Basic Information on Data Protection

I. Controllers

By ticking this box you authorise Parques Reunidos Servicios Centrales S.A. and Leisure Parks, S.A. to process individually as data controllers and jointly as joint controllers (hereinafter, the "Controllers") your personal data in accordance with the terms and conditions described here and in the Privacy Policy .

Contact details for the Data Protection Officer (DPO): dpo@grpr.com or C/Federico Mompou, 5, Parque Empresarial "Las Tablas", Edificio 1 - Planta 3ª, 28050, Madrid, Spain.  If you have any questions about the processing of your personal data or wish to request the key parts of the existing co-responsibility contract between the Controllers, you can contact the DPO through any of the means indicated above.

II. Purpose and legal basis

We will process the personal data you provide in the form for the following purposes:

  • Management of the purchase of products and/or services. Your personal data will be processed in order to manage the purchase and payment of the product and/or service ordered and to send you the confirmation of your purchase and the receipt, together with your ticket, by email. In addition, we will ask you for your date of birth to ensure that you are over fourteen (14) years of age, otherwise, under European data protection legislation, we would need to obtain the consent of your guardians/legal representatives to process your personal data. If you have taken advantage of discounts that are subject to the fulfilment of specific conditions by the customer at the time of purchase in order to acquire this product and/or service, please note that we may ask you for the corresponding documentation at the park ticket offices in order to verify the fulfilment of these conditions (e.g. large family card, ID card, etc.), however, this does not mean that the Controllers will store this additional information. Additionally, we will process your data to deal with your requests for information (by telephone or email), problems you may have with the product and/or service purchased, complaints or to communicate with you by email, SMS or telephone to inform you about circumstances that may affect your visit (for example, weather, safety, public health, etc.). Legal basis: these processing operations will be carried out in order to fulfil the contract entered into with you for the purchase of the product and/or service (General Terms and Conditions of Business). If you do not provide your personal data, it will not be possible to complete the purchase of the product/service you wish to acquire.
  • Sending of commercial information, discounts and promotions. Only if you expressly authorise it, we will process your personal data to send you commercial information, discounts and promotions, by any means, including electronic means, about products and/or services from any of the European companies belonging to the Parques Reunidos GROUP [DTT1] , relating to the leisure sector, hotels, Bono Parques, events or activities organised by any of these companies, including prior profiling and analysis of your preferences through automated decisions to suggest products and services that we believe may be of interest to you. Full details of the European companies belonging to the Parques Reunidos Group and comprehensive information on this processing can be found in the Privacy Policy. In order to fully guarantee the quality of your data, the Controllers also use a double verification process, whereby, if you consent to the processing of your data for this purpose, they will send you an email to confirm the email address provided by you and that your personal data may be processed for this purpose.Legal basis: this processing will only be carried out if you give your express consent, which you may withdraw at any time by the means indicated below both in the information provided to you and in the aforementioned Privacy Policy.
  • Sending of surveys. We will process your personal data to send you, by any means, including electronic means, surveys aimed at evaluating the degree of satisfaction amongst our customers with regard to products and/or services purchased, to find out about their experience and possible suggestions and to carry out market analyses and studies to ascertain our positioning in the sector and whether our customers would purchase our products and/or services again. You can find comprehensive information about this processing in the Privacy Policy. Legal basis: this processing is carried out for the Controllers' legitimate interests and you may refuse it if you deem it appropriate by the means indicated below both in the information provided to you and in the aforementioned Privacy Policy.
  • Use of information obtained through surveys as an additional criterion for profiling. Only if you expressly authorise it, we will process your personal data and the non-personal information contained in the surveys to which you have responded (surveys aimed at finding out how satisfied our customers are with the products and/or services purchased, their experience and their possible suggestions and to prepare analyses and market studies to ascertain our positioning in the sector and whether our customers would purchase our products and/or services again) as an additional criterion to prepare your profile and send you, by any means, including electronic means, commercial information, discounts and promotions on products and services from the European companies belonging to the Parques Reunidos GROUP relating to the leisure and hotel sector, Bono Parques, events or activities organised by any of the aforementioned companies that we believe may be of interest to you. Full details of the European companies belonging to the Parques Reunidos Group and comprehensive information on this processing can be found in the Privacy Policy. . Legal basis: this processing will only be carried out if you have expressly authorised the sending of the commercial information indicated and provided that you have also given your express consent specifically for this purpose. You may withdraw your consent at any time by the means indicated below both in the information provided to you and in the aforementioned Privacy Policy.

Fulfilment of legal obligations. Your personal data and transactional information relating to the purchase of the product or service made by you will be processed to comply with the legal obligations applicable to the Controllers as a result of the contractual relationship maintained with you for said purchase and the processing of your personal data (tax obligations, data protection, commercial, services offered by information companies and electronic commerce, protection of consumers and users, administrative, accounting, civil, etc.). Legal basis: compliance with legal obligations applicable to the Controllers under European Union law and/or the applicable domestic legal regime. Without your personal data, the Controllers would not be able to adequately comply with the aforementioned legal obligations.

III. Recipients

  • If necessary, to comply with the legal obligations applicable to the Controllers under European Union and/or domestic law, your personal data may be disclosed to competent public authorities, judges, courts and/or public prosecutors.
  • Personal data may be processed by service providers contracted by the Controllers. These providers will only access and process your personal data in order to carry out their services on behalf of and for the benefit of the Controllers, always following their instructions and under no circumstances will they use such personal data for their own purposes and/or for unauthorised purposes. By way of illustration, but without limitation, these providers operate in the fields of information security, technology, marketing, customer management and administration (CRM), etc.
Personal data will not be transferred internationally. If you consent to the sending of marketing information or to the processing of information contained in surveys to which you respond as additional criteria for profiling and sending you marketing information, your personal data will be processed within the European Economic Area (EEA) by the provider operating the cloud marketing platform engaged by the Controllers (Salesforce). However, it is possible that, in exceptional situations such as disaster recovery (process to recover personal data, information and functionalities in the event of system interruption caused by a natural or man-made disaster), your personal data may be processed by this provider outside the EEA (international data transfer), including in countries that do not offer a level of protection comparable to the level offered by the European data protection regulation (e.g. in the USA). Nevertheless, also in the latter case, binding contractual commitments have been entered into with this provider and appropriate security measures are guaranteed to be in place to ensure that your personal data will at all times be processed with a level of protection adequate and equivalent to that required in the EEA in accordance with the terms and safeguards described in the Privacy Policy.

IV. Rights

You may withdraw your consent or exercise your right of access, rectification, refusal, deletion, limitation, portability and the right not to be subject to automated decisions, including profiling, at any time by sending your request together with a copy of your ID card or equivalent official document by which we can verify that you are the holder of the personal data, to the DPO via the email address or postal address indicated in the header of this information table.

If you accept the sending of commercial information, please note that, in addition to the methods indicated above, you can also unsubscribe from these types of commercial communications through the means that will be attached for this purpose in each of the commercial communications that you may receive, should you give your express consent. 

If you withdraw your consent to receiving commercial communications, request to unsubscribe or exercise your right to refuse or not to be subject to automated decisions, including profiling, your personal data will also cease to be automatically processed for these purposes. 

V. More Information

For comprehensive information on the processing of your personal data and details of the European companies belonging to the Parques Reunidos Group about which, if you wish, you may receive commercial information, please consult our Privacy Policy