Basic data protection information related to sending marketing, discount and promotional information

I. Data Controllers

By ticking this box you authorise Parques Reunidos Servicios Centrales S.A. and Parque de Atracciones Madrid, S.A.U. to process your personal data, individually as data controllers and together as joint data controllers (hereinafter the “Data Controllers”), in accordance with the terms described here and in the Privacy Policy.

Contact details for the Data Protection Officer (DPO): dpo@grpr.com or Federico Mompou, 5, Parque Empresarial "Las Tablas", Edificio 1 - Planta 3ª, 28050, Madrid, Spain.  If you have any queries about the processing of your personal data or would like to request the a copy of the essential parts of the joint responsibility contract between the Data Controllers, you can contact the DPO via one of the aforementioned means.

II. Purposes and legal basis

Sending marketing, discount and promotional information. Provided you expressly authorise us to do so, we will process your personal data to send you marketing, discount and promotional information, by any method, including electronic means, regarding products and/or services from any of the European companies in Grupo Parques Reunidos , related to the entertainment or hotel sector, Park Passes, events or activities organised by any of the aforementioned companies, including prior profiling and analysis of your preferences through automated decisions to suggest products and services that we think might interest you. You can find all the details about the European Companies in  Grupo Parques Reunidos and this processing in the Privacy Policy. In order to fully guarantee the quality of your data, the Data Controllers also use a double verification process, which, if you agree to your data being processed for this purpose, will send you an email to confirm the email address you provided and that your personal data will be processed for this purpose. Legal basis: your data will only be processed for this purpose if you provide your express consent, which you may withdraw at any time via the methods indicated above, both in the information provided and in the aforementioned Privacy Policy.

III. Recipients

  • If it is necessary to comply with legal obligations applicable to the Data Controllers in accordance with European Union law and/or the internal legal framework, your personal data may be communicated to the relevant public authorities, judges, courts and/or prosecution service.
  • Personal data may be processed by service providers hired by the Data Controllers. These providers will only access and process your personal data to carry out their services on behalf of the Data Controllers. They will always follow your instructions and will never be able to use said personal data for their own unauthorised purposes. Some of the sectors these providers work in include, but are not limited to, data security, technology, marketing, customer relationship management (CRM), etc.

Your personal data will not be transferred internationally. If you consent to receiving marketing information or the information in the surveys you responded to being processed as additional criteria for developing your profile and sending you said marketing information, your personal data will be processed within the European Economic Area (EEA) by the provider that operates the cloud marketing platform contracted by the Data Controllers (Salesforce). However, it is possible that, in exceptional circumstances, such as disaster recovery (a process to recover personal data, information and functionalities in response to a system interruption caused by a natural or human disaster) your personal data will be processed by this provider outside of the EEA (international data transfer), including in countries that do not offer a comparable level of protection to the level provided by European data protection legislation (such as the USA). However, even if the latter does take place, binding contractual agreements have been signed with said provider, guaranteeing that they implement the appropriate security measures to ensure that your personal data are always processed with a suitable level of protection that is comparable to that demanded in the EEA, in accordance with the terms and guarantees described in the Privacy Policy.

IV. Rights

You can withdraw your consent at any time or exercise your right to access, rectification, opposition, erasure, limitation, portability and to not be the subject of automated decisions, including the development of profiles, by sending your request to the DPO, along with a copy of your ID or equivalent official document so we can ensure that you are the owner of your personal data, using the email or postal address given at the top of this table.

If you accept to receive marketing information, remember that, in addition to the mechanisms mentioned above, you can also unsubscribe to stop receiving this kind of marketing information via the means provided for this purpose included in every marketing communication you receive, if you gave express authorisation.  

If you withdraw your consent to receive marketing information, unsubscribe or exercise your right to opposition or to not be the subject of automated decisions, including the development of profiles, your personal data will also stop being processed automatically to carry out the purpose for which you have been informed.

You also have the right to file a claim with the Spanish Data Protection Agency to safeguard your rights by going to  www.aepd.es

V. More information

To find out more information about the processing of your personal data and details about the European Companies in  Grupo Parques Reunidos, about which, if you wish, you could receive marketing information, go to the Privacy Policy.