Privacy Policy
With this privacy policy we inform you of the treatment we make of the personal data you provide or will provide in your navigation, in case you continue browsing. Likewise, it includes our data protection policy, for cases in which an express reference to it is made.
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (RGPD), as well as Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights , we inform you of the following:
1. PERSON IN CHARGE OF THE TREATMENT
The controller and owner of the domain https://www.senoriodenevada.es/ (hereinafter, the Website), is Arco Organización, S.L. with address at Carretera de Cónchar, S/N, CP 18659 Villamena (Granada) with CIF B38036901.
Contact details for data protection purposes:
Telephone: (+34) 958777092 – E-mail: protecciondatos@senoriodenevada.es
2. PURPOSE OF PROCESSING AND LEGITIMIZATION
The processing of your data pursues the following purposes, with their corresponding legitimacy, which are set out below.
(*) In those cases where to make a request it is necessary to fill out a form and “click” on the submit button, the completion of the same will necessarily imply that you have been informed and have expressly given your consent and acceptance of the privacy policy.
All our forms have check boxes that must be checked to access the services offered.
The purpose of the data you provide is:
1. Provision of the service, development and execution of the service
Purpose:
We process your personal data in order to (i) manage the requested service; (ii) follow up on the same as well as send you information by electronic means that deal with your request.(iii) Customer registration.
Legitimation: The basis of legitimacy is the provision of a service on the basis of a contract or pre-contract (provision of services that binds us with you).
2. Website contact.
Purpose:
To send you the requested information and resolve any queries you make to us through the contact section(s) made available to you on the website.
Legitimation: The basis of legitimacy is the consent given and legitimate interest.
3. Marketing
Purpose:
Sending communications, news or actions that are of interest to you and that you request from us.
As this is an accessory purpose to the main one, you must check the box provided for this purpose.
For example, when you agree to receive personalized information through various means.
In order to offer you services more tailored to your needs, we may inform you about offers and promotions of interest to you through commercial advertising communications by e-mail, or any other electronic or physical means, present or future, that enable such communications. They will be made by us and will always be related to our services.
Legitimation: The legitimate basis for processing your data for marketing purposes is the consent you give us.
4. Curriculum
Purpose:
To be part of the selection processes that we may carry out.
In case we receive your resume via email, we may include it in recruitment processes that we carry out. For this purpose, you authorize us to analyze the documents you submit in order to assess your application and, if necessary, offer you a job.
In the event that you are not selected, we may store your CV to incorporate it into future calls, for a maximum of one year, unless you tell us otherwise.
Legitimation: The express consent when you send us your curriculum.
5. Use of Cookies:
Purpose:
When browsing our website we may collect information through the cookies inserted in it. The purpose is to obtain knowledge about how users use our website and allow us to improve it, and / or perform performance analytics. The aforementioned data are stored through cookies and are subject to the presentation of objections to the processing of this data, as detailed in the Cookies Policy. You can consult the Cookie Policy in the corresponding section of our website.
Your browsing information may be stored by Google Analytics, for which we refer to the Google Privacy Policy, as it collects and treats such information: http://www.google.com/intl/en/policies/privacy
Similarly, from our website you can provide the utility of Google Maps, which may have access to your location, assuming you allow it, in order to provide you with greater specificity about the distance and / or roads to our establishment. In this regard, we refer to the privacy policy used by Google Maps, in order to know the use and processing of such data: http://www.google.com/intl/en/policies/privacy/
Legitimation:
1. The legal basis for the processing of data through cookies, in the case of technical cookies, i.e. those that are essential to navigate this website and receive the service offered through it, the legal basis for their use is the agreement through which you decide to use this website and use its services.
2. The legal basis for the use of the rest of cookies is the consent of the user, which is requested at the time of accessing this website, being able to revoke it at any time. The withdrawal of such consent will not affect the ability to browse this website and use its services, but the processing of data previously made will not lose its legality by the fact that the consent has been revoked.
6. Social network contacts
Purpose:
The Website may host other social networking applications or services for the purpose of facilitating content sharing. Any personal information provided by the user may be shared with other users of that service, over which we have no control.
We process your personal data for the purpose of (i) answering your queries and requests, (ii) managing the requested service, interacting with you and creating a community of followers.
The website may offer functionalities to share content through third party applications, such as Facebook,. They may collect and process information related to the user’s navigation on the different websites. Any personal information that is collected through the social network may be used by third party users of the same. Your interactions are subject to the privacy policies of the companies providing the applications.
Legitimation: The legal basis for the processing of your data is the acceptance of the contractual relationship with the relevant social network provider manifested when you sign up for their application and in accordance with their privacy policies, which is external to us and over which we have no control.
7. Exercising data protection rights or claims
Purpose:
When your query is related to the exercise of data protection rights about which we inform you below, or claims related to our services, is to attend to the user’s request or claim. In fulfilling these obligations, we may communicate your data to the Public Administrations and courts, provided that such information is required in accordance with the established legal processes.
Legitimation: What legitimises us to process your data is the fulfilment of legal obligations on our part.
8. Sending invoices:
Purpose:
To send you the invoice/s requested.
Legitimation:
Compliance with a legal obligation.
In the event of the existence of services or applications, these will contain their particular conditions with specific provisions on the protection of personal data. It is essential to read and accept them prior to requesting the service in question.
Additional information: You can request additional and detailed information on Data Protection from our Data Processing Registers by sending an e-mail to protecciondatos@senoriodenevada.es.
3. TYPE OF DATA WE PROCESS, HOW WE COLLECT IT AND HOW LONG IT IS KEPT
For the purposes set out in the previous section, a set of personal data is processed, which can be divided into the following sources:
Data provided directly by the user:
At the time of sending through the various forms provided on the website or any other means available to them.
The user guarantees that the data provided for the provision of the services requested are true to their real situation and that they will communicate any modification that affects them. Consequently, the user shall be liable to the Provider for any damages caused as a consequence of the breach of the obligations assumed in this clause.
Data collected indirectly:
All those data that, in case of having provided consent, The Provider collects from the typology of external sources.
Data derived from the provision of the service itself:
All data collected during the provision of the service.
Your data will be collected in order to comply with the obligations prescribed by Royal Decree 933/2021, of 26 October, which establishes the obligations of documentary registration and information of natural or legal persons engaged in accommodation activities. Likewise, in compliance with the aforementioned regulations, we will keep your data for a period of three years from the end of your stay.
Once this period has elapsed, the data will be deleted in accordance with the provisions of the data protection regulations, which implies its blocking, being available only at the request of Judges and courts, the Public Prosecutor’s Office or the competent Public Administrations, in particular the Data Protection Authority, during the period of limitation of the actions that could be derived to be subsequently eliminated.
The limitation periods vary depending on the type of service; for exemplary purposes, in general, the limitation period for most personal civil actions is 5 years.
In addition to the general processing of the previous point, the following particularities on data retention will be observed:
Customer data: conservation period of 4 years (Art. 66 and following of the General Tax Law), and 6 years for accounting books and invoices (Art. 30 of the Commercial Code). Customer Service: We will process your data for as long as it is necessary to deal with your application or request.
Data contained in curricula vitae: a maximum of 6 months for future selection processes unless you state otherwise.
Data provided for the purpose of receiving commercial communications and communications of interest: from the time the User gives his/her consent until he/she withdraws it.
4. YOUR RIGHTS
Data protection legislation confers on you the following rights in relation to the processing of personal data:
-Right of access: to access your personal data in order to know which are being processed and the processing operations carried out on them.
-Right of rectification: to request the modification of your data if they are inaccurate or untrue.
-Right of portability: to obtain a copy in an interoperable format of the data undergoing processing.
-Right to limitation of processing: you may limit the processing of your data, in which case we will only keep them for the purpose of exercising or defending claims.
-Right to erasure: you may request the erasure of your data when the processing is no longer necessary.
-Right of opposition: to request the cessation of the sending of communications in the terms indicated.
-Right to revoke the consent given.
To exercise these rights, you must send an express request, together with a copy of your ID card or equivalent supporting document (in the event that we are unable to identify you) via:
EMAIL: addressed to protecciondatos@senoriodenevada.es with the subject Data Protection and the right you wish to exercise.
This sending must be done from the e-mail address you included in the form. Otherwise, they will not be shown to you, as we do not consider your identity to be sufficiently proven.
If you do not receive a reply from us in due time and form, or if you do not find the reply satisfactory, we inform you that the competent supervisory authority is the Spanish Data Protection Agency (www.aepd.es ). On its website you can find a series of models that will help you to exercise your rights.
5. TARGET
We expressly inform and guarantee users that their personal data will not be passed on to third parties under any circumstances, unless legally obliged to do so.
In compliance with these obligations, we may communicate your data to the Public Administrations and courts, provided that such information is required in accordance with the established legal processes.
To the Security Forces and Corps in compliance with L.O.4/2015 on the Protection of Citizen Security). Any exception to this rule will require your prior express, informed and unequivocal consent.
If you contact our team through any of the profiles on social networks that the Provider makes available to users, in addition to providing us with the data you provide, you will also be providing them to the entities responsible for that social network. To know the use and treatment that these entities make of your data, we advise you to carefully read the privacy policies of the social networks you have active.
6. SECURITY MEASURES
In accordance with the provisions of the regulations in force on personal data protection (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights), we comply with all provisions for the processing of personal data under our responsibility, and manifestly with the principles described in Article 5 of the GDPR, whereby they are processed lawfully, fairly and transparently in relation to the data subject and in a manner that is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
We guarantee that we have implemented appropriate technical and organisational policies to apply the security measures established by the RGPD and the LOPDGDD in order to protect your rights and freedoms, providing you with all the information necessary for you to exercise your rights. We have installed all the technical means and measures at our disposal to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data you provide us with. However, you should be aware that security measures on the Internet are not impregnable.
7. MINORS
Minors (14 years of age) may not use the services available through the Website without the prior authorisation of their parents, guardians or legal representatives, who shall be solely responsible for all acts carried out through the Website by the minors in their care, including the completion of the forms with the personal data of said minors and the ticking, where appropriate, of the boxes that accompany them. Arco Organización, S.L. accepts no responsibility for the truthfulness and accuracy of the data provided.
The processing of the personal data of a minor may only be based on his/her consent when he/she is over fourteen years of age.
Exceptions are those cases in which the law requires the assistance of the holders of parental authority or guardianship for the conclusion of the act or legal transaction in the context of which the consent to the processing is sought.
The processing of data of minors under fourteen years of age, based on consent, shall only be lawful if the consent of the holder of parental authority or guardianship is given, to the extent determined by the holders of parental authority or guardianship.
8. DURATION AND MODIFICATION OF THE PRIVACY POLICY
Arco Organización, S.L. reserves the right to modify this Privacy Policy, in whole or in part, by publishing the changes on the Website. Likewise, we may change, delete or add, without prior notice, both the content and services provided, as well as the way in which they are presented. Consequently, the Policies that are published at the time you access the Website will be understood to be in force, so you should read them periodically.
Irrespective of the above, access to the contents of the Website may be terminated, suspended or interrupted at any time without prior notice, without the User being able to claim any compensation whatsoever.