Last updated: April 22, 2025

San An Pass is operated by IBIZA ROCKS HOTEL PROMOCIONES S.L. (“we”, “our”, or “us”), a company registered in Spain under CIF B57615809. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

This policy applies to all personal data collected through our website: https://www.sananpass.com

1. Who We Are

Controller: IBIZA ROCKS HOTEL PROMOCIONES S.L.

Address: Calle Cervantes 27, 07820 – San Antonio, Baleares, Spain

Contact: info@ibizarocks.com

—

2. What Data We Collect

We collect the following personal data through a form on our website:

• First Name

• Last Name

• Email Address

• Mobile Number

• Workplace

—

3. How and Why We Use Your Data

Your data is collected with your explicit consent and is used to:

• Provide and personalise offers based on your profile

• Send updates, discounts, and event information via email and WhatsApp

You consent to this processing by opting in on our website form. You can withdraw your consent at any time via the unsubscribe link in our communications or by contacting us directly.

—

4. Legal Basis for Processing

We rely on:

• Consent (Article 6(1)(a) GDPR) for marketing communications

• Legitimate interest (Article 6(1)(f) GDPR), where applicable, to operate and improve our services

—

5. Data Storage and Third Parties

Your data is securely stored in our customer relationship management (CRM) system, which adheres to GDPR-compliant security and privacy practices. Access is restricted to authorised personnel, and technical safeguards such as encryption and access controls are in place.

We do not sell or share your personal data with third parties. Any third-party service providers (e.g., CRM systems) process your data only on our behalf and under data processing agreements that meet GDPR requirements.

—

6. Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, or to comply with legal obligations. Once no longer needed, your data will be securely deleted or anonymised.

—

7. Your Rights Under GDPR

You have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request erasure (“right to be forgotten”)

• Restrict or object to certain processing activities

• Request transfer of your data to another service provider (data portability)

• Withdraw consent at any time

• Lodge a complaint with the Spanish Data Protection Authority (AEPD)

To exercise any of these rights, contact us at info@ibizarocks.com.

—

8. International Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure that such transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or transfers to countries with an adequacy decision.

—

9. Contact Us

For any questions or requests regarding your personal data, please contact:

IBIZA ROCKS HOTEL PROMOCIONES S.L.

Calle Cervantes 27

07820 – San Antonio, Baleares, Spain

Email: info@ibizarocks.com