Privacy policy

In this Privacy Statement, we explain what we do with the data we obtain about you through https://casalamarina.es. We recommend carefully reading this statement. When processing data, we comply with privacy regulations. This means, among other things, that:

  • We clearly define the purposes for which we process personal data. We do this through this Privacy Statement.
  • We strive to limit the collection of personal data to only those necessary for legitimate purposes.
  • In cases where your consent is required, we first request explicit consent for the processing of your personal data.
  • We take appropriate security measures to protect your personal data and require the same from any third parties processing personal data on our behalf.
  • We respect your right to access, correct, or delete your personal data upon your request.

If you have any questions or want to know exactly what data we store about you, please contact us.

I. Purpose, Data, and Retention Period

We may collect or receive personal data for various purposes related to our business activities, which may include:

  1. Contact via telephone, mail, email, and/or forms – For this purpose, we use the following data: first name, last name, email address, and phone number. The legal basis for processing this personal data is that it is necessary for the performance of a contract or pre-contractual measures with the individual whose data is being processed.
  2. Payments and reservations – For this purpose, we use the following data: first name, last name, email address, phone number, address details, and IP address. The legal basis for processing this personal data is that it is necessary for the performance of a contract or pre-contractual measures with the individual whose data is being processed.

II. Sharing Data with Third Parties

We only share data with third parties to the extent that it is technically or legally necessary for the functioning of this website and the fulfillment of its intended purposes.

  1. PERSKIMEDIA Szymon Perski, ul. Janiny Omańkowskiej 58, 60-465 Poznań, Poland, VAT ID PL7632085454 – hosting provider with whom the owner of the website located at https://casalamarina.es has concluded a data processing agreement.
  2. Stripe Inc – provider of debit and credit card payment services with whom the owner of the website located at https://casalamarina.es has concluded an appropriate service agreement.

III. Cookies

To ensure the best user experience, we and our partners use technologies such as cookies to store and/or retrieve information on the device. Giving consent to these technologies allows us and our partners to process personal data, such as browsing behavior or a unique ID, on this website. Lack of consent or its withdrawal may negatively impact certain features. More information about these technologies and our partners can be found in the Cookie Policy.

IV. Information Sharing Practices

We disclose personal data if required by law or court order, in response to a request from law enforcement agencies, within the limits allowed by other laws, to provide information, or to conduct an investigation related to public safety.

If our website or company is acquired, sold, or involved in a merger or acquisition, your data may be disclosed to our advisors and potential buyers and will be transferred to the new owners.

The website owner participates in the IAB Europe Transparency & Consent Framework and complies with its specifications and principles. They use a consent management platform with identification number 332.

We have entered into a data processing agreement with Google. Google cannot use the data for any other Google services. Full IP addresses are blocked by us.

V. Security

We prioritize the security of personal data. We take appropriate security measures to limit misuse and unauthorized access to personal data. This ensures that only necessary individuals have access to your data, access to the data is protected, and our security measures are regularly reviewed.

The security measures we employ include:

  • Usernames and passwords
  • DNSSEC
  • TLS/SSL
  • DKIM, SPF, and DMARC
  • Security software
  • HTTP Strict Transport Security
  • X-Content-Type-Options
  • X-XSS-Protection
  • X-Frame-Options
  • STARTTLS and DANE

VI. External Websites

This Privacy Statement does not apply to third-party websites linked on our website. We cannot guarantee that these third-party sites process your personal data reliably or securely. We recommend reviewing the privacy statements of these websites before using them.

VII. Changes to this Privacy Statement

We reserve the right to make changes to this Privacy Statement. We recommend regularly checking this Privacy Statement to stay aware of any changes. Additionally, we will actively inform you whenever possible.

VIII. Access and Modification of Data

If you have any questions or want to know what personal data we have about you, please contact us. You have the following rights:

  • Right to know why your personal data is needed, what will happen to it, and how long it will be retained.
  • Right of access: You have the right to access your personal data known to us.
  • Right to rectification: You have the right to supplement, correct, delete, or block your personal data at any time.
  • If you have given consent for the processing of your data, you have the right to withdraw that consent and delete your personal data.
  • Right to data portability: You have the right to request all your personal data from the data controller and transfer it in its entirety to another controller.
  • Right to object: You can object to the processing of your data. We comply with this, unless there are justified grounds for processing.

When providing us with your data or making a request related to your data, please ensure that you clearly state your data and who you are, so that we can be certain that we are not modifying or deleting data of the wrong person.

IX. Complaint

If the User is not satisfied with the exercise of their rights, they may file a complaint with the supervisory authority, in this case the Spanish Data Protection Agency (www.aepd.es).