Privacy Policy
1. User Information
XAVIER CANALETA MARÈS, as the Data Controller, informs you that, in accordance with the provisions of the European Union Regulation 2016/679, of April 27 (GDPR) and Organic Law 3/2018, of December 5, on Data Protection and guarantee of digital rights (LOPDGDD), we will process your data as reflected in this Privacy Policy.
In this Privacy Policy, we describe how we collect your personal data, why we collect it, what we do with it, with whom we share it, how we protect it, and your options regarding the processing of your personal data.
This Policy applies to the processing of your personal data collected by the company for the provision of its services. If you accept the measures of this Policy, you agree that we process your personal data as defined in this Policy.
2. Data and contact information
Company name: XAVIER CANALETA MARÈS
Trade name: CADAQUÉS TOURS
Tax Identification Number: 77961655G
Address: c/ Tórtora, 68 17488 Cadaqués Girona
Email address: tourscadaques@gmail.com
3. Key principles
We have always been committed to providing our services with the highest degree of quality, which includes treating your data with security and transparency. Our principles are:
Legality: We will only collect your Personal Data for specific, explicit, and legitimate purposes.
Data minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which they were collected.
Limitation of purpose: We will only collect your personal data for the stated purposes and only according to your wishes.
Accuracy: We will keep your personal data accurate and up-to-date.
Data security: We apply appropriate and proportional technical and organizational measures to the risks to ensure that your data does not suffer damage, such as unauthorized disclosure or access, accidental or unlawful destruction, or accidental loss or alteration, and any other form of unlawful processing.
Access and Rectification: We provide you with the means to access or rectify your data when you consider it appropriate.
Retention: We retain your personal data in a lawful and appropriate manner and only for as long as necessary for the purposes for which they were collected.
International transfers: When your data is transferred outside the EU/EEA, it will be adequately protected.
Third parties: Access to and transfer of personal data to third parties are carried out in accordance with applicable laws and regulations and with adequate contractual guarantees.
Direct marketing and cookies: We comply with applicable legislation regarding advertising and cookies.
4. Collection and processing of your personal data
The types of data that may be requested and processed are:
Identification data.
Health data.
Personal data, as long as it is necessary for registration in a specific activity.
We also automatically collect data about your visit to our website as described in the cookie policy.
Whenever we request your personal data, we will clearly inform you of which personal data we are collecting and for what purpose. In general, we collect and process your personal data for the purpose of:
A. To determine if you can participate in the activities we organize.
B. To provide information, services, products, relevant information, and industry news.
C. Sending Communications.
D. To be able to personalize our services to your personal situation.
5. Legitimation
In accordance with the applicable data protection regulations, your personal data may be processed as long as:
You have given your consent for the purposes of the processing. Of course, you can withdraw your consent at any time.
Due to legal requirement.
Because there is a legitimate interest that is not overridden by your privacy rights, such as sending commercial information either by subscribing to our newsletter or being a member.
Because it is necessary for the provision of one of our services through a contractual relationship between you and us.
6. Communication of personal data
The data may be communicated to companies related to CADAQUÉS TOURS for the provision of the various services as Data Processors. The entity will not make any transfer, except by legal obligation.
7. Your rights
In relation to the collection and processing of your personal data, you can contact us at any time to:
Access your personal data and any other information indicated in Article 15.1 of the GDPR.
Rectify your personal data that is inaccurate or incomplete in accordance with Article 16 of the GDPR.
Delete your personal data in accordance with Article 17 of the GDPR.
Limit the processing of your personal data in accordance with Article 18 of the GDPR.
Request the portability of your data in accordance with Article 20 of the GDPR.
Object to the processing of your personal data in accordance with Article 21 of the GDPR.
If you have given your consent for a specific purpose, you have the right to withdraw the consent granted at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.
You can exercise these rights by sending a motivated and accredited communication to tourscadaques@gmail.com
You also have the right to lodge a complaint with the competent Data Protection Authority (www.aepd.es) if you believe that the processing does not comply with current regulations.
8. Legal Information
The requirements of this Policy complement, and do not replace, any other existing requirements under applicable data protection legislation, which shall prevail in any case.
This Policy is subject to periodic review and may be modified by the Company at any time. When this happens, we will notify you of any changes and ask you to reread the most recent version of our Policy and confirm your acceptance.