Privacy Policy

I.- Who are those responsible for the processing of your data?

The parties responsible for the processing of your data in relation to this web page are Parques Reunidos Servicios Centrales, S.A. and Leisure Parks, S.A. (hereinafter, jointly, the “Controllers”), both acting as co-responsible parties, with registered offices at c/ Federico Mompou, 5, Parque Empresarial “Las Tablas”, Edificio 1 – Planta 3ª, 28050, Madrid, España. If you have any queries regarding data protection, you may contact the Data Protection Office of the Controllers by e-mail at dpo@grpr.com or at the postal address c/ Federico Mompou, 5, Parque Empresarial “Las Tablas”, Edificio 1 – Planta 3ª, 28050, Madrid, España.

II.- For what purpose and on what grounds do we process your data?

The Responsible Parties inform the user, or the legal representative thereof, who may provide their data through this website or for the purchase of any of its products and/or services, that their data will be processed by the Responsible Parties for the following purposes:

  1. Sending commercial information, discounts and promotions, by any means, including electronic means (e-mail, SMS, telephone calls), about products and services of any of the European companies of the Parques Reunidos Group (companies indicated in the section “Companies of the Parques Reunidos Group in Europe” of this Privacy Policy), relating to the leisure sector, hotels, Bono Parques or events and activities organised by any of said companies, including prior profiling and analysis of your preferences by means of automated decisions to ensure that they are of interest to you. In order to send you the commercial information, discounts and promotions indicated above, the Responsible Parties will process your name, surname, e-mail address or telephone number that you provide at the time of purchase. In turn, the aforementioned profiling will be carried out by means of automated decisions in order to ensure that the commercial information, discounts and promotions you receive are of interest to you. This profiling will be carried out according to our own internal sources based on the storage of information provided directly by you (date of birth/age, country and postcode), your purchase history and details of the products and/or services purchased by you and, only if you expressly and specifically authorise this by ticking the box provided for this purpose on the data collection forms on this website (e.g. purchase form, booking form, information request form, contact form, newsletter subscription form, etc.), in the storage of information provided by you in the surveys to which you respond. Accordingly, automated decisions will be taken based on the history of transactions made (type of products and services purchased, whether you are a Bonista or whether you purchase food and beverage related products both in the park and via the website), socio-economic criteria (based on the age of the customer and the history of purchases made, based on your age and purchase history, whereby we will also be able to deduce whether or not you have children and, where applicable, the number of children based on the child tickets – reduced price tickets – you have purchased), demographic criteria based on internal data provided directly by you (based on the postcode provided at the time of purchase), demographic criteria based on internal data provided directly by you (based on the postcode provided at the time of purchase), analysis of your behaviour in response to commercial communications received in order to know whether after receiving a commercial communication you purchase the product or service that we have offered you or, if on the contrary, you do not proceed to activate the purchase of the same and only if you expressly authorise it, the information indicated by you in the surveys you respond to (surveys aimed at finding out your degree of satisfaction, your experience and suggestions regarding the products and/or services previously purchased, our position in the market and whether you would purchase our products and/or services again). The indicated profile will not be used to make automated decisions with legal effects on you or that will significantly affect you in a similar way, as it will only be used to send you commercial information, discounts and promotions on products, services, events or activities of the Parques Reunidos Group that we believe may be of interest to you based on the criteria described above.
    Legitimation: this processing will only be carried out if you voluntarily give your express consent through the tick box specifically included for this purpose in the forms on this website (e.g. purchase form, booking form, information request form, contact form or newsletter subscription form, among others). Remember that, at any time, you may withdraw your consent or exercise your rights in accordance with the provisions of this Privacy Policy. Notwithstanding the foregoing, we remind you that you may withdraw your consent not to receive the commercial information about which you are being informed by sending your request to the Protection Delegate via the postal or e-mail address provided in this Privacy Policy or, if you prefer, via the link that will be included for this purpose in each of the commercial communications that you may receive. If you have expressly consented to the information contained in the surveys to which you have responded being processed as additional criteria for drawing up your profile and sending you said commercial information in accordance with your interests, you may also exercise your rights at any time and, in particular, withdraw your consent or exercise your right to object in accordance with the procedure indicated for this purpose in this Privacy Policy. Likewise, we remind you that you may also object to the profiling carried out by means of the automated decisions indicated above, request human intervention, express your point of view, resolve any doubts about the automated decisions or contest them by sending your request to the Data Protection Officer in accordance with the procedure indicated below in this Privacy Policy.
  2. Sending surveys by any means, including electronic means (e-mail, SMS, telephone calls) aimed at finding out the degree of satisfaction of our customers with regard to the products and/or services purchased, their experience and their possible suggestions and to carry out market analyses and studies (quantitative and qualitative) to find out our positioning in the sector and whether our customers would purchase our products and/or services again. To this end, the Controllers will process only the strictly necessary data: e-mail address or telephone number and the non-personal information contained in the surveys to which you have responded.
    Legitimation: this processing is carried out because the Data Controllers have a legitimate interest in knowing the opinion of their customers regarding the products and services they have purchased, their needs and possible suggestions in this regard, whether they would buy these products and/or services again or other similar ones that we offer in relation to the leisure sector, hotels, Bono Parques, events and related activities and our position in the market in order to detect areas for improvement to improve the quality of our products and/or services and the experience of our customers, as well as to make internal decisions to plan our business operations and our activities. In this regard, we understand that the interests or fundamental rights and freedoms of our customers are not undermined insofar as this processing is carried out within the framework of the contractual relationship that is maintained as a result of the purchase of products and/or contracting of services, we use strictly necessary personal data and basic information of a non-sensitive nature, we do not send surveys to children under 16 years of age and we address ourselves in a timely manner to customers who have recently purchased our products and/or services. As a result, we understand that by purchasing our products and/or services and being specifically informed about the processing of their personal data, our customers may have a reasonable expectation that their personal data will be processed for this purpose. In addition, our customers may at any time object to the processing of their personal data or exercise their other rights under data protection regulations in accordance with the procedure described below in this Privacy Policy.
  3. Management of purchases and contracted services and/or events. In order to formalise and manage the purchase of products, provision of services offered by the Responsible Parties through this website, as well as to manage the organisation of and participation in events (e.g. corporate events, communions, etc.) contracted. Likewise, the data will be used for the management of the contractual relationship with the client. To this end, the Responsible Parties will process the client’s data for contact activities, invoicing, collection and debt management, customer services and complaint management, among others. Likewise, we inform you that when the purchase has been made under any promotion that is subject to compliance with specific conditions at the time of purchase, the Responsible Parties may ask customers, when accessing their facilities, to show an official document to verify compliance with such conditions (for example, ID card, passport, family book, et cetera).
    Legitimation: This processing is necessary for the performance of the contract.
  4. Compliance with accounting, legal, fiscal and administrative obligations.
    Legitimation: This processing is necessary for the performance of the contract.
  5. Sending by electronic means, information about offers and promotions on products and services offered by the Responsible Parties. In order to be able to offer products and services that may be of interest to the client, information about products and services in the leisure and hotel sectors offered by the Responsible Parties will be sent to the client for evaluation. In any case, the client may object to receiving this type of communications through the means provided in section V of this privacy policy.
    Legitimation: This processing will only be carried out if the Responsible Parties have the consent of the client.
  6. To send commercial communications with offers related to products and/or services offered by the Controllers, which may be attractive to the customer. Your personal data may be processed for profiling based on internal sources (for example, cookies, historical and statistical navigation data) whose results allow the preparation and analysis of personalised products, through segmentation into different groups in relation to common patterns. To this end, it will be possible to monitor the customer’s preferences regarding the communications received and to analyse their behaviour in accordance with these preferences. Such profiling will be used to send you personalised communications about products and/or services offered by the Responsible Parties.
    Legitimation: This processing will only be carried out if the Controllers have the consent of the customer.Management of the registration in the newsletter for sending, by electronic means, information about offers and promotions on products and services offered by the Controllers.
  7. Management of the registration in the newsletter for sending, by electronic means, information about offers and promotions on products and services offered by the Controllers. When the client registers for the newsletter through the section provided for this purpose on this website, the Controllers may send commercial communications about products and services offered by the Controllers as well as events organised by the Controllers.
    Legitimation: With regard to the sending of commercial communications by the Responsible Parties about products and/or services offered by the latter, it is understood that, by subscribing to the newsletter, the client gives his/her consent for this purpose. On the other hand, with regard to the sending of commercial communications about products and/or services offered by entities other than the Controllers, the client’s consent must be obtained.
  8. Conducting surveys of customers or potential customers. In order to be able to verify the quality of communications, the procedures of the Controllers, the treatment received, as well as the products and/or services of the Controllers, the Controllers will carry out satisfaction surveys among their customers and/or potential customers.
    Legitimation: This processing is based on the legitimate interest of the Controllers. In order to be able to improve the procedures of the Data Controllers, they will contact customers and/or potential customers to find out their level of satisfaction and thus be able to improve those issues that require it in relation to them. The client and/or potential client may always object to receiving this type of communication from the Controllers.
  9. Management of school visits to the park. The Data Controllers will process the data in order to be able to book, organise and manage school visits to the parks. In those cases in which data of minors under 14 years of age is processed, the consent of the parents or legal guardians of said minors must be obtained.
    Legitimation: This processing will only be carried out if the Controllers have the consent of the data subject. It is understood that, by arranging the visit, the person responsible for the school provides consent for the processing of their data for this purpose, and, in those cases where it is necessary, the consent of the parents or guardians of the children under 14 years of age who are going to attend the visit is provided.
  10. Management of animal interactions. The Data Controllers will process the data in order to be able to book, organise and manage the interaction with animals that has been chosen by the data subject within the park. In those cases in which data of minors under 14 years of age are processed, the consent of the parents or legal guardians of said minors must be obtained.
    Legitimation: This processing will only be carried out if the Controllers have the consent of the data subject. It is understood that by booking this activity, the data subject gives his/her consent to the processing of his/her data for this purpose, and in those cases where it is necessary, the consent of the parents or legal guardians of the children under 14 years of age who are going to attend the activity is provided.

Personal data (e-mail address and telephone number) and non-personal information contained in the surveys to which you have responded (surveys aimed at finding out the degree of satisfaction of our customers with regard to the products and/or services purchased, their experience and possible suggestions and to prepare analyses and market studies (quantitative and qualitative) to find out our positioning in the sector and whether our customers would purchase our products and/or services again) will be processed as one of the criteria for drawing up your profile and analysing your preferences in order to send you commercial information, discounts and promotions, by any means, including electronic means (e-mail, SMS, telephone calls), about products and services of any of the European companies of the Parques Reunidos Group (companies indicated in the section “European companies of the Parques Reunidos Group” of this Privacy Policy) related to the leisure and hotel sector, Bono Parques, events and activities related to and organised by said companies that may be of interest to you, provided that you have previously authorised the sending of such information. In this way, your profile will be configured according to the criteria expressly authorised by you (history of transactions carried out – type of products and services purchased, whether you are a Bono member or whether you purchase food and beverage related products both in the park and through the website, socio-economic criteria based on the age of the customer and the history of purchases made, demographic criteria based on internal data provided directly by you on the basis of the postcode provided at the time of purchase, analysis of your behaviour in response to commercial communications received in order to find out whether, after receiving a commercial communication, you purchase the product or service that we have offered you or, on the contrary, do not proceed to activate the purchase of the same and only if you expressly authorise it) and only if you expressly and specifically authorise it by ticking the box included for this purpose in the data collection forms on this website (for example, purchase form, booking form, information request form, contact form or newsletter subscription form, among others) and the information indicated by you in the surveys indicated above and to which you respond. We remind you that on the basis of this profile, automated decisions will be made to send you only commercial information that may be of interest to you and not to carry out actions that may have a legal effect on you or that will significantly affect you in a similar way.

Legitimation: this processing will only be carried out if you voluntarily give your express consent through the tick box specifically included for this purpose in the forms incorporated in this website and provided that you have expressly authorised the sending of commercial information in accordance with the terms described for this purpose in this Privacy Policy, otherwise this processing will not be carried out. If you do not wish the information contained in the aforementioned surveys to be processed as additional criteria for drawing up your profile as indicated above, you may withdraw your consent, exercise your right to object or any of the other rights granted to you by the data protection regulations at any time in accordance with the procedure indicated below in this Privacy Policy. If you unsubscribe from receiving commercial communications through the link that will be included in each of the commercial communications that you will receive or by sending your request to the Data Protection Delegate in accordance with the procedure described below in this Privacy Policy, your personal data will automatically cease to be processed for the purpose described herein.

IF YOU ARE UNDER 14 YEARS OF AGE, we need the consent of your parents or legal guardians, so it will be necessary for them to confirm that they are your parents or guardians and give their consent, at which point we will be able to accept your request.

III.- How long will we keep your data?

The personal data to which access is granted will be processed for the duration of the contractual relationship. Following this, the Controllers shall keep the personal data after the termination of their contractual relationship, duly blocked, to be made available to the competent Public Administrations, Judges and Courts or the Public Prosecutor’s Office during the statute of limitations period for actions that may arise from the relationship maintained with the client and/or the legally stipulated retention periods. The Data Controllers shall proceed to the physical deletion of your data once these periods have elapsed.

    • Sending commercial information, discounts and promotions, by any means, including electronic means, on products and services of any of the companies of the Parques Reunidos Group, related to the leisure and hotel sector, Bono Parques or events and activities organised by any of said companies, including prior profiling and analysis of your preferences so that they may be of interest to you: if you expressly consent to this processing, your personal data will be processed exclusively for this purpose as long as you do not withdraw the express and informed consent previously provided by you, do not request to unsubscribe through the link that will be included for this purpose in each of the commercial communications you receive or exercise your right to oppose or your right not to be subject to automated decisions, including profiling, since in such cases, your personal data will no longer be processed for this purpose.
    • Sending surveys by any means, including electronic means, aimed at evaluating the degree of satisfaction of our customers with regard to products and/or services purchased, to learn about their experience and possible suggestions and to carry out analyses and market studies to find out our positioning in the sector and whether our customers would purchase our products and/or services again: Your personal data will be processed exclusively for this purpose for a maximum period of 12 months, unless you object to this processing before this period has elapsed, in which case they will no longer be processed for this purpose.
    • Processing personal data (e-mail address and telephone number) and non-personal information contained in the surveys to which you have responded (surveys aimed at finding out the degree of satisfaction of our customers with regard to the products and/or services purchased, your experience and possible suggestions and to carry out market analyses and studies to ascertain our positioning in the sector and whether our customers would purchase our products and/or services again) will be processed as an additional criterion to draw up your profile and send you commercial information, discounts and promotions, by any means, including electronic means (e-mail, SMS, telephone calls), on products and services of the European companies of the Parques Reunidos Group that may be of interest to you: your personal data will be processed exclusively for this purpose as long as you do not withdraw the express and informed consent previously given by you or you object to the processing of your personal data for this purpose, in which case, your personal data will no longer be processed for this purpose. Likewise, if you withdraw your consent to receive commercial communications, unsubscribe via the link that will be included for this purpose in each of the commercial communications you receive or exercise your right to object or your right not to be subject to automated decisions, including profiling, your personal data will no longer be processed automatically for this purpose.

IV.- To whom will we communicate your data?

Your personal data may be disclosed to Public Authorities, Judges, Courts and/or Public Prosecutors if it is necessary to comply with the legal obligations applicable to the controller under European Union law and/or domestic law. In addition, the Controllers have suppliers who may also process your personal data in order to provide services related to the purposes about which you are being informed (including, but not limited to, companies operating in the following sectors: technology, legal advice, marketing, multidisciplinary professional services, IT services, etc.). These providers will only access your personal data in order to carry out their services on behalf of and for the account of the Controllers, always following their instructions and without at any time using such data for their own purposes and/or unauthorised purposes. Among these providers is Salesforce, which provides services related to the email marketing platform and has companies all over the world. For this purpose, if you consent to receive marketing information from us or if the information contained in surveys to which you respond is processed as an additional criterion for profiling you in order to send you marketing information tailored to your interests, your personal data will be processed by this provider on our behalf and on our behalf within the European Economic Area (EEA) and in compliance with applicable European data protection laws. However, exceptionally, for example, in the event of a disaster recovery situation (a process to recover data and functionality in the event of a systems outage caused by a natural or man-made disaster), it may also provide its services through companies outside the EEA, which may require processing of your personal data even in countries that do not offer a level of protection comparable to the level of protection offered by the European data protection rules (for example in the USA). However, also in the latter case, the Controllers have entered into binding contractual commitments with Salesforce and have ensured that appropriate security measures are in place to ensure that your personal data is at all times processed with an adequate level of protection comparable to that required in the EEA (standard contractual clauses approved by the European Commission on data protection in accordance with the European Data Protection Regulation (GDPR), additional security measures in accordance with decision C-311/18 of the Court of Justice of the European Union and subject to certification mechanisms). For further information, please do not hesitate to contact the Data Protection Officer at any of the addresses (postal or email) indicated in this Privacy Policy. Likewise, please remember that, at any time, you may withdraw your consent and/or exercise your rights as indicated in this Privacy Policy or request to unsubscribe from receiving commercial communications through the link that will be incorporated for this purpose in each of the commercial communications that you may receive if you give your express consent to do so.

V.- What are your rights when you provide us with your data?

The user/customer may exercise, if he/she so wishes, the rights of access, rectification and suppression of data, as well as request to limit the processing of his/her personal data, oppose the processing, request the portability of his/her data, as well as not to be subject to automated individual decisions, in both cases, by sending a written communication to the Data Protection Delegate of Parques Reunidos to the postal address c/ Federico Mompou, 5, Parque Empresarial “Las Tablas”, Edificio 1 – Planta 3ª, 28050, Madrid, España or by sending an e-mail to the address dpo@grpr.com attaching in both cases to this request a copy of your ID card, NIF or official document that identifies you.

The user/client may, in relation to those processing operations that are based on obtaining their consent, withdraw their consent at any time and object to processing operations based on legitimate interest if they deem it appropriate, by means of the procedure detailed in the previous paragraph.

VI.- How did we obtain your data?

The personal data processed by the Controllers are the personal data collected from the data subjects during the provision of their data through this website and/or during the contractual relationship between the parties.

During the maintenance of the contractual relationship, the Controllers may process data of third parties that the customer may provide. In this regard, the customer is obliged to inform all such persons of the provisions contained herein regarding data protection and to obtain, where appropriate, the consent of such third parties for the processing of data by the Controllers.

VII.- Before which authority can you exercise your claims?

The user/customer may file a complaint before the Spanish Data Protection Agency in relation to the response received from the Data Controllers when dealing with his/her rights. In any case, he/she may initially contact the Data Protection Delegate of Parques Reunidos, through the e-mail address dpo@grpr.com or at the postal address c/ Federico Mompou, 5, Parque Empresarial “Las Tablas”, Edificio 1 – Planta 3ª, 28050, Madrid, España, in order to solve any claim so that the Controllers can help him/her in this respect.

VIII.- Parques Reunidos Group companies in Europe

If you expressly consent to the sending of commercial information, discounts and promotions on products and services of the companies of the Parques Reunidos Group relating to the leisure and hotel sector, Bono Parques, events and activities related to and organised by these companies, including prior profiling and analysis of your preferences so that they may be of interest to you, you should know that these companies are located in Europe and their main activity is the management and operation of amusement parks, water parks, zoos, aquariums, leisure centres and the performance of travel agency activities in their different modalities, offering hotel packages and tickets to the parks and leisure centres of the Parques Reunidos Group. Specifically, these companies are:

    • Spanish companies in the Parques Reunidos Group: Parques Reunidos Servicios Centrales, S.A. (Bono Parques); Parque de Atracciones Madrid, S.A.U. (Parque de Atracciones Madrid); Madrid Theme Park Management, S.L.U. (Parque Warner and Parque Warner Beach); Gestión Parque de Animales Madrid, S.L.U. (Faunia); Zoos Madrid, S.A.U. (Zoos Madrid). (Faunia); Zoos Ibericos, S.A. (Zoo Aquarium Madrid); Parques de la Naturaleza Selwo, S.L. (Selwo Aventura and Hotel Selwo Lodge); Aquópolis Cartaya, S.L.U. (Aquópolis Cartaya); Leisure Parks, S.A. (Aquópolis de Villanueva de la Cañada, Aquópolis Costa Dorada – Vilaseca, Costa Dorada-, Delfinario Costa Dorada – Vilaseca, Costa Dorada, Selwo Marina Aquópolis de Sevilla, Aquópolis de Cullera, Aquópolis de Torrevieja, Teleférico de Benalmádena); Mall Entertainment Centre Acuario Arroyomolinos, S.L.U. (Atlantis Aquarium Madrid); Mall Entertainment Centre Acuario Arroyomolinos, S.L.U. (Atlantis Aquarium Madrid); Mall Entertainment Centre Acuario Arroyomolinos, S.L.U. (Atlantis Aquarium Madrid). (Atlantis Aquarium); Mall Entertainment Centre Murcia, S.L.U. (Nickelodeon Adventure Murcia); Travelpark Viajes, S.L.U. (products and services related to joint entry packages to parks and leisure centres of the Parques Reunidos Group and hotel accommodation bookings).
    • Rest of Europe companies of the Parques Reunidos Group: Italy – Parco della Standiana S.R.L. (Miraiblandia and Mirabilandia Beach) and Travelparks Italy, S.R.L. (products and services related to joint entry packages to parks and leisure centres of the Parques Reunidos Group and reservation of hotel accommodation); Norway – Tusenfryd A/S (Tusenfryd) and Bø Sommarland AS (Bo Sommarland); Belgium – Bobbejaanland, B. V.B.A (Bobbejaanland); BonBon-Land A/S (BonBon -Land); Germany – Movie Park Germany GmbH and Movie Park Germany Services GmbH (Movie Park), Event Park GmbH (Belantis), Nature Park Germany GmbH (Vogelpark Walsrode), Tropical Island Management (Tropical Island) and TI Hotel Asset GmbH (Tropical Island Hotels); Netherlands – Attractie- en Vakantiepark Slagharen B.V. (Slagharen and Slagantiepark Slagharen B.V.); Germany – Attractie- en Vakantiepark Slagharen B.V. (Slagharen and Slagantiepark Slagharen). (Slagharen and Slagharen Beach); France – Marineland SAS (Marineland, Aquaplash Marineland and Kids Island) and LB Investissement (Aqualud); England – Grant Leisure Group LTD (Blackpool Zoo), Real Live Leisure Company LTD (The Bournemouth Aquarium and Aquarium of the lakes) and Lakeside Mall Entertainment Centre Limited (Nickelodeon Adventure-Lakeside).