1. Data controller
- Controller
- MERGRAU 1, S.A.
- Tax ID (CIF)
- A-07725054
- Address
- Plaça Pere Garau, s/n — 07007 Palma (Balearic Islands, Spain)
- Telephone
- +34 971 24 46 74
- [email protected]
2. What data we process
2.1. Browsing the website
This website is static and informational. It does not automatically collect any personal data: there are no contact forms, no user registration, no tracking cookies, no web analytics tools and no social media pixels.
As with any web server, the hosting provider may automatically log technical connection data (IP address, date and time, browser type) for the sole purpose of ensuring the security and operation of the service. This data is not used to build profiles or to identify you.
2.2. If you contact us
If you email or call us, we will process the data you voluntarily provide (name, email address, phone number and the content of your enquiry) in order to handle and answer it.
3. Legal basis
- Handling enquiries: your consent, given when you send us the communication (art. 6.1.a GDPR), and the controller's legitimate interest in responding to the requests it receives (art. 6.1.f GDPR).
- Technical server logs: legitimate interest in ensuring the security and operation of the website (art. 6.1.f GDPR).
4. How long we keep it
Enquiry data is kept for as long as needed to deal with the enquiry and, thereafter, for the periods required by law to address any potential liabilities. Once those periods have elapsed, it is deleted.
5. Who we share it with
We do not disclose your data to third parties unless required by law or strictly necessary to deal with your request.
Service providers do act as data processors with technical access to the data, under a processing agreement pursuant to article 28 GDPR:
- Website hosting: Cloudflare, Inc. (Cloudflare Pages), certified under the EU-US Data Privacy Framework.
- Email: the market's corporate email provider.
No other international data transfers are envisaged.
6. Third-party data
If you provide us with personal data of third parties, you confirm that you have their consent to do so and that you have informed them beforehand of the content of this policy.
7. Stallholders' data
The website publishes the trade names, stall numbers and, in some cases, contact phone numbers of the market's businesses. This data is professional in nature and is published for information purposes, with the prior consent of each stallholder. Any stallholder may request its correction or removal by writing to [email protected].
8. Your rights
You may exercise the following rights at any time:
- Access: to know what data of yours we process.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request that we delete your data.
- Restriction of processing in the cases provided for by law.
- Objection to processing based on legitimate interest.
- Portability of the data to another controller.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise them, write to [email protected] or by post to MERGRAU 1, S.A., Plaça Pere Garau, s/n — 07007 Palma, Spain, stating the right you wish to exercise and enclosing a copy of a document proving your identity.
If you believe we have not handled your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.
9. Security
We apply appropriate technical and organisational measures to keep personal data secure and prevent its unauthorised alteration, loss, processing or access. The website is transmitted encrypted over HTTPS.
10. Updates to this policy
We reserve the right to update this privacy policy to reflect legal, case-law or operational changes. The version in force is always the one published on this page, showing the date it was last updated.
This policy has been drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 of 5 December on the protection of personal data and guarantee of digital rights (LOPDGDD).