1. DETAILS OF THE DATA CONTROLLER
Company Name: RAICES ESPAÑOLAS SERVICIOS TURISTICOS SL (the “Controller”)
Tax ID: B55227656
Business address: C/ DE LA RUTLLA Nº14 – 17251 – CALONGE – GIRONA
Phone: 628028144
Email for Data Protection matters: carlos@spainholidays4u.com
1.1. Applicable regulations
Our Privacy Policy has been designed in accordance with the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, and with Organic Law 3/2018 of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights.
By providing us with your data, you declare that you have read and are aware of this Privacy Policy, giving your clear and explicit consent to the processing of your personal data for the purposes and under the terms stated herein.
The Company may modify this Privacy Policy to adapt it to legislative or jurisprudential developments or interpretations by the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy, and General Terms and Conditions where applicable.
1.2. Our Data Protection Officer
LOPDMONTOLIU I SERVEIS SL
Tax ID: B55261804
Contact phone: 625459540
Email: info@lopdmontoliu.es
2. PURPOSE OF PERSONAL DATA PROCESSING
The processing we carry out of your personal data serves the following purposes:
- To provide you with information related to the products and/or services offered by our entity as detailed on this website.
- To carry out the contracting of our services through the acceptance of the relevant quote and/or the signing of a commercial contract.
- To send you news and updates about our company and our products/services via email and/or postal mail.
2.1. Data retention period
We will retain your personal data from the time you give us your consent until you revoke it or request limitation. In such cases, we will keep your data blocked for the legally required period.
3. LEGAL BASIS AND DATA COLLECTED
The legal basis for processing your data is the explicit consent given through a positive affirmative action (filling out the appropriate form and ticking the acceptance box) at the time you provide your personal data.
3.1. Consent to process your data
By filling out the forms, ticking the “I Accept the Privacy Policy” box, and clicking to submit the data, or by sending emails to the Company through the designated addresses, the User declares to have read and expressly accepted this Privacy Policy, giving clear and explicit consent to the processing of their personal data according to the purposes stated.
3.2. Data categories
The data collected fall into the category of identifying data, such as: First and last name, phone number, postal address, company, email address, and the IP address from which the form is accessed.
4. SECURITY MEASURES
As part of our commitment to ensuring the security and confidentiality of your personal data, we inform you that we have adopted the necessary technical and organizational measures to ensure the security of the personal data and to prevent its alteration, loss, unauthorized processing, or access, in accordance with the state of technology, the nature of the stored data, and the risks to which they are exposed, as per Article 32 of the EU GDPR 679/2016.
5. DATA DISCLOSURE
No data transfers or international data transfers are foreseen, except for those authorized by tax, commercial, and telecommunications legislation, and in cases where required by a judicial authority.
6. USER RIGHTS
Any data subject has the right to obtain confirmation on whether we are processing personal data concerning them. Data subjects have the right to access their personal data and to request the rectification of inaccurate data or, where appropriate, request their deletion when the data is no longer needed for the purposes for which it was collected.
In certain circumstances, data subjects may request the limitation of processing, in which case we will only keep the data for the exercise or defense of claims.
For reasons related to their specific situation, data subjects may object to the processing of their data. The data controller shall stop processing the data unless there are compelling legitimate grounds or for the exercise or defense of possible claims.
In accordance with current legislation, you have the following rights: right to request access, rectification, deletion, limitation, objection, portability of your data, and to revoke consent. You also have the right to file a complaint with the Spanish Data Protection Agency.
6.1. How to exercise your rights
To exercise your rights, contact the controller and request the appropriate form. You may also contact the supervisory authority for further information.
Contact details for exercising your rights: phone 628028144 and email carlos@spainholidays4u.com.
Please include a copy of a document that allows us to identify you.
7. CONSENT TO RECEIVE ELECTRONIC COMMUNICATIONS
Likewise, in accordance with Law 34/2002 of 11 July, on Information Society Services and Electronic Commerce, by completing the data collection form and ticking the “I Accept” box, you are giving your explicit consent to receive information about the Company via email, telephone, fax, or other electronic means.