Security Policy

SECURITY AND DATA CENTRE LOCATION.
ONECLICK’s main servers are hosted in the IONOS data centre in Germany (EU).

SECURITY POLICIES.
ONECLICK has implemented various measures to ensure that your information is adequately protected against unauthorised access, use, disclosure and deletion of data. Please be aware that risk can never be definitively eliminated, but can be mitigated and limited. All measures taken by ONECLICK significantly reduce that risk. ONECLICK shall not be liable to any third party, including yourself, in the event of unauthorised access, use and/or disclosure of information, provided that it is not due to gross negligence, wilful misconduct, fraud or bad faith on the part of ONECLICK.

The security measures adopted by ONECLICK include:
A. access to information stored on ONECLICK’s servers which is restricted to a limited number of ONECLICK employees and third parties who may only access the information under very specific and limited circumstances, subject to our strict confidentiality rules.
B. ONECLICK’s servers are protected by (1) firewalls that establish a barrier between our trusted and secure internal network and the Internet and (2) IP restrictions, which limit access to an authorised list of IP addresses.
C. Each User may only access information pertaining to his or her ONECLICK account.
D. We use HTTPS on ONECLICK services, to ensure secure data transfer and prevent eavesdropping and third party attacks.
E. ONECLICK will review its information collection and processing practices periodically to revise and amend this privacy policy accordingly.
F. All ONECLICK personnel have received privacy training and are aware of the security implications of information handling.
G. ONECLICK follows a secure password allocation and retention procedure which ensures that our staff can only access the information they need to perform their job.

ACCESS AND DISCLOSURE.
ONECLICK does not rent or sell your personal information, but may disclose your information to a limited set of trusted third parties in the following situations, which you explicitly agree to by using our services:
A. We will disclose your personal information when we are required to do so by law or court order, as well as to comply with any legal or regulatory requirements or obligations. We will use our best efforts to ensure that such requirements or obligations are in accordance with applicable law.
B. We reserve the right to transfer your data to any third party if we have reasonable grounds to believe that the transfer is necessary for the purpose of an investigation and/or to enforce any breach of the Terms of Use (if applicable), to detect, prevent or remedy fraud, security, technical or other irregularities or illegalities, and to protect the rights and interests and property of ONECLICK.

ONECLICK also works with third party vendors and other partners who provide functions necessary for us to better serve you.
We will only share information with third parties as necessary to provide our services, contractually binding them to maintain the confidentiality of the information we share with them and that it may only be used for specific purposes. For example, among other things, we use the services of third party providers to host the application’s own data, which we discuss below.

This privacy policy may be updated to reflect changes and improvements that affect information security. You can find the current version of the policy at any time at https://www.oneclickgranada.es/ and https://www.alhambra-entradas.es/.

We will provide you with advance notice of any changes via the email address associated with your account. You hereby agree that this form of notice will constitute adequate notice to you. All changes to our privacy policy will be effective from the time you access our website and/or use our services, or 30 calendar days after they are posted on this site. Your use of the site and/or our services after the effective date of any modification to this agreement will constitute your full acceptance of the agreement, as modified.

INFRASTRUCTURE.
IONOS : https://www.ionos.es/terms-gtc/terms-privacy/