Privacy Policy for Service Booking Management

Below, we explain how we process your personal data when you request to book a service. You can find more information in our global Privacy Policy.

Who we are

The controller of the personal data you provide is AREA25 INFORMÁTICA Y TELECOMUNICACIONES S. COOP. AND. (hereinafter US or MIRESERVAONLINE) with Tax ID No. F18534636; registered office at Calle El Purche 6, 2º A, 18008 Granada, Spain; telephone (+34) 958 085 751 and contact email info@mireservaonline.es

Purpose of collecting and processing personal data

We collect and process your personal data to manage your service enquiries and bookings. Your data will be used to:

- Create your user account, with which you will be able to access the platform.
- Speed up the process of booking and paying for services.
- Take payment and issue invoices for the services contracted, where necessary.
- Send you communications relating to your enquiries and bookings.
- Maintain your history of bookings, payments and incidents.
- Send you a satisfaction survey about a service you have booked, if you authorise this at the time of booking.

Legal basis. Legitimisation

This privacy policy complies with the provisions of Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Article 5 of Spanish Organic Law 15/99 of 13 December on the Protection of Personal Data (LOPD).

The processing of your data is legitimised by the performance of the contract that is established when you request a service through our platform. 

Consequences of not providing data

When we ask you for your data, we mark with an asterisk those that are strictly necessary. You are not obliged to provide the data requested, but if you do not provide them, you will not be able to request or book the services offered on our platform.

Source of personal data

If you provide us with data relating to other people, you must guarantee that you have their authorisation to provide their data if they are over 14 years of age. You may only provide data relating to children under the age of 14 if you are their parent or guardian, or if you have their consent.

To manage your enquiries and bookings it is necessary to create a user account on our platform. To do this you can use an email address and a password. You can also log in using your Google+ or Facebook account. In that case, these companies act as "identity providers". If you use this option, the chosen provider will inform you of the data that MiReservaOnline requires and you must authorise that access. The personal data we obtain from these providers are: 

- A unique identifier for your account with the provider. That is, a series of letters and numbers that identifies you to the provider.
- Your first name and surname(s).
- Your email.

The data obtained from these providers will be copied to your user account on MiReservaOnline. You can revoke MiReservaOnline’s access to your personal data from these identity providers at any time. In that case, you will not be able to access MiReservaOnline using your account with that provider. Revoking MiReservaOnline’s access to your data via an authentication provider does not delete your user account on MiReservaOnline or the data previously obtained. 

Period for which your data will be stored

Your data will be stored for as long as the contractual and commercial relationship remains in force and, thereafter, for the periods legally established for the resolution of any liabilities arising from that relationship.

Data relating to payments and invoicing will be kept for the periods laid down in the applicable economic, accounting and tax regulations.

Recipients of your personal data

When you book a service, we share some of your personal data with the company that provides that service. We only share the data that the company needs to provide the service and to contact you in relation to the contracted service.

All the companies that offer services on our platform are subject to European legislation and are governed by the same data protection rules as MiReservaOnline. They therefore undertake to use your personal data solely for the purpose for which you have provided them.

To find out which company offers a specific service, you can go to the "About us" section, under "More information", on the service page at MiReservaOnline.es. You will also be informed about the company that provides a service, once booked, in the confirmation voucher for your reservation.

Your data will also be shared where necessary to fulfil the established contractual relationship and in the cases provided for by law. In some cases, your data may be disclosed to law enforcement agencies when legally required. Data relating to invoicing must, by law, be disclosed to the Tax Authorities.

If you pay for a service using any of the payment methods offered by the platform and later cancel that payment in breach of the service’s cancellation policy, which you accepted when booking, MiReservaOnline will claim from the entity through which payment was made the amount indicated in the service’s cancellation policy. In that process the financial institution may request from us, and we may provide, information about your identity and other data that prove the contracted service, its payment and use.

No international data transfers are envisaged. If any such transfers take place, they will always be carried out for the purposes indicated above and with the safeguards required by European Union regulations. In this regard, data will only be transferred to entities based in the European Union, entities adhering to the EU–US Privacy Shield or equivalent agreements that guarantee the processing of personal data in a way that is equivalent to that established in the European Union.

Rights and complaints to the supervisory authority

You may exercise your rights of access, rectification, erasure, restriction and objection by sending an email to info@mireservaonline.es with the subject line "Data protection". You can also do so by sending a letter to: Area25 IT, Calle El Purche 6, 2º A, 18008 Granada, Spain.
In both cases you must enclose a copy of a document proving your identity.

You have the right to data portability, that is, to receive your data in a structured, commonly used and machine-readable format, and even to have them transmitted to a new controller, if you so wish.

In addition, you may lodge a complaint with the competent Data Protection Supervisory Authority, especially if you have not obtained satisfaction in exercising your rights. To do so, you should contact the Spanish Data Protection Agency: Calle Jorge Juan 6, 28001 Madrid. You can also do this by accessing its electronic headquarters via the website https://www.agpd.es