Your privacy is very important, therefore we want to inform our users of the treatment we make of their personal data.
In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of the EU, dated April 27, 2016, (General Data Protection Regulation), we guarantee that your personal data will be treated in accordance with the principles of transparency, limitation of purpose, data minimization, accuracy, integrity and confidentiality; complying, in any case, with the obligations and guarantees derived from the regulations. Likewise, our Privacy Policy is adapted to the Spanish regulations established in the Organic Law (3/2018) on the Protection of Personal Data and Guarantee of Digital Rights, dated December 6, 2018.
1. Who processes your personal data?
Nicolás Albalá
Business name: FAISÁN 20
Postal address: Calle Faisán, 20 2ºF, CP 18014, Granada
Telephone: +34 611 615 985
Email: faisan20@faisan20.es
2. What is personal data and what data is processed?
Personal data is considered to be all information about an identified or identifiable natural person whose identity can be determined, directly or indirectly, by means of an identifier such as name, postal address, email or telephone number, etc. We only process the personal data that users provide us for the provision of the accommodation services we offer. For this purpose, we only collect identifying data from users, postal and/or electronic addresses, etc...always in accordance with the legal requirements demanded of accommodation for tourist purposes. Therefore, the processing we make of your data will be appropriate and pertinent, limited to what is necessary based on the purposes for which they are collected; and respecting the preferences of the user, as long as they expressly and freely and unequivocally accept the processing of their personal data.
3. What is the purpose of the processing of my personal data?
We process the data of users for the provision of a commercial service consisting of rental services of spaces and homes for tourist purposes, as well as for other purposes that the users themselves authorize us in the terms reported in this Privacy Statement. However, during the validity of the relationship with the user, other personal data may be additionally incorporated, always informing the user at the time of collection of the same. The user will be responsible for ensuring that the personal data they provide is true, accurate and up to date; being responsible for any possible damage that may be caused by non-compliance with this legal obligation.
4. What is the legitimacy for the processing of my data?
We are governed by the provisions of the different European, national and regional legislation: The provision of an appropriate service to the user and our interest in providing the service with the highest quality, adapting to the needs of the user and improving the provision of our services and the express consent of the users for the processing of their data.
5. How long will my personal data be kept?
Your personal data will be processed solely and exclusively for the time strictly necessary and for the purposes for which it was collected. As an exception and by legal provision, a longer retention period may be established for reasons of legal security and to address possible claims from users.
6. Are my data shared with third-party recipients?
We guarantee that, during the duration of the data processing, they will not be transferred or assigned to third parties, unless it is necessary for the fulfillment of the purposes set forth in the Privacy Statement. However, if it is necessary to transfer personal data to third parties, the express, informed and unequivocal consent of users will be requested in advance. Finally, in compliance with current legal regulations, personal data will be shared when legally required.
7. What rights do I have regarding the processing of my personal data?
In accordance with the provisions of the data protection regulations included in this Privacy Statement.
- Right of Access: any user has the right to obtain complete information about their personal data that we have collected and about the treatment we give them.
- Right of Rectification: users have the right to request the rectification of data that is inaccurate or incomplete, as well as to carry out the correction of possible errors contained in their data.
- Right of Opposition: this means that you can object that the controller carries out the processing of personal data in the following cases; when they are processed based on a mission of public interest or legitimate interest, including profiling, the controller will stop processing the data unless it proves compelling reasons that prevail over the interests, rights and freedoms of the interested party, or for the formulation, exercise or defense of claims. When the processing is for direct marketing purposes, including the aforementioned profiling, once this right is exercised for this purpose, the personal data will no longer be processed for such purposes.
- Right to Deletion: data may be deleted when they are no longer necessary for the purposes for which they were collected, unless there is a legal obligation to retain them.
- Right to Limitation of Processing: this right consists of obtaining the limitation of the processing of your data that we carry out, although its exercise has two aspects; You can request the suspension of the processing of your data when you contest the accuracy of your personal data, for a period that allows the controller to verify it or when you have opposed the processing of your personal data that the controller carries out based on legitimate interest or public interest mission, while the controller verifies whether these reasons prevail over yours. Or you can ask the controller to retain your data when the processing is unlawful and you have opposed the deletion of your data and instead request the limitation of its use or when the controller no longer needs the personal data for the purposes of the processing, but the interested party needs them for the formulation, exercise or defense of claims.
- Right to Object: means that you can oppose the controller carrying out a processing of personal data in the following cases, when they are subject to processing based on a mission of public interest or legitimate interest, including profiling, the controller will stop processing the data unless it proves compelling reasons that prevail over the interests, rights and freedoms of the interested party, or for the formulation, exercise or defense of claims. When the processing is for direct marketing purposes, including the aforementioned profiling, once this right is exercised for this purpose, the personal data will no longer be processed for such purposes.
- Right to Portability: when the processing is carried out by automated means, you receive your personal data in a structured, commonly used, machine-readable and interoperable format, and you can transmit it to another data controller, provided that the processing is legitimised on the basis of consent or within the framework of the execution of a contract.
- Right not to be subject to automated individual decisions: This right aims to ensure that you are not subject to a decision based solely on the processing of your data, including profiling, which produces legal effects on you or significantly affects you in a similar way. Regarding this profiling, this refers to any form of processing of your personal data that evaluates personal aspects, in particular analysing or predicting aspects related to your performance at work, economic situation, health, personal preferences or interests, reliability or behaviour. However, this right will not be applicable when it is necessary for the conclusion or execution of a contract between you and the controller or the processing of your data is based on your previously given consent.
To exercise your rights, you can send a letter to the postal address contained in point 1 of this Privacy Statement or by email to faisan20@faisan20.es
You can also read more about your rights on the Spanish Data Protection Agency website
8. Security measures in the processing of your personal data.
In compliance with current legislation, we undertake to adopt rigorous security measures and appropriate technical means to prevent the loss, misuse or unauthorized access to your personal data. Your personal data will be treated with absolute confidentiality, and we undertake to keep it secret and guarantee the duty to keep it by adopting all necessary and reasonable measures to prevent its alteration, loss and unauthorized processing or access.
