Thank you for taking the time to read the privacy policy of this website.
This means that your data matters to you, and you want to know where it goes and who collects it.
In accordance with the provisions of the General Data Protection Regulation (EU), by accepting this Privacy Policy you give your informed, express, free and unequivocal consent for the personal data you provide through this website to be included in a file of ‘WEB USERS AND SUBSCRIBERS’.
This Privacy Policy is only valid for personal data collected on the Website, and does not apply to information collected by third parties on other websites, even if they are linked to this website.
In doing so, I am committed to maintaining and guaranteeing secure business relations by protecting personal data and guaranteeing the right to privacy of each of our website’s users.
1. What are personal data?
A small approximation is important, therefore, you should know that a personal data would be any information relating to a person that you provide us when you visit our website, in our case name and email, and if you buy a product requiring an invoice, we will ask for full address, name, surname and ID or VAT number.
In addition, when you visit our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.
1.1 Principles for data processing
In processing your personal data, I will apply the following principles in accordance with the GDPR:
Principle of legality, fairness and transparency:
I will always require your consent to the processing of your personal data for one or more specific purposes, which I will inform you about in advance in full transparency.
Principle of data minimisation:
I will only request data that are strictly necessary in relation to the purposes for which I require them.
Principle of limitation of the retention period:
As you will see below, the data will be kept for no longer than is necessary for the purposes of the processing, depending on the purpose, I will inform you of the relevant retention period, in the case of subscriptions, I will periodically review my lists and delete those records that have been inactive for a considerable time.
Principle of integrity and confidentiality:
Your data will be processed in a way that ensures adequate security of personal data and guarantees confidentiality.
You should be aware that I take all measures to prevent unauthorised access to or misuse of my users’ data by third parties.
2. Purpose, legitimacy, category of data collected, consent to processing, and minors
2.1 Purpose
As stated in the regulations, the USER is informed that, through the contact forms or subscriptions, data is collected, which is stored in a file, with the sole purpose of sending electronic communications, such as:
- Newsletters
- Manage the USER’s reservation for administrative, accounting and tax purposes.
- Other communications that I think may be of interest to my users
The fields marked as mandatory (*), are essential to perform the expressed purpose.
Likewise, it will be able to comply with the data, to the requirements requested by the USERS.
In summary, the PURPOSE is as follows:
- Provision of content on the blog.
- Attract potential clients and manage the relationship between RENTER and HOST.
- Recommendation of services.
- Manage the list of subscribers and users subscribed to the website.
Only the owner will have access to your data, and under no circumstances, this data will be given, shared, transferred, or sold to any third party without your consent.
The acceptance of the privacy policy, through the established double opt-in procedure, shall be understood for all purposes as the provision of EXPRESS AND INEQUIVENESS CONSENT of the USER to the processing of personal data under the terms set forth herein, as well as to the international transfer of data that occurs, exclusively due to the physical location of the facilities of the service providers and data processors.
In no case will be used for any purpose other than the purpose for which the data has been collected, nor will I transfer this data to a third party without your consent.
2.2 Minors
If you are over thirteen years of age, you may register on this website without the prior consent of your parents or guardians.
What happens if you are under 14 years of age?
In this case, the consent of your parents or guardians will be a mandatory condition for us to process your personal data.
WARNING:
If you are under fourteen years of age and have not obtained parental consent, you may not register on the site and we will deny your request if we become aware of it.
2.3 Legal standing
Thanks to the consent, we can treat your data as a mandatory requirement to subscribe to the website.
As you know, you can withdraw your consent at any time you wish as well as exercise any of your other rights (send me an email to the above address).
2.4 Data category
The data collected are never specially protected, but are categorized as identification data.
2.5 Data retention time
I will keep your data for the legally established period of time or until you request its deletion.
2.6 Accuracy and veracity of the data
Obviously you are solely responsible for the truthfulness and accuracy of the data you send me exempting me from any liability in this regard.
As a user, you must guarantee the accuracy and authenticity of the personal data provided by providing complete and correct information in the various data collection forms.
3. Compliance with applicable regulations
The responsible to date complies with the guidelines of the Organic Law 15/1999 of December 13 for the Protection of Personal Data, the Royal Decree 1720/2007 of December 21 which approves the Regulation of development of the Organic Law and other regulations in force and applicable at all times, ensuring the correct use and processing of the user’s personal data.
As of May 2018, we will be governed by the regulations that will come into application, being the General Data Protection Regulation (GDPR) of the European Union.
Likewise, the responsible informs that it complies with Law 34/2002 of July 11, 2002, of Services of the Information Society and Electronic Commerce and will request the consent of the USER for the processing of their email for commercial purposes at all times.
In compliance with the provisions of the regulations, we inform you that the data provided, as well as those data derived from your navigation, may be stored in the files of the responsible and treated for the purpose of responding to your request and the maintenance of the relationship established in the forms you sign.
Additionally, the USER consents to the processing of his/her data for the purpose of informing him/her, by any means, including e-mail, of the products and services of the responsible party.
If the USER does not authorize the processing of his/her data for the aforementioned purposes, he/she may exercise his/her right to object to the processing of his/her data under the terms and conditions set forth in the “Exercise of Rights” section below.
4. Security measures
The responsible informs you that it has implemented the necessary technical and organizational security measures to ensure the security of your personal data and avoid its alteration, loss and treatment and/or unauthorized access, given the state of technology, the nature of the data stored and the risks to which they are exposed, whether from human action or from the physical or natural environment.
All this in accordance with the provisions of the RGPD.
Likewise, the person in charge has established additional measures in order to reinforce the confidentiality and integrity of the information in his organization.
Continuously monitoring, controlling and evaluating processes to ensure respect for data privacy.
Likewise, as you can see, the website has an SSL certificate, which guarantees the security of your data.
5. Exercise of rights
Those individuals who have provided their data through this website, may contact the owner of the same in order to be able to exercise their rights of access to their data, rectification or deletion, limitation and opposition regarding the data included in their files, free of charge.
The quickest and easiest method would be to log into your user account directly and modify your data or delete your user account.
Any information that we need to store, by virtue of a legal or contractual obligation, will be blocked and only used for such purposes rather than being deleted.
The interested party may exercise his or her rights by following the steps described below on this page.
6. Links or external links
As a service to our visitors, our Web site may include hyperlinks to other sites that are not operated or controlled by the Web site.
Therefore, this website does not guarantee, nor is it responsible for the legality, reliability, usefulness, veracity and timeliness of the contents of such websites or their privacy practices.
Please be aware that before you provide your personal information to these third-party websites, please be aware that their privacy practices may differ from ours.
The sole purpose of the links is to provide the User the possibility to access these links and learn about our work, although vcgs.net does not offer or market by itself or through third parties the information, content and services available on the linked sites, nor does it approve, supervise or control in any way the content and services and any material of any nature existing in them.
this website is not responsible in any case for the results that may be derived to the User by accessing such links.
7. Modification of the privacy policy
The responsible reserves the right to modify its Privacy Policy, according to its own criteria, motivated by a legislative, jurisprudential or doctrinal change of the Spanish Data Protection Agency.
Any modification of the Privacy Policy will be published at least ten days prior to its effective application.
The use of this website or any service of the responsible party related to that site after such changes, will imply the acceptance of such changes.
8. File manager and data processors
The person responsible for the data file is the data controller.
As processors external to the aforementioned controller
The person in charge has contracted the Hosting services to:
- Name: IONOS Cloud S.L.U.
- Address in Spain, Avenida de la Vega, 1, Edificio Veganova 3, Planta 5, Puerta C, Alcobendas, 28108, Madrid.
- Registered in the Mercantile Registry of Madrid, Volume: 24.232, Book 0, Folio 73, Section 8, Page M-435500, 1st Inscription.
- VAT NUMBER B-85049435.
- Own privacy policy: https://www.ionos.es/terms-gtc/politica-de-privacidad/
9. Services offered by third parties on this website
To provide services strictly necessary for the development of my activity, this website uses the following providers under their corresponding privacy conditions.
- Hosting: IONOS Cloud S.L.U.
- Web platform: WordPress.org.
- Messaging and newsletter services: Mailpoet.
- Means of payment: Transfer, Paypal and card payment (Stripe).
- Privacy of tracking sources used on this site: Google (Analytics).
This site also studies the preferences of its users, their demographic characteristics, their traffic patterns, and other information as a whole to better understand who our audience is and what they need.
Tracking our users’ preferences also helps us to show you the most relevant advertisements.
The user and, in general, any natural or legal person, may establish a hyperlink or technical link device (for example, links or buttons) from its website to this website (the “Hyperlink”).
The establishment of the Hyperlink does not imply in any case the existence of a relationship between this website and the owner of the site or web page in which the Hyperlink is established, nor the acceptance or approval by this website of its contents or services.
In any case, this website reserves the right to prohibit or disable at any time any Hyperlink to the Website.
10. Do you not wish to receive information from us or do you wish to revoke your consent?
In accordance with the provisions of Law 34/20023, of June 11, 2002 on Information Society Services and Electronic Commerce, you may object to the use of your information for advertising purposes, market research or development of satisfaction surveys at any time, as well as revoke your consent at any time (without retroactive effect).
The interested party may exercise their rights by writing to the responsible party with the reference “Data Protection”, specifying their data, proving their identity and the reasons for their request to this email address contacto@villamarquesdelrio.es.
If you have received advertising by e-mail, you may also object from the e-mail by clicking on the link included in the e-mail and following the instructions provided to you.
Another simpler way would be to access your user account (if you have one) and select the corresponding options.
Although I will try to respond to your request as soon as possible, please note that our systems may require a period of time for your objection or revocation to become effective, with the understanding that during this period of time you may continue to receive messages.
In relation to the management of your data associated with the social profiles of the responsible, the exercise of the right of access will depend on the functionality of the social network and the possibilities of access to the information of the profiles of the users.
With regard to the rights of access and rectification, we recommend that you can only be satisfied in relation to that information that is under the control of the responsible.
You may also stop interacting, following or receiving information from the social profiles of the person responsible, delete content that no longer interests you or restrict who you share your connections with, through the mechanisms stipulated in the different social networks.
The user will be able to access the privacy policies of each Social Network, as well as to configure his profile to guarantee his privacy.
11. Personal data capture systems and their purpose
1) Content subscription forms: within the website there are several forms to activate the subscription managed by MailerLite UAB, a company located in the European Union, which stores your email address, name and subscription acceptance in order to send email marketing campaigns, manage subscriptions and send newsletters or news. You can unsubscribe at any time by writing me an email or simply by clicking at the bottom of each mailing.
2) Comments form: The website includes a form whose purpose is to comment on articles and give your opinion respecting freedom of expression. The user will be able to publish comments on the posts that are published. The personal data entered in the form to insert these comments will be used exclusively to moderate and publish them, also collecting this data will be stored on the servers of the contracted hosting.
3) Contact form: There is a contact form whose purpose is to answer queries, suggestions or professional contact. In this case the email address will be used to respond to them and send the information that the user requires through the web, this data will be stored on the servers of the contracted hosting. The data provided will not be used to send offers or marketing actions unless you give your express consent unequivocally.
4) Rental reservation: The Web allows users to make a rental reservation for the Villa Marqués del Río property by filling out a form. In this form the required data: [RELLENAR]. These data allow a correct administration, accounting and taxation, as well as a relationship between RENTER and HOST.
5) Cookies: When the user registers or browses this website, cookies are stored.
The user can consult the cookie policy at any time for more information on the use of cookies and how to disable them.
6) Sale of infoproducts: Through the website, infoproducts can be purchased, in this case, buyer’s data (Name, last name, address and e-mail) are required through the PayPal platform.
7) Users may unsubscribe at any time from the services provided by this website from the same Newsletter through a cancellation link located at the bottom of each mailing.
8) Tracking systems used on this site: Google (Analytics), this website also studies the preferences of its users, their demographic characteristics, their traffic patterns, and other information as a whole to better understand who your audience is and what they need.
Tracking our users’ preferences also helps us to show you the most relevant advertisements.
9) To ensure the security of this website, I use several security plugins. One of them is iThemes Security (https://es.wordpress.org/plugins/better-wp-security/), which, saves some data such as IP address of visitors, ID of logged in users and username of login attempts are conditionally logged to check for malicious activity and protect the site from specific types of attacks.
Examples of conditions that are logged are access attempts, logout requests, suspicious URL requests, site content changes, and password changes. This information is retained for 60 days.
10) This site is part of a network of sites that is protected against distributed brute force attacks. To enable this protection, the IP of visitors trying to access the site is shared with a service provided by ithemes.com. For details about the privacy policy, please see the iThemes privacy policy.
Also, I would like to inform you that for the recruitment of subscribers and customers I use Facebook Ads and Google Adwords so when generating an ad, you can segment the audience by location, demographics, interests, etc. so the data obtained by these platforms, would be subject to this privacy policy from the moment the user leaves their data to join my community newsletter.
In any case, I will not share, sell or rent your personal information with other parties for profit.
I may share certain information with authorized third party service providers necessary to provide certain services to you.
12. Social plugins
On our website we offer you links and services related to different social networks (e.g. Facebook “Like”). If you are a member of a social network and click on the corresponding link, the provider of the social network may link your profile data with the information on your visit to that website.
Therefore, it is advisable to inform yourself about the functions and policies on the processing of personal data of the respective social network, if you access one of our web pages with one of your profiles in social networks or share information through them.
You can access the privacy policies of the different social networks at any time, as well as configure your profile to ensure your privacy.
We encourage you to familiarize yourself with the terms of use of these social networks before using them:
- Facebook: https://facebook.com/legal/terms
- Twitter: https://twitter.com/privacy
- Instagram: https://www.instagram.com/terms/accept/?hl=es.
- Youtube: https://www.youtube.com/static?template=terms&hl=es&gl=ES.
13. Acceptance, consent and revocability
The User declares to have been informed of the conditions on protection of personal data, accepting and consenting to the processing thereof by the responsible in the manner and for the purposes stated in the legal notice.
As you know and as we have communicated to you throughout these privacy policies, you may revoke your data at any time, but always without retroactive effect.