I. PRIVACY AND DATA PROTECTION POLICY
In compliance with current legislation, Rosa Piscopo, representing BAMBU SUITES VEGUETA https://www.bambusuitesvegueta.com/
(hereinafter, also referred to as the “Website”), undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the collected data.
Laws incorporated into this privacy policy
This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the Internet. Specifically, it complies with the following laws:
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
Royal Decree 1720/2007 of 21 December approving the Regulation implementing Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the data controlle
Address: Avenida Eufemiano Jurado 38, 35001 Las Palmas de Gran Canaria
Contact email: hola@bambusuitesvegueta.com
Personal Data Record
In compliance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by BAMBU SUITES VEGUETA through the forms available on its pages will be incorporated into and processed in our file with the purpose of facilitating, expediting, and fulfilling the commitments established between BAMBU SUITES VEGUETA and the User, or maintaining the relationship established in the forms they complete, or to respond to a request or inquiry.
Likewise, in accordance with the GDPR and the LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, according to its purposes, the processing activities carried out and other circumstances established in the GDPR.
Principles applicable to the processing of personal data
The processing of the User’s personal data will be subject to the following principles established in Article 5 of the GDPR and Articles 4 and subsequent of Organic Law 3/2018:
Lawfulness, fairness, and transparency: User consent will always be required, preceded by fully transparent information regarding the purposes for which personal data are collected.
Purpose limitation: Data will be collected for specific, explicit, and legitimate purposes.
Data minimization: Only the data strictly necessary for the intended purposes will be collected.
Accuracy: Personal data must be accurate and kept up to date.
Storage limitation: Data will be retained only for as long as necessary.
Integrity and confidentiality: Data will be processed securely to ensure confidentiality.
Proactive responsibility: The controller is responsible for ensuring compliance with the above principles.
Categories of personal data
The categories of data processed at BAMBU SUITES VEGUETA are solely identification data. No special categories of personal data, as defined in Article 9 of the GDPR, are processed.
Legal basis for processing personal data
The legal basis for processing personal data is consent. Rosa Piscopo undertakes to obtain the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.
The User may withdraw consent at any time. Withdrawal will be as easy as giving consent. As a general rule, withdrawal will not affect the use of the Website.
Purposes of processing
Personal data are collected and managed by Rosa Piscopo with the purpose of facilitating, expediting, and fulfilling the commitments established between the Website and the User, or maintaining the relationship established in the forms the User fills in, or to respond to a request or inquiry.
Additionally, data may be used for commercial purposes of personalization, operational and statistical purposes, and activities related to Rosa Piscopo’s business purpose, including data extraction, storage, and marketing studies to tailor the content offered to the User, as well as to improve the quality, functionality, and browsing experience of the Website.
Data retention period
Personal data will only be retained for the minimum time necessary for the purposes of their processing, and in any case, only during the following period: or until the User requests deletion.
At the time of collection, the User will be informed of the retention period or the criteria used to determine it.
Recipients of personal data
The User’s personal data will not be shared with third parties.
In any case, when personal data are obtained, the User will be informed about the recipients or categories of recipients.
Personal data of minors
In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only users over 14 years of age may lawfully consent to the processing of their personal data by BAMBU SUITES VEGUETA. If the User is under 14 years of age, the consent of parents or guardians will be required.
Secrecy and security of personal data
ROSA PISCOPO undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, in order to guarantee the security of personal data and prevent accidental or unlawful destruction, loss, or alteration, or unauthorized disclosure of or access to such data.
The Website has an SSL (Secure Socket Layer) certificate to ensure secure and encrypted data transmission between the server and the User.
However, since Rosa Piscopo cannot guarantee the absolute invulnerability of the Internet nor the total absence of hackers or fraudulent access, the controller undertakes to notify the User without undue delay if a personal data breach occurs that is likely to result in a high risk to the rights and freedoms of individuals.
Personal data will be treated as confidential by the controller, who undertakes to ensure that confidentiality is respected by employees, partners, and any person who may have access to the information.
Rights of the User
In accordance with the GDPR and Organic Law 3/2018, Users may exercise the following rights:
Right of access: to obtain confirmation of whether their data are being processed.
Right of rectification: to correct inaccurate or incomplete data.
Right to erasure (“right to be forgotten”): to have their data deleted when they are no longer necessary, consent is withdrawn, processing is unlawful, or other legal reasons apply.
Right to restriction of processing: to limit processing under certain conditions.
Right to data portability: to receive their personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to object: to object to the processing of their personal data.
Right not to be subject to automated decision-making: including profiling.
Requests should include: name and surname, a copy of the ID, the specific reasons or information requested, an address for notifications, date and signature, and any supporting documents.
Requests may be sent to:
Postal address: Avenida Eufemiano Jurado 38, 35001 Las Palmas de Gran Canaria
Email: holahola@bambusuitesvegueta.com
Links to third-party websites
The Website may contain links to third-party websites not operated by BAMBU SUITES VEGUETA. Each third party will have its own privacy policy and will be responsible for its own files and practices.
Complaints to the supervisory authority
If the User believes their data protection rights are being violated, they may file a complaint with the competent authority. In Spain, this is the Spanish Data Protection Agency (http://www.agpd.es).
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
It is necessary that the User has read and agrees with the conditions regarding the protection of personal data contained in this Privacy Policy, as well as that they accept the processing of their personal data so that the Data Controller may proceed with it in the manner, within the timeframes, and for the purposes indicated. Use of the Website will imply acceptance of this Privacy Policy.
ROSA PISCOPO reserves the right to modify this Privacy Policy at her own discretion, or due to a legislative, jurisprudential, or doctrinal change of the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. The User is advised to consult this page periodically to stay informed of the latest changes or updates.
This Privacy Policy was last updated to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and with Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights.