Welcome to CostaRoyal.pl, operated by NewIdea Invest Grupo SL. We are committed to safeguarding your privacy and ensuring the security of your personal data. Our Privacy Policy, in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, outlines how we collect, use, store, and protect your information across all our services, including online interactions, direct marketing, and communications.

The entity responsible for processing your personal data is:

NewIdea Invest Grupo SLCalle de L'Almirall Cadarso, 26, 46005 Valencia, SpainCompany Number: B01756584Email: info@costaroyal.pl

If you have any questions regarding the handling of your personal data, you can contact us via email.

We collect and process personal data when you interact with our website (costaroyal.pl) or use our services. The types of data we collect include, but are not limited to:

1. Personal Data Provided by You:

Identification and Contact Information: Name, phone number, email address, postal address.

Payment Data: When making transactions, payment details are collected securely.

Communication Data: Emails, messages, or other interactions you have with our company.

2. Data Collected Automatically:

Cookies and Tracking Technologies: Data on website visits, user behavior, preferences, and interactions.

Device Information: IP address, browser type, operating system, and session duration.

Geolocation Data: If permitted by the user, we may collect approximate location data.

3. Data Collected for Marketing and Communications:

Email Marketing: If you subscribe to our newsletters, we process your email for promotional communication.

SMS Marketing: With explicit consent, we may send offers and updates via SMS.

Direct and Telemarketing: We may contact you directly via phone, provided you have given consent.

We process your personal data based on the following legal grounds:

Performance of a Contract – Necessary to provide you with our services.

Legitimate Interest – To improve our website, conduct direct marketing, and enhance customer experience.

Consent – For email marketing, SMS marketing, and cookie tracking (consent can be withdrawn at any time).

Legal Obligation – Compliance with tax, regulatory, or law enforcement requirements.

We do not sell or rent your data. However, we may share data under the following circumstances:

Service Providers & Partners: Third-party providers assisting with website analytics (Google, Meta), payment processing, and email marketing automation.

Legal Compliance: When required by law or regulatory authorities.

Business Transactions: In case of mergers, acquisitions, or corporate restructuring.

Your data may be stored within the European Economic Area (EEA) or transferred to third countries that ensure an adequate level of data protection under GDPR.

We use cookies and tracking tools to enhance user experience and improve our services. These include:

Essential Cookies: Necessary for website operation.

Performance Cookies: Analyzing website traffic and usage patterns.

Marketing Cookies: Used by advertising services (Google Ads, Facebook Ads) to personalize marketing campaigns.

You can manage your cookie preferences at: https://policies.google.com/technologies/cookies#managing-cookies

We retain personal data only for as long as necessary:

Customer Accounts & Transactions: Retained for the duration of the customer relationship and for legal retention periods.

Marketing Data: Stored until you opt out or withdraw consent.

Cookies & Tracking Data: Retention varies based on cookie type; you can manage these settings.

As a data subject, you have the following rights:

Right to Access: Request a copy of your personal data.

Right to Rectification: Correct inaccuracies in your data.

Right to Erasure (Right to Be Forgotten): Request deletion of your data (subject to legal obligations).

Right to Restriction of Processing: Limit how we use your data.

Right to Data Portability: Receive a structured copy of your data.

Right to Object: Opt-out of direct marketing at any time.

Right to Withdraw Consent: For marketing, cookies, and tracking data.

You can exercise these rights by contacting us at info@costaroyal.pl.

We implement robust technical and organizational measures to protect your data against unauthorized access, loss, or misuse. These include:

Data Encryption: Protecting stored and transmitted data.

Access Controls: Restricting access to authorized personnel only.

Regular Security Audits: Ensuring compliance with the latest security protocols.

We may update this Privacy Policy periodically. Any significant changes will be notified through our website.

Last Updated: March 2025

For any privacy-related inquiries, please contact us at:

NewIdea Invest Grupo SLCalle de L'Almirall Cadarso, 26, 46005 Valencia, SpainEmail: info@costaroyal.pl