Privacy policy

Data controller – who is responsible for processing your data?

Email: casamontalban@gmail.com

Domain name: https://casamontalbanapartamentos.com/

Purposes – why do we process your data?

In accordance with the European General Data Protection Regulation 2016/679, we inform you that we will process the data you provide in order to:

• Manage the services you book through the Platform, as well as the corresponding invoicing and delivery.
• Periodically send communications about services, events and news related to Casa Montalbán’s activities, by any means (telephone, post or email), unless otherwise indicated or the user objects or withdraws consent.
• Send commercial and/or promotional information related to the services booked and added-value services for end users, unless otherwise indicated or the user objects or withdraws consent.
• Comply with legal obligations and verify compliance with contractual obligations, including fraud prevention.
• Disclose data to public bodies and authorities when required under legal and regulatory provisions.

Categories of data – what data do we process?

As a result of the purposes above, Casa Montalbán manages the following categories of data:

• Identification data
• Electronic communication metadata
• Commercial information data. If the user provides data of third parties, they declare that they have their consent and undertake to pass on the information in this clause to them, releasing Casa Montalbán from any liability in this respect.
• However, Casa Montalbán may carry out checks to verify this, taking the appropriate due-diligence measures in accordance with data protection regulations.

Legal basis – on what basis do we process your data?

The processing of data for sending periodic newsletters about services, events and news related to our professional activity is based on the consent of the data subject, expressly requested for this purpose, in accordance with current regulations.
In addition, the legal basis for processing data related to offers or collaborations is the consent of the user who sends their data, which may be withdrawn at any time, although this may affect smooth communication and the processes the user wishes to carry out.
Finally, the data may be used to comply with the legal obligations applicable to Casa Montalbán.

Retention period – how long will we keep your data?

Casa Montalbán will keep users’ personal data only for as long as necessary to fulfil the purposes for which they were collected, unless the consents given are withdrawn. Afterwards, where necessary, the information will be kept blocked for the periods established by law.

Recipients – who will your data be shared with?

Your data may be accessed by providers that supply services to Casa Montalbán, such as hosting, marketing tools and content systems or other professionals, when such communication is required by law or for the performance of the services booked.

Casa Montalbán has signed the corresponding data processing agreements with each of the providers that supply services to it, to ensure that they process your data in accordance with current legislation.

Your data may also be disclosed to the State Security Forces where there is a legal obligation to do so.

Banks and financial institutions, for the collection of payment for the services.
Public administrations with competence in the relevant sectors, where required by current regulations.

Information security – what security measures do we apply to protect your data?

To protect the different types of data covered by this privacy policy, we apply the technical security measures needed to prevent their loss, manipulation, disclosure or alteration.

• Encryption of communications between the user’s device and Casa Montalbán’s servers.
• Encryption of the information on Casa Montalbán’s own servers.
• Other measures to prevent third parties from accessing users’ data.
• Where Casa Montalbán uses service providers located outside the European Union to maintain the platform, these international transfers are regularised in line with Casa Montalbán’s commitment to the protection, integrity and security of users’ personal data.

Rights – what are your rights when you give us your data, and how can you exercise them?

You have the right to obtain confirmation as to whether or not Casa Montalbán is processing personal data concerning you.
You also have the right to access your personal data and to request the rectification of inaccurate data or, where appropriate, its erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, you may request the restriction of the processing of your data, in which case we will only keep them for the exercise or defence of claims.
In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. Casa Montalbán will stop processing the data, except for compelling legitimate grounds or the exercise or defence of possible claims.

You may also exercise your right to data portability and withdraw the consents given at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of your rights, you can email us at casamontalban@gmail.com.

Finally, you may contact the Spanish Data Protection Agency (AEPD) and other competent public bodies with any complaint arising from the processing of your personal data.