Basic Information on Data Protection

Responsible person: GRAFTON SPAIN SL, B85526093, FRANCISCO GOURIE STREET, 107 - PLT 5, Las Palmas de Gran Canaria (35002), Las Palmas, Spain

Purposes: Provision of online services. Web user management. Commercial communications related to our services. Reservation management. Newsletter subscription.

Legitimation: Express consent and legitimate interest

Recipients: Data may be transferred to third parties for the creation of cancellation insurance and to manage the reservation. No other transfer of data will take place, except for legal obligations.

Rights: Access, rectify and delete data, as well as other rights, as explained in the additional information.

Additional Information: You can consult additional and detailed information on Data Protection by asking at GRAFTON SPAIN SL, B85526093, CALLE FRANCISCO GOURIE, 107 - PLT 5, Las Palmas de Gran Canaria (35002), Las Palmas, Spain.

At GRAFTON SPAIN SL we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to do so. We care about your privacy and believe that we should be transparent about it.

For this reason, and for the purposes of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016 (hereinafter, “RGPD”) concerning the protection of individuals with regard to the processing of personal data and the free movement of these data, and LAW 34/2002, of July 11, on Information Society Services and Electronic Commerce (hereinafter, “LSSI”), GRAFTON SPAIN SL. informs the user that, as responsible for the treatment, it will incorporate the personal data provided by users in an automated file.

Our commitment begins by explaining the following to you:

• Our priority is to ensure your security and treat your data in accordance with European regulations.
• Our intention is to provide you with the best possible experience. Therefore, when we are going to use your personal information, we will always do so in compliance with the regulations, and when necessary, we will request your consent.
• Your data is collected so that the user experience improves, meeting your interests and needs.
• We are transparent about the data we obtain about you and the reason why we do it.
• We understand that your data belongs to you. Therefore, if you decide not to authorize us to process them, you can ask us to stop processing them.

If you want more information about the processing of your data, consult the different sections of the privacy policy below:

Who is responsible for the processing of your personal data?

GRAFTON SPAIN SL, B85526093, FRANCISCO GOURIE STREET, 107 - PLT 5, Las Palmas de Gran Canaria (35002), Las Palmas, Spain

contact@domainedumarquis.com (+34) 928 490 380 (+34) 676 709 763

GRAFTON SPAIN SL, has appointed a Data Protection Delegate or an internal contact person within its organization. If you want to ask a question regarding the processing of your personal data, you can contact him by email contact@domainedumarquis.com

What personal data do we collect?

The personal data that the user may provide:

• Name, address and date of birth.
• Phone number and email address.
• Location.
• Information regarding payments and returns.
• IP address, date and time when you accessed our services, the internet browser you use and data about the device's operating system.
• Any other information or data that you choose to share with us.
• In some cases, it is mandatory to complete the registration form to access and enjoy certain services offered on the web; likewise, not providing the requested personal data or not accepting this data protection policy makes it impossible to subscribe, register or participate in any of the promotions in which personal data is requested.

Why and for what purpose do we process your data?

At GRAFTON SPAIN SL we process the information provided to us by interested persons for the following purposes:

• Manage orders or contract any of our services, either online or in physical stores.
• Manage the sending of the information requested from us.
• Develop commercial actions and carry out the maintenance and management of the relationship with the user, as well as the management of the services offered through the website and information tasks, being able to carry out automatic evaluations, obtaining profiles and segmenting customers in order to customize the treatment according to their characteristics and needs and improve the customer's online experience.
• Develop and manage contests, sweepstakes or other promotional activities that may be organized.
• In some cases it will be necessary to provide information to Authorities or third companies for auditing purposes, as well as to handle personal data from invoices, contracts and documents to respond to complaints from customers or Public Administrations
• We inform you that the personal data obtained as a result of your registration as a user will form part of the Register of Treatment Activities and Operations (RAT), which will be updated periodically in accordance with the provisions of the RGPD.

What is the legitimacy for the processing of your data?

The processing of your data can be based on the following legal bases:

• Consent of the interested party for contracting services and products, for contact forms, requests for information or registration in e-newsletters.
• Legitimate interest in the processing of our clients' data in direct marketing actions and the express consent of the interested party for everything related to automatic evaluations and profiling.
• Compliance with legal obligations for fraud prevention, communication with public authorities and third-party complaints.

How long do we keep your data?

The processing of data for the purposes described will be maintained for the time necessary to fulfill the purpose of its collection (for example, for the duration of the business relationship), as well as for the fulfillment of legal obligations deriving from the processing of the data.

To which recipients are your data communicated?

In some cases, only when necessary, GRAFTON SPAIN SL will provide user data to third parties. However, the data will never be sold to third parties. The external service providers (for example, payment providers or delivery companies) with whom GRAFTON SPAIN SL works may use the data to provide the corresponding services, however, they will not use this information for their own purposes or for transfer to third parties:

The reservation system is managed by quality providers from GRAFTON SPAIN SL who guarantee the protection and confidentiality of personal data of any type provided by users, in accordance with the provisions of the General Regulations for the Protection of Personal Data.
The data will be included in an automated personal data file created and maintained under the responsibility of the providers, data essential to provide the services requested by users.

The data provided will be treated in the terms established in the General Regulations for the Protection of Personal Data. In this regard, it has adopted the legally required levels of protection, and it has installed all the technical measures at its disposal to prevent loss, misuse, alteration and unauthorized access by third parties.

However, the user must be aware that Internet security measures are not impregnable. If they consider it appropriate to transfer their personal data to other entities, the user will be informed of the data provided, the purpose of the file and the name and address of the transferee, so that they can give their unequivocal consent in this regard.

In compliance with the provisions of the RGPD, the user may exercise their rights of access, rectification, cancellation/deletion, opposition, limitation or portability. To do this you must contact GRAFTON SPAIN SL, B85526093, CALLE FRANCISCO GOURIE, 107 - PLT 5, Las Palmas de Gran Canaria (35002), Las Palmas, Spain

contact@domainedumarquis.com (+34) 928 490 380 (+34) 676 709 763

GRAFTON SPAIN SL, seeks to ensure the security of personal data when sent outside the company and ensures that third party service providers respect confidentiality and have appropriate measures to protect personal data. These third parties are required to ensure that the information is treated in accordance with data privacy regulations.

In some cases, the law may require that personal data be disclosed to public bodies or other parties, only as strictly necessary to comply with those legal obligations will be disclosed.
The personal data obtained may also be shared with other companies in the group.

Where is your data stored?

In general, data is stored within the EU. Data sent to third parties that do not belong to the EU, we will ensure that they offer a sufficient level of protection, because they have Binding Corporate Rules (BCR).

What rights do you have and how can you exercise them?

You can direct your communications and exercise your rights through a request to the following email: contact@domainedumarquis.com

In accordance with the provisions of the RGPD, you can request:

• Right of access: you can request information about the personal data we have about you.
• Right to rectification: you can report any changes to your personal data.
• Right to deletion and to be forgotten: you can request the deletion after blocking personal data.
• Right to restrict processing: involves the restriction of the processing of personal data.
• Right to object: you can withdraw your consent to the processing of the data, opposing that they continue to be processed.
• Right to portability: in some cases, you can request a copy of personal data in a structured, commonly used and machine-readable format for transmission to another controller.
• Right not to be subject to individualized decisions: you can request that decisions are not made that are based solely on automated processing, including profiling, that produces legal effects or significantly affects the interested party.
• In some cases, the request may be rejected if you request that data necessary to comply with legal obligations be deleted.

In addition, if you have a complaint about data processing, you can file a complaint with the data protection authority.

Who is responsible for the accuracy and veracity of the data provided?

The user is solely responsible for the veracity and correctness of the data included, exonerating GRAFTON SPAIN SL, from any responsibility in this regard.

Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated.

The user agrees to provide complete and correct information in the registration or subscription form GRAFTON SPAIN SL, reserves the right to end the contracted services that have been concluded with the users, if the data provided is false, incomplete, inaccurate or not up to date.

GRAFTON SPAIN SL, is not responsible for the veracity of information that is not of its own production and for which another source is indicated, and therefore it does not assume any responsibility for hypothetical damages that may arise from the use of such information.

GRAFTON SPAIN SL, reserves the right to update, modify or delete the information contained in its web pages, and may even limit or disallow access to such information. GRAFTON SPAIN SL is exempt from liability for any damage or harm that the user may suffer as a result of errors, defects or omissions, in the information provided by GRAFTON SPAIN SL, provided that it comes from sources other than the same.

In addition, the user certifies that they are over 14 years of age and that they have the necessary legal capacity to provide consent regarding the processing of their personal data.

How do we treat the personal data of minors?

In principle, our services are not specifically aimed at minors. However, in the event that any of them are addressed to children under fourteen years of age, in accordance with Article 8 of the RGPD and Article 7 of LO3/2018, of December 5 (LOPDGDD), GRAFTON SPAIN SL will require the valid, free, unambiguous, specific and informed consent of their legal guardians to process the personal data of minors. In this case, the ID or other form of identification will be required from the person giving the consent.

In the case of people over fourteen years of age, data may be processed with the consent of the user, except for those cases in which the Law requires the assistance of the holders of parental authority or guardianship.

What security measures do we apply to protect your personal data?

GRAFTON SPAIN SL, has adopted the legally required levels of security for the protection of Personal Data, and seeks to install those other means and additional technical measures at its disposal to prevent the loss, misuse, alteration, unauthorized access and theft of Personal Data provided to GRAFTON SPAIN SL,

GRAFTON SPAIN SL, is not responsible for hypothetical damages that may arise from interferences, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operational operation of this electronic system, caused by causes beyond the control of GRAFTON SPAIN SL, delays or blockages in the use of this electronic system caused by deficiencies or overloads of telephone lines or overloads in the Data Processing Center, in the Internet system or in other electronic systems, as well as for damages that may be caused by third parties through illegitimate intrusions beyond the control of GRAFTON SPAIN SL, however, the user must be aware that Internet security measures are not impregnable.

Links to other websites

On the website www.domainedumarquis.com there may be links to other web pages. By clicking on one of these links and accessing an external website, the visit will be subject to the privacy policy of that website, leaving GRAFTON SPAIN SL, disassociated from any type of responsibility regarding its privacy policy.

How do we use cookies?

The website and the social networks of GRAFTON SPAIN SL use cookies for the purpose of optimizing and customizing your browsing through it. Cookies are physical information files that are stored in the user's own terminal, the information collected through cookies serves to facilitate the user's navigation through the portal and optimize the browsing experience. The data collected through cookies can be shared with their creators, but under no circumstances will the information obtained by them be associated with personal data or data that can identify the user.

However, if the user does not want cookies to be installed on their hard drive, they can configure the browser in such a way as to prevent the installation of these files. For more information see our Cookie Policy https://www.domainedumarquis.com/politica-de-cookies/

Information on the use of the website

We use third-party technologies such as Consent Mode Advanced, a Google feature that allows us to send minimal technical navigation signals (for example, browser type, screen resolution) even before the user interacts with the cookie banner. This treatment is based on the legitimate interest of the data controller and does not include directly identifiable personal information, but may involve the use of pseudonymized technical identifiers.

We also use Enhanced Conversions, a Google technology that allows, only if the user has consented to the use of advertising cookies, to send in encrypted form (hashed using SHA256) data such as email, telephone number or name to these platforms. Its purpose is to improve conversion measurement and create similar audiences (lookalike audiences) for personalized advertising campaigns. This treatment is based on the user's explicit consent.

Can the privacy policy be changed?

The privacy policy may be modified whenever necessary to ensure the best service and security.

‍