Privacy Policy


User information

MAYAPAN SL. is responsible for the processing of the User’s personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data, for which reason the following processing information is provided: Purpose of the processing: to maintain a commercial relationship with the User in relation to the products or services offered. In addition, the planned procedures to carry out the treatment are:

Respond to queries and suggestions that users may make.

Process orders, requests or any type of request that is made by the user through any of the forms of contact that are made available.

To manage your requests and / or reservations and their collection. To send commercial advertising communications by email, mobile applications, social communities or any other electronic or physical means, present or future, that enable commercial communications. These communications will be made by the responsible and related to their products and services, or its partners or suppliers with whom it has reached a promotional agreement. If you send or leave us a resume, they may be used in recruitment processes. The resumes will be kept for a maximum period of one year, after which they will be deleted, guaranteeing total respect for confidentiality both in the treatment and in their subsequent destruction. In this regard, after the aforementioned period, and if you wish to continue participating in the selection processes, please send us your resume again.

Data retention criteria:

They will be kept for as long as there is a mutual interest in maintaining the purpose of the processing and when no longer necessary for that purpose, they are deleted with appropriate security measures to ensure the pseudonymization of the data.

Communication of data:

The web developers and the company that hosts us on their servers will have access. All of them have regularized with us the access to these data for the sole purpose described here. They will not be destined to any other third party for processing, except for legal obligations.


It is based on the consent that is requested through the corresponding acceptance box.

Rights of the User:

Right to withdraw consent at any time. Right to object and to the portability of personal data. It is established as a right of the interested party to receive all personal data that is not in compliance with the data subject and that he/she has provided to a data controller, provided that the processing is based on consent or is necessary for the performance of a contract and the processing is carried out by automated means.

Right of access:

The interested party shall have the right to request and obtain, free of charge, information on the personal data undergoing processing, the origin of such data, as well as the communications made or planned to be made of such data. Where the data subject submits the request by electronic means, and unless the data subject requests otherwise, the information shall be provided in a commonly used electronic format. The right to obtain a copy shall not adversely affect the rights and freedoms of others.

Right of rectification and suppression:

The data controller shall be obliged to enforce the data subject’s right of rectification or erasure within ten days. Any personal data whose processing does not comply with the provisions of the law shall be rectified or erased, and in particular, where such data is inaccurate and incomplete, the data subject shall have the right to obtain without undue delay the rectification of inaccurate personal data concerning him or her. The data subject shall have the right to have incomplete personal data completed, including by means of an additional declaration.

Right to limitation of processing:

The data subject shall have the right to obtain from the controller the restriction of the processing of the data. Where the processing of personal data has been restricted, they may only be processed for the purposes of their storage, with the data subject’s consent, for the formulation, exercise or defense of claims, for the protection of the rights of another natural or legal person or for reasons of public interest. Any data subject who has obtained the restriction of processing shall be informed by the controller prior to the lifting of such restriction.

Right of opposition:

The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her (public interest and legitimate interest), including profiling on the basis of these provisions. The controller shall cease to process the personal data, unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the formulation, exercise or defense of claims. The data subject shall have the right to lodge a complaint with the Supervisory Authority if it has not obtained satisfaction in the exercise of its rights, in this case, with the Spanish Data Protection Agency

Contact information to exercise your rights:


Users, by checking the corresponding boxes and entering data in the fields of the contact form or presented in download forms, expressly and freely and unequivocally accept that their data are necessary to fulfill their request by the provider, being voluntary the inclusion of data in the remaining fields.

The User guarantees that the personal data provided to the person in charge are truthful and is responsible for communicating any changes to them.

The responsible party expressly informs and guarantees users that their personal data will not be transferred in any case to third parties, and that whenever any type of transfer of personal data is carried out, the express, informed and unequivocal consent of the Users will be requested beforehand.

All data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the User.

If not all data is provided, there is no guarantee that the information and services provided will be completely tailored to your needs.