This privacy policy explains how ALDEALIX LA ALDEA CELTA, S.L. processes the personal data of the users of this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
1. Data controller
2. What data we collect
Through this website we only collect the data strictly necessary to handle your request:
- Contact form: your name, email address, the type of experience you are interested in and the message you write to us.
- Customer sign-in: if you use the optional customer sign-in, your email address, in order to send you a verification code and identify you in the booking system.
The data submitted through the contact form is forwarded by email to the data controller so that your enquiry can be handled and answered. No more data is requested than is necessary for each purpose.
3. Purposes of processing
- Managing and responding to the information and booking requests you send us through the contact form, by phone, via WhatsApp or by email.
- Managing the provision of the services you contract (camps, stays, activities and events).
- Sending you communications related to our services where you have previously authorised us to do so.
- Complying with applicable legal obligations (tax, accounting and administrative).
4. Legal basis
The legal basis for processing, pursuant to Article 6(1) of the GDPR, is:
- The data subject's consent, given when submitting the contact form or authorising the sending of communications.
- The performance of a contract or the implementation of pre-contractual measures, where the enquiry or booking relates to our services.
- Compliance with legal obligations applicable to the controller.
5. Recipients
No data is disclosed to third parties, except where required by law. Data may be accessed by service providers acting as data processors (for example, web hosting, email or administrative and accounting services), with whom the contracts required by Article 28 of the GDPR have been entered into.
6. Data retention
Data will be kept for as long as necessary to handle your request or maintain the contractual relationship and, thereafter, for the periods required by applicable law to address any potential liabilities.
7. Rights of data subjects
You may exercise the following rights at any time:
- Access to your personal data.
- Rectification of inaccurate data.
- Erasure ("right to be forgotten").
- Objection to processing.
- Restriction of processing.
- Data portability.
- Withdrawal of the consent given, without affecting the lawfulness of prior processing.
To exercise them, write to us at aldealix@outlook.com or to the controller's registered office, indicating the right you wish to exercise and enclosing a copy of a document proving your identity.
If you believe that the processing of your data does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
ALDEALIX LA ALDEA CELTA, S.L. implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, protecting personal data against loss, alteration or unauthorised access.