Privacy Policy

General notes

This privacy policy contains detailed information about what happens to your personal data when you visit our website www.mallorcard.es. Personal data is any data with which you can personally identify yourself. We strictly adhere to the legal provisions when processing your data, in particular the General Data Protection Regulation ("GDPR"), and attach great importance to ensuring that your visit to our website is absolutely secure.

Responsible entity

Responsible under data protection law for the collection and processing of personal data on this website is:

David Alexander Behnk | mallorcard
Bebelstr. 77
70193 Stuttgart

Handelsregister: XXX
Registergericht: Stuttgart

Vertreten durch:
David Alexander Behnk

Kontakt:
info@mallorcard.es

Cookies

In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your terminal device. Cookies cannot execute programs or transfer viruses to your computer system. Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested are stored on the basis of Art. 6 (1) lit. f DSGVO. We have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. Insofar as other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these are treated separately in this privacy policy. Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Contact form

If you contact us by e-mail or via a contact form, transmitted data including your contact information will be stored in order to process your request or to be available for follow-up questions. This data will not be passed on without your consent. The processing of the data entered in the contact form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). A revocation of your already given consent is possible at any time. An informal communication by e-mail is sufficient for the revocation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. Data transmitted via the contact form will remain with us until you request us to delete it, revoke your consent to store it, or there is no longer any need to store the data. Mandatory legal provisions - in particular retention periods - remain unaffected.

Data use and disclosure

We will neither sell to third parties nor otherwise market the personal data that you provide to us, e.g. by e-mail (e.g. your name and address or e-mail address). Your personal data will only be processed for correspondence with you and only for the purpose for which you have provided us with the data. In order to process payments, we pass on your payment data to the credit institution commissioned with the payment. The use of data that is automatically collected during your visit to our website is only for the aforementioned purposes. The data will not be used for any other purpose. We assure you that we will not pass on your personal data to third parties unless we are legally obliged to do so or you have given us your prior consent.

SSL- bzw. TLS-encryption

For security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

1. Storage period

Personal data that has been communicated to us via our website is only stored until the purpose for which it was entrusted to us has been fulfilled. Insofar as retention periods under commercial and tax law must be observed, the storage period for certain data may be up to 10 years.

2. Rights of data subjects

With regard to the personal data concerning you, as a data subject, you have the following rights vis-à-vis the data controller in accordance with the statutory provisions:

2.1 Right of withdrawal

Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to revoke your consent to the processing of data at any time with effect for the future in accordance with Art. 7 (3) DSGVO. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Storage of data for billing and accounting purposes remains unaffected by a revocation.

2.2 Right to information

You have the right to request confirmation from us, pursuant to Article 15 of the GDPR, as to whether we are processing personal data concerning you. If such processing is taking place, you have the right to obtain information about your personal data processed by us.

2.3 Right to rectification

You have the right, in accordance with Art. 16 DSGVO, to request at any time the immediate correction of inaccurate personal data concerning you and/or the completion of your incomplete data.

2.4 Right to deletion

You have the right to request the erasure of your personal data pursuant to Art. 17 DSGVO, provided that one of the applicable legal reasons applies.

2.5 Right to restriction of processing

You have the right to request the restriction of processing (blocking) of your personal data in accordance with Art. 18 DSGVO.

2.6 Right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom your personal data have been disclosed.

2.7 The right not to be subject to a decision based solely on automated processing

You have the right, in accordance with Article 22 of the GDPR, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

2.8 Right to data portability

You have the right, pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format.

2.9 Right of objection

Insofar as we base the processing of your personal data on the balance of interests pursuant to Art. 6 para. I lit. f DSGVO, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

2.10 Right of appeal to the competent supervisory authority

In the event of breaches of the GDPR, data subjects shall have a right of appeal to a supervisory authority. The supervisory authority responsible for us is:

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)
Post Box: 10 29 32
70025 Stuttgart
Tel: +49 711 6155 41-0
E-Mail: poststelle@lfdi.bwl.de
Web: https://www.baden-wuerttemberg.datenschutz.de/

Validity and amendment of this privacy policy

This privacy policy is effective as of January 1st, 2026. We reserve the right to change this privacy policy at any time in compliance with applicable data protection regulations.