PRIVACY POLICY

Those responsible for the processing of your personal data are Madrid Theme Park Management, S.L.U. (the company that operates Parque Warner and Parque Warner Beach) and the company that manages its central services, Parques Reunidos Servicios Centrales, S.A., both with registered offices at Federico Monpou 5, Edificio 1 planta 3ª, 28050, Madrid, Spain, acting individually as data controllers and jointly as co-responsible for the processing (hereinafter, the "Controllers"). 

If you have any questions about the processing of your personal data or wish to request the essential parts of the co-responsibility contract existing between the Controllers, you may contact the Data Protection Officer (DPO) by sending your request to the postal address at Federico Monpou 5, Edificio 1 planta 3ª, 28050, Madrid, Spain or by e-mail to dpo@grpr.com.

The Controllers will process your personal data for the purposes set out below, and consistently with the purpose of the channel through which you may have provided your personal data: 

1. Management of the product and / or service purchase

If you purchase tickets via our online form, we will process your personal data (first name and surname, email address, telephone number, ZIP code, date of birth, method of payment and transactional details of your purchase) to process your purchase and payment of your products and/or services and send you and e-mail with the purchase confirmation, the receipt and the ticket. Additionally, during the purchase process we will ask for your date of birth to ensure that you are at least fourteen (14) years of age. This is required because pursuant to European data protection legislation, if you are not over fourteen years of age then we would need to obtain the consent of your parents/guardians to process your personal data. If you have purchased any product or service by using promotions that are subjected to specific conditions, please note that, at the park ticket offices, we may ask you to provide us the corresponding documentation to verify the compliance with these conditions (e.g., large family card, ID card, etc.). In these circumstances, this additional information will be not stored by the Controllers. In addition, we will process your personal data to address (by telephone or e-mail) your requests for information sent to the Controllers and any incidents or claims related to your purchased product and/or service, as well as, to reach you by email, SMS or phone for informing you about any circumstances that may affect your visit (e.g., weather conditions, security, public health issues, etc.).

Lawfulness basis: the basis for these processing operations is the execution of the agreement entered with you as a result of your purchase of the relevant product and/or service (purchase terms and conditions). If you do not provide the required personal data, you will not be able to complete your purchase.2. Gestión de reservas, contratación y celebración de eventos (cumpleaños, bodas, comuniones, eventos corporativos, etc.) 

2. Management of bookings, contracting and events celebration (birthday parties, weddings, first communions, corporate events etc.)

If you book and purchase one of our events via our online booking form, we will process your personal data (name, email address, telephone number, whether you or your host are Annual Pass holders, method of payment, personal details included in the payment receipt and transactional details of your booking) to manage your booking and process the payment of your event you wish to arrange and send you by email your booking confirmation, the booking receipt and the relevant documentation for the celebration of your event. Additionally, during the booking process we will ask for your date of birth to ensure that you are at least fourteen (14) years of age. This is required because pursuant to European data protection legislation, if you are not over fourteen years of age then we would need to obtain the consent of your parents/guardians to process your personal data. If you have booked your event by using promotions that are subjected to specific conditions, please note that, at the park ticket offices, we may ask you to provide us the corresponding documentation to verify the compliance with these conditions (e.g., large family card, ID card, etc.). In these circumstances, this additional information will be not stored by the Controllers. In addition, we will process your personal data to address (by telephone or e-mail) your requests for information sent to the Controllers and any incidents or claims related to the booking of your event, as well as, to reach you by email, SMS or phone for informing you about any circumstances that may affect your visit (e.g., weather conditions, security, public health issues, etc.). If for the purpose of customizing your event (e.g. creating the menus that may be served during your event), you provide information about any food allergies and/or intolerances, please ensure that you do not provide this information together with personal data that may identify the relevant person/s affected by such intolerances or allergies, as the Controllers will not process such information on a personalized basis. If for the purpose of customizing your event (e.g. creating the menus that may be served during your event), you provide information about any food allergies and/or intolerances, please ensure that you do not provide this information together with personal data that may identify the relevant person/s affected by such intolerances or allergies, as the Controllers will not process such information on a personalized basis.

Lawfulness basis: these processing operations will be carried out as part of the execution of our contract with you for the booked event (terms and conditions of purchase). If you do not provide your personal data, we will not be able to process your booking. If, in order to customize your event (e.g., for decorating the event venue) you voluntarily provide personal data of a child under fourteen (14) years of age (first name and first surname), you declare that you are his/her father, mother or guardian and give your express and informed consent to process his/her personal for the above purpose.

3. Management of bookings and contracting visits from schools and groups 

If you book a group or school visit via our online booking form, we will process your personal data (name, surname, Zip code, email address, phone number, group or school name, address, city/town, method of payment, personal data included in the payment receipt, and transactional information about your booking) to manage your booking and process your payment of the visit you wish to arrange and e-mailing you your booking confirmation and all relevant documentation. We will also ask for your date of birth to ensure that you are above fourteen (14) of age. If you are not, we would be required to seek your parents/guardians consent for processing your personal data, pursuant to European data protection laws. If at the time of booking your visit you have made use of promotions that are subject to specific conditions, please note that we may ask you to provide us with supporting documentation to confirm your eligibility for these promotions (e.g., large family card, ID card, etc.). In these circumstances, this additional information will be not stored by the Controllers. In addition, we will process your personal data to address (by telephone or e-mail) your requests for information sent to the Controllers and any incidents or claims related to the booking of your event, as well as, to reach you by email, SMS or phone for informing you about any circumstances that may affect your visit (e.g., weather conditions, security, public health issues, etc.). If for the purpose of customizing your visit (e.g. creating the menus that may be served during your event), you provide information about any food allergies and/or intolerances, please ensure that you do not provide this information together with personal data that may identify the relevant person/s affected by such intolerances or allergies, as the Controllers will not process such information on a personalized basis.

Lawfulness basis: these processing operations will be carried out as part of the execution of our contract with you related to the visit (terms and conditions of purchase). If you do not provide us with your personal data, we will not be able to process the booking of your visit.

4.Customer support

If you send us through any of the methods available for this purpose on this web site (by phone, online form or email) a query or request specific information about any of our products, services or events (first communions, birthday parties, corporate events, weddings, etc.), a suggestion or an information request about any claim or incidents that may have arisen from the products, services or event purchased or booked by you, we will process your personal data and the information contained in your query to deal with and respond to it by any means, including electronic methods (by email or phone). Additionally, during the booking process, we will ask for your date of birth to ensure that you are at least fourteen (14) years of age. This is required because pursuant to European data protection legislation, if you are not over fourteen years of age then we would need to obtain the consent of your parents/guardians to process your personal data. If your query relates to any product, service or event purchased by you, we might also ask you (as part of the customer support process) specific details about your purchase (transactional information, your ticket locator, date of purchase, type of product purchased, etc.) to ensure that your query is addressed properly.

Lawfulness basis: by contacting the Controllers via any of the above methods, you expressly agree that your personal data may be processed for this purpose. You may withdraw your consent at any time following the procedure described below in the section “What are my personal data rights?” of this Privacy Policy.

5. Surveys submission

If you purchase any of our products or services (including any of our events) the Controllers will send you surveys by any method, including electronic means (email, SMS, phone calls) intended to gain insights into the degree of customer satisfaction with our products and/or services, their experience, to allow customers to make suggestions, and to enable us to conduct market research and analysis (quantitative and qualitative) to find out our positioning in the industry and the likelihood for our customers to purchase our products and/or services again. The Controllers will process, strictly, the required data to fulfil this process: e-mail address or telephone number, and any non-personal information gathered in the surveys to which you have responded. To this end, the Controllers will process personal data that are strictly necessary for this purpose, in particular your e-mail address or phone number supplied by you at the time of your purchase and the non-personal information included in any surveys to which you have responded.

Lawfulness basis: this processing is based on the Controllers' legitimate interest in obtaining customer feedback related to the products and services purchased by them, their needs, and suggestions, to determine their likelihood for them to purchase again such products and/or services or other similar products and/or services that we offer related to the leisure and hospitality industries, our Annual Passes, events and activities and our position in the industry to identify areas of improvement of our products and/or services and our customers' experience, and to make internal decisions to plan our business operations and our activities. We believe that the interests and fundamental rights and freedoms of our customers are not undermined since, we carry out this processing as part of our contractual relationship with them resulting from their purchase of our products and/or services. We use personal data and basic, non-sensitive information to the extent strictly necessary. We do not send surveys to individuals under 14, and we only target customers who have recently purchased our products and/or services. As a result, we understand that by purchasing our products and/or services and having been specifically informed about the processing of their personal data, our customers may have a reasonable expectation regarding the processing of their personal data for this purpose. Customers may object, at any time, to the processing of their personal data or exercise any other rights under applicable data protection regulations in accordance with the procedure described below in “What are my personal data rights?” of this Privacy Policy.

6. Sending you marketing information, discounts and promotions

Only if you expressly authorize us to do so via any of the forms available on this web site (e.g. online purchase form, contact or request for information form, event booking form, schools and groups visit booking form, newsletter subscription form etc.) will we process your personal data to send you commercial information and information on discounts and promotions by any means, including electronic methods (e-mail, SMS, phone) about products and services of any of the European companies of the Parques Reunidos Group  (you may find a list of these companies in the section “Companies of the Parques Reunidos Group in Europe” of this this Privacy Policy), related to the leisure or hospitality industries, Annual Passes or events run by any of these companies, also subject to prior profiling and analysis of your preferences via automated decisions so that we can suggest products and services that we think may be of interest to you. To send you this information, the Controllers will process your name, surname, your e-mail address or your phone number provided by you. 

To ensure the quality of your data, the Controllers use a two-step verification process. If you agree to the processing of your personal data for this purpose, you will receive an e-mail asking you to confirm your email and that your data can be processed for this purpose.

Profiling will be based on automated decisions to ensure that any commercial information, discounts and promotions you receive are of interest to you. We will perform this profiling according to our own sources based on our stored information provided directly by you (date of birth/age, country and postal code), from your purchase history and details of the products and/or services purchased by you and, only if you expressly authorize us to do so by ticking the appropriate box on the data collection forms on this website (e.g. purchase form, booking form, information request form, contact form or newsletter subscription form, among others), in information provided by you in the surveys in which you have participated.

Based on the above information automated decisions will be made based on your transaction history (type of products and services purchased, whether you are a Annual Pass holder or whether you purchase food and drinks in the park or via our website), social and financial criteria (customer age and purchase history, from which will also be able to determine whether you have children and, if so, the number of children based on the number of children's tickets - junior tickets - that you have purchased), demographic criteria based on data provided directly by you (zip code provided at the time of purchase), analysis of your reactions to our marketing communications (i.e. your decision or not to purchase the product or service offered) and, only with your express permission, the information you provide in the surveys you respond to (surveys designed to find out about your level of satisfaction, your experience and to allow you to make suggestions regarding purchased products and/or services, and to enable us to get insights into our position in the market and whether you are likely to purchase our products and/or services again).

This profiling will not be used to make automated decisions with legal implications for you or that will otherwise significantly affect you. This profiling will only be used to send you commercial information, discounts and promotions on products, services, events or activities of the Parques Reunidos group that we believe may be of interest to you on the basis of the criteria described above. 

Lawfulness basis: we will only process your data if you give us your express consent to do so by ticking the box specifically included for this purpose in the forms available on this website (e.g., online purchase form, information request form, group and school visit booking form, newsletter subscription form, etc.). Please note that you may, at any time, withdraw your consent or exercise your rights as provided below in the section “What are my data protection rights?” of this this Privacy Policy. In addition to the above methods, we would like to remind you that you can opt out from these commercial communications following the procedure made available to you for this purpose on each marketing communication you have expressly authorized us to send to you. 

If you have expressly authorized us to use the information in the surveys to which you have responded for profiling purposes and send you relevant commercial information, you may also, at any time, exercise your rights and withdraw your consent or exercise your objection rights in accordance with the procedure described below in the section “What are my data protection rights?” of this this Privacy Policy. 

We would also like to remind you that you may also object to profiling based on automated decisions, request human intervention, give your point of view, resolve any queries about and object to automated decisions by sending your request to the Data Protection Officer following the procedure indicated below in the section “What are my personal data rights? of this Privacy Policy. 

7. Using information collected on surveys as an additional profiling resource 

If you have expressly given us your consent by any of the forms included on this web site (online purchase form or event, group and school visit booking form), we will process your personal data (e-mail address and telephone number) and any non-personal information collected in the surveys to which you have responded (surveys intended to find out the degree of customer satisfaction with the products and/or services purchased, their experience and to allow customers to make suggestions and enable us to conduct market research and analysis (quantitative and qualitative) to find out our positioning in the industry and whether our customers are likely to purchase our products and/or services again) will be processed as an additional parameter for profiling and for analysing your preferences to ensure that we send you relevant commercial, discounts and promotions information by any means, including electronic means (e-mail, SMS, and telephone calls) about the products and services of any of the European companies of the Parques Reunidos Group (a list of these companies is included in the section "European Companies of the Parques Reunidos Group" in this Privacy Policy) related to the leisure and hospitality industry, Park Passes, events and activities run by these companies consistent with your preferences and as long as you have authorized us to do beforehand.

Your profile will be developed using the following parameters: your history of transactions (type of products and services purchased, whether you are an Annual Pass holder or whether you purchase food and drinks in the park or via our website), social and financial criteria (customer age and purchase history, from which the Controllers will also be able to determine whether you have children and, if so, the number of children based on the number of children's tickets - junior tickets - that you have purchased), demographic criteria based on data provided directly by you (zip code provided at the time of purchase), the analysis of your reactions when you receive any commercial communication (i.e. your decision or not to purchase the product or service offered by this commercial communication) and, only with your express permission, the information without personal data that you provide in the surveys you have chosen to respond to. 

Please note that based on your profile, automated decision will be made to suggest you commercial information, discounts and promotions of products, services and events that we believe may be of interest to you according to the parameters detailed above. In any case, this profiling will not be used to make automated decisions with legal implications for you or that will otherwise significantly affect you. 

Lawful basis: we will only process your data if you give us your express permission to do so by ticking the box specifically included for this purpose in the ticket or event online purchase form or in the group and school visit booking form and if you have expressly authorized us to send you commercial information in accordance with the terms specified in this Privacy Policy. Otherwise, this processing will not occur. 

If you do not agree that the information provided in surveys may be used as additional criteria for profiling purposes, you may withdraw your consent or exercise your right to object by following the procedure indicated below in the section “What are my personal data rights?” included in this Privacy Policy. 

We would also like to remind you that you may also object to profiling based solely on automated decisions, request human intervention, give your point of view, and resolve any queries about and object to automated decisions by sending your request to the Controllers' DPO following the procedure described below in the section “What are my personal data rights?” of this Privacy Policy

Finally, your data will also automatically ceased to be processed for the purpose described in this section if you ask us to unsubscribe from our commercial communications via any of the methods that will be made available to you on each commercial communication that you receive or through any of the methods described in the section “What are my personal data rights?” in this Privacy Policy.

8. Use of cookies and related technologies 

On this web site the Controllers use own and third parties cookies and similar technologies (HTTP Cookies, Pixel Tracker and Premises and Local Shared), which means that Controllers may process and store information and personal data about users when they browse through this web site, in accordance with the purposes and settings that are made available to users at all times.

For complete information on our use of cookies and similar technologies and the processing of your personal data, please visit our Cookies Policy. 

9. Compliance with legal obligations

Personal data will be processed in order to comply with legal obligations applicable to the Controllers as a result of the relationship with you as a customer and the processing of your personal data (for example, in the event that you request through the “Customer Web Portal” the issuance of an invoice).

Category of personal data that may be processed depending on the applicable legal obligations: first name, last name, telephone number, email address, tax address, document proving the identity of the holder of the personal data or customer status (ID card, NIE, Passport, Driving License), large family card, bonus card, transactional information about your purchase, where applicable, data collected through the use of cookies or similar technologies (see our Cookies Policy) or any other mandatory information that may be required for the fulfillment of our legal obligations, including at the request or request of the competent authorities.

Basis of legitimacy: compliance with legal obligations applicable to the Controllers under European Union law and/or the applicable domestic legal regime (compliance with legal obligations required by tax, civil, commercial, privacy, e-commerce or consumer and user protection regulations, among others). Without your personal data, the Controllers would not be able to comply with their legal obligations under the terms and conditions set forth in this Privacy Policy.  

10. Abandoned Cart management and recovery

Only if you provide your email address and give your express consent through the pop-up notification that will displayed on your screen during the online purchase process in case of inactivity when navigating, your personal data will be processed so that, if you do not complete the purchase or reservation of products and / or services previously selected by you, we can send you email reminders to complete the purchase and / or reservation of the same.  If finally, you decide not to formalize the purchase or reservation of such products and / or services, you will receive an email with a brief survey to find out why you do not want to formalize it, which will help us to improve the web experience of our customers.

Type of personal data processed: email address.

Lawful basis: your data will be processed for this purpose only if you voluntarily give your express consent on the pop-up notification to be displayed on your screen during the online purchase process in case of inactivity when navigating. Please note that, in addition to any other rights available to you under data protection regulations, you may withdraw your consent, request to unsubscribe from any marketing communications, and not to be subject to automated individual decisions, including profiling. You may also request human intervention in automated decision-making, express your point of view, have your queries addressed or object to such decisions. For further information, please read “What are my rights on my personal data provided to you?”  in this Privacy Policy.

Based on the purpose for which we process your personal data, different retention periods apply as follows:

·        Managing your contractual relationship arising from your purchase or booking of products and services: your personal data will be retained until such time as your contractual relationship with us continues to exist.

·        Customer care: your personal data will be retained for such time as is required to deal with your request, complaint, incident or claim.

·        Surveys: your personal data will be retained for up to 12 months unless you submit a request for your personal data to be deleted or you otherwise object to the processing. In either case, your personal data will no longer be processed for this purpose.

·        Marketing communications (including personalised) about products and services of the Parques Reunidos Group: Your personal data will be processed until you withdraw your express and informed consent, submit your request to unsubscribe via any of the methods made available for this purpose on our marketing communications, or until you exercise your rights of erasure, objection or not to be subject to automated decisions, including profiling. In all such cases, your personal data will no longer be processed for this purpose.

·        Market research and analysis: the information processed for this purpose cannot be linked with the rest of your personal information. If, however, prior to such dissociation you request deletion of your data or object to the processing, the data will no longer be processed for this purpose.

·        Compliance with statutory duties: personal data will be kept secure for as long as the controllers can be held legally responsible for the fulfilment of their statutory duties.

·        Fraud prevention and detection: your personal data will be retained until any fraudulent actions detected are addressed. Thereafter your personal data be retained for as long as the controllers can be held legally responsible for such actions.

·        Cart management and retrieval: your personal data will be retained for up to 30 days, unless you withdraw your express consent or indicate that you do not wish to be sent abandoned cart reminders. In either case, your personal data will no longer be processed for this purpose. 

·        Use of cookies and related technologies: our personal data will be processed for as long as your cookie consent remains in force. If you do not withdraw your consent via any of the methods offered in our Cookies Policy, your personal data will be retained for the duration of the cookies or similar technologies installed on your device

When your personal data are no longer relevant for the purposes for which they were collected or if you otherwise withdraw your consent or exercise your right of erasure or objection to the processing, the Controllers will keep your personal data duly blocked (identification and reservation of the personal data, adopting technical and organizational measures to prevent processing and viewing) strictly (and only to the extent necessary), to make such data available to the competent Public Administrations and in particular to the Supervisory Authority competent in data protection, Judges, or the Public Prosecutor's Office during the statute of limitations period for legal actions that may arise from the relationship maintained with you or from the processing of your personal data and/or the legally established retention periods in accordance with European Union Law and/or domestic regulations. Upon the expiry of these time limits, your personal data will be physically and irretrievably deleted. 

Only if required to meet possible legal liabilities or to comply with statutory retention periods, your personal data may be disclosed to competent Public Authorities and in particular to the relevant Data Protection Control Authority, Judges, Courts or the Public Prosecutor's Office in accordance with European Union Law and/or domestic regulations.

The Controllers rely on third party suppliers who may also process your personal data to provide services related to the purposes for which you are being informed including, but not limited to, information security, customer relationship management (CRM), technology, legal consulting, marketing, customer service, professional services, and IT companies. These providers will only access your personal data to perform their services on behalf of the Controllers, following at all times the Controllers' instructions and without ever being authorized to use such data for their own purposes and/or unauthorized purposes. One of these providers is Salesforce, a global company which provides cloud marketing platform services. If you provide your personal data via any of the forms available on this website (other than the online ticket purchase form), or you agree to receive commercial information or that the information you provide in any surveys may be used as additional resource to create your profile to send you this commercial information, Salesforce will process your personal data on our behalf within the European Economic Area (EEA) and in compliance with applicable European data protection regulations. Exceptionally, for example, in the event of a disaster recovery situation (i.e. the process to recover data and functionalities lost in the event of an accidental or a man-made disaster), Salesforce may also provide its services through companies outside the EEA, for which your personal data may need to be processed in countries that do not offer a standard of protection commensurate with the level of protection offered by European data protection legislation (e.g. the USA). In these cases, the Controllers have entered into binding contractual commitments with Salesforce which guarantee the implementation of appropriate security measures to ensure that your personal data are at all times processed with an adequate level of protection comparable to that required in the EEA (standard contractual clauses approved by the European Commission on data protection in accordance with the European Data Protection Regulation (GDPR), additional security measures in accordance with decision C-311/18 of the Court of Justice of the European Union and subject to certification mechanisms). For further information, please do not hesitate to contact the Data Protection Officer at any of the addresses (postal or e-mail) indicated in the section “What are my personal data rights?”  in this Privacy Policy. Please remember that you may withdraw your consent and/or exercise your rights at any time in accordance with the provisions of the relevant section of this Privacy Policy or request to unsubscribe from our commercial communications via any of the methods that will be made available to you for this purpose in each commercial communications that you will receive if you have given us your express consent to do so. 

If you expressly agree to receive commercial information, and information on discounts and promotions about products and services of the European companies of the Parques Reunidos Group related to the leisure and hospitality industries, Annual Passes, events and activities run by these companies, including subject to prior profiling and analysis of your preferences via automated decisions to ensure that we are able to offer you information on the products and services that we believe may be of more interest to you, you should know that these companies are located in the European Union and their principal activity is the management and operation of leisure parks, water parks, zoos, aquariums, and travel related services, such as the sale of hotel packages and tickets to parks and leisure centers of the Parques Reunidos Group. Specifically, these companies are: 

• Spanish companies of the Parques Reunidos Group: Parques Reunidos Servicios Centrales, S.A. (Parks Pass); Parque de Atracciones Madrid, S.A.U. (Parque de Atracciones Madrid); Madrid Theme Park Management, S.L.U. (Parque Warner y Parque Warner Beach); Gestión Parque de Animales Madrid, S.L.U. (Faunia); Zoos Ibericos, S.A. (Zoo Aquarium Madrid); Parques de la Naturaleza Selwo, S.L. (Selwo Aventura y Hotel Selwo Lodge); Aquópolis Cartaya, S.L.U. (Aquópolis Cartaya); Leisure Parks, S.A. (Aquópolis de Villanueva de la Cañada, Aquópolis Costa Dorada - Vilaseca, Costa Dorada-,  Delfinario Costa Dorada – Vilaseca, Costa Dorada, Selwo Marina Aquópolis de Sevilla, Aquópolis de Cullera, Aquópolis de Torrevieja, Teleférico de Benalmádena); Mall Entertainment Centre Acuario Arroyomolinos, S.L.U. (Atlantis Aquarium); Mall Entertainment Centre Murcia, S.L.U. (Nickelodeon Adventure Murcia); Travelpark Viajes, S.L.U. (products and services related to packages combining entrance fees to parks and leisure centers of the Parques Reunidos Group and hotel accommodation bookings). 

• Rest of European companies of the Parques Reunidos Group: Italia - Parco della Standiana S.R.L (Miraiblandia y Mirabilandia Beach) and Travelparks Italy, S.R.L.( products and services related to packages combining entrance fees to parks and leisure centers of the Parques Reunidos Group and hotel accommodation bookings); Norway - Tusenfryd A/S (Tusenfryd) y Bø Sommarland AS (Bo Sommarland); Belgium - Bobbejaanland, B.V.B.A (Bobbejaanland); BonBon-Land A/S (BonBon -Land); Germany - Movie Park Germany GmbH and Movie Park Germany Services GmbH (Movie Park), Event Park GmbH (Belantis), Nature Park Germany GmbH (Vogelpark Walsrode), Tropical Island Management (Tropical Island) and TI Hotel Asset GmbH (Tropical Island Hotels); The Netherlands - Attractie- at Vakantiepark Slagharen B.V. (Slagharen y Slagharen Beach); France - Marineland SAS (Marineland, Aquaplash Marineland, Marineland Resort and Kids Island) and LB Investissement (Aqualud); England- Grant Leisure Group LTD (Blackpool Zoo), Real Live Leisure Company LTD (The Bournemouth Aquarium y Aquarium of the lakes) and Lakeside Mall Entertainment Centre Limited (Nickelodeon Adventure-Lakeside). 

You may exercise your right of access, rectification, objection, erasure, restriction, portability and, where appropriate, your right not to be subject to automated individual decisions, including profiling, by sending your request to the attention of the Data Protection Officer by post at Paseo de la Castellana 216, 16th floor, 28046, Madrid, Spain or by e-mail on dpo@grpr.com. In either case, please attach a copy of your Identity Card or equivalent document so that we can verify that you are the owner of the personal data on which your request is based. For consent-based processing operations, please note that you can withdraw your consent or object at any time to the processing of your data following the procedure described in the previous paragraph.

If you have expressly authorized us to send to you commercial information or information about discounts and promotions, including subject to prior profiling and analysis of your preferences via automated decisions for relevance, you may also unsubscribe from this type of communications by using the methods that will be made available to you for this purpose in each commercial communication that you will receive.

Finally, please note that you can also tell us not to be subject to decisions based exclusively on the automated processing described above, or ask us for human intervention, express your point of view, raise any queries about or object to automated decisions by sending your request to the Data Protection Officer at any of the addresses indicated in this section. 

The personal data processed by the Controllers are provided directly by you as the data subject through this website and/or during the relationship with you. 

If you provide personal data of third parties, you agree to obtain their express and informed approval to provide their personal data to the Controllers in accordance with the provisions described in this Privacy Policy. 

Children under fourteen (14) years of age are not authorized to purchase or book our products,  services or events on this website. 

However, if as a result of purchasing any of our products, services or events available on this web site and, particularly following an event, you voluntarily decide to provide personal data of a child under fourteen (14) years of age,  you will be deemed to have given your express and informed consent as father, mother or guardian to process the personal data as part of the contractual relationship arising from your purchase pursuant to the provisions of this Privacy Policy. 

You may lodge a claim with the Data Protection Control Authority (Agencia Española de Protección de Datos) to protect your rights at any time you deem appropriate. However, we advise you to approach first our Data Protection Officer by post at Paseo de la Castellana 216, 16th floor, 28046, Madrid, Spain or by e-mail on dpo@grpr.com to seek assistance with your request and to resolve any incident related to the processing of your personal data.

This Privacy Policy was last updated in March 2021