PRIVACY POLICY
This privacy policy is in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), as well as, insofar as it is not contrary to the aforementioned regulations, Organic Law 15/1999 on the Protection of Personal Data (LOPD) and its implementing regulations, and/or those that may replace or update them in the future.
Our organization is committed to the privacy of your personal data. The personal data provided is necessary to provide our services and is processed lawfully, fairly and transparently, guaranteeing adequate security thereof, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage through the application of technical and organizational measures.
Through this document we want to offer you in a transparent and fair manner all the necessary information regarding the processing of your personal data carried out by this organization.
I.- DATA CONTROLLER
IDENTITY: MICHAEL JOSEPH HAUGHNEY
C.I.F. / N.I.F.: X2503334Z
ADDRESS: AVDA. MARINA ESPAÑOLA, 5 , 03730 JAVEA (ALICANTE)
TELEPHONE: 966463108
E-MAIL: info@rentalsjavea.com
DATA PROTECTION OFFICER: dpo@procoden.es
II.- RECIPIENTS OF PERSONAL DATA
- The personal data provided will not be subject to any transfer unless so provided in specific processing operations.
- Optionally, for the contracting of cloud computing services and/or services for sending emails, communication, as well as other related IT services, personal data may be:
- Transferred to IT service companies located within the European Economic Area (EEA) or,
- In the event that some of our suppliers or service providers are located outside the European Economic Area (EEA), we guarantee that international data transfers will be carried out in accordance with applicable regulations. In particular, in the case of suppliers located in the United States, such transfers may be covered by the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov), whose adequacy was recognized by the European Commission on July 10, 2023, or by standard contractual clauses approved by the European Commission.
- Optionally, to administrations and other bodies when required in compliance with legal obligations.
III.- LEGAL BASIS THAT LEGITIMIZES THE PROCESSING OF PERSONAL DATA
In each specific processing of personal data we will inform you of the legal basis that legitimizes it.
IV.- RIGHTS
4.1. RIGHT OF ACCESS
It is the right to obtain confirmation from the data controller as to whether or not personal data concerning the interested party are being processed and, if so, the right of access to personal data and the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be communicated, retention period or the criteria used to determine this period, the existence of the right to request from the controller the rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the existence, where applicable, of automated decisions, including profiling, when data are transferred to third countries the right to be informed of the appropriate safeguards applied.
4.2. RIGHT OF RECTIFICATION
It is the right to request the rectification of your personal data if they are inaccurate, including the right to complete incomplete data. It must be taken into account that by providing us with personal data by any means, you guarantee that they are true and accurate and you undertake to notify us of any change or modification thereof. Therefore, any damage caused due to communication of erroneous, inaccurate or incomplete information in the website forms will be the sole responsibility of the interested party.
4.3. RIGHT OF ERASURE
It is the right to request the erasure of your personal data when, among other cases, they are no longer necessary for the purpose for which they were collected, or are being processed in another way or you withdraw consent. It must be taken into account that erasure will not proceed when the processing of personal data is necessary, among other cases, for compliance with legal obligations or for the formulation, exercise or defense of claims.
4.4. RIGHT TO RESTRICTION
It is the right to request the restriction of the processing of your personal data, which means that in certain cases you may request that we temporarily suspend the processing of your personal data or that we keep them beyond the necessary time when you may need it.
4.5. RIGHT TO WITHDRAW CONSENT
It is the right to withdraw the consent that you have provided by checking "I have read and accept the privacy policy" at any time and as specified in the corresponding section "Exercise of rights" or in the specific processing of commercial communications or Newsletter. It must be taken into account that this right will have no effect if, among other cases, the processing of personal data is necessary for compliance with a legal obligation, the execution and maintenance of a contractual relationship, or for the formulation, exercise or defense of claims. Likewise, the withdrawal of consent will have no retroactive effects, that is, it will not affect the lawfulness of processing based on consent prior to its withdrawal.
4.6. RIGHT TO DATA PORTABILITY
It is the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, and to transmit them to another controller, provided that: the processing is based on your consent and is carried out by automated or computerized means.
4.7. RIGHT TO OBJECT
It is the right to object to the processing of your personal data based on our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
4.8. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you consider that we process your personal data incorrectly, you can contact us or you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.agpd.es/portalwebAGPD/index-ides-idphp.php
4.9. EXERCISE OF RIGHTS
You can exercise the rights that assist you by letter to the postal address indicated above or by email to info@rentalsjavea.com, attaching in both cases a copy of your NIF/NIE/Passport or similar document.
V. SECURITY MEASURES
The data controller applies appropriate technical and organizational measures to ensure the confidentiality, integrity and availability of data.
VI. PROCESSING OF PERSONAL DATA.
6.1. GENERIC PROVISIONS
The personal data requested in each of the specific processing operations are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, thus complying with the principle of data minimization.
The personal data requested in each of the specific processing operations are strictly necessary, the refusal to provide them would imply not being able to provide the requested service.
The communications of personal data provided for in each of the specific processing operations are in some cases necessary for the execution and maintenance of a contract and in other cases for compliance with a legal obligation applicable to the data controller.
6.2. BASIC PROCESSING
CONTACT FORM
The personal data provided in the contact form will be used solely to respond to inquiries or requests for information and manage the relationship derived from the inquiry.
The legal basis that legitimizes the processing of personal data is express consent by checking "I have read and accept the privacy policy".
Data will not be transferred to third parties, except legal obligation or when necessary for the correct provision of the service.
Personal data will be kept for a period of two years from the moment they cease to be processed, without prejudice to the exercise of the rights that assist you as an interested party, unless a contractual or legal relationship is derived that requires its retention for a longer time.
COMMERCIAL COMMUNICATIONS OR NEWSLETTER FORM
Personal data collected in the context of newsletter subscription will be processed to send information, news, promotions or related content, manage subscription, user preferences and unsubscriptions, through various means such as WhatsApp, email, telephone or SMS. It must be taken into account that this type of data processing may involve the analysis of the interested party's profile to determine their preferences and thus be able to send them information more appropriate to their interests.
The legal basis that legitimizes the processing of personal data is express consent previously given by checking "I have read and accept the privacy policy".
The source of the data is directly from the interested party through a newsletter subscription form or direct contact by email or telephone.
Data is not obtained from third parties without express consent.
You can request unsubscription for this type of processing, depending on the medium used, as follows:
Email: Through the link for this purpose that you will find in each of the electronic communications or through a similar procedure specified in the commercial communication.
WhatsApp: By requesting unsubscription.
SMS: By requesting unsubscription.
Telephone: By requesting unsubscription.
Data will not be transferred to third parties, except legal obligation. However, certain service provider persons acting as data processors may have access to your data, such as web hosting services, newsletter sending tools and IT support, always under contract that guarantees confidentiality and compliance with current regulations. In the event that the medium used is WhatsApp, as a necessary contractual requirement, personal data will be transferred to WhatsApp Ireland Limited which is located within the EEA.
International data transfers from GOOGLE, LLC. are made when using the email application, GMAIL. Data processors: IT services.
Personal data provided for subscription to our newsletter will be kept as long as the user maintains their subscription. In case of unsubscription or revocation of consent, your data will be deleted unless there are legal obligations that require their retention.