Reserve

PRIVACY POLICY

Berta Portet Casals, as the owner of the website https://escapadasencatalunya.com/en/, provides you with this Privacy Policy with the aim of informing you in detail about the management of your personal data and the protection of your privacy.

Should any changes occur in the future, we will notify you through our website or other appropriate means, so that you can be aware of the changes made.

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, General Data Protection Regulation (GDPR), and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, we provide you with the following information on the processing of your personal data:

1. DATA CONTROLLER

2. PRINCIPLES APPLIED TO THE PROCESSING OF PERSONAL DATA

In processing your personal data, we apply the following fundamental principles:

  • Legality, loyalty, and transparency: Data collection is carried out with your express consent and for specific purposes previously informed.
  • Data minimization: We only request the information strictly necessary for the required purposes.
  • Storage period limitation: We retain your data for as long as necessary for the purpose for which it was collected and then securely delete it.
  • Integrity and confidentiality: We guarantee the security and confidentiality of the data, preventing unauthorized access or misuse.

3. PURPOSE OF PROCESSING PERSONAL DATA

The personal data collected in https://escapadasencatalunya.com/en/ They are used for the following purposes:

  • Provision of services offered through the website.
  • Management of queries and requests submitted by users.
  • Management of bookings and requests made through the website.
  • Management of payments related to services contracted through the website.
  • Sending commercial information if the user has expressly requested it.
  • Maintaining business relationships with our customers and suppliers.

4. METHOD OF OBTAINING PERSONAL DATA

The data can be obtained through the following channels:

  • Contact or inquiry forms: to answer questions, queries or requests for information.
  • Reservation or contracting processes: to manage requests and services contracted by users through the website.
  • Payment processes: to allow the management of payments associated with the contracted services.
  • Subscription to newsletters or updates: If this service is enabled, it will be used to send informational and commercial communications, always with the corresponding consent.

The user will be duly informed at the time of collection of their data through the corresponding information clauses, where the data controller, the purpose and legal basis, the recipients of the information, the retention period and the procedures to exercise their rights in matters of data protection will be detailed.

Generally, the personal information collected is limited to the identification and contact data necessary to manage the queries, reservations or services requested, such as name, surname, telephone and email address, as well as any other data that may be necessary to manage the contractual relationship.

When the user makes a payment through the website, the payment processing may be carried out by Stripe. The information necessary to process the payment will be handled in accordance with the terms and policies applicable to the corresponding payment service.

Additionally, if social media is used as a means of communication, the information that the user publishes on these channels may contain publicly accessible personal data. These platforms have their own privacy policies, which specify the use and sharing of information. It is recommended to consult these policies before using the respective platforms.

This website also uses cookies and similar technologies. You can find detailed information about them in our Cookie Policy.

5. USER RESPONSIBILITY

The user guarantees that the personal data provided is truthful, accurate and up-to-date, and undertakes to keep it updated.

Furthermore, he declares that he is over 14 years of age and assumes responsibility for any false or inaccurate information, as well as for any damages that may arise from it.

6. DATA RETENTION PERIOD

Personal data will be stored for as long as necessary to fulfill the purpose for which it was collected.

If the data has been obtained to send commercial information, it will be deleted within six months if no contractual relationship is established, or at the time the interested party requests it.

If a contractual relationship exists, the data will be kept for the duration of the relationship and subsequently for the time required by applicable law.

In any case, and as a general rule, we will keep your personal information while there is a contractual relationship that binds us or until you exercise your right to erasure and/or limitation of processing.

In such a case, the data will be blocked and will not be used for any purpose other than its preservation, to the extent that it may be necessary for the exercise or defense of claims or in the event that any legal liability may arise that must be addressed.

7. COMMUNICATION OF DATA TO THIRD PARTIES

As a general rule, we do not share your personal information, except in those cases where it is necessary to provide the requested services or to comply with legal obligations.

Although this does not necessarily imply a transfer of data, in order to guarantee the provision of services, third-party companies acting as providers may access certain information for the sole purpose of carrying out the service we have entrusted to them.

In these cases, the data processors will act in accordance with the legally applicable conditions, without being able to use the data for purposes incompatible with the provision of the service and maintaining the corresponding confidentiality and security obligations.

The providers and services used by our website include:

Hostinger

Web hosting service provider necessary for the operation and availability of https://escapadasencatalunya.com/en/.

Supplier: Hostinger
Address: Švitrigailos Street 34, 03230 Vilnius, Lithuania.

Stripe

The website uses Stripe as a technology provider for payment management and processing.

When a user makes a payment through Stripe, certain data necessary to manage the transaction may be processed by the payment service provider in accordance with its own terms and privacy policy.

Furthermore, your information may be communicated to Public Administrations, Judges and Courts when necessary for compliance with applicable legal obligations.

8. INTERNATIONAL DATA TRANSFERS

When data is processed or stored outside the European Economic Area (EEA), the safeguards required under applicable data protection regulations will be adopted.

The external providers used by the website may have infrastructure or sub-processors located in different countries. When this involves an international transfer of data, it must be carried out in accordance with the mechanisms and safeguards established by the GDPR.

9. USER RIGHTS IN RELATION TO THEIR PERSONAL DATA

You may exercise your rights of access, rectification, erasure, objection, limitation of processing and portability, as well as your right not to be subject to automated individual decisions where applicable.

To exercise these rights, you can contact:

  • Postal address: Teodora Lamadrid Street 48 Local, 08022 Barcelona (Barcelona), Spain. Ref.: Exercise of Data Protection Rights.
  • Email: reservas@escapadasencatalunya.com, indicating in the subject line “Exercise of Data Protection Rights”.

It may be necessary to verify the applicant’s identity when required to ensure that the application is processed only for the applicant or their legal representative. In the latter case, documentation proving representation may also be requested.

To facilitate the exercise of your rights, the Spanish Data Protection Agency provides forms related to:

  • Right of access.
  • Right of rectification.
  • Right to object.
  • Right to erasure or “right to be forgotten”.
  • Right to restriction of treatment.
  • Right to portability.
  • Right not to be subject to automated individual decisions.

If you believe your rights have not been properly addressed, you can file a complaint with the Spanish Data Protection Agency (AEPD):

https://www.aepd.es/

10. SECURITY MEASURES FOR THE PROTECTION OF PERSONAL DATA

We implement appropriate technical and organizational measures to ensure the security of personal data and reduce the risks of unauthorized access, alteration, loss, processing or disclosure.

These measures may include access control mechanisms, system protection, and other appropriate security measures depending on the nature of the data processed.

However, absolute security of information systems cannot be guaranteed. In the event of a security breach affecting personal data, the necessary measures will be taken to minimize its impact, and, where legally required, the relevant authorities and affected data subjects will be notified.