Privacy Policy.

PRIVACY POLICY

https://yatesadriano.net/ is an Internet domain owned by:

VARADERO PORT ADRIANO, S.L.

CIF B57258766

Varadero Port Adriano edif 2.1, 07180 Calviá, Balearic Islands

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27,
regarding the protection of natural persons with regard to the processing of personal data
and the free movement of such data, and Organic Law 3/2018 on the Protection of Personal Data and guarantee of
digital rights, we hereby detail the Privacy Policy.

We reserve the right to modify this Privacy Policy to adapt it to new
legislative, jurisprudential, or interpretation developments from the Spanish Data Protection Agency. In this case,
such changes will be announced, clearly indicating and with due notice the modifications made,
and requesting, if necessary, the acceptance of said changes.

The User undertakes that all data provided by them are true and correct.

WHAT TYPE OF DATA ARE WE GOING TO USE?

Identification data.

FOR WHAT PURPOSES ARE WE GOING TO USE THE USER'S DATA?

• In the case of contracting services/products, we will process the data collected from the sales forms in order to provide the service to the Users.
• Images for security control and images on social networks for promotion.
• To address inquiries from Users who contact us through the Contact forms or forms enabled for this purpose.
• For tax, accounting, and administrative management in order to manage the service requested by the User and the corresponding legal obligations.
• If the User accepts cookies, data such as IP address, geolocation, service usage logs, sites, and habits will be collected in order to improve the quality of the service/product and for statistical purposes.
• Whistleblower channel form, where applicable.
• To automatically carry out the creation of your commercial profile and provide assistance in decision-making, based on the information we have about the User, in order to adapt services and/or products to their interests.
• No automated decisions will be made based on said profile that produce legal or significant effects for the User.
• In the case of Users with whom a contractual relationship exists, we may send commercial advertising communications related to products or services similar to those initially contracted via email, SMS, social communities, or other electronic or physical means.

WHAT ARE THE LEGITIMATE BASES FOR PROCESSING?

We may process the User's personal data based on a legitimate interest regarding the service we provide
and regarding the sending of communications, both by ordinary and electronic means, relating to our services.

When the basis for processing is consent, we will request acceptance as the legitimate basis for using
the data. The User may revoke it at any time by sending a message to
oficina@yatesadriano.net.

HOW LONG ARE WE GOING TO KEEP THE USER'S DATA?

We will maintain the User's personal data in our information systems for as long as they are necessary,
the customer relationship continues, and to comply with legal obligations.

TO WHOM CAN WE COMMUNICATE THE USER'S DATA?

User data will not be transferred to third parties except in cases where there is a legal obligation,
you expressly authorize us to do so, and/or when it is necessary to fulfill the agreed contract.

In order to manage the requested services and/or products, in some cases it will be necessary to transfer the data
to companies within the same group and/or service providers for administrative, storage, or support purposes.

Data transfers outside the European Union are not planned, except when the User expressly authorizes us
to manage the service offered.

HOW CAN THE USER EXERCISE THEIR RIGHTS?

The User can exercise their rights of access, rectification, objection, and erasure of their data,
as well as request the restriction and portability of the same to the following email:
oficina@yatesadriano.net

In the following cases:

• To rectify inaccurate data or request its erasure (right to be forgotten) when consent has been withdrawn.
• To request the restriction of processing when the data is no longer necessary for the collected purposes.
• To request the portability of data in an automated format.
• Additionally, you may lodge a complaint with the Supervisory Authority (Spanish Data Protection Agency
  www.agpd.es)

WHAT TYPE OF DATA IS OPTIONAL?

The mandatory nature will be communicated in the web forms by means of an (*). Failure to complete
said data may prevent the provision of the linked services.

WHISTLEBLOWER CHANNEL PRIVACY POLICY

FOR WHAT PURPOSES ARE WE GOING TO USE THE USER'S DATA?

To receive, manage, investigate, and follow up on reports or communications made
regarding regulatory infractions or irregular conduct in the labor or business sphere.

WHAT ARE THE LEGITIMATE BASES FOR PROCESSING?

• Compliance with a legal obligation (Law 2/2023).
• Essential public interest in terms of crime prevention and the fight against corruption.
• In some cases, the consent of the whistleblower if they provide optional personal data.

WHAT TYPE OF DATA ARE WE GOING TO USE?

• Identification data of the whistleblower (when not anonymous): first name, last name, contact.
• Data related to the reported facts.
• Data of the persons involved (alleged offender or witnesses).
• Any other data provided in the form or communication.

Confidentiality and Anonymity

The channel allows for the submission of reports anonymously. All information will be treated with the utmost
confidentiality, adopting technical and organizational measures that guarantee the protection of the informant's identity.

TO WHOM CAN WE COMMUNICATE THE WHISTLEBLOWER'S DATA?

• To the person in charge of the Internal Information System or the designated team.
• Legal or external advisors when necessary.
• Competent administrative or judicial authorities, if applicable.

HOW LONG WILL WE KEEP THE DATA?

The data will be kept for a maximum of 3 months from the receipt of the report,
unless it is necessary to keep it to justify the operation of the system or the management carried out.
Once that period has elapsed, it will be deleted or anonymized.