WEBSITE PRIVACY POLICY
www.apartamentoalbalanzarote.com
- PRIVACY AND DATA PROTECTION POLICY
In compliance with current legislation, VV350011117 (hereinafter also referred to as the “Website”) undertakes to adopt the necessary technical and organizational measures according to the level of security appropriate to the risk of the data collected.
Legislation Incorporated into This Privacy Policy
This Privacy Policy is adapted to current Spanish and European regulations on the protection of personal data on the internet. In particular, it complies with the following regulations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).
- Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPD-GDD).
- Royal Decree 1720/2007 of 21 December approving the Regulations implementing Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
- Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
The Data Controller responsible for the processing of personal data collected on VV350011117 is:
F José García
Tax ID (NIF): 31717081N
(hereinafter, the “Data Controller”)
Contact details:
Address: Lugar Tamaretilla 18
Telephone: (34) 611984085
Email: info@apartamentoalbalanzarote.com
Personal Data Register
In compliance with the GDPR and LOPD-GDD, we inform you that personal data collected by VV350011117 through forms on its pages will be incorporated and processed in our records in order to facilitate, streamline and fulfill the commitments established between VV350011117 and the User, or to maintain the relationship established through the forms completed by the User, or to respond to requests or inquiries.
In accordance with Article 30.5 of the GDPR (where applicable), a record of processing activities is maintained specifying, according to its purposes, the processing activities carried out and the other circumstances required by the GDPR.
Principles Applicable to the Processing of Personal Data
The processing of the User’s personal data shall be subject to the following principles established in Article 5 of the GDPR and Article 4 et seq. of Organic Law 3/2018:
- Lawfulness, fairness and transparency: User consent will always be required following fully transparent information about the purposes of data collection.
- Purpose limitation: Data will be collected for specified, explicit and legitimate purposes.
- Data minimization: Only data strictly necessary for the purposes of processing will be collected.
- Accuracy: Data must be accurate and kept up to date.
- Storage limitation: Data will be retained only for as long as necessary for processing purposes.
- Integrity and confidentiality: Data will be processed securely and confidentially.
- Accountability: The Data Controller is responsible for ensuring compliance with these principles.
Categories of Personal Data
The categories of data processed by VV350011117 consist solely of identification data.
No special categories of personal data (as defined in Article 9 of the GDPR) are processed.
Special categories include data revealing ethnic or racial origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a person’s sex life or sexual orientation.
If special categories of personal data are ever processed, explicit User consent will be required.
Legal Basis for Processing
The legal basis for processing personal data is consent. VV350011117 undertakes to obtain express and verifiable consent from the User for one or more specific purposes.
The User has the right to withdraw consent at any time. Withdrawal will be as easy as giving consent. In general, withdrawal of consent will not affect use of the Website.
Where Users provide data through forms for inquiries, information requests, or Website-related purposes, they will be informed if completing certain fields is mandatory for proper processing.
Purposes of Data Processing
Personal data is collected and managed to:
- Facilitate, streamline and fulfill commitments between the Website and the User;
- Maintain relationships established through forms;
- Respond to requests or inquiries.
Data may also be used for commercial personalization, operational and statistical purposes, marketing studies, and to improve Website quality, operation and navigation.
At the time of collection, Users will be informed of the specific purpose(s) of processing.
Data Retention Period
Personal data will only be retained for the minimum time necessary and, in any case, for a maximum period of 18 months, or until the User requests deletion.
Users will be informed of retention periods or criteria used to determine them at the time of data collection.
Recipients of Personal Data
User personal data will not be shared with third parties.
If data is shared, Users will be informed at the time of collection of the recipients or categories of recipients.
Address referenced:
Lugar Tamaretilla 18, Tuineje, Fuerteventura
If personal data is transferred to a third country or international organization, the User will be informed of this and of any adequacy decision by the European Commission.
Personal Data of Minors
In accordance with Article 8 GDPR and Article 7 of Organic Law 3/2018, only persons over 14 years old may lawfully consent to data processing. If under 14, parental or guardian consent will be required.
Data Security and Confidentiality
VV350011117 undertakes to adopt appropriate technical and organizational measures to ensure data security and prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.
The Website uses an SSL (Secure Socket Layer) certificate to ensure secure and encrypted data transmission.
However, as internet security cannot be fully guaranteed, the Data Controller will notify Users without undue delay of any personal data breach likely to result in high risk to individuals’ rights and freedoms.
Personal data will be treated as confidential and protected by legal or contractual obligations for employees and collaborators.
User Rights
Users may exercise the following rights under GDPR and Organic Law 3/2018:
- Right of access
- Right to rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right not to be subject to automated decision-making, including profiling
To exercise these rights, Users must send written communication to the Data Controller with the reference:
“GDPR – www.apartamentoalbalanzarote.es”, including:
- Full name and copy of ID
- Specific request details
- Address for notifications
- Date and signature
- Supporting documents if applicable
Postal address: Lugar Tamaretilla 18
Email: reservas@apartamentoalbalanzarote.es
Links to Third-Party Websites
The Website may include links to third-party websites not operated by VV350011117. These sites have their own privacy policies and are responsible for their own data practices.
Complaints to the Supervisory Authority
If a User believes their data protection rights have been violated, they may lodge a complaint with the competent supervisory authority.
In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD):
https://www.aepd.es/
- ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
Users must read and agree to this Privacy Policy before their personal data is processed. Use of the Website implies acceptance of this Policy.
VV350011117 reserves the right to modify this Privacy Policy due to legal or regulatory changes. Updates will not be explicitly notified. Users are advised to review this page periodically.
This Privacy Policy was updated to comply with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018.
COOKIE POLICY
Access to this Website may involve the use of cookies.
Cookies are small pieces of information stored in the User’s browser to facilitate navigation and improve user experience. They do not damage devices.
Cookies help recognize Users, personalize experiences, and may assist in identifying and resolving errors.
Information collected may include date and time of visits, pages viewed, time spent, and referring websites. Cookies do not access phone numbers or extract information from the User’s hard drive. Personal data will only form part of cookies if the User provides it directly.
Cookies that identify a person are considered personal data and are therefore subject to this Privacy Policy. Their use requires User consent, provided through an explicit, affirmative action before processing.
Disabling, Rejecting and Deleting Cookies
Users may disable, reject or delete cookies (fully or partially) via their browser settings (e.g., Chrome, Firefox, Safari, Internet Explorer). Procedures vary by browser, so Users should consult their browser’s instructions.
If cookies are rejected, the Website may still be used, although some features may be limited.