This privacy policy applies to the Palmira Coralian Reporting Channel (hereinafter referred to as the REPORTING CHANNEL).
Please read this policy carefully. It contains important information about the processing of your personal data and the rights granted to you under the current regulations.
This policy is published at URL.
Submitting a report through the REPORTING CHANNEL implies full and unconditional acceptance of this privacy policy and the regulations governing the channel, which can be consulted at SPECIFY.
Individuals making a report guarantee that the personal data provided are true, accurate, complete, and up-to-date, and commit to notifying us of any changes to this information. False or malicious reports may result in corresponding sanctions, without prejudice to civil or even criminal liabilities that may arise under current regulations.
In general, the fields marked as mandatory in the forms must be filled out to process your requests.
We reserve the right to update our privacy policy at any time due to business decisions or to comply with potential legislative or jurisprudential changes. If you have questions or need clarification regarding our Privacy Policy or your rights, you can contact us through the channels indicated below.
The manager of the REPORTING CHANNEL and the person responsible for processing the information obtained from reports and related investigations is PALMIRA CORALIAN, located at Gran Vía Asima, 1, 07009 - Palma de Mallorca (Spain). You can contact the managers of the REPORTING CHANNEL at [email protected].
You can contact the Privacy Officer of the group at [email protected].
The data obtained from reports or investigations carried out by the REPORTING CHANNEL will be processed for the investigation of reported incidents and for the prevention of potential criminal offenses or violations of PALMIRA CORALIAN's Code of Ethics by employees or collaborators of the group.
In general, this information will only be accessed by the channel managers and individuals specified in the regulations governing the Reporting Channel.
Furthermore, this information will only be disclosed to third parties when it is necessary for the investigation or punishment of the reported incidents, when required by law, or with the prior consent of the affected parties. Depending on the matter, recipients of the information may include, among others, government or public entities, lawyers, judges and courts, as well as the management, HR department, or legal and auditing services of the companies in the MAR HOTELS GROUP affected by the report.
The identity of the whistleblower will remain confidential throughout the process and will not be disclosed to third parties, including their superiors or the person implicated in the report. However, it should be noted that it may be necessary to disclose their identity to relevant individuals involved in investigations or subsequent legal proceedings initiated as a result of the investigation.
In any case, all individuals involved in the investigations must sign a confidentiality agreement before providing support.
The basis for processing the data is the execution of the contractual relationship that connects the data subjects with PALMIRA CORALIAN, the fulfillment of its legal obligations, and its legitimate interest in preventing, investigating, and controlling criminal offenses and violations of its code of ethics, within the framework of the crime prevention and risk management plan adopted by PALMIRA CORALIAN in accordance with Article 31 bis of the Penal Code.
The data that is processed as part of the investigations will be deleted as soon as they are completed, plus a period that allows for internal auditing, unless administrative or judicial proceedings arise from the measures taken.
In any case, they will be retained for the periods established by applicable legal provisions and the time necessary to address potential liabilities.
You have the right to obtain confirmation as to whether or not we are processing your personal data, and if so, to access it. You can also request that your data be corrected when it is inaccurate or completed when it is incomplete, as well as request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
Under certain circumstances, you may request the limitation of the processing of your data. In this case, we will only process the affected data for the formulation, exercise, or defense of claims or for the protection of the rights of other individuals.
In certain situations and for reasons related to your specific situation, you may also object to the processing of your data. In this case, we will stop processing the data unless there are compelling legitimate reasons that override your interests or rights and freedoms, or for the formulation, exercise, or defense of claims.
Likewise, under certain conditions, you may request the portability of your data to be transmitted to another data controller.
You can withdraw any consent you have given for specific purposes, without affecting the lawfulness of the processing based on consent before its withdrawal, and you can file a complaint with the Spanish Data Protection Agency.
The exercise of these rights by the accused is guaranteed without implying the disclosure of the whistleblower's data to the accused.
To exercise your rights, you should send a request accompanied by a copy of your national identity document or another valid identifying document by postal mail or email to the managers of the Palmira Coralian Reporting Channel at the addresses indicated in the section "Who is responsible for processing your data?"
You can find more information about your rights and how to exercise them on the Spanish Data Protection Agency's website at http://www.aepd.es.