PRIVACY POLICY
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and other applicable Spanish legislation on personal data protection, we inform you that the personal data provided by filling out and submitting the forms on this website will be incorporated into the processing activities of the company El Nogal de Guadalupe S.L. (N.I.F. B-01828847), with its registered office at Calle Marqués de la Romana 14, Guadalupe, Caceres.
PRIVACY POLICY 1111
“YOUR DATA IS SAFE” 2
Information in compliance with personal data protection regulations 3
In Europe and Spain there are data protection rules designed to protect your personal information that are mandatory for our entity4. Therefore, it is very important for us that you fully understand what we are going to do with the personal data we ask for5. Thus, we will be transparent and give you control of your data, with simple language and clear options that will allow you to decide what we will do with your personal information6.
Please, if you have any questions after reading this information, do not hesitate to ask us7.
Thank you very much for your cooperation8.
Who are we? 9
Our name: EL NOGAL DE GUADALUPE SL 10
Our CIF / NIF: B01828847 11
Our main activity: Accommodation, hotels, hostels, guesthouses, tourist accommodation, camping 12
Our address: Marqués de la Romana, 14, 10140 – Guadalupe (Cáceres) 13
Our contact telephone number: 676641949 14
Our contact email address: info@elpatiodelnogal.com 15
Our website: https://www.elpatiodelnogal.com/ 16
For your confidence and security, we inform you that we are an entity registered in the following Commercial Registry / Public Registry: Commercial Registry of CÁCERES T 1053, L 880, F 96, S 8, H CC 15855, I/A 1 (27.08.20) CVE: BORME-A-2020-173-1017.
We are at your disposal, do not hesitate to contact us18.
What are we going to use your data for? 19
In general, your personal data will be used to interact with you and to provide you with our services, also including electronic commerce, also known as e-commerce, consisting of the purchase and sale of products or services through electronic means20.
Likewise, they may also be used for other activities, such as sending you advertising or promoting our activities21.
Why do we need to use your data? 22
Your personal data is necessary to interact with you and to provide you with our services, including e-commerce services23.
In this regard, we will provide you with a series of boxes that will allow you to decide clearly and simply about the use of your personal information24.
All the information we require from you will be used to contribute to the proper development of the product sales relationship that unites us with you25. Data such as addresses or telephone numbers, which in principle seem unrelated to e-commerce activity, will be used solely to ensure that you can enjoy the products purchased through this website26.
The information you provide us must be truthful so that e-commerce services can be provided consistently and effectively27. It would also be helpful if you update the information you provide us at all times to avoid future errors or confusions that could break the correct provision of services28.
Who will know the information we ask for? 29
In general, only personnel from our entity who are duly authorized may have knowledge of the information we request30.
Likewise, those entities that need to have access to your personal information so that we can provide you with our services may also know it31. For example, our bank will know your data if the payment for our services is made by card or bank transfer32.
Furthermore, those public or private entities to which we are obliged to provide your personal data due to compliance with any law will have knowledge of your information33. To give you an example, the Tax Law requires that certain information about economic operations exceeding a specific amount be provided to the Tax Agency34.
In the event that, apart from the commented cases, we need to disclose your personal information to other entities, we will previously request your permission through clear options that will allow you to decide in this regard35.
How are we going to protect your data? 36
We will protect your data with effective security measures based on the risks involved in the use of your information37. To this end, our entity has approved a Data Protection Policy and annual controls and audits are carried out to verify that your personal data is secure at all times38.
Will we send your data to other countries? 39
In the world there are countries that are safe for your data and others that are not so much40. For example, the European Union is a secure environment for your data41.
Our policy is not to send your personal information to any country that is not secure from the perspective of data protection42.
In the event that, in order to provide the service, it is essential to send your data to a country that is not as secure as Spain, we will always ask for your prior permission and apply effective security measures that reduce the risks of sending your personal information to another country43.
How long are we going to keep your data? 44
We will keep your data throughout our relationship and as long as required by law45. Once the applicable legal deadlines have expired, we will proceed to delete them safely and respectfully of the environment46.
What are your data protection rights? 47
At any time, you can contact us to know what information we have about you, rectify it if it is incorrect, and delete it once our relationship has ended, provided this is legally possible48.
You also have the right to request the transfer of your information to another entity49. This right is called “portability” and may be useful in certain situations50.
To request any of these rights, you must submit a written request to our address, along with a photocopy of your ID (DNI), so that we can identify you51. In our entity’s offices, we have specific forms available to request these rights and we offer our help for their completion52.
To learn more about your data protection rights, you can consult the website of the Spanish Data Protection Agency (www.agpd.es)53.
Can you withdraw your consent if you change your mind at a later time? 54
You can withdraw your consent if you change your mind about the use of your data at any time55. For example, if you were once interested in receiving advertising for our products or services, but no longer wish to receive more advertising, you can let us know through the opposition to processing form available in our entity’s offices56.
In case you understand that your rights have been neglected, where can you file a complaint? 57
In case you understand that your rights have been neglected by our entity, you can file a complaint with the Spanish Data Protection Agency, through one of the following means58:
Electronic headquarters: www.agpd.es 59
Postal address: Spanish Data Protection Agency C/ Jorge Juan, 6 28001-Madrid 60
By phone: Tel. 901 100 099 or Tel. 91 266 35 17 61
Filing a complaint with the Spanish Data Protection Agency does not entail any cost and the assistance of a lawyer or solicitor is not required62.
Will we create profiles about you? 63
Our policy is not to create profiles on the users of our services64.
However, there may be situations in which, for the purpose of providing the service, commercial, or other purposes, we need to create information profiles about you65. An example could be the use of your purchase or service history to be able to offer you products or services adapted to your tastes or needs66.
In such a case, we will apply effective security measures that protect your information at all times from unauthorized persons who try to use it for their own benefit67.
Will we use your data for other purposes? 68
Our policy is not to use your data for purposes other than those we have explained to you69.
If, however, we need to use your data for different activities, we will always ask for your prior permission through clear options that will allow you to decide in this regard70.
Purpose of processing
The data collected will be used:
Data collection method
All personal data collected by El Nogal de Guadalupe through the website will be obtained solely from the information provided by the data subject (you) after being required when requesting one of our services. By providing your personal data, you will be asked to accept and consent to the personal data processing as detailed in this Privacy Policy.
The data subject is solely responsible for the accuracy, correctness, and currency of the provided data. Refusal to provide certain data may prevent you from using some of the services we offer.
Disclosure to third parties
El Nogal de Guadalupe will only disclose your personal data:
To those third parties to whom we are legally obliged to provide it (e.g., public bodies and institutions of the General State Administration, Autonomous and local administrations, including judicial bodies).
To external technology service providers, such as hosting services, IT maintenance, and similar services, which provide their services to El Nogal de Guadalupe and will process your data strictly following this entity’s instructions and under its responsibility.
Data retention period
The personal data obtained through the information request form will be retained only as long as necessary to attend to the request.
If explicit consent is given for commercial information, the data will be retained until the consent is revoked. If the promotional information is based on a legitimate interest, your data will be retained as long as the interest persists or until you exercise your right to object.
Personal data provided for purchases through the website will be retained for the duration of the contractual relationship and, once ended, during the statute of limitations for legal actions arising from it.
Data security
The processing of provided personal data will be carried out by adopting appropriate technical and organisational measures to ensure a level of security appropriate to the risk, considering the state of the art, implementation costs, and the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons.
Exercising of rights
The data subjects have the right to access, rectify, delete, object, limit, and port their data, and not be subject to automated decisions. To exercise any of these rights, you can contact El Nogal de Guadalupe, by written request to the postal address at Calle Marqués de la Romana 14, Guadalupe, Caceres; or via email at info@elpatiodelnogal.com.
This request must initially include the name and surname of the data subject. El Nogal de Guadalupe may request additional information to ensure the legitimacy of the request and that it is made by the rights holder, adhering to the principle of data minimisation.
If the data subject considers that their rights have not been respected according to the current law, they can file the corresponding claim for protection of rights with the Spanish Data Protection Agency (www.aepd.es).
Data protection officer (DPO)
El Nogal de Guadalupe is a small company and, due to the nature and type of data processing it performs, it is not legally required to have a Data Protection Officer. You can contact our DPO through the following email address: info@elpatiodelnogal.com.