PRIVACY POLICY
IDENTIFICATION DATA OF THE DATA CONTROLLER
Data controller: VIVIR AMODIÑO, SL
CIF: B-42820761
Tax address: Balares 3, Ponteceso 15110 (A Coruña)
Phone: 622 591 400
Email: hola@balares.es
Website: balares.es
Activity: Accommodation and Restaurant
INFORMATION TO USERS AND CONSENT
In accordance with the provisions of the European Data Protection Regulation (EU) 2016/679 and with Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, by accepting this privacy policy the user expresses his/her express, free, informed and unequivocal consent for the personal data that he/she may provide through the different forms and means of contact that may be enabled on the website to be incorporated into the company's files. The data controller informs interested parties that, as prescribed by current applicable regulations, the corresponding technical and organizational security measures have been applied to the personal data processing activities carried out, which have been implemented after the relevant risk analysis has been carried out.
WHAT PERSONAL DATA IS COLLECTED?
Through the website we collect the user's identification data and the data strictly necessary to be able to manage the queries and requests sent by interested parties through the forms and other means or contact methods available on the website.
Under no circumstances will we collect or record through the website and the means of contact enabled therein information containing sensitive personal data or specially protected data. The personal data collected will be processed in each case in accordance with the bases of legitimacy specifically indicated in the corresponding section of this Privacy Policy.
WHAT IS THE PURPOSE FOR WHICH WE PROCESS THE PERSONAL DATA COLLECTED?
The personal data collected by the data controller through the means of contact enabled on the website will be processed for specific purposes in each case and in accordance with the following. Data obtained through the forms and contact channels enabled: there are means and channels of contact enabled on the website to make enquiries, requests for information or documents, suggestions, claims, complaints, sending job applications, and/or in general to contact the company. In this case, the telephone or email will be used to respond to the request and the purpose for which the data will be processed will be to respond to the requests received and send the information or documentation required by the user through the website, and only the data strictly necessary to attend to what is specifically requested by the user will be requested and collected.
Data provided for the sending of commercial communications: in this case, the data provided by the user will be used to manage the sending of advertising, commercial communications and information related to the company's activities that the user has expressly requested or whose sending has been expressly accepted in advance, and also in order to facilitate the revocation of the consent previously granted by the user, or their opposition to the processing of their data for the purposes indicated. In order to provide the services and content offered by the company through the website, ASUBÍO MEDIA, SL may at some point request personal data from the user through forms or other means of contact, in which case the provisions of this Privacy Policy will always apply.
HOW LONG WILL WE KEEP THE PERSONAL DATA COLLECTED?
The personal data provided to the company responsible for the website will generally be processed for as long as they are needed to respond to requests received and as long as the service provision relationship that may have been formalized between the parties is maintained and the data is needed for the development of the company's activities and the execution of the services and activities indicated on balares.es contracted or requested by the user after having contacted the company through the website, and as long as the deletion of the same is not requested by the user or the consent that had been previously granted by the interested parties is revoked in those cases in which the processing of the data was based on said consent.
With regard to personal data provided by users, once the contractual or commercial relationship that may have been formalized has ended, the deletion of data has been requested, or the consent previously granted has been revoked, the specific limitation periods provided for by applicable legislation will apply in each case, with a general period of 5 years for personal actions without a special period, 6 years for invoices and company accounting books and 10 years in relation to the provisions of the Law on the Prevention of Money Laundering and Financing of Terrorism (art. 25). During the indicated limitation periods, the data will be kept blocked and available only to authorities and public administrations, and once they have ended, the data will be deleted.
WHAT IS THE LEGAL BASIS THAT ALLOWS US TO PROCESS THE DATA COLLECTED?
The legal basis for legitimation that allows us to process personal data collected through the website is based, with regard to the sending of forms that may be enabled to make inquiries and requests for information, or to contact through the means indicated on the website, on the express and informed consent of the interested party or his representative obtained and granted in accordance with the conditions indicated in art. 7 of the European Data Protection Regulation, according to which interested parties will have the right to withdraw this consent at any time. The controller informs that the data requested through the forms that may be enabled or through the means of contact indicated on the website will be strictly necessary to address the specific query, request or petition made by the interested party.
In the case of personal data that may be collected in connection with the contracting of services or products marketed by the company, the basis for legitimacy will be based on the execution of a contract or commercial agreement between the parties and for the purpose of enabling the contracting of the services or products requested from the company, and/or the development and management thereof.
In the case of personal data collected as a result of user interaction through their social media profiles and comments made by them through them in relation to publications, news, articles or opinions disseminated by the company on the website or on its official social media profiles and channels, the basis for legitimacy will be based on the express and informed consent of the interested party.
In the case of sending commercial communications to the user, the basis of legitimacy for the processing of their data will be based on the express and informed consent of the interested party, collected and granted in accordance with the conditions indicated in art. 7 of the European Data Protection Regulation, according to which the interested parties will have the right to withdraw at any time this consent previously granted.
QUALITY OF DATA PROVIDED
The company VIVIR AMODIÑO SL warns users that, unless there is a sufficiently accredited legal representation, no user may use the identity of another person and communicate their personal data, so that users of the website must bear in mind that they can only communicate their own personal data and that it is adequate, pertinent, exact, updated and true.
Users will be liable for any direct or indirect damages caused to third parties or to the company by the use of another user's personal data, or by the use of their own personal data if they are false, erroneous, inadequate, inappropriate or out of date.
Users who provide the company with personal data of third parties must have the informed consent of the third party and in accordance with this Privacy Policy, and will be liable for this to the company and to the third party, exonerating the company from all liability in this regard.
WHAT ARE THE RIGHTS THAT CAN BE EXERCISED BY THOSE WHO PROVIDE US WITH THEIR DATA?
In accordance with the provisions of the European Data Protection Regulation (EU) 2016/679 and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, interested parties will have the right to obtain confirmation as to whether VIVIR AMODIÑO, SL is processing personal data that concerns them or not, as well as to exercise the rights recognized over their data.
Interested parties will have the right specifically to:
Request access to personal data concerning you
Request rectification or deletion of data
Request data deletion
Request limitation of data processing
Object to data processing
Request data portability
In the event that the interested party has given their consent for a specific purpose, they will have the right to withdraw the consent previously given at any time, without affecting the legality of the processing based on the consent given prior to its withdrawal.
If interested parties consider that we have not treated their personal data in accordance with the reference regulations indicated, and if they understand that we have not satisfied their request to exercise rights, they may, if they wish, submit a claim to the Spanish Data Protection Agency as the national control authority at the organization's address at Calle Jorge Juan, 6 - 28001 - Madrid or through the contact channels indicated on the institution's website (www.agpd.es), including the electronic headquarters https://sedeagpd.gob.es/sede-electronica-web/
In order to exercise all of the aforementioned rights, interested parties may contact the contact addresses indicated above to request the application form provided by the company for this purpose in compliance with its legal obligations. The interested party must accompany this form when it is presented or sent with a copy of their ID or equivalent document proving their identity and that of their representative, if applicable. The exercise of the rights will be free of charge, and the application may be delivered in person to the company's staff, or sent by post or email to the contact addresses indicated.
The data controller informs interested parties that it has established and implemented specific protocols and measures for compliance with the data protection regulations of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.
USER RIGHTS IN RELATION TO COMMERCIAL COMMUNICATIONS
The company VIVIR AMODIÑO, SL informs that users who have expressly authorized the sending of commercial or promotional communications via e-mail, SMS or any other equivalent or similar means of electronic communication, will have the right to oppose the processing of their personal data for commercial or promotional purposes, as well as the right to revoke the consent previously granted for this purpose, by simply notifying the company in this regard and sending an email to hola@balares.es
TO WHICH RECIPIENTS COULD YOUR DATA BE COMMUNICATED?
Personal data provided by users will generally only be processed by those responsible for the company and by the authorized personnel that may be hired at any given time, and who will be required to formalize the corresponding confidentiality agreement and comply with the duty of confidentiality regarding personal data to which they may have access in the performance of their duties within the company.
Data will only be transferred to third parties in cases of legal obligation, such as in the case of transfers made to Public Authorities and Administrations, State Security Forces and Corps, and Courts and Tribunals.
Data transfers may also be made when necessary to enable the development of the services contracted or requested from the company by users and/or the services contracted to external providers, including banks and financial institutions for the management of collections and payments, and data processors, and always in this case within the framework provided for in the data processor contract formalized between the company and the contracted processors. The company undertakes in all cases to inform interested parties about the need to make extraordinary transfers of data to third parties to manage the provision of services so that interested parties can express their consent for the transfer of data as a prerequisite for this to be carried out.
In the case of international data transfers arising from the company's use of tools, applications, programs or service providers, these will be carried out under the protection of the international agreements in force at any given time, standard contractual clauses and binding corporate rules that guarantee that software companies in the United States and countries outside the EU comply with European data protection policies regarding privacy, confidentiality and data security.
DATA SECURITY AND CONFIDENTIALITY
VIVIR AMODIÑO, SL is committed to the proper use and treatment of users' personal data, respecting their confidentiality, and to using them in accordance with the specific purposes of said treatment, as well as to comply with its obligation to store the data and to adopt all security measures available to prevent unauthorized alteration, loss, treatment or access, and in accordance with the provisions of current data protection regulations.
This website includes an SSL certificate, a security protocol that ensures that your data travels in an integral and secure manner, that is, the transmission of data between a server and a website user, and in feedback, is fully encrypted.
The company cannot guarantee the absolute invulnerability of the Internet network and therefore the violation of data through fraudulent access to it by third parties.
Regarding the confidentiality of data processing, VIVIR AMODIÑO, SL will ensure that any person who is authorized by the company to process user data, including staff, collaborators and suppliers, is under the corresponding obligation of confidentiality, whether legal or contractual.
When a security incident occurs, once VIVIR AMODIÑO, SL becomes aware of it, it will notify the user without undue delay and provide the appropriate information related to the security incident and in any case whenever the user requests it in a reasonable manner.
ACCURACY AND TRUTHFULNESS OF DATA
The user is solely responsible for the truthfulness and accuracy of the personal data that he/she sends and provides to asubio.media, exonerating VIVIR AMODIÑO, SL from any liability in this regard. Users guarantee and are responsible, in any case, for the accuracy, truthfulness, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information through the contact channels enabled on the website.
CHANGES IN THE PRIVACY POLICY
VIVIR AMODIÑO, SL reserves the right to modify this privacy policy to adapt it to new legislation or jurisprudence, as well as to industry practices. In such cases, changes will be announced on the website with due notice before they are put into effect.