Privacy Policy and LOPD

1. PRIVACY POLICY

Your privacy is important to us; therefore, in this Privacy Policy we explain what personal data we collect through our interactions with you and how we use it. We kindly ask you to read this policy carefully before providing your personal data and ensure that you have fully understood it.

As the party responsible for this website, we seek to offer the highest legal guarantees regarding the privacy of our users and to explain, with the greatest possible clarity and transparency, everything related to the processing of personal data within this site.

Red de Villas Turísticas de Andalucía, S.A. has adapted this website to the requirements of current regulations on the protection of personal data, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, GDPR). In addition, with regard to information society services, it complies with the provisions of Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (hereinafter, LSSICE).

Data Controller

The controller of your data is the company Red de Villas Turísticas de Andalucía, S.A. (hereinafter, Red de Villas), with registered office at C/ Compañía 40, 29008 Málaga, Spain, telephone +34 662 974 060.

Red de Villas is registered in the Mercantile Registry of Málaga, Volume 4,712, Page 176, Sheet MA-103.680, Entry 1, with Tax ID (C.I.F.) A-93025534.

For data protection purposes, Red de Villas can be contacted at the following email address: protecciondedatos.villas@andalucia.org.

Red de Villas shall not be held responsible for damages arising from access to, use, or misuse of the contents of the website.

Information We Process

When you connect with this website, you provide personal information for which Red de Villas is responsible. This information may include personal data such as your IP address, name, postal address, email address, telephone number, and other details. By providing this information, you consent to Red de Villas collecting, using, managing, and storing it as described in this Privacy Policy.

Principles of Processing

In accordance with the GDPR, Red de Villas applies the following principles when processing your personal data:

• Lawfulness, fairness and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes, and we will inform you in advance with complete transparency.
• Data minimisation: We will only request the data that are strictly necessary in relation to the purposes for which they are required.
• Storage limitation: Data will be retained no longer than necessary for the purposes of the processing. We will inform you of the corresponding retention period depending on the purpose.
• Integrity and confidentiality: Your data will be processed in a way that ensures appropriate security and confidentiality. We take all necessary precautions to prevent unauthorised access or misuse of your data by third parties.

Purpose of Processing

At Red de Villas Turísticas de Andalucía we collect and process your personal data to manage our services effectively and provide them with the highest possible quality.

By using the services of the website http://www.villasdeandalucia.com/, you authorise us to process your data for the purposes for which they were collected. Specifically, we use the data you provide, in accordance with the permissions granted, for the following purposes:

• Management and control of contact data for commercial prospecting and advertising of the company’s products and services.
• Management of contact data for participation in events and seminars.
• Management of contact data for participation in awards, competitions, and games.
• Management of data for sending newsletters.
• Management of hotel reservations.

Data Retention Period

Personal data provided will be kept based on the following criteria:

• Where there is a legal obligation for Red de Villas to retain them.
• As long as they are necessary to fulfil the purpose for which they were collected.
• Until the request for deletion or withdrawal of consent for their processing, where applicable.
• Data will be stored for the time necessary to fulfil the purposes indicated and subsequently for the legally applicable limitation periods (e.g., contractual, tax, and accounting liability).

Legal Basis for Processing

The legal grounds for processing personal data are:

• The performance of a contract for the management of reservations and associated services (Art. 6.1.b GDPR).
• Compliance with applicable legal obligations (accounting, tax, consumer protection, information security, archiving, etc.) (Art. 6.1.c GDPR).
• The performance of a task carried out in the public interest or in the exercise of official authority vested in the entity (portal management, citizen services, handling of requests, and tourist information) (Art. 6.1.e GDPR).
• Your consent for sending commercial/informational communications by electronic means —where applicable— and for the use of non-essential cookies (Art. 6.1.a GDPR).

Data Recipients

Red de Villas may communicate your data exclusively for the purposes indicated in the section “Purpose of Processing.” Under no circumstances will your data be transferred internationally. Service providers that need to act as processors for the provision of services (website hosting and maintenance, IT support, payment gateways, email marketing, analytics, etc.) may have access to your data, and the corresponding data processing agreements have been signed with them as required for service execution.

Data Subject Rights

Any individual has the right to know whether Red de Villas processes personal data concerning them.

As a data subject, you have the right to access your personal data, to request the rectification of inaccurate data, or, where appropriate, to request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were originally collected. In certain circumstances, you may request the restriction of processing, in which case we will only retain the data for the exercise or defence of legal claims.

You may also object to the processing of your data, in which case Red de Villas will cease to process them, except for legitimate compelling reasons, or for the exercise or defence of possible legal claims.

In exercising your right to data portability, you are entitled to have your personal data transmitted directly from one controller to another, where technically feasible.

Furthermore, you will not be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or significantly affects you in a similar way, unless there are circumstances that justify it.

You have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used, and machine-readable format, and to transmit them to another controller.

To exercise these rights, you may contact protecciondedatos.villas@andalucia.org.

If you do not receive a response from us within one month, you have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case, the Spanish Data Protection Agency, if you consider that the processing of your personal data infringes current legislation.

Accuracy and Truthfulness of the Data

The user guarantees that the personal data provided through the different available means are truthful and undertakes to notify any modification of the same.

As a user, you are solely responsible for the accuracy and correctness of the data you submit to any website owned by Red de Villas, exonerating us from any responsibility, damage, or harm in this respect.

Confidentiality and Security

Red de Villas undertakes to use and process users’ personal data while respecting their confidentiality and in accordance with the purpose for which they were collected, as well as to fulfil its obligation to store them and to adopt all measures to prevent alteration, loss, unauthorised processing, or access, in accordance with the provisions of the current data protection regulations.

With regard to the confidentiality of the processing, Red de Villas shall ensure that any person authorised to process the data of the data subject (including staff, collaborators, and service providers) is under the appropriate obligation of confidentiality (whether contractual or legal).

Should a security incident occur, the data subject must be notified without undue delay and all relevant information relating to the incident must be provided as soon as it becomes known or when reasonably requested by the data subject.

Accordingly, appropriate technical and organisational measures are applied to ensure the confidentiality, integrity, and availability of the data, in accordance with the provisions of the GDPR and Spanish data protection legislation.