4º, CP: 07800, Ibiza, Balearic Islands, Spain. Please note that in case we have not enough information to identify you and proceed with your request, we may have to ask you for further information. 

You have also the right to file a complaint with the Spanish Data Protection Agency or any other relevant data protection authority in case you deem it necessary. 

 

VII. – For how long will we process your personal data? 

We will store your data as long as necessary to provide you with the services requested. When Pacha does not need to use your personal data anymore to comply with contractual or statutory obligations, it will be blocked or archived in our systems only for the period necessary for the establishment, exercise and defense of legal claims until the expiry of applicable statutes of limitations.  

If we need to keep your personal data for tax, audit, or legal compliance for a legally prescribed time period thereafter, or if we need it to preserve evidence within statutes of limitation, we will retain the data for such purposes. 

Once this period has elapsed, the data will be either erased or anonymized. 

 

VIII. – Considerations regarding personal data provided by third parties 

If in the course of your interaction with us you disclose data of third parties to us (for example to arrange a reservation for a friend or other third party), you confirm that you have informed them of the purpose and the way in which we will process their personal data. You also acknowledge and represent that the personal data you provide Pacha with is accurate and updated to the moment of their provision, and commit to notify Pacha of any change to these personal data. 

 

X. –Changes to this Privacy Notice 

This Privacy Notice may be updated by us from time to time. In such event, we will post the updated version of the text on the Website. However, you will be notified of any material changes to this Privacy Notice. We encourage you to periodically review this Privacy Notice to stay informed about our privacy practices. 

 

Specific information on video-surveillance (CCTV)

 

In addition to the general information stated above, this section includes specific information about how Pacha uses video-surveillance systems (CCTV). Universo Pacha is the entity responsible for the use of the CCTV as described below.

Pacha processes personal data that has been collected through CCTV. Only images are captured by the CCTV are processed (i.e., no audio is processed). The purpose of this data processing is to ensure the safety of people, property and facilities and investigate any suspected illegal activity or other wrongdoing. This is a data processing is based on public interests Pacha seeks to achieve, related with ensuring security and safety and in line with applicable laws and regulations.

The recordings will be kept for the maximum legal period of one (1) month. As a general rule, Pacha does not share the images with third parties, however, in some cases we may be under a legal obligation to share certain images with parties such as law enforcement, courts and lawyers. Once this period has elapsed, the images will be deleted.

As a general rule, Pacha will not provide the images recorded to any third party. However, in some cases we may have the legal obligation to provide them, for example, to the Security Forces, to competent Public Authorities, or to Courts or Tribunals.

As stated above, you can exercise your data protection rights at any time via the contact details at the beginning of this Privacy Policy. You may also make a complaint to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/.