PRIVACY POLICY
1. DATA CONTROLLER INFORMATION
Company Name: COSTASOL, S.L. (hereinafter referred to as the “Company” or the “Controller”).
Tax ID: B04000980
Address: Paseo de Almería nº 58, 04001 – Almería (ALMERÍA), Spain.
Email for Data Protection communications: direccion@hotelcostasol.com.
Applicable Regulations
Our Privacy Policy has been designed in accordance with the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and, where not contrary to the aforementioned Regulation, by the provisions of the Spanish legal framework on Personal Data Protection.
By providing your data, you declare that you have read and are aware of this Privacy Policy, giving your clear and explicit consent to the processing of your personal data in accordance with the purposes and terms stated herein.
The Company may modify this Privacy Policy to adapt it to legislative or jurisprudential changes or interpretations by the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookies Policy, and the General Terms and Conditions, where applicable, for certain products or services, if such access implies any particular handling of personal data.
- PURPOSE OF THE PROCESSING OF PERSONAL DATA
The processing of your personal data will serve the following purposes:
- To provide you with information related to the products and services offered by our company and which are detailed on this website.
- To manage the contracting of our services through acceptance of a quote/order or the signing of a commercial contract.
- To send you, by email and/or postal mail, news and updates about our entity, as well as updates to our product and service catalog.
- Data Retention Period
We will retain your personal data from the moment you give your consent until you withdraw it or request the limitation of processing. In such cases, we will keep your data blocked for the legally required periods.
LEGAL BASIS AND COLLECTED DATA
The legal basis for the processing of your data is the express consent granted through a positive and affirmative action (filling out the corresponding form and checking the acceptance box of this policy) when you provide us with your personal data.
Consent to process your data
By completing the forms, checking the “I accept the Privacy Policy” box, and clicking to send the data, or by sending emails to the Company through the designated addresses, the User confirms they have read and expressly accept this Privacy Policy and provide their clear and explicit consent to the processing of their personal data for the stated purposes.
The User certifies that they are over 14 years of age and therefore have the necessary legal capacity to consent to the processing of their personal data, all in accordance with the terms of this Privacy Policy.
Categories of Data
The collected data pertains to the category of identifying data, such as: First and Last Name, Telephone Number, Postal Address, Company, Email Address, as well as the IP address from which the data collection form is accessed.
SECURITY MEASURES
In our commitment to ensuring the security and confidentiality of your personal data, we inform you that the necessary technical and organizational measures have been adopted to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing or access, taking into account the state of the art, the nature of the stored data, and the risks to which they are exposed, in accordance with Article 32 of the EU GDPR 679/2016.
DATA DISCLOSURE
No data transfers or international transfers of your data are foreseen, except as authorized by tax, commercial, and telecommunications legislation, or in cases where a judicial authority requires it.
USER RIGHTS
Any data subject has the right to obtain confirmation as to whether we are processing personal data concerning them. Data subjects have the right to access their personal data, to request the correction of inaccurate data, or, where applicable, to request its deletion when the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only retain the data for the exercise or defense of legal claims. For reasons related to their particular situation, data subjects may object to the processing of their data. The Controller will stop processing the data, unless there are compelling legitimate grounds, or for the exercise or defense of possible claims.
How to exercise your rights
To exercise your rights, you can send a letter to Paseo de Almería nº 58 – 04001 Almería (ALMERÍA), or send an email to the Controller, or where applicable, to the Data Protection Officer at direccion@hotelcostasol.com requesting the appropriate form to exercise the chosen right. Optionally, you may contact the competent Supervisory Authority to obtain additional information about your rights. Please remember to include a copy of a document that allows us to identify you.
