Privacy Policy - Alquiler vacacional +Costa Brava

In compliance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation).

I.- ¿Who is responsible for handling your data?

The entity in charge of your data is Iprusel, S.L. (comercial name Plus Costa Brava, hereinafter, for the purposes of this document, “+CB”) with registered office at avenida Maresme, 29, 17258, in L’Estartit, Spain. If you have any queries regarding data protection, please send an e-mail to: pspringuelle@pluscostabrava.com or fspringuelle@pluscostabrava.com.

II.- ¿Why are we handling your data?

+CB hereby informs the Interested Party that personal data will be handled by +CB, for the following purposes:

1. Managing user requests. +CB will process the data required to answer user requests for information and/or service. We will therefore process:

· Identifying information: name, surnames, identity document.

· Contact information: postal address, email, landline number, mobile phone number.

· Transactional data: information about services rendered, contracts, billing and collection, payment methods, bank details and any data related to your transactions with +CB.

· Electronic data: IP address, type and language of the browser, domain through which you access the Website, navigation data, activity on the Website.

Legitimation: data will only be processed if +CB has received user consent.

2. Analyzing and studying how users interact with the website. +CB may process website users’ personal data through their IP or MAC address in order to analyze their interactions, movements, scrolls, visits, and the products consulted on the website.

Legitimation: such processing is required to satisfy the legitimate interests of +CB. Customers can oppose the processing of their data for such purposes by following the instructions set out in section V.

3. Website monitoring. +CB will monitor and control website use to prevent and detect any fraudulent use, unauthorized access, alterations or loss of personal or other data.

Legitimation: such data processing is necessary to comply with the obligations under the Law on Information Society Services and Electronic Commerce, as well as to satisfy +CB’s legitimate interest in guaranteeing internet and data security.

4. Reporting system and system management incidents. +CB will process the user information needed to manage any incident reported or detected by its own means. Such data processing will only be performed to solve the incident and resolve any problems deriving from the same.

5. Attending to user rights requests. +CB will process your personal information to accommodate requests made using the user rights and/or customer forms provided on the +CB website. To be able to attend to such request, this information may include the hotels where the user stayed or other information +CB may have processed in line with its privacy policy.

Legitimation: such processing is necessary to fulfill user rights obligations under data protection regulations.

6. Remittance of electronic communications (informative and/or commercial). + CB informs you that we can use your email address or other personal information linked with the purpose of sending you informative and/or commercial electronic communications.
Legitimation: data will only be processed if +CB has received user consent.

III.- ¿How long will we keep your data for?

Any personal data to which +CB has access will be handled for the necessary amount of time to achieve the purpose for which they were collected. Following this time, +CB shall store your personal data, in a duly blocked manner, even when they are no longer pertinent for the purpose for which they were collected, in order to make them available to any competent Public Administration services, Judges and Courts, or the Prosecution Service during the statutory time limit for personal actions that may have arisen from the relationship held with the guest and/or legally established storage periods.

IV.- ¿Who will we share your data with?

+CB may communicate data to:

· Third parties who worked with us and may have received user information at the user’s request.

· Competent Public Bodies, Judges and Courts.

· Beside the aforementioned data sharing, +CB works with third parties who provide services and have access to guests’ personal data, which they process in representation and on behalf of +CB, as a result of providing said services. Specifically, +CB hires third parties to supply, for example and not limited to, services in the following sectors: legal advice, multidisciplinary professional services, tech services, IT services.

These suppliers include Digital Arbitrage Inc. (Cloudbeds), Dropbox Inc. (covered by Privacy Shield – https://www.privacyshield.gov/participant?id=a2zt0000000GnCLAA0&status=Active), SiteGround Spain, S.L. y 1&1 Internet España S.L.U. You may consult the privacy policies of these companies through those links:

https://www.cloudbeds.com/privacy-policy/
https://www.dropbox.com/privacy
https://www.siteground.es/privacidad.htm?scid=3&lang=es
https://www.1and1.es/terms-gtc/terms-privacy/?__lf=Static

Social Media and user generated content: some of our websites allow users to send their own content or access our social media profiles. Remember that any content sent to one of our social media platforms can be seen by the public, so you should be careful when providing certain personal information. + CB is not responsible for any action taken by other people if personal data is published on one of our social media platforms and we recommend that you do not share this information.

V.- ¿What rights do you have when providing us with your data?

The Interested Party may, if they so wish, exercise their right to access, amend and delete their data, as well as request that the handling of their data be limited, oppose it, request the competence to transfer their data, as well as request to not be the object of automated individual decisions, by emailing your request to pspringuelle@pluscostabrava.com or fspringuelle@pluscostabrava.com.

Data subjects can withdraw their consent for the data processing carried out on the basis of their consent, by following the steps described in the previous paragraph.

VI.- I have detected an abnormality regarding my personal data or a third-party’s data, how can I give notice of this?

The Interested Party, who, by any means, has become aware of a possible breach or security-related incident which has allowed the non-authorized access, tampering, amendment, or non-authorized deletion of his/her personal data, or the data which is property of a third party, may forward said incident to the following e-mail address: pspringuelle@pluscostabrava.com or fspringuelle@pluscostabrava.com.

VII.- ¿How have we obtained your data?

The personal data handled by +CB is the personal data collected using online forms.
Where appropriate, and in the event that this is necessary in order to respond to the request or application when exercising a right, +CB may request information from third parties who may have received guest information, in accordance with the corresponding privacy policy (by way of example and not limitative, online booking companies such as Booking.com B.V., Spain Holidays Rentals Online S.L., HomeAway UK Ltd).

VIII.- ¿With which authority can you exercise your right to claim?

The Interested Parties may file a claim with the Agencia Española de Protección de Datos [Spanish Data Protection Agency] regarding any response they have received from +CB in supporting their rights.

In any event, the user is hereby informed that any claim relating to the handling of personal data shall be managed and processed by sending an e-mail to pspringuelle@pluscostabrava.com or fspringuelle@pluscostabrava.com, attaching to this request a copy of your National Identity Document, Tax ID number, or an official document that identifies you.