WEBSITE PRIVACY POLICY

I. DATA PROTECTION AND PRIVACY POLICY

By respecting the agreement in the current legislation, ABBI SUITES (from hereon, also Website) undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk regarding the data gathered.

Laws incorporated in this privacy policy

This privacy policy is adapted to the current Spanish and European regulations concerning internet personal data protection. Specifically, with respect to the following rules:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27th April 2016, concerning the protection of physical persons regarding the processing of personal data and the free circulation of this data (RGPD).
  • Constitutional Law 3/2018, of 5th December, about Personal Data Protection and the guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007, of 21st December, by which is approved the Regulation of development of the Constitutional Law 15/1999, of 13th December, about the Protection of Confidential Personal Data (RDLOPD).
  • Law 34/2002, of 11th July, about the Services of the Information Society and Electronic Commerce (LSSI-CE).

 

Identity of the person responsible for the processing of personal data

The person responsible for the processing of personal data gathered in ABBI SUITES is: Santiago Esteve Calabuig, with NIF: 73911673T (from hereon, the Director of processing). His contact details are the following:

Address: Carrer de l’Abadía, 49, 46880, Bocairent, València.
Telephone number: (00 34) 604442318
Email: info@abbisuites.com

Register of Confidential Personal Data

In compliance with that which is established in the RGPD and the LOPD-GDD, we inform you that the personal data gathered by ABBI SUITES, by means of the forms displayed on its pages, will be incorporated and fulfil the commitments established between ABBI SUITES and the User, or the continuation of the relationship that is established in the forms that the User completes, in order to respond to a request or to consult them. Likewise, in accordance with that provided by the RGPD and the LOPD-GDD, unless the exception is applied as provided in article 30.5 of RGPD, a register of processing activities is maintained that specifies, according to their purposes, those processing activities undertaken and the remaining circumstances established in the RGPD.

Principles applicable to the processing of personal data

The processing of the User’s personal data will be subject to the following principles pertaining to article 5 of the RGPD and to article 4 and the following in the Constitutional Law 3/2018, of 5th December, about the Protection of Personal Data and the guarantee of digital rights:

  • Principle of lawfulness, fidelity and transparency: at all times the consent of the User will be required, by way of prior information, completely transparent to the purposes for which the personal data is to be gathered.
  • Principle of the restriction of purpose: the personal data will be gathered with legitimate, explicit, defined purposes.
  • Principle of the reduction of data: personal data will solely be gathered which is strictly necessary for the purposes for which it is to be processed.
  • Principle of accuracy: the personal data must be accurate and always up to date.
  • Principle of the limitation of storage time: personal data will only be maintained so that it allows the identification of the User during the time necessary for processing purposes.
  • Principle of integrity and confidentiality: personal data will be processed in a way whereby their security and confidentiality are guaranteed.
  • Principle of proactive responsibility: the Director of processing will be responsible for ensuring that the abovementioned principles are fulfilled.

Categories of personal data

The categories of personal data used by ABBI SUITES are solely identifying data. In no case whatsoever are they special categories of personal data in the sense of article 9 of the RGPD.

Legal base for the processing of personal data

Consent is the legal base for the processing of personal data. ABBI SUITES undertakes to obtain the express and verifiable consent of the User for the processing of their personal data for one or various specific purposes.

The User will have the right to withdraw their consent at any moment. It will be as easy to withdraw their consent as it is to give it. As a general rule, the withdrawal of consent will not condition the use of the Website.

On the occasions when the User must or can facilitate their data by way of the completion of forms in order to make enquiries, ask for information or for reasons related to the content of the Website, they will be informed in the case that the completion of any of them is obligatory in view of them being essential in order for the correct progress of the operation to be fulfilled.

Purposes for which the processing of personal data is used.

Personal data is gathered and managed by ABBI SUITES for the purpose of being able to facilitate, speed up and fulfil the commitments established between the Website and the User, or the continuation of the relationship established in the forms that the latter completes, or to respond to an enquiry or a consultation.

Likewise, the data can be used with a commercial purpose related to personalisation, operational and statistical, and activities derived from the social aim of ABBI SUITES, as well as for the extraction, storage of data and market research in order to adapt the Content offered to the User, as well as improving the quality, performance and browsing of the Website.

At the moment when the personal data is obtained, the User will be informed about the specific purpose or purposes of the processing for which the personal data is used; which is to say, the use or uses that will be given to the data collected.

Time periods for keeping personal data

Personal data will solely be kept during the minimum amount of time necessary for the purposes of their processing and, in any case, solely during the following time period: 18 months, or until the User requests their elimination.

At the moment when the personal data is obtained, the User will be informed about the time period during which personal data will be kept or, when this is not possible, the criteria used to determine this time period.

Recipients of personal data

The personal data of the User will be shared with the following recipients or categories of recipients:

Google Analytics, with domicile in Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

In the case the Director of processing has the intention of transferring personal data to a third country or international organisation, at the moment when the personal data is obtained, the User will be informed about the third country or international organisation to which it is intended to transfer the data, as well as the existence or absence of an alignment decision by the Commission.

Juvenile personal data

Concerning that established in articles 8 of the RGPD and 7 of the Constitutional Law 3/2018, of 5th December, about Personal Data Protection and the guarantee of digital rights, solely children older than 14 years old are legally allowed to give their consent for the processing of their personal data by ABBI SUITES. In the case of a child under the age of 14 years old, it will be necessary for the parents or the guardians to give their consent for processing, such that this will solely be considered legal in accordance with them giving their authorisation.

Secret and security of personal data

ABBI SUITES undertakes to adopt the necessary technical and organisational measures, according to the level of security appropriate to the risk of the data collected, such that the security of the data of a personal nature is guaranteed and their destruction, loss or accidental alteration or the illegal transmission of personal data, preserved or treated in another way, or the unauthorised communication or access of said data, is avoided.

Nevertheless, inasmuch as ABBI SUITES cannot guarantee the impregnability of internet nor the total absence of hackers or others who fraudulently access the personal data, the Director of processing undertakes to communicate to the User without undue delay when a breach of the security of personal data occurs such that it is probable that it poses a high risk to the rights and liberties of physical persons. According to that established in article 4 of the RGPD, a breach of the security of personal data is understood to mean all breaches of security that occasion the destruction, loss or accidental or illegal alteration of personal data transferred, preserved or processed in another way, or the unauthorised communication or access of said data.

The personal data will be treated as confidential by the Director of processing, who undertakes to inform and guarantee by means of a legal or contractual obligation that said confidentiality will be respected by his employees, associates, and all persons to whom the information is made accessible.

Rights derived from the processing of personal data

In relation to ABBI SUITES, the User has and will, therefore, be able to exert against the Director of processing the following rights recognised in the RGPD and the Constitutional Law 3/2018, of 5thDecember, about Personal Data protection and the guarantee of digital rights:

  • Right to access: It is the right of the User to obtain confirmation about whether ABBI SUITES is processing or not their personal data and, in the affirmative case, obtain information about their data of a specifically personal nature and the processing that ABBI SUITES has performed or performs, as well as, amongst others, the information available about the origin of said data and the recipients of those conducted or anticipated communications.
  • Right to rectification: It is the right of User to modify their personal data that are incorrect or, in view of the purposes of processing, incomplete.
  • Right to elimination («the right to oblivion»): It is the right of the User, whilst the current legislation does not establish the opposite, to obtain the elimination of their personal data when these are no longer necessary for the purposes for which they were gathered and processed; the user has withdrawn their consent to the processing and this has no other legal basis; the User opposes the processing and there does not exist any other legitimate reason to continue; the personal data have been processed illegally; the personal data must be eliminated in fulfilment of a legal obligation; or the personal data have been obtained by way of a direct offer from services of the information society to a juvenile under the age of 14 years old. As well as eliminating the data, the Director of processing, in view of the available technology and the cost of its application, will undertake to adopt reasonable measures to inform those persons responsible who are processing the personal data of the request of the interested party in eliminating any link to those personal data.
  • Right to limit processing: It is the right of the User to limit the processing of their personal data. The User has the right to obtain the limitation of processing when they challenge the accuracy of their personal data; the processing is illegal; the Director of processing no longer needs the personal data, but the User needs the data in order to lodge complaints; and when the User is opposed to the processing.
  • Right to the transferability of the data: In the case that the processing is conducted by automated means, the User has the right to receive from the Director of processing their personal data in a structured format, of common use and mechanical legibility, and to transfer them to another person responsible for processing. Provided that it is technically possible, the Director of processing will transfer the data directly to that other person responsible.
  • Right to objection: It is the right of the User that the processing of their data of a personal nature or the termination of the processing of them is not performed by ABBI SUITES.
  • Right not to be the object of a decision solely based on automated processing, including the elaboration of profiles: It is the right of the User not to be the object of an individual decision solely based on automated processing of their personal data, including the elaboration of profiles, existing except when the current legislation establishes the opposite.

Therefore, the User can exercise their rights by means of written communication directed to the Director of processing with the reference «RGPD-www.abbisuites.com», specifying:

  • Name, surname(s) of User and copy of DNI identity card. In the cases of the demand being admitted, the identification by the same means of the person who represents the User, as well as a supporting document of the demand will also be necessary. The photocopy of the DNI identity card can be substituted by any other valid means that legally validates identity.
  • The demand stating the specific reasons for the demand or access to information sought after.
  • Home address for the purpose of notifications.
  • Date and signature of claimant.
  • All documentation supporting the demand put forward.

This demand and all other attached documentation can be sent to the following address and/or email:

Postal address: Carrer de l’Abadía, 49, 46880, Bocairent, València.

Email: info@abbisuites.com

Links to third-party websites

The Website can include hyperlinks or links that allow access to websites of third-parties different from ABBI SUITES, and that therefore are not operated by ABBI SUITES. The title holders of said websites will have their own data protection policies, being themselves, in each case, responsible for their own archives/files and their own privacy practices.

Demands before the supervisory authority

In the case that the User considers the existence of a problem or infringement of the current rules in the way in which their personal data is being processed, they will have the right to an effective legal remedy and to present a demand before the supervisory authority, notably, in the State where they have their habitual residence, place of work or place of the supposed infringement. In the case of Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/).

II. ACCEPTANCE AND CHANGES IN THE PRIVACY POLICY

It is necessary that the User has read and agrees with the conditions about the protection of data of a personal nature contained in this Privacy Policy, as well as accepting the processing of their personal data so that the Director of processing can proceed as it stands, during the time periods and for the purposes indicated. The use of the Website implies the acceptance of the Privacy Policy hereof.

ABBI SUITES reserves the right to modify its Privacy Policy, according to its own criteria, or motivated by a change in the legislation, jurisprudence or doctrine of the Spanish Data Protection Agency. The changes or updates in this Privacy Policy will not be notified explicitly to the User. The User is recommended to consult this page periodically in order to keep up to date with the latest changes or updates.

This Privacy Policy was updated to adapt to the Rule (EU) 2016/679 of the European Parliament and of the Council, of the 27th April 2016, concerning the protection of physical persons regarding the processing of personal data and the free circulation of this data (RGPD) and of the Constitutional Law 3/2018, of 5th December, about the Protection of Personal Data and the guarantee of digital rights.

This document about website Privacy Policy has been created by means of free website privacy policy template generatoron 09/01/2023.

×
Skip to content