This legal text provides details on how we collect and process your personal data through the use of our website https://www.centrocomercialrivieraplaza.es/, including any information you may provide through the site when submitting your data via the designated form.

By providing us with your data, we inform you that our services are not available to individuals who are legally restricted from providing consent. Therefore, by submitting forms to us, you guarantee that you have the sufficient legal capacity to grant consent.

Below is the information regarding the data protection policy of: Grupo Mijas Plaza 700, S.L.

Contact details of the Controller:

• Company Name: Grupo Mijas Plaza 700, S.L.
• Tax Identification Number (C.I.F.): B92585462
• Registered Office: Urbanización Riviera del Sol nº 4, 29649 – Mijas – Málaga
• Telephone: 623492587
• Email: info@ccrivieraplaza.es
• Registry Data: Commercial Registry of Málaga 3676, Book 2587, Folio 157, Section 8, Page MA 73659, 1st Inscription (12.11.04)

Grupo Mijas Plaza 700, S.L, is the controller of your data (hereinafter “we”, “us”, or “our”).

The General Data Protection Regulation (GDPR) defines personal data as any information relating to an identified or identifiable natural person; that is, any information capable of identifying an individual. This does not include anonymous or percentage-based data.

Personal data collected directly from the data subject will be treated confidentially and incorporated into the corresponding processing activities owned by Grupo Mijas Plaza 700, S.L.

On our website, we may process certain types of personal data, which may include:

• Identity Data: first name and surname.

• Contact Data: email and telephone number.

We do not collect any data regarding special categories of personal data (those revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or information about health, genetic, or biometric data).

In the event that you are requested to provide personal data by law or under the terms of a contract between us and you refuse to provide it, we may not be able to perform said contract or provide the service, and you must notify us in advance.

The means we use to collect personal data are:

Through the form on our website, contact emails, telephone, or postal mail, when you:

• Request information about our services.

• Contract the provision of our services.

To ensure the quality of our portal, we reserve the right to refuse any registration request or to suspend or cancel a previously accepted registration if we understand that it does not meet these requirements or any other law or regulation. If this occurs, we will attempt to explain the reasons for our decision, but we cannot commit to doing so in all cases.

• • • Through technology or automated interactions: On our site, we may automatically collect technical data about your equipment, browsing actions, and usage patterns. This data is collected through cookies or similar technologies. For further information, you can consult our Cookies Policy [here].

    • Through third parties:

      • Google: analytical data or search data (outside the European Union).

The most common uses of your personal data are:

• For the formalization of a contract between Grupo Mijas Plaza 700, S.L. and you.

• When you provide consent for the processing of your data.

• When we need it to comply with a legal or regulatory obligation.

• When it is necessary for our legitimate interest or that of a third party.

The User may revoke the consent provided at any time by sending an email to info@ccrivieraplaza.es or by consulting the section on exercising rights below.

Below is a table outlining the ways we will use your personal data and the legal basis for its use, as well as the types of personal data processed:

Purpose Limitation: We will only use your data for the purposes for which we collected it, unless we reasonably consider that we must use it for another reason, notifying you beforehand so that you are informed of the legal reason for its processing and provided the purpose is compatible with the original intent.

Data will be kept for the time necessary to fulfill the purpose for which it was collected and to determine any possible liabilities that may arise from said purpose and processing. The provisions of various regulations regarding retention periods will apply as relevant to this processing.

Grupo Mijas Plaza 700, S.L. does not authorize minors under the age of 14 to provide their personal data through the means provided on this website (web forms, contact requests, or emails). Therefore, individuals providing personal data through such means formally declare to be over 14 years of age. Grupo Mijas Plaza 700, S.L. is exempt from any liability for failure to comply with this requirement.

If your child, being under the established age limit, has provided personal information to Grupo Mijas Plaza 700, S.L., please contact us to request the exercise of applicable rights.

In cases where services offered by Grupo Mijas Plaza 700, S.L. are intended for minors under 14, means will be provided to obtain authorization from parents or legal guardians.

How to exercise these rights? Users may send a communication to the registered office of Grupo Mijas Plaza 700, S.L. or to the email address info@ccrivieraplaza.es, including in both cases a photocopy of their ID (D.N.I.) or similar identification document, to request the exercise of the following rights:

• Access to your personal data.

• Request rectification if the data is incorrect, or the right to be forgotten (erasure).

• Request limitation of processing, in which case data will only be kept for the exercise or defense of claims.

• Object to processing: Grupo Mijas Plaza 700, S.L. will stop processing the data as indicated, unless for legitimate reasons or the defense of possible claims, they must continue to be processed.

• Data portability: Should you wish for your data to be processed by another firm, Grupo Mijas Plaza 700, S.L. will facilitate the portability of your data to the new controller.

You may use the templates provided by the Spanish Data Protection Agency (AEPD) to exercise these rights [here].

Complaints: If you consider there is a problem with the way Grupo Mijas Plaza 700, S.L. is handling your data, you may direct your complaints
to the corresponding supervisory authority, which in Spain is the Agencia Española de Protección de Datos (AEPD).

We may request specific information to help us confirm your identity and guarantee your right to access your personal data. This is a security measure to ensure that personal data is not disclosed to anyone who has no right to receive it.

We resolve all requests within the legal period of one month, though it may take longer if the request is particularly complex, in which case you will be notified. in which case you will be notified.

During the performance of our work, we may require the assistance of third parties who will only process the data to provide the contracted service, and with whom we have established measures to guarantee your rights:

• Service providers providing systems administration and information technology services.

• Professional advisors including lawyers, auditors, and insurers providing banking, legal, insurance, and accounting consultancy services.

All processors to whom we transfer your data will respect the security of your personal data and treat it in accordance with the GDPR.

We only allow such processors to treat your data for specified purposes and in accordance with our instructions. You may request a list of these companies by emailing: info@ccrivieraplaza.es

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, modified, or disclosed. Furthermore, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have implemented procedures to deal with any suspected personal data breach and will notify you and the Supervisory Authority in the event of a security breach, as regulated by Articles 33 and 34 of the GDPR.