WEBSITE PRIVACY POLICY
I. PRIVACY AND DATA PROTECTION POLICY
In accordance with the applicable legislation, Ca Roc (hereinafter, also the “Website”) undertakes to adopt the necessary technical and organisational measures, appropriate to the level of risk associated with the collected data.
Laws included in this Privacy Policy
This Privacy Policy is adapted to the current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following laws:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR).
Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPD-GDD).
Royal Decree 1720/2007, of 21 December, approving the Regulations implementing Organic Law 15/1999, of 13 December, on Personal Data Protection (RDLOPD).
Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
The Data Controller of the personal data collected on Ca Roc is: CA ROC, NIF: 48138671-Q, registered in the Property Registry of Tarragona with the following registration details: Tourism Registry of Catalunya (RTC): HUTTE-067798 02, represented by Ca Roc (hereinafter, the “Data Controller”).
Contact details:
Address: Vall de les Moreres 9, 43781 La Fatarella
Phone: 699 893 513
Email: stayincaroc@gmail.com
Record of Personal Data
In compliance with the GDPR and the LOPD-GDD, we inform you that all personal data collected by Ca Roc, through forms on its pages, will be stored and processed in our file with the purpose of facilitating, speeding up and fulfilling the commitments established between Ca Roc and the User, or maintaining the relationship established through these forms, or attending to a request or inquiry.
Likewise, except when the exception in Article 30.5 GDPR applies, a record of processing activities is maintained, specifying their purpose and other circumstances required by the GDPR.
Principles governing the processing of personal data
The processing of the User’s personal data shall follow the principles stated in Article 5 GDPR and Article 4 et seq. of Organic Law 3/2018:
Lawfulness, fairness and transparency
Purpose limitation
Data minimisation
Accuracy
Storage limitation
Integrity and confidentiality
Accountability
Categories of Personal Data
The categories of data processed on Ca Roc are exclusively identification data. No special categories of personal data (Article 9 GDPR) are processed.
Legal basis for processing personal data
The legal basis for processing is consent.
Ca Roc undertakes to obtain the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.
The User may withdraw their consent at any time. Withdrawal will not affect the legality of processing prior to withdrawal.
Purpose of processing
Personal data are collected and managed by Ca Roc to:
Facilitate, speed up and fulfil commitments between the Website and the User.
Maintain the relationship established via forms.
Attend to a request or inquiry.
They may also be used for:
Commercial, operational and statistical purposes
Marketing, data extraction and storage
Adapting web content to the User
Improving quality, functionality and browsing experience
The User will be informed of the specific purpose(s) at the time the data is collected.
Data retention period
Personal data will only be retained for the minimum time necessary for their purpose, and in any case, only for the following period: until the User requests deletion.
The User will be informed of the retention period, or the criteria used to determine it, at the time of data collection.
Recipients of personal data
The User’s personal data will not be shared with third parties.
In any case, the User will be informed of the recipients or categories of recipients at the time of collection.
Personal data of minors
Only individuals 14 years or older may legally give consent for their data to be processed by Ca Roc.
If the User is under 14, parental consent is required.
Security and confidentiality of data
Ca Roc undertakes to adopt the necessary technical and organisational measures to guarantee the security and confidentiality of personal data, preventing:
accidental or unlawful destruction
loss
alteration
unauthorised disclosure or access
The Website uses SSL (Secure Socket Layer).
However, Ca Roc cannot guarantee the absolute invulnerability of the internet or the absence of hacking attacks.
In case of a data breach posing a high risk to User rights, the Data Controller will notify the User without undue delay.
All personnel accessing the data is contractually obligated to maintain confidentiality.
Rights of the User
The User may exercise the following rights under GDPR and Organic Law 3/2018:
Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restrict processing
Right to data portability
Right to object
Right not to be subject to automated decision-making
Requests must include:
Name, surname(s), copy of ID
Specific request
Address for notifications
Date and signature
Supporting documents
Requests must be sent to:
Address: Vall de les Moreres 9, 43781 La Fatarella
Email: stayincaroc@gmail.com
Links to third-party websites
The Website may contain links to external websites not operated by Ca Roc.
These websites are responsible for their own privacy policies and practices.
Complaints to the Supervisory Authority
Users may file a complaint before the competent Data Protection Authority.
In Spain, this is the Agencia Española de Protección de Datos (http://www.agpd.es).
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
Use of the Website implies acceptance of this Privacy Policy.
Ca Roc reserves the right to modify this Policy based on its own criteria or due to legal or regulatory changes.
Updates will not be notified individually.
This Privacy Policy was updated to comply with GDPR (Regulation EU 2016/679) and Organic Law 3/2018.
