1. Data Controller:
Data Controller: Com. Prop. Zona Com. y de Ocio Centro Com. Espacio Mediterráneo Compl. Inmob. Parque Mediterráneo Shicap (Centro Comercial Espacio Mediterráneo)
Mailing Address: Centro Comercial Espacio Mediterráneo, P.I. Cabezo Beaza. C.P. 30353 Cartagena (Murcia)
Telephone: 968 086 433
e-Mail: info@espaciomediterraneo.net
2. Processing of Personal Data
Com. Prop. Zona Com. y de Ocio Centro Com. Espacio Mediterráneo Compl. Inmob. Parque Mediterráneo Shicap (Centro Comercial Espacio Mediterráneo) only processes the personal data indicated below:
3. Data Collected Through the Website
Purpose: Respond to information and contact requests sent through e-mails and contact forms on the website.
Retention: The personal data of the data subject will be retained until the erasure is requested by the data subject and in any case for a maximum period of five years.
Legitimacy: Consent of the data subject.
Recipients: Personal data will not be passed on to third parties unless required by law.
Forms of Collection: All the personal data processed are obtained from data subjects.
Categories of data processed include:
– Identifying data
– Contact data
No specially protected data are processed,
4. Lease Agreements
Purpose: Management and execution of lease agreements for business premises and common spaces.
Retention: The data will be retained for the duration of the lease agreement and fifteen years thereafter in accordance with the statutory limitations established by the Spanish Law on urban lease.
Legitimation: Execution of the lease agreement entered into by both parties.
Recipients: Personal data will not be passed on to third parties unless required by law.
Forms of Collection: All the personal data processed are obtained from data subjects or the legal representative of the lessee entity.
Categories of data processed include:
– Identifying data
– Contact data
– Income and bank details
No specially protected data are processed,
5. Provision of Services.
Purpose: Provision of services to the users of the shopping centre (e.g. loan of strollers, chairs, high chairs, etc.).
Retention: Data will be retained for one year.
Legitimacy: Execution of the agreement for the provision of the services requested by the data subject.
Recipients: Personal data will not be passed on to third parties unless required by law.
Forms of Collection: All the personal data processed are obtained from data subjects.
Categories of data processed include:
– Identifying data
– Contact data
No specially protected data are processed,
6. Claims and Suggestions
Purpose: Data provided through suggestion or claim forms will be processed for the management of the suggestions or claims made by data subjects.
Retention: Data will be retained for one year. (Art. 1968 of the Spanish Civil Code) unless such data are necessary to respond to a claim or exercise of rights, in which case they will be retained until the resolution thereof.
Legitimacy: The legitimacy for the processing is based on the legitimate interest of the data controller in guaranteeing and improving the satisfaction of the centre users who make complaints. With respect to claims involving some kind of personal or property damage, the legitimacy for the processing is based on the fulfilment of a legal obligation (Art. 1902 of the Spanish Civil Code) and the Spanish Law 50/1980 on insurance contracts.
Recipients: The data obtained from complaints and suggestions will not be communicated to third parties except in the cases expressly provided for by the legislation in force. The data obtained from claims will be communicated to the insurance companies and brokers necessary for the processing of claims, as well as in all other cases established by a legal obligation.
Forms of Collection: All the personal data processed are obtained from data subjects
Categories of data processed include:
– Identifying data
– Contact data
– Data related to the claim or complaint
– Personal injury (only for claims relating to personal injury)
In the case of claims involving personal injury, data relating to the health of individuals may be processed, for example, injury reports.
7. Play Centre
Purpose: Personal data collected through the play centre will be processed for the purpose of providing and managing such service.
Retention:The data will be retained for a maximum period of one year unless such data are necessary to respond to a claim or exercise of rights, in which case they will be retained until the resolution thereof.
Legitimacy: The legitimacy for the processing is based on the execution of the contract for the provision of the play centre services requested by the data subject.
Recipients: No data will be disclosed to third parties unless required by law.
Forms of Collection: All the personal data processed are obtained from data subjects and/or their parents, guardians or caregivers.
Categories of data processed include:
– Identifying data of the minor’s father, mother, guardian or caregiver
– Identifying data of the minor
No specially protected data are processed,
8. Events, contests, offers or promotions
Purpose: The personal data collected through application forms for events, contests or promotions will be processed in order to manage the participation of data subjects in such events, contests and promotions. Likewise, if you give us your consent, we will use the data provided by you to send you information about the activities, offers and promotions of the centre or the businesses therein by post or e-mail.
Retention: Personal data collected for the purpose of sending information will be retained until erasure is requested by the data subject. All other information will be retained for a maximum period of five years.
Legitimacy: The legitimacy for the processing is based on the consent of the data subject provided during the data collection process.
Recipients: No data will be disclosed to third parties unless required by law.
Forms of Collection: All the personal data processed are obtained from data subjects.
Categories of data processed include:
– Identifying data
No specially protected data are processed,
9. Mobile Application
Purpose: We will process the personal data of the users of our mobile application in order to provide them with information about news, offers, promotions, events and competitions related to the shopping centre or the businesses therein. If you allow our application to access your location, the data we collect will be processed for the purpose of informing you about offers, promotions, news, events and competitions related to our shopping centre. The data collected through our application will be used to create a commercial profile based on this information. This profile will be used to update data subjects on news, offers and promotions that are more suited to their tastes and interests.
Retention: Personal data collected will be retained until erasure is requested by the data
Legitimacy: The legitimacy for the processing is based on the consent of the data subject provided during the installation of the application.
Recipients: No data will be disclosed to third parties unless required by law
Forms of Collection: All the personal data processed are obtained from data subjects. Categories of data processed include:
– Identifying data
– Geo-positioning data
No specially protected data are processed,
10 .Video Surveillance
Purpose: Personal data collected by our video surveillance system will be processed for the purpose of preserving the security of the facilities, property and people in the shopping centre.
Retention: Personal data will be retained for a maximum period of 30 days unless such data are necessary to respond to a claim or exercise of rights, in which case they will be retained until the resolution thereof.
Legitimacy: The legitimacy for the processing is based on the legitimate interest of the data controller in protecting the facilities, goods and people in the shopping centre.
Recipients: In the event of the commission of criminal acts, the footage obtained will be communicated to law enforcement agents. Outside these cases, no data will be disclosed to third parties unless required by law.
Forms of Collection: All the personal data processed are obtained from data subjects through the video surveillance system. Categories of data processed include:
– Footage
No specially protected data are processed,
11. e-Mail List Subscribers
Purpose:
– Sending you information of interest to you about activities, offers and promotions related to the shopping centre or the businesses therein.
– Developing a commercial profile in order to send you information about activities, news and promotions related to the shopping centre that best suit your tastes and interests.
Retention: Personal data collected will be retained until erasure is requested by the data subject.
Legitimacy: Consent of the data subject
Recipients: Personal data will not be passed on to third parties unless required by law.
Forms of Collection: All the personal data processed are obtained from data subjects.
Categories of data processed include:
– Identifying data
– Contact data
No specially protected data are processed,
12. e-Mail List Subscribers Subscribed Before 25 May 2018
Purpose:
– Sending you information of interest to you about activities, offers and promotions related to the shopping centre or the businesses therein.
– Developing a commercial profile in order to send you information about activities, news and promotions related to the shopping centre that best suit your tastes and interests.
Retention: Personal data collected will be retained until erasure is requested by the data subject.
Legitimacy: Legitimate interest of the data controller.
Recipients: Personal data will not be passed on to third parties unless required by law.
Forms of Collection: All the personal data processed are obtained from data subjects.
Categories of data processed include:
– Identifying data
– Contact data
No specially protected data are processed,
13. Wi-Fi Service Users
Purpose: Personal data collected through the forms of connection to the Wi-Fi service will be processed for the purpose of facilitating access and connection to the free Wi-Fi service provided by the centre to its customers. In addition, if you give us your consent, we will use your data to send you information of interest to you about activities, offers and promotions related to the shopping centre or the businesses therein.
Retention: Personal data relating to users connected to the Wi-Fi service will be retained for a maximum period of one year.
Personal data collected for the purpose of sending information on the shopping centre and related activities by electronic means will be retained until erasure is requested by the data subject. Legitimacy: The legitimacy for the processing is based on the execution of the contract for the provision of the Wi-Fi service to the shopping centre customers.
Recipients: No data will be disclosed to third parties unless required by law.
Forms of Collection: All the personal data processed are obtained from data subjects.
Categories of data processed include:
– Personal identifying data
– Identifying data of the terminal or equipment used to connect
No specially protected data are processed,
14. Social Media
Purpose: As El Centro Comercial Espacio Mediterráneo has accounts or profiles in various social media, personal data obtained through this activity will be processed within social networks in order to interact and maintain contact with followers, as well as to keep them updated. If social networks are used to organise activities involving a different type of data processing, data subjects will be informed of the privacy policy applicable to such processing.
Retention: Personal data obtained from followers will be retained as long as data subjects are followers of our accounts or social media and remain interested in the content generated by them.
Legitimacy: The legitimacy for the processing is based on the unequivocal consent of the user.
Recipients: No data will be disclosed to third parties unless required by law.
Forms of Collection: All the personal data processed are obtained from data subjects.
Categories of data processed include:
– Identifying data
No specially protected data are processed,
15. Data Subject Rights
-You have the right to obtain confirmation as to whether we are processing personal data concerning you.
– Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
– In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain them for the exercise or defence of claims.
– In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In these cases, your data will not be processed except for legitimate reasons or the exercise or defence of possible claims.
– In certain circumstances, you have the right to receive your personal data in a widely used machine-readable structured format.
You can exercise your rights through the means of contact indicated in this policy (by e-mail or in person at our facilities). For more information about your rights and forms to exercise them, visit the following website:
http://www.agpd.es/portalwebAGPD/CanalDelCiudadano/derechos/index-ides-idphp.php
You have also the right to file a complaint with the Spanish Data Protection Agency if a request for the exercise of your rights has not been properly responded to or in case you have any reason to believe that your personal data is not being adequately processed. You can do so on the following website:
