Privacy policy
Data controller
Name: Benito Boudon Losada
NIF ID: 32818738-S
Address: Avda. Malde Vizoso 25, 15570 Narón (A Coruña)
Phone: 981 384 497
E-mail: info@7santinos.com
Business: hostelry
Info to web users and Consent
In accordance with the provisions of the European Data Protection Regulation (EU) 2016/679 and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, with the acceptance of this privacy policy the user expresses its express, free, informed and unequivocal consent so that the personal data that may be provided through the contact methods and forms provided on the website are incorporated into the files of the person responsible for the website. The data controller informs the interested parties that, as the current applicable regulations establish, the corresponding technical and organizational security measures have been applied to the personal data processing activities.
What personal data is collected on this website?
Through the website we only collect user identification data to be able to contact and manage queries and/or requests for information or related to the provision of services developed by the data collector.
The personal data collected will be processed with the following bases of legitimacy:
- The user’s consent in relation to the contact and management of information requests made through the enabled contact channels.
- Compliance with legal obligations and the execution of a contract or service provision agreement regarding the treatments supported by these bases of legitimacy.
What is the purpose for which we process this data?
The personal data collected by the data controller through the contact means enabled on the website will be processed for specific purposes in each case and in accordance with what is indicated below.
Data obtained through the contact channels enabled on the website: there is a telephone number and a contact email for queries, booking requests, suggestions, complaints or for professional contact with the person responsible. In this case, the telephone or email will be used in order to respond to the requests received and send the information requested by the user through the contact means indicated on the website, and only the strictly necessary data will be requested and collected. to meet the user’s request.
Data provided for the reception of commercial communications: in this case the data provided by the user will be used to manage the sending of information related to commercial communications that the user has expressly requested in advance, as well as in order to facilitate the revocation of consent. provided by the user, or their opposition to the processing of their data for the indicated purposes.
How long will we keep the personal data collected?
The personal data provided to the person responsible for the treatment will be kept at least and in general as long as they are needed to respond to the requests for information received and as long as the service provision relationship is maintained and/or the data is needed for the development of the activities and the execution of the requested services, and as long as their deletion is not requested or the consent previously granted by the interested parties is not revoked.
What is the legal basis that allows us to process the data collected?
The legal basis of legitimacy that allows us to process personal data collected through the website is based, with regard to requests for information or reservations, on the express and informed consent of the interested party or their representative obtained. and granted in accordance with the conditions indicated in art. 7 of the European Data Protection Regulation, according to which the interested parties will have the right to withdraw that consent at any time. The person responsible informs that the data requested through the web forms, if enabled, will be those strictly necessary to respond to the specific query or request made by the interested party.
Regarding the contracting of services, the basis of legitimacy will be based on the execution of contracts or agreements in which the interested party is a party and on the adoption of pre-contractual measures, and on compliance with legal obligations applicable to the data controller.
What are the rights that those who provide us with their data can exercise?
In accordance with the provisions of the European Data Protection Regulation (EU) 2016/679 and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, interested parties will have the right to obtain confirmation as to whether Benito Boudon Losada is processing personal data that may or may not concern you, as well as exercising the recognized rights over your data.
Those interested will have the right to:
- Request access to personal data that concerns them.
- Request data rectification or deletion.
- Request data cancellation.
- Request data processing limitation.
- Oppose data processing.
- Request data portability.
In the event that the interested party has given consent for a specific purpose, he/she will have the right to withdraw the previously granted consent at any time, and without this affecting the legality of the treatments based on the consent granted prior to its withdrawal.
If the interested parties consider that we have not processed their personal data in accordance with the reference regulations indicated, and if they understand that we have not satisfied their request to exercise their rights, they may, if they wish, file a claim with the Spanish Data Protection Agency as national control authority at the organization’s address at Calle Jorge Juan, 6 – 28001 – Madrid or at the contact information indicated on the institution’s website (www.agpd.es), including the electronic headquarters.
To exercise all the rights indicated above, interested parties may contact the contact addresses indicated above to request the application form provided by the person responsible for this purpose in compliance with their legal obligations, a form that the interested party must accompany when it is presented or sent a copy of your ID or equivalent document proving your identity and that of your representative, if applicable.
The exercise of rights will be free of charge, and the application may be delivered by hand, or sent by postal mail or by e-mail to the indicated contact addresses.
The data controller informs the interested parties that it has established and implemented specific protocols and measures for compliance with the data protection regulations of Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation) and the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.
To which recipients could your data be communicated?
The personal data provided by users will only be processed on a general basis by the person responsible for the activity and by the company’s own staff and authorized freelance collaborators that may be hired.
In any case, transfers of data to third parties will only be carried out in general in cases of legal obligation, such as transfers made to Authorities and Public Administrations, or when this is necessary to enable the development of services contracted from external providers, including banks. and financial entities for the management of collections and payments, mutual societies and insurance companies, and those in charge of treatment, and always in this case within the framework provided for in the contract of treatment manager formalized between the person in charge and the contracted managers and with limited access to information with basic data. The person responsible undertakes in all cases to inform the interested parties about the need to carry out extraordinary transfers of data to third parties to manage the provision of services so that the interested parties can express their consent for the transfer of data as a prerequisite for this is carried out.
Data secrecy and security
The data controller undertakes to use and appropriately process the users’ personal data, respecting their confidentiality, and to use these in accordance with the purpose of said treatment, as well as to comply with their obligation to save the data and adapt all the measures arranged to avoid alteration, loss, unauthorized treatment or access, and in accordance with the provisions of current data protection regulations.
This website includes a security protocol that ensures that your data travels completely and safely, that is, the transmission of data between a server and a user of the website, and in feedback, is completely encrypted or encrypted.
The person responsible cannot guarantee the absolute inaccessibility of the Internet network and therefore the violation of data through fraudulent access to them by third parties.
Regarding the confidentiality of data processing, the data controller will ensure that any person who is authorized to process the data of the interested parties and/or users, including staff, collaborators and suppliers, is under the corresponding obligation of confidentiality. , whether legal or contractual.
When a security incident occurs, once the data controller is aware of it, he or she will notify the interested party without undue delay and will provide the appropriate information related to the security incident and in any case whenever the client reasonably requests it.
Data accuracy
The user is solely responsible for the veracity and correctness of the personal data sent or sent through www.7santinos.com, exonerating the data controller from any responsibility in this regard. Users guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep it duly updated. The user agrees to provide complete and correct information in the contact form.
Changes to the Privacy Policy
The data controller reserves the right to modify this privacy policy to adapt it to new legislation or jurisprudence, as well as to industry practices. In these cases, the changes will be announced on the website in good time before they are put into practice.