Costa Brava Stays

Privacy Policy

WEBSITE PRIVACY POLICY

www.costabravastays.com

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, Costa Brava Stays (hereinafter also referred to as "Website") is committed to adopting the necessary technical and organizational measures, according to the appropriate level of security for the risk of the data collected.

Laws Incorporated in This Privacy Policy

This privacy policy is adapted to the current Spanish and European regulations on personal data protection on the internet. Specifically, it complies with the following laws:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons concerning the processing of personal data and the free movement of such data (GDPR).

  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).

  • Royal Decree 1720/2007, of December 21, approving the Regulation for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).

  • Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The data controller for personal data collected through Costa Brava Stays is:
María Gabriela Argañaraz Enero, with NIF: 41629243W (hereinafter, "Data Controller").

Contact details:

Personal Data Registration

In compliance with the GDPR and LOPD-GDD, we inform you that personal data collected through the forms on this website will be incorporated into our database to facilitate, streamline, and fulfill the commitments established between Costa Brava Stays and the User. The data may also be used to respond to a request or inquiry.

Furthermore, unless exempt under Article 30.5 of the GDPR, a record of processing activities is maintained, specifying the processing activities carried out and other circumstances outlined in the GDPR.

Principles Applied to Personal Data Processing

The processing of the User's personal data will adhere to the principles established in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018:

  • Lawfulness, fairness, and transparency: User consent will always be required, with transparent prior information about the data collection purposes.

  • Purpose limitation: Data will be collected for specific, explicit, and legitimate purposes.

  • Data minimization: Only data strictly necessary for the intended purposes will be collected.

  • Accuracy: Data must be accurate and kept up to date.

  • Storage limitation: Data will only be kept for the necessary time for processing purposes.

  • Integrity and confidentiality: Data will be processed in a manner that ensures security and confidentiality.

  • Accountability: The Data Controller is responsible for ensuring compliance with these principles.

Categories of Personal Data

Costa Brava Stays only processes identifying information. No special categories of personal data, as defined in Article 9 of the GDPR, are processed.

Legal Basis for Data Processing

The legal basis for processing personal data is User consent. Costa Brava Stays is committed to obtaining explicit and verifiable consent before processing personal data for one or more specific purposes.

Users have the right to withdraw consent at any time. Withdrawal will not affect the lawfulness of processing based on prior consent.

When Users provide their data through forms to make inquiries or request information, they will be informed whether completing specific fields is mandatory to proceed with the request.

Purposes of Data Processing

Personal data is collected and managed by Costa Brava Stays to:

  • Facilitate, streamline, and fulfill commitments established between the Website and the User.

  • Respond to requests or inquiries made by the User.

  • For commercial, operational, and statistical purposes related to Costa Brava Stays.

  • Conduct marketing studies to improve website content, functionality, and navigation.

At the time of data collection, Users will be informed about the specific purpose(s) of the processing.

Retention Period for Personal Data

Personal data will only be retained for the minimum time necessary for processing and, in any case, for a maximum of 24 months, or until the User requests its deletion.

At the time of data collection, Users will be informed about the retention period or the criteria used to determine it.

Recipients of Personal Data

User data may be shared with the following recipients or categories of recipients:

If the Data Controller intends to transfer data to a third country or international organization, Users will be informed in advance.

Personal Data of Minors

In compliance with Article 8 of the GDPR and Article 7 of Organic Law 3/2018, only individuals over 14 years old may legally consent to their data processing by Costa Brava Stays. If the User is under 14 years old, parental or guardian consent will be required.

Data Security and Confidentiality

Costa Brava Stays commits to implementing technical and organizational security measures to protect personal data from unauthorized access, accidental loss, or unlawful processing.

However, since internet security cannot be fully guaranteed, Costa Brava Stays will promptly notify Users of any security breach that may pose a high risk to their rights and freedoms.

Personal data will be treated confidentially, and all personnel handling this data will be legally or contractually required to maintain confidentiality.

User Rights

Users may exercise their rights under the GDPR and Organic Law 3/2018 concerning their personal data, including:

  • Right of access: To know whether Costa Brava Stays is processing their personal data.

  • Right to rectification: To correct inaccurate or incomplete data.

  • Right to erasure ("right to be forgotten"): To delete data under specific legal conditions.

  • Right to restriction of processing: To limit data processing in certain cases.

  • Right to data portability: To receive data in a structured format and transfer it to another controller.

  • Right to object: To prevent or stop data processing.

  • Right not to be subject to automated decision-making: Including profiling.

Users can exercise these rights by sending a written request to:

Third-Party Website Links

This Website may contain links to third-party websites. Each of these sites has its own privacy policies, and Costa Brava Stays assumes no responsibility for them.

Complaints to Supervisory Authority

If a User believes there is a violation of data protection regulations, they have the right to judicial protection and may file a complaint with the relevant supervisory authority. In Spain, the competent authority is the Spanish Data Protection Agency (AEPD) (https://www.aepd.es/).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

By using this Website, Users confirm they have read and accepted this Privacy Policy.

Costa Brava Stays reserves the right to modify this Privacy Policy based on regulatory changes or company policies. Users are encouraged to review this page periodically.

This Privacy Policy has been adapted to comply with Regulation (EU) 2016/679 and Organic Law 3/2018.