This privacy policy applies to this website (hereinafter, the Website).

Please read it carefully. It contains important information about the processing of your personal data and the rights granted to you under the applicable data protection regulations.

We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with any legislative or jurisprudential changes. If you have any questions or need clarification regarding our Privacy Policy or your rights, you may contact us through the channels listed below.

You declare that the data you provide to us, now or in the future, is accurate and truthful, and you agree to notify us of any changes to such data. In the event that you provide personal data of third parties, you agree to obtain their prior consent and to inform them about the content of this policy.

In general, the fields marked as mandatory in our forms must be completed in order for us to process your requests.

1. Who is responsible for processing your data? The entity responsible for processing the personal data collected on this website is VIBELBA, S.L.U. (hereinafter, VIBELBA), located at Camí de Son Vida 38, 07013 – Palma de Mallorca, Illes Balears (Spain); Phone: 971606115; Email: sonxigala@arabella.com; DPO Contact: dpo.mallorca@arabella.com.
2. What purposes will we process your data for, and what is the legal basis? 2.1 Management of the relationship with clients and users: We process the data that our clients and users provide in their inquiries to respond to their requests. This processing is necessary for the execution of the legal relationship with the website users or for the implementation of pre-contractual measures at their own request. 2.2 Administration and management of website security: We process browsing data (IP addresses or logs) to administer and manage the security of the website and its restricted access areas. This processing is based on our legitimate interest in ensuring the security of the website. This interest is expressly recognized by Recital 49 of the GDPR. In balancing this interest against your rights and freedoms, it has been taken into account that this processing aligns with common security practices and does not pose significant risks to data subjects.
3. To whom may we disclose your data? Your data will only be shared with third parties when required by law, with your consent, or when your request involves such communication.
4. How long will we keep your data? As a general rule, we retain your data for as long as your relationship with us remains active, and in any case, for the time periods established by applicable legal provisions, such as accounting and tax regulations, as well as for the time necessary to address any potential liabilities arising from the processing. We will delete your data when it is no longer necessary or relevant for the purposes for which it was collected. Information related to browsing will be deleted once the web session has ended and statistical processing has been completed.
5. What are your rights? You have the right to obtain confirmation as to whether or not we are processing your personal data, and if so, to access such data. You may also request that your data be rectified if inaccurate or completed if incomplete, as well as request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. Under certain circumstances, you may request the restriction of the processing of your data. In such cases, we will only process the affected data for the establishment, exercise, or defense of legal claims or for the protection of the rights of others. Under specific conditions and for reasons related to your particular situation, you may also object to the processing of your data. In this case, we will cease processing your data unless there are overriding legitimate grounds that prevail over your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Likewise, under certain conditions, you may request the portability of your data so that it can be transmitted to another data controller.

At any time, you may withdraw the consent you may have given for specific purposes, without affecting the lawfulness of processing based on the consent prior to its withdrawal.

Please note that the European General Data Protection Regulation also recognizes your right to data portability.

You also have the right to object to the adoption of automated individual decisions that produce legal effects on you or significantly affect you in a similar way, where this right applies under Article 22 of Regulation (EU) 2016/679.

You also have the right to lodge a complaint with a data protection authority. You can consult the list and contact details of the European data protection authorities on the European Commission’s website at: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.

To exercise your rights, you must send us a request by post or email to the corresponding data controller at the addresses provided in the section “Who is responsible for processing your data?”

You can obtain more information about your rights and how to exercise them on the website of the Spanish Data Protection Agency at www.aepd.es or from the data protection authority in your country.