PRIVACYPOLICY

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, El Principal de Córcega (hereinafter also referred to as the Website) undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected.

Laws incorporated into this Privacy Policy

This privacy policy is adapted to current Spanish and European regulations on the protection of personal data on the Internet. Specifically, it complies with the following regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  • Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007, of December 21, approving the Regulation implementing Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
  • Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The data controller of the personal data collected on El Principal de Córcega is: El Principal de Córcega S.L., with Tax ID (NIF): B75354548 (hereinafter, the Data Controller). Its contact details are as follows:

Personal Data Record

In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by El Principal de Córcega through forms on its pages will be incorporated into and processed in our files in order to facilitate, streamline and fulfill the commitments established between El Principal de Córcega and the User, or to maintain the relationship established through the forms the User completes, or to respond to a request or inquiry.

Likewise, in accordance with the GDPR and LOPD-GDD, unless the exception in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.

Principles applicable to the processing of personal data

The processing of the User’s personal data will be subject to the following principles established in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:

  • Lawfulness, fairness, and transparency: User consent will be required at all times after fully transparent information about the purposes of data collection.
  • Purpose limitation: Personal data will be collected for specified, explicit, and legitimate purposes.
  • Data minimization: Only strictly necessary data will be collected.
  • Accuracy: Data must be accurate and kept up to date.
  • Storage limitation: Data will be kept only for as long as necessary for processing purposes.
  • Integrity and confidentiality: Data will be processed in a way that ensures appropriate security.
  • Accountability: The Data Controller is responsible for ensuring compliance with these principles.

Categories of personal data

The categories of data processed are limited to identifying data only. No special categories of personal data under Article 9 of the GDPR are processed.

Legal basis for processing personal data

The legal basis for processing personal data is consent. El Principal de Córcega undertakes to obtain the User’s explicit and verifiable consent for one or more specific purposes.

The User has the right to withdraw consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, withdrawal will not affect the use of the Website.

When the User provides data via forms, they will be informed if any fields are mandatory because they are necessary for the proper execution of the requested operation.

Purpose of processing personal data

Personal data is collected and managed to:

  • Facilitate, streamline, and fulfill commitments between the Website and the User.
  • Maintain relationships established through forms.
  • Respond to requests or inquiries.

Data may also be used for commercial personalization, operational and statistical purposes, and activities related to the business purpose of El Principal de Córcega, including data extraction, storage, and marketing studies to adapt content and improve quality and user experience.

At the time of data collection, Users will be informed of the specific purposes of processing.

Retention periods

Personal data will only be retained for the minimum time necessary for processing purposes and, in any case, until the User requests deletion.

Users will be informed of the retention period or the criteria used to determine it.

Recipients of personal data

The User’s personal data will be shared with the following recipients or categories:

[Not specified in the original text]

If data is transferred to a third country or international organization, the User will be informed, including whether there is an adequacy decision by the European Commission.

Personal data of minors

In accordance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018, only persons over 14 years of age may lawfully consent to the processing of their personal data.

For minors under 14, parental or guardian consent is required.

Data security and confidentiality

El Principal de Córcega adopts appropriate technical and organizational measures to ensure data security and prevent unauthorized access, loss, or alteration.

The Website has an SSL certificate, ensuring secure and encrypted data transmission.

However, since absolute internet security cannot be guaranteed, the Data Controller will notify Users without undue delay in case of a data breach that poses a high risk.

Personal data will be treated as confidential, and employees and collaborators will be bound by confidentiality obligations.

User rights

Users may exercise the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure (right to be forgotten)
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right not to be subject to automated decision-making

To exercise these rights, Users must submit a written request including identification, details of the request, address, date, and signature.

Requests can be sent to:

Third-party links

The Website may contain links to third-party websites, which operate under their own privacy policies and are responsible for their own data processing.

Complaints to the supervisory authority

Users may file a complaint with a supervisory authority. In Spain, this is the Spanish Data Protection Agency: https://www.aepd.es/

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must have read and accepted the conditions of this Privacy Policy for the processing of their personal data.

Use of the Website implies acceptance of this Privacy Policy.

El Principal de Córcega reserves the right to modify this Privacy Policy at its discretion or due to legislative or regulatory changes. Updates will not be explicitly notified, so Users are advised to review it periodically.

This Privacy Policy has been updated in accordance with the GDPR and Organic Law 3/2018.

This Privacy Policy document was generated using a free online privacy policy generator on 25/08/2024.

If you want, I can also adapt it to a more “legal-native English” style (more typical wording used in UK/US websites), because this is a faithful translation but not fully localized.

Privacy Preference Center

Privacy Preferences