This privacy policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), as well as, to the extent that it does not conflict with the aforementioned regulations, Organic Law 15/1999 on the Protection of Personal Data (LOPD) and its implementing regulations, and/or any laws that may replace or update them in the future.
Our organization is committed to the privacy of your personal data. The personal data you provide is necessary for us to provide our services and is processed in a lawful, fair, and transparent manner, ensuring adequate security of such data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage through the implementation of technical and organizational measures.
Through this document, we aim to provide you, in a transparent and fair manner, with all the necessary information regarding this organization’s processing of your personal data.
Identification of the Data Controller
- Identity-Entity: BIOLOVE POU DE LA MUNTANYA SL – BOHO Suites Denia™.
- C.I.F: B-54954342
- Postal address: Carrer Pou De La Muntanya 8, 03700, Denia (Alacant)
- Phone: +34 96 627 82 30,
- E-mail: info@bohosuitesdenia.com
Recipients of personal data
- The personal data provided will not be transferred unless specified in the specific processing.
- Optionally, for the contracting of cloud computing services and/or services for sending e-mails, as well as related services, personal data may be:
- Assigned to IT service companies located within the European Economic Area (EEA) or,
- Transferred to IT service companies located outside the EEA that are covered by the Privacy Shield and therefore have adequate protection measures in place to ensure the security of personal data. You can obtain more information by visiting this link: https://www.privacyshield.gov/welcome
3. Legal basis for the processing of your personal data
For each specific processing of personal data collected about you, we will inform you of the legal basis that legitimizes the processing of your personal data.
4. Rights
Right of Access
This is the right to obtain from the controller confirmation as to whether or not personal data relating to the data subject are being processed and, if so, the right of access to the personal data and to the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data were or will be disclosed, the storage period or the criteria used to determine this period, the existence of the right to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the existence, where applicable, of automated decisions, including profiling, when data are transferred to third countries the right to be informed of the appropriate safeguards applied.
Right of Rectification
It is the right to request the rectification of your personal data if it is inaccurate, including the right to complete incomplete data. Please note that by providing us with your personal information by any means, you warrant that it is true and accurate and you agree to notify us of any changes or modifications to it. Therefore any damage caused by reason of the communication of erroneous, inaccurate or incomplete information in the web forms, will be the sole responsibility of the interested party.
Right of Suppression
It is the right to request the deletion of your personal data when, among other assumptions, they are no longer necessary for the purpose for which they were collected, or they are being otherwise processed or you withdraw your consent. It should be noted that the deletion will not proceed when the processing of personal data is necessary, among other cases, for the fulfillment of legal obligations or for the formulation, exercise or defense of claims.
Right to Limitation
It is the right to request the limitation of the processing of your personal data, which means that in certain cases you can ask us to temporarily suspend the processing of your personal data or to keep it longer than necessary when you may need it.
Right to withdraw consent
It is the right to withdraw the consent you have provided by checking “I have read and accept the privacy policy” at any time and as specified in the corresponding section “Exercise of rights” or in the specific treatment of commercial communications or Newsletter. It should be noted that this right will not be effective if, among other cases, the processing of personal data is necessary for compliance with a legal obligation, the execution and maintenance of a contractual relationship, or for the formulation, exercise or defense of claims. Likewise, the withdrawal of consent will not have retroactive effects, i.e., it will not affect the lawfulness of the processing based on the consent prior to its withdrawal.
Right to lodge a complaint with a supervisory authority
If you believe that we are processing your personal data in an incorrect manner, you may contact us. You also have the right to file a complaint with the competent data protection authority.
Right to Portability
This is the right to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format and to transmit it to another data controller, provided that: the processing is based on your consent and is carried out by automated or computerized means.
Right of Opposition
It is the right to object to the processing of your personal data on the basis of our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the formulation, exercise or defense of claims.
Exercise of rights
If you believe we are processing your personal data improperly, you may contact us, or you also have the right to file a complaint with the Spanish Data Protection Agency (AEPD):
https://www.agpd.es/portalwebAGPD/index-ides-idphp.php
5. Processing of personal data
Generic provisions
The personal data requested for each specific processing activity is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed, thereby complying with the principle of data minimization.
The personal data requested in each specific data processing operation is strictly necessary; refusal to provide it would mean that the requested service cannot be provided.
The disclosure of personal data provided for in each specific processing operation is, in some cases, necessary for the performance and maintenance of a contract and, in other cases, for compliance with a legal obligation applicable to the data controller.
Contact Form
Personal data will be processed to handle requests for information, suggestions, and complaints from users or customers.
The legal basis for the processing of personal data is the express consent provided by checking the box “I have read and accept the privacy policy.”
Personal data will be retained for a period of two years from the time processing ceases, without prejudice to your rights as a data subject.
Commercial Communications or Newsletter Form
Personal data will be processed to manage the subscription to our Newsletter, including sending personalized information or not about our products or services through various means such as telephone, email, SMS, applications for mobile devices, as well as by any analogous procedure. Please note that this type of data processing may involve analyzing your user profile to determine your preferences so that we can provide you with information that is better tailored to your interests.
You may opt out of this type of data processing, depending on the medium used, as follows:
- E-mail: Through the link to that effect that you will find in each of the electronic communications or through a similar procedure specified in the commercial communication.
- WhatsApp (other apps): Requesting unsubscription.
- SMS: Requesting unsubscription.
The legal basis for the processing of personal data is the express consent provided: by checking the box “I have read and accept the privacy policy” on the website, via a physical document, or via email, depending on the specific case.
Please note that if WhatsApp is used as the means of communication, personal data will be transferred to WhatsApp Ireland Limited, which is located within the EEA.
Personal data will be retained until you withdraw your consent in the manner indicated in this section.