Privacy Policy

I.- Who are the parties responsible for the processing of your data?

The persons responsible for the processing of your data with regard to this website are Parques Reunidos Servicios Centrales, S.A. and Leisure Parks S.A. (hereinafter, jointly the “Controllers”), both acting as co-responsible parties, with registered offices at Federico Mompou, 5, Parque Empresarial “Las Tablas”, Edificio 1 – Planta 3ª, 28050, Madrid, Spain. If you have any queries regarding data protection, you may contact the Data Protection Office of the Controllers by e-mail at dpo@grpr.com or at the postal address Federico Mompou, 5, Parque Empresarial “Las Tablas”, Edificio 1 – Planta 3ª, 28050, Madrid, Spain.

II.- For what purpose and with what legitimacy do we process your data?

The Responsible Parties inform the user, or the legal representative thereof who may provide their data through this website or for the purchase of any of its products and/or services, that their data will be processed by the Responsible Parties for the following purposes:

1. Management of the purchase and the services and/or events contracted. In order to formalise and manage the purchase of products, provision of services offered by the Responsible Parties through this website, as well as to manage the organisation and participation in events (e.g. corporate events, communions, etc.) contracted. Likewise, the data will be used for the management of the contractual relationship with the client. For these purposes, the Responsible Parties will process the client’s data for contact activities, invoicing, collection and debt management, customer services and claims management, among others.

Legitimation: This processing is necessary for the performance of the contract.

2. Fulfilment of accounting, legal, fiscal and administrative obligations.

Legitimation: This processing is necessary for the performance of the contract.

3. Sending by electronic means, information about offers and promotions on products and services offered by the Controllers. In order to be able to offer products and services that may be of interest to the client, information about products and services in the leisure and hotel sectors offered by the Responsible Parties will be sent to the client for assessment. In any case, the client may object to receiving this type of communications through the means provided in section V of this privacy policy.

Legitimation: This processing will only be carried out if the Controllers have the consent of the customer.

4. In order to send commercial communications with offers related to products and/or services offered by the Controllers, which may be attractive to the customer, your personal data may be processed for the creation of profiles based on internal sources (e.g. cookies, historical and statistical browsing data), the results of which allow the creation and analysis of personalised products, through segmentation into different groups in relation to common patterns. To this end, it will be possible to monitor customer preferences regarding the communications received and to analyse their behaviour in accordance with them.  Such profiling will be used to send you personalised communications about products and/or services offered by the Responsible Parties.

Legitimation: This processing will only be carried out if the Controllers have the consent of the customer.

5. Management of the registration in the newsletter for sending, by electronic means, information about offers and promotions on products and services offered by the Controllers. When the client registers for the newsletter through the section provided for this purpose on this website, the Controllers may send him/her commercial communications about products and services offered by the Controllers as well as events organised by the Controllers.

Legitimation: With regard to the sending of commercial communications by the Responsible Parties about products and/or services offered by the latter, it is understood that by subscribing to the newsletter the client gives his/her consent for this purpose. On the other hand, with regard to the sending of commercial communications about products and/or services offered by entities other than the Responsible Parties, the client’s consent must be obtained.

6. To respond to the queries raised. The Data Controllers will process the data in order to be able to respond to the queries raised by the customer through the website. Legitimation: This processing will only be carried out if the Controllers have the consent of the customer. It is understood that the client, by sending his/her query, consents to the processing of his/her data for this purpose.

7. Conducting surveys of customers or potential customers. Sending commercial information, discounts and promotions, by any means, including electronic means (e-mail, SMS, telephone calls), about products and services of any of the European companies of the Parques Reunidos Group (companies indicated in the section “Companies of the Parques Reunidos Group in Europe” of this Privacy Policy), related to the leisure sector, hotels, Bono Parques or events and activities organised by any of said companies, including prior profiling and analysis of your preferences through automated decisions to ensure that they are of interest to you. In order to send you the commercial information, discounts and promotions indicated above, the Responsible Parties will process your name, surname, e-mail address or telephone number that you provide at the time of purchase. The aforementioned profiling will be carried out by means of automated decisions in order to ensure that the commercial information, discounts and promotions you receive are of interest to you. This profiling will be carried out according to our own internal sources based on the storage of information provided directly by you (date of birth/age, country and postcode), your purchase history and details of the products and/or services purchased by you and, only if you expressly and specifically authorise this by ticking the box provided for this purpose on the data collection forms on this website (e.g. purchase form, booking form, information request form, contact form or newsletter subscription form, among others), in the storage of the information provided by you in the surveys to which you respond. Accordingly, automated decisions will be taken based on the history of transactions made (type of products and services purchased, whether you are a Bonista or whether you purchase food and beverage related products both in the park and via the website), socio-economic criteria (based on the age of the customer and the history of purchases made, based on your age and purchase history, whereby we will also be able to deduce whether or not you have children and, where applicable, the number of children based on the children’s tickets – junior tickets – you have purchased), demographic criteria based on internal data provided directly by you (based on the postcode provided at the time of purchase), analysis of your behaviour in response to commercial communications received in order to know whether after receiving a commercial communication you purchase the product or service that we have offered you or, if on the contrary, you do not proceed to activate the purchase of the same and only if you expressly authorise it, the information indicated by you in the surveys you respond to (surveys aimed at finding out your degree of satisfaction, your experience and suggestions regarding the products and/or services previously purchased, our position in the market and whether you would purchase our products and/or services again). The profile indicated will not be used to make automated decisions with legal effects on you or that will significantly affect you in a similar way, as it will only be used to send you commercial information, discounts and promotions on products, services, events or activities of the group of parks that we believe may be of interest to you based on the criteria described above. Basis of legitimacy: this processing will only be carried out if you voluntarily give your express consent through the tick box specifically included for this purpose in the forms on this website (e.g. purchase form, booking form, information request form, contact form or newsletter subscription form, among others). Remember that, at any time, you may withdraw your consent or exercise your rights in accordance with the provisions of this Privacy Policy. Notwithstanding the foregoing, we remind you that you may withdraw your consent to not receive the commercial information about which you are being informed by sending your request to the Protection Delegate via the postal or e-mail address provided in this Privacy Policy or, if you prefer, via the link that will be included for this purpose in each of the commercial communications that you may receive. If you have expressly consented to the information contained in the surveys to which you have responded being processed as additional criteria for drawing up your profile and sending you said commercial information in accordance with your interests, at any time you may also exercise your rights and, in particular, withdraw your consent or exercise your right to oppose in accordance with the procedure indicated for this purpose.

8. Sending surveys by any means, including electronic means (e-mail, SMS, telephone calls) aimed at finding out the degree of satisfaction of our customers with regard to the products and/or services purchased, their experience and their possible suggestions and to carry out market analyses and studies (quantitative and qualitative) to find out our positioning in the sector and whether our customers would purchase our products and/or services again. To this end, the Controllers will process only the strictly necessary data: e-mail address or telephone number and the non-personal information contained in the surveys to which you have responded. Basis of legitimacy: this processing is carried out because the Data Controllers have a legitimate interest in knowing the opinion of their customers regarding the products and services they have purchased, their needs and possible suggestions in this regard, whether they would purchase such products and/or services again or other similar ones that we offer in relation to the leisure sector, hotel, Bono Parques, events and related activities and our position in the market in order to detect areas of improvement to improve the quality of our products and/or services and the experience of our customers, as well as to make internal decisions to plan our business operations and our activities. In this respect, we understand that the interests or fundamental rights and freedoms of our customers are not undermined insofar as this processing is carried out within the framework of the contractual relationship that is maintained as a result of the purchase of products and/or contracting of services, we use strictly necessary personal data and basic information of a non-sensitive nature, we do not send surveys to children under 16 years of age and we address ourselves in a timely manner to customers who have recently purchased our products and/or services. As a result, we understand that by purchasing our products and/or services and being specifically informed about the processing of their personal data, our customers may have a reasonable expectation that their personal data will be processed for this purpose. In addition, our customers may at any time object to the processing of their personal data or exercise the other rights granted to them by data protection regulations in accordance with the procedure described below in this Privacy Policy.

9. Personal data (e-mail address and telephone number) and non-personal information contained in the surveys to which you have responded (surveys aimed at finding out the degree of satisfaction of our customers with regard to the products and/or services purchased, their experience and possible suggestions and to carry out analyses and market studies (quantitative and qualitative) to find out our positioning in the sector and whether our customers would purchase our products and/or services again) will be processed as one of the criteria for drawing up your profile and analysing your preferences in order to send you commercial information, discounts and promotions, by any means, including electronic means (e-mail, SMS, telephone calls), about products and services of any of the European companies of the Parques Reunidos Group (companies indicated in the section “European companies of the Parques Reunidos Group” of this Privacy Policy) related to the leisure and hotel sector, Bono Parques, events and activities related to and organised by said companies that may be of interest to you, provided that you have previously authorised the sending of such information. In this way, your profile will be configured in accordance with the criteria expressly authorised by you (history of transactions carried out – type of products and services purchased, whether you are a Bono member or whether you purchase food and beverage related products both in the park and through the website, socio-economic criteria based on the age of the customer and the history of purchases made, according to which we can also deduce whether or not you have children and, where appropriate, the number of children according to their age and the child tickets – junior tickets – that you have purchased), demographic criteria based on internal data provided directly by you based on the postal code provided at the time of purchase, analysis of your behaviour in response to commercial communications received in order to know whether, after receiving a commercial communication, you purchase the product or service we have offered you or, on the contrary, do not proceed to activate the purchase thereof and only if you expressly authorise this) and only if you expressly and specifically authorise this by ticking the box included for this purpose in the data collection forms on this website (e.g., formulate the following form).

IF YOU ARE UNDER 14 YEARS OF AGE, WE NEED YOUR PARENTS’ OR LEGAL GUARDIANS’ CONSENT. IF YOU ARE UNDER 14 YEARS OF AGE, we need the consent of your parents or legal guardians, so it will be necessary for them to confirm that they are your parents or guardians and give their consent, at which point we will be able to accept your request.

III.- For how long will we keep your data?

Personal data to which we have access will be processed for the duration of the contractual relationship. After this, the Controllers will keep the personal data once the contractual relationship has ended, duly blocked, to be made available to the competent Public Administrations, Judges and Courts or the Public Prosecutor’s Office during the period of limitation of the actions that may arise from the relationship maintained with the client and/or the legally stipulated retention periods.  The Data Controllers shall proceed to the physical deletion of your data once these periods have elapsed.

Sending commercial information, discounts and promotions, by any means, including electronic means, on products and services of any of the companies of the Parques Reunidos Group, related to the leisure and hotel sector, Bono Parques or events and activities organised by any of said companies, including prior profiling and analysis of your preferences so that they may be of interest to you: if you expressly consent to this processing, your personal data will be processed exclusively for this purpose as long as you do not withdraw the express and informed consent previously provided by you, do not request to unsubscribe through the link that will be incorporated for this purpose in each of the commercial communications you receive or exercise your right of opposition or your right not to be subject to automated decisions, including profiling, since in such cases, your personal data will no longer be processed for this purpose.
Sending surveys by any means, including electronic means, aimed at assessing the degree of satisfaction of our customers with respect to products and/or services purchased, to learn about their experience and possible suggestions and to carry out analyses and market studies to find out our positioning in the sector and whether our customers would purchase our products and/or services again: Your personal data will be processed exclusively for this purpose for a maximum period of 12 months unless you object to this processing before the expiry of this period, in which case, they will no longer be processed for this purpose.
To process personal data (e-mail address and telephone number) and non-personal information contained in the surveys to which you have responded (surveys aimed at ascertaining the degree of satisfaction of our customers with regard to the products and/or services purchased, your experience and possible suggestions and to carry out market analyses and studies to know our positioning in the sector and whether our customers would purchase our products and/or services again) will be processed as an additional criterion to draw up your profile and send you commercial information, discounts and promotions, by any means, including electronic means (e-mail, SMS, telephone calls), on products and services of the European companies of the Parques Reunidos Group that may be of interest to you: your personal data will be processed exclusively for this purpose as long as you do not withdraw the express and informed consent previously given by you or you object to the processing of your personal data for this purpose, in which case, your personal data will no longer be processed for this purpose. Likewise, if you withdraw your consent to receive commercial communications, unsubscribe via the link that will be included for this purpose in each of the commercial communications you receive or exercise your right to object or your right not to be subject to automated decisions, including profiling, your personal data will no longer be processed automatically for this purpose.

IV.- To whom will we communicate your data?

The Controllers will communicate customer data to:

Your personal data may be communicated to Public Authorities, Judges, Courts and/or Public Prosecutor’s Office if it is necessary to comply with the legal obligations applicable to the data controller under European Union Law and/or domestic legal regime.
In addition, the Controllers have suppliers who may also process your personal data in order to provide services related to the purposes about which you are being informed (including, but not limited to, companies operating in the following sectors: technology, legal advice, marketing, multidisciplinary professional services, IT services, etc.). These providers will only access your personal data in order to carry out their services on behalf of and for the account of the Controllers, always following their instructions and without at any time using such data for their own purposes and/or unauthorised purposes.
Among these providers is Salesforce, which provides services related to the email marketing platform and has companies all over the world. For this purpose, if you consent to the sending of marketing information or to the information contained in surveys to which you respond being processed as additional criteria for profiling you in order to send you such marketing information in accordance with your interests, this provider will process your personal data on our behalf and on our behalf within the European Economic Area (EEA) and in compliance with applicable European data protection legislation. However, exceptionally, for example, in the event of a disaster recovery situation (a process to recover data and functionality in the event of a systems outage caused by a natural or man-made disaster), it may also provide its services through companies outside the EEA, which may require processing of your personal data even in countries that do not offer a level of protection comparable to the level offered by European data protection law (e.g. the USA). However, also in the latter case, the Controllers have entered into binding contractual commitments with Salesforce and have ensured that appropriate security measures are in place to ensure that your personal data is at all times processed with an adequate level of protection comparable to that required in the EEA (standard contractual clauses approved by the European Commission on data protection in accordance with the European Data Protection Regulation (GDPR), additional security measures in accordance with decision C-311/18 of the Court of Justice of the European Union and subject to certification mechanisms). For further information, please do not hesitate to contact the Data Protection Officer at any of the addresses (postal or email) indicated in this Privacy Policy. Likewise, remember that, at any time, you can withdraw your consent and/or exercise your rights as indicated in this Privacy Policy or request to unsubscribe from receiving commercial communications through the link that will be incorporated for this purpose in each of the commercial communications that you may receive if you give your express consent to do so.

V.- What are your rights when you provide us with your data?

The user/customer may exercise, if he/she so wishes, the rights of access, rectification and deletion of data, as well as request that the processing of his/her personal data be limited, oppose it, request the portability of his/her data, and not be subject to automated individual decisions, in both cases, by sending a written communication to the Data Protection Delegate of Parques Reunidos to the postal address Federico Mompou, 5, Parque Empresarial “Las Tablas”, Edificio 1 – Planta 3ª, 28050, Madrid, Spain or by sending an e-mail to the address dpo@grpr.com attaching in both cases to this request, a copy of your ID card, Tax ID number or official document that identifies you.

The user/customer may, in relation to those processing operations that are based on obtaining consent, withdraw their consent at any time and object to processing operations based on legitimate interest if they deem it appropriate, through the procedure detailed in the previous paragraph.

VI.- How did we obtain your data?

The personal data processed by the Controllers are the personal data collected from the data subjects during the provision of their data through this website and/or during the contractual relationship between the parties.

During the maintenance of the contractual relationship, the Controllers may process data of third parties that the customer may provide. In this regard, the customer is obliged to inform all such persons of the provisions contained herein regarding data protection and to obtain the consent of such third parties to the processing of data by the Controllers, if applicable.

<h2>VII.- Before which authority can you exercise your claims?</h2>.

The user/client may lodge a complaint with the Spanish Data Protection Agency in relation to the response received from the Controllers when dealing with their rights. In any case, he/she may initially contact the Data Protection Delegate of Parques Reunidos, through the e-mail address dpo@grpr.com or at the postal address Federico Mompou, 5, Parque Empresarial “Las Tablas”, Edificio 1 – Planta 3ª, 28050, Madrid, Spain in order to solve any claim so that the Controllers can help him/her in this regard.

VIII.- Which companies does the Parques Reunidos Group have in Europe?

If you expressly consent to the sending of commercial information, discounts and promotions on products and services of the companies of the Parques Reunidos Group relating to the leisure and hotel sector, Bono Parques, events and activities related to and organised by said companies, including prior profiling and analysis of your preferences so that they may be of interest to you, you should know that these companies are located in Europe and their main activity is the management and operation of amusement parks, water parks, zoos, aquariums, leisure centres and the performance of travel agency activities in their different modalities, offering hotel packages and tickets to the parks and leisure centres of the Parques Reunidos Group. Specifically, these companies are:

– Spanish companies of the Parques Reunidos Group: Parques Reunidos Servicios Centrales, S.A. (Bono Parques); Parque de Atracciones Madrid, S.A.U. (Parque de Atracciones Madrid); Madrid Theme Park Management, S.L.U. (Parque Warner and Parque Warner Beach); Madrid Theme Park Management, S.L.U. (Parque Warner and Parque Warner Beach); Madrid Theme Park Management, S.L.U. (Parque Warner and Parque Warner Beach). (Parque Warner and Parque Warner Beach); Gestión Parque de Animales Madrid, S.L.U. (Faunia); Zoos Ibericos, S.A. (Zoo Aquarium Madrid); Parques de la Naturaleza Selwo, S.L. (Selwo Aventura and Hotel Selwo Lodge); Aquópolis Cartaya, S.L.U. (Aquópolis Cartaya); Leisure Parks, S.A. (Aquópolis de Villanueva de la Frontera); Aquópolis de Villanueva de la Frontera, S.A. (Aquópolis de Villanueva de la Frontera); Leisure Parks, S.A. (Aquópolis de Villanueva de la Frontera). (Aquópolis de Villanueva de la Cañada, Aquópolis Costa Dorada – Vilaseca, Selwo Marina, Aquópolis de Cullera, Aquópolis de Torrevieja, Benalmádena Cable Car); Mall Entertainment Centre Acuario Arroyomolinos, S.L.U. (Atlantis Aquarium); Mall Entertainment Centre Acuario Arroyomolinos, S.L.U. (Atlantis Aquarium); Mall Entertainment Centre Acuario Arroyomolinos, S.L.U. (Atlantis Aquarium). (Atlantis Aquarium); Mall Entertainment Centre Murcia, S.L.U. (Nickelodeon Adventure Murcia); Travelpark Viajes, S.L.U. (products and services related to joint entry packages to parks and leisure centres of the Parques Reunidos Group and hotel accommodation bookings).

– Rest of Europe companies of the Parques Reunidos Group: Italy – Parco della Standiana S.R.L. (Miraiblandia and Mirabilandia Beach) and Travelparks Italy, S.R.L. (products and services related to joint packages of admission to parks and leisure centres of the Parques Reunidos Group and booking of hotel accommodation); Norway – Tusenfryd A/S (Tusenfryd) and Bø Sommarland AS (Bo Sommarland); Belgium – Bobbejaanland, B.V.B. A (Bobbejaanland, B.V.B.); Norway – Tusenfryd A/S (Tusenfryd) and Bø Sommarland AS (Bo Sommarland). A (Bobbejaanland); Denmark – BonBon – Land A/S (BonBon -Land); Germany – Movie Park Germany GmbH and Movie Park Germany Services GmbH (Movie Park), Event Park GmbH (Belantis), Nature Park Germany GmbH (Vogelpark Walsrode), Tropical Island Management GmbH (Tropical Island) and TI Hotel Asset GmbH (Tropical Island Hotels); Netherlands – Attractie- en Vakantiepark Slagharen B. V. (Slagharen and Slagharen Beach); France – Marineland SAS (Marineland, Aquaplash Marineland and Kids Island) and LB Investissement (Aqualud); England – Grant Leisure Group LTD (Blackpool Zoo), Real Live Leisure Company LTD (The Bournemouth Aquarium and Aquarium of the lakes) and Lakeside Mall Entertainment Centre Limited (Nickelodeon Adventure-Lakeside).

Close