Right to Information
A los efectos de lo dispuesto en el Reglamento (UE) 2016/679 de 27 de abril de 2016 (GDPR), relativo a la protección de las personas físicas en lo que respecta al tratamiento de datos personales y a la libre circulación de estos datos y a la Ley Orgánica 3/2018 de 5 de diciembre, de protección de datos de carácter personal y garantía de los derechos digitales (LOPDGDD), se informa al usuario de la existencia de un tratamiento automatizado de datos de carácter personal creado por MARIA LUISA GARCIA CASAL y bajo su responsabilidad con los datos personales que nos pudiera facilitar durante la navegación por nuestro Sitio Web ya bien sea en el momento de su registro o cuando remita un mensaje de correo electrónico.ç
Data Controller:
- Company name: MARIA LUISA GARCIA CASAL (“ARRUEIRO”)
- Tax ID (CIF): 78802404B
- Address: LUGAR DE ARRUEIRO S/N SOESTO – 15118 – LAXE
- Telephone: +34 617749636
- Email for communications: casa.arrueiro@gmail.com
Purpose of Data Processing:
Please note that the purpose of processing your data is described in each of the forms available on the website through which you provide your information.
- CONTACT FORM: To manage your enquiry and send you more detailed information.
- RESERVATIONS: To manage your reservation through the website https://booking.avirato.com owned by AVIRATO SL (for more information on the processing of your data, please consult their privacy policy: https://avirato.com/politica-de-privacidad/)
Legal Basis
Processing is based on Article 6(1)(a) of the GDPR, whereby the data subject has given consent to the processing of their personal data for one or more specific purposes.
Data Retention and Processing:
Your data will be stored for the time necessary to process your request, unless you indicate otherwise by exercising your right to erasure, or for the time required to comply with legal obligations and to address any potential liabilities arising from the purpose for which the data was collected. Where necessary, ARRUEIRO will delete or rectify personal data when it is inaccurate, incomplete, or no longer required for its intended purpose, in accordance with applicable data protection legislation.
Unless you inform us otherwise, we will assume that your data has not been modified and that you undertake to notify us of any changes. We will also assume that we have your consent to process your data in order to maintain and develop the relationship between the parties.
The data provided will not be shared with third parties, except where there is a legal obligation to do so.
ARRUEIRO will not create user profiles based on the information provided. No automated decisions will be taken based on profiling.
In accordance with Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), Article 21, we will request your consent before sending you marketing or promotional communications by email or other equivalent electronic means that we believe may be of interest to you.
You have the right to object to and/or withdraw your consent to the processing of your data at any time, without affecting the lawfulness of processing based on consent before its withdrawal. To do so, please notify the data controller using the contact details provided above.
Technical and Organisational Measures
ARRUEIRO implements technical, organisational and physical security measures that are reasonably reliable and effective in order to safeguard the integrity, security and confidentiality of your personal data. However, ARRUEIRO shall not be held responsible for damages arising from alterations that third parties may cause to the user’s computer systems, electronic documents, or files.
All staff members with access to personal data have been properly trained and are aware of their obligations regarding the processing of personal data.
Where contracts are established with service providers, clauses are included requiring them to maintain confidentiality regarding personal data accessed during the provision of services, as well as to implement the necessary technical and organisational security measures to ensure the ongoing confidentiality, integrity, availability and resilience of personal data processing systems.
All these security measures are reviewed periodically to ensure their adequacy and effectiveness.
Nevertheless, absolute security cannot be guaranteed, and no security system is completely impenetrable. Should any data under our control be compromised due to a security breach, we will take appropriate measures to investigate the incident, notify the relevant Supervisory Authority, and, where necessary, inform affected users so they can take appropriate action.
User Rights:
El usuario podrá ejercer los derechos de acceso, rectificación, supresión, oposición, limitación del tratamiento, portabilidad de datos y a no ser objeto de decisiones individualizadas automatizadas, en relación con los datos objeto del tratamiento, ante el responsable del tratamiento en la dirección anteriormente mencionada, o por correo electrónico a casa.arrueiro@gmail.com, adjuntando copia de su DNI o documento acreditativo equivalente o cualquier forma de identificación inequívoca válida. En caso de que no haya obtenido satisfacción en el ejercicio de sus derechos, podrá presentar una reclamación ante la Autoridad de Control en materia Protección de Datos competente, siendo ésta la Agencia Española de Protección de Datos, y cuyos datos de contacto están accesibles en https://sedeagpd.gob.es/sede-electronica-web/vistas/formNuevaReclamacion/reclamacion.jsf.