Privacy Policy
This English translation is provided for convenience. The German version is the authoritative version.
1. Privacy at a glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy below.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You will find the operator's contact details in the section "Notice on the responsible party" below.
How do we collect your data?
Some data is collected when you provide it to us, for example data you enter into the contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data (e.g. browser, operating system, or time of the page view).
What do we use your data for?
Part of the data is collected to ensure the website works without errors. Other data may be used to analyse user behaviour or for advertising purposes, provided you have given your consent.
What rights do you have regarding your data?
You have the right to receive information free of charge at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke it at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data, and the right to lodge a complaint with the competent supervisory authority.
2. Hosting
Hetzner
We host the contents of our website with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany ("Hetzner"). The servers are located in Germany. For details, please refer to Hetzner's privacy policy: https://www.hetzner.com/legal/privacy-policy.
The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, contact details, names, website accesses, and other data generated via a website.
Hetzner is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). We have concluded a data processing agreement (DPA) with the provider.
3. General notes and mandatory information
Notice on the responsible party
The party responsible for data processing on this website is:
FLC Palma Beach S.L.
Puig des Teix 3
07193 Sa Font Seca, Spain
Represented by: Christoph Ziegler, Managing Director
Phone: +34 677 57 21 47
E-mail: cz@palma-partners.com
Tax ID (CIF): B56207939
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Storage period
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law).
Legal bases
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. In the case of explicit consent to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device, processing is additionally based on Section 25(1) of the German TDDDG. Consent can be revoked at any time. If your data is required for the performance of a contract or pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, processing may be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. The legal bases applicable in each individual case are stated in the following paragraphs.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out before the revocation remains unaffected.
Right to object (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS ASSOCIATED WITH SUCH DIRECT MARKETING (OBJECTION UNDER ART. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.
Information, correction, and deletion
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing and, if applicable, a right to correction or deletion of this data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
4. Data collection on this website
Cookies
Our website uses so-called "cookies". Cookies are small data packages and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR. If consent to the storage of cookies and comparable recognition technologies has been requested, processing takes place exclusively on the basis of this consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG); consent can be revoked at any time.
Consent with CCM19
Our website uses the consent technology CCM19 to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in accordance with data protection law. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany, website: https://www.ccm19.de ("CCM19").
When you enter our website, a connection to the CCM19 servers is established to obtain your consents and other declarations regarding cookie use. CCM19 then stores a cookie in your browser in order to be able to assign the consents given or their revocation to you. CCM19 is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR: the website operator has a legitimate interest in the technically error-free presentation and optimisation of its website.
Contact form (Formspark)
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there (name, e-mail address, message, selected residence and language, if applicable), will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
For the technical processing of form submissions we use the service Formspark. The provider is Trampoline Software SRL, Belgium, website: https://formspark.io. Your form data is transmitted to Formspark's servers, stored there, and forwarded to us. According to the provider, storage takes place in Ireland (EU).
This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested; consent can be revoked at any time.
Spam protection with Botpoison
To protect our contact form from spam and abusive automated use, we use the service Botpoison. The provider is Trampoline Software SRL, Belgium, website: https://botpoison.com. When the form is submitted, Botpoison checks technical characteristics (e.g. IP address, browser information) to determine whether the request originates from a human. According to the provider, processing takes place in Ireland (EU).
The processing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its contact form against abusive automated use and spam.
Inquiries by e-mail or phone
If you contact us by e-mail or phone, your inquiry, including all personal data resulting from it (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. The processing is based on Art. 6(1)(b) GDPR, our legitimate interest (Art. 6(1)(f) GDPR), or your consent (Art. 6(1)(a) GDPR).
5. Analysis tools and advertising
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out any independent analyses. It only serves to manage and deliver the tools integrated via it. However, the Google Tag Manager records your IP address, which may also be transferred to Google's parent company in the United States.
We also use Google Consent Mode: marketing and analytics tags are only activated once you have given your consent via the cookie banner.
The use of the Google Tag Manager is based on Art. 6(1)(f) GDPR. If consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG; consent can be revoked at any time.
The company is certified under the "EU-US Data Privacy Framework" (DPF). Further information: Data Privacy Framework participant details.
Google Ads
The website operator uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (target group targeting). As the website operator, we can evaluate this data quantitatively, for example by analysing which search terms led to the display of our advertisements and how many ads led to corresponding clicks.
The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details: https://policies.google.com/privacy/frameworks. The company is certified under the "EU-US Data Privacy Framework" (DPF).
Google conversion tracking
This website uses Google conversion tracking. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google conversion tracking, Google and we can recognise whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked and how often, and which content was viewed particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they performed. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.
The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time. More information on Google conversion tracking can be found in Google's privacy policy: https://policies.google.com/privacy. The company is certified under the "EU-US Data Privacy Framework" (DPF).
6. Plugins and tools
Local web fonts
This site uses web fonts stored locally on our server for the uniform display of typefaces. No connection to servers of Google or other font providers is established.