Privacy Policy

Updated on 20/01/2026 - Version 2

Basic Information on Data Protection

At PENSIÓ MARFIL we work to offer you the best possible experience through our products and services. In some cases, it is necessary to collect information to achieve this. We care about your privacy and believe that we must be transparent about it.

For this reason, and for the purposes of the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, "RGPD") on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and LAW 34/2002, of 11 July, on Information Society Services and Electronic Commerce (hereinafter, "LSSI"), PENSIÓ MARFIL informs the user that, as the controller, it will incorporate the personal data provided by users into an automated file.

Our commitment begins by explaining the following:

• Your data is collected to improve your user experience, taking into account your interests and needs.
• We are transparent about the data we obtain about you and the reason why we do it.
• Our intention is to offer you the best possible experience. Therefore, when we use your personal information, we will always do so in compliance with the regulations, and when necessary, we will request your consent.
• We understand that your data belongs to you. Therefore, if you decide not to authorize us to process it, you can request that we stop processing it.
• Our priority is to guarantee your security and process your data in accordance with European regulations.

If you wish to obtain more information about the processing of your data, please consult the different sections of the privacy policy below:

Who is responsible for the processing of your personal data?

Company name: Mª TERESA SABÀ MADERN
Trade name: PENSIÓ MARFIL
Registered address: C/Bosch de la Trinxeria, 21, 17700 La Jonquera (Girona)
NIF: 40453477L
e-mail: info@pensiomarfil.com
PENSIÓ MARFIL has designated an internal contact person as coordinator of the adaptation within its organization. If you wish to make a query regarding the processing of your personal data, you can contact him by email at info@pensiomarfil.com.

What personal data do we collect?

The personal data that the user may provide:
Name, address and date of birth.
Telephone number and email address.
Location.
Information relating to payments and returns.
Data from CVs submitted by candidates for personnel selection processes.
IP address, date and time you accessed our services, internet browser you use and data about the device's operating system.
Any other information or data you decide to share with us.
In some cases, completing the registration form is mandatory to access and enjoy certain services offered on the website; likewise, not providing the requested personal data or not accepting this data protection policy means that you will not be able to subscribe, register or participate in any of the promotions in which personal data is requested.

Why and for what do we process your data?

At PENSIÓ MARFIL we process the information provided to us by interested parties for the following purposes:

• Manage orders or contract any of our services, whether online or in physical stores.
• Manage the sending of the information requested from us.
• Develop commercial actions and carry out the maintenance and management of the relationship with the user, as well as the management of the services offered through the website and information tasks, being able to carry out automatic assessments, obtaining profiles and segmentation tasks of customers in order to personalize the treatment according to their characteristics and needs and improve the online experience of the customer.
• Develop and manage contests, raffles or other promotional activities that may be organized.
• Manage the data included in the CVs of candidates for personnel selection processes.
• In some cases it will be necessary to provide information to the Authorities or third parties for audit reasons, as well as handle personal data from invoices, contracts and documents to respond to complaints from customers or Public Administrations.

We inform you that the personal data obtained as a result of your registration as a user will form part of the Register of Processing Activities and Operations (RAT), which will be updated periodically in accordance with the provisions of the GDPR.

What is the legitimacy for the processing of your data?

The processing of your data may be based on the following legal bases:

• Consent of the interested party for the contracting of services and products, for contact forms, requests for information or registration for e-newsletters.
• Legitimate interest in the processing of data of our customers in direct marketing actions and express consent of the interested party for everything related to automatic assessments and profiling.
• Compliance with legal obligations for fraud prevention, communication with Public Authorities and third-party claims.

How long do we keep your data?

The processing of data for the purposes described will be maintained for the time necessary to fulfill the purpose of its collection (for example, for the duration of the commercial relationship), as well as for the fulfillment of legal obligations arising from the processing of data.
The processing of data from CVs of candidates for personnel selection processes will be kept for a maximum period of one year.

To which recipients is your data communicated?

In some cases, only when necessary, PENSIÓ MARFIL will provide user data to third parties. However, the data will never be sold to third parties. External service providers (for example, payment providers or delivery companies with which PENSIÓ MARFIL works) may use the data to provide the corresponding services, without prejudice to this, they will not use the information for their own purposes or for transfer to third parties.

PENSIÓ MARFIL seeks to guarantee the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have appropriate measures in place to protect personal data. These third parties are obliged to guarantee that the information is treated in accordance with data privacy regulations.

In some cases, the law may require that personal data be disclosed to public bodies or other parties, only what is strictly necessary to comply with these legal obligations will be disclosed.

Personal data from the CVs of job candidates may be transferred to companies specialized in personnel selection processes and profile analysis.

The personal data obtained may also be shared with reservation centers and/or reservation engines.

Where is your data stored?

In general, data is stored within the EU. For data sent to third parties that do not belong to the EU, we will ensure that they offer a sufficient level of protection, either because they have Binding Corporate Rules (BCR) or because they have adhered to the “Privacy Shield” or to new formulas or agreements that the AGPD and/or the EU indicate.

What rights do you have and how can you exercise them?

You can direct your communications and exercise your rights by sending a request to the following email address: info@pensiomarfil.com.
In accordance with the provisions of the GDPR, you can request:

• Right of access: you can request information about the personal data we have about you.
• Right of rectification: you can communicate any change in your personal data.
• Right to erasure and to be forgotten: you can request the elimination of personal data after blocking.
• Right to limitation of processing: involves the restriction of the processing of personal data.
• Right to opposition: you can withdraw consent to the processing of data, opposing the continued processing.
• Right to portability: in some cases, you can request a copy of your personal data in a structured, commonly used and machine-readable format for transmission to another controller.
• Right not to be subject to individualized decisions: you can request that decisions not be made that are based solely on automated processing, including profiling, that produce legal effects or significantly affect the data subject.

In some cases, your request may be rejected if you request the deletion of data necessary for the fulfillment of legal obligations.
Likewise, if you have any complaints about the processing of your data, you can file a complaint with the data protection authority.

Who is responsible for the accuracy and veracity of the data provided?

The user is solely responsible for the veracity and correctness of the data included, exonerating PENSIÓ MARFIL from any liability in this regard. Users guarantee and respond, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the registration or subscription form. PENSIÓ MARFIL reserves the right to terminate the contracted services that have been concluded with users, in the event that the data provided is false, incomplete, inaccurate or not updated.
PENSIÓ MARFIL is not responsible for the veracity of information that is not its own and that is indicated by another source, so it does not assume any responsibility for hypothetical damages that could arise from the use of this information.
PENSIÓ MARFIL reserves the right to update, modify or delete the information contained in its web pages and may even limit or not allow access to this information. PENSIÓ MARFIL is exempted from liability for any damage or loss that the user may suffer as a result of errors, defects or omissions in the information provided by PENSIÓ MARFIL whenever it comes from sources other than PENSIÓ MARFIL.
Likewise, the user certifies that he is over 14 years of age and that he has the necessary legal capacity to provide consent regarding the processing of his personal data.

How do we treat the personal data of minors?

In principle, our services are not specifically aimed at minors. However, in the event that any of them are aimed at minors under the age of fourteen, in accordance with article 8 of the GDPR and article 7 of LO 3/2018, of December 5 (LOPDGDD), PENSIÓ MARFIL will require the valid, free, unequivocal, specific and informed consent of the legal guardians to process the personal data of minors. In this case, the DNI or other form of identification of the person giving the consent will be required. In the case of persons over the age of fourteen, the data may be processed with the consent of the user, except in those cases in which the Law requires the assistance of the holders of parental authority or guardianship.

What security measures do we apply to protect your personal data?

PENSIÓ MARFIL has adopted the levels of security for the protection of personal data legally required, and seeks to install those other means and additional technical measures at its disposal to prevent the loss, misuse, alteration, unauthorized access and theft of personal data provided to PENSIÓ MARFIL.
PENSIÓ MARFIL is not responsible for hypothetical damages or losses that may arise from interferences, omissions, interruptions, computer viruses, telephone breakdowns or disconnections in the operational functioning of this electronic system, motivated by causes beyond PENSIÓ MARFIL; delays or blockages in the use of this electronic system caused by malfunctions or overloads of telephone lines or overloads in the Data Processing Center, in the Internet system or in other electronic systems, as well as damages that may be caused by third parties through illegitimate interferences beyond the control of PENSIÓ MARFIL. However, the user must be aware that Internet security measures are not impregnable.

Links to other websites

The website www.pensiomarfil.com may contain links to other websites. By clicking on one of these links and accessing an external website, the visit will be subject to the privacy policy of that website, and PENSIÓ MARFIL is disassociated from any kind of responsibility regarding its privacy policy.

How do we use cookies?

The PENSIÓ MARFIL website uses cookies, in order to optimize and personalize your browsing experience. Cookies are physical information files that are stored on the user's terminal, the information collected through cookies serves to facilitate the user's navigation through the portal and optimize the browsing experience. The data collected through cookies can be shared with the creators of these, but in no case will the information obtained through them be associated with personal data or data that can identify the user. However, if the user does not want cookies to be installed on their hard drive, they have the possibility of configuring their browser in such a way as to prevent the installation of these files. For more information, consult our Cookie Policy.

Can the privacy policy be modified?

This privacy policy may change. We recommend that you review the privacy policy periodically.