Privacy policy - Las terrazas
Privacy policy - Las terrazas

Privacy policy

LEGISLATIVE FRAMEWORK:

Área de Servicio Villalonquéjar’s privacy and data protection management model is based on the following legal framework:

  • Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
  • Organic Law 3/2018, of 5 December, on the protection of personal data and guarantees of digital rights.
  • The guidelines of the Article 29 Working Party.
  • Law 34/2002 of 11 July 2002 on Information Society Services and Electronic Commerce (L.S.S.I.C.E.).

 

RESPONSIBLE FOR THE PROCESSING OF YOUR DATA:

 

PURPOSE FOR WHICH WE PROCESS YOUR PERSONAL DATA:

Área de Servicio Villalonquéjar informs users that the purpose of the processing of the data collected includes:

  • Management of the completion of bookings requested by users.
  • Forwarding of documentation / confirmation of bookings.
  • Management of requests for modification / cancellation of bookings.
  • Attention to requests for information made through the contact form on the website.
  • Sending of commercial communications in cases where users have given their explicit consent.

 

LEGITIMATION FOR THE PROCESSING OF YOUR DATA:

Express consent of the user through the selection of the check box on the form where he/she verifies his/her consent, either through the contact form or when making the reservation.

According to the legal bases that legitimise the processing indicated are the execution of the contract for the provision of services previously contracted, and the legitimate interest of Área de Servicio Villalonquéjar.

HOW LONG WE WILL KEEP YOUR DATA:

We only store users’ personal data to the extent that we need it in order to use it for the purposes for which it was collected, and in accordance with the legal basis for processing it. We will keep personal data for as long as there is a contractual relationship with the user and for as long as the user does not exercise the right to erasure, cancellation and/or limitation of the processing of personal data, or as long as it must be maintained by legal obligations that may be applicable.

RECIPIENTS TO WHOM YOUR DATA WILL BE COMMUNICATED:

In general, Área de Servicio Villalonquéjar informs users that their personal data will not be transferred to third party organisations, except when such transfer of data is covered by a legal obligation or when the provision of a service implies the need for a contractual relationship with a data processor.

The use of your image (photo or video), which are published on the website, digital platforms, social networks and physical media, shall be obtained with the express consent of the data subject or, failing that, of his or her legal representative.

If such images are published by the data controller on digital platforms or social networks, in the event of a possible international transfer of data, companies such as Facebook and Instagram are within the Privacy Shield, an agreement signed between the United States and the European Union that establishes that all companies wishing to import personal data from Europe to the United States are obliged to comply with European legislation on Data Protection.

The AEPD establishes that companies covered by the Privacy Shield are suitable recipients for the European Commission, which means that, although there are international data transfers, these are covered by the said Privacy Shield, and therefore prior authorisation from the AEPD would not be necessary. If this were not the case, the aforementioned authorisation would be required for the correct processing of the data.

YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA:

In accordance with the provisions of the applicable regulations, Área de Servicio Villalonquéjar informs the customer that he/she has the following rights derived from the applicable regulations:

Access: this allows the owner of the data to obtain information on whether or not Área de Servicio Villalonquéjar is processing personal data concerning him/her and, if so, the right to obtain information on the personal data being processed.

Rectification: this allows you to correct errors and modify data that is inaccurate or incomplete.

Deletion: allows data to be deleted and no longer processed by Área de Servicio Villalonquéjar, unless there is a legal obligation to keep it and/or other legitimate reasons for its processing by Área de Servicio Villalonquéjar do not prevail, for example, when the personal data is no longer necessary in relation to the purposes for which it was collected, the customer may request that we delete such data without undue delay.

Limitation: under the legally established conditions, this allows the processing of data to be stopped in such a way as to prevent Área de Servicio Villalonquéjar from processing it in the future, which will only retain it for the exercise or defence of claims.

Opposition: in certain circumstances and for reasons related to their particular situation, data subjects may oppose the processing of their data. Área de Servicio Villalonquéjar will cease to process the data, except for compelling legitimate reasons, or for the exercise or defence of possible claims.

Portability: this allows the interested party to receive the personal data concerning him/her that he/she has provided to Área de Servicio Villalonquéjar and to be able to transmit it directly to another data controller in a structured, commonly used and machine-readable format. In order to exercise this right, it will be necessary for the customer to provide a valid e-mail address.

WHERE TO EXERCISE YOUR RIGHTS:

You may submit a claim for your rights to Área de Servicio Villalonquéjar or directly to the data protection delegate specified below..

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, as the case may be, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the limitation of the processing of their data, may object to the processing of their data, as well as exercise the right to data portability.

To exercise these rights, you may write to the following addresses: Postal address: Avenida De La Industria, 10, 09001 Burgos, Spain, or to the e-mail address: info@lasterrazashotel.com, in both cases providing: your name and surname(s), who must prove their identity with a copy of their ID card or passport, indicating the right requested, the reasons given and the corresponding supporting documents.

Likewise, any interested party shall have the right to lodge a complaint with the Spanish Data Protection Agency. The exercise of these rights is free of charge.