This Privacy Policy aims to explain how we collect, process, and protect the personal data provided through our website or blog (hereinafter referred to as the “Website”), so you can freely decide whether you wish to allow us to process your data.
Data of the Responsible Party / Provider of Information Society Services
Personal Data Processing
The personal data you provide will be treated confidentially and incorporated into the relevant data processing activity owned by our entity.
We only request the data necessary to address your request or maintain our relationship with you if you request it or if we are required to do so to provide our services and/or respond to your inquiries on this website.
Purpose
Your personal data will only be processed for the purpose of responding to your inquiries. We do not send advertising without prior consent from the user.
Security Measures
Our entity has implemented all technical and organizational measures necessary to protect the processed personal data, preventing its loss, theft, or unauthorized use.
These measures are periodically verified through compliance checks with specific regulations.
Data Retention
The personal data provided will be retained for as long as necessary to fulfill the purpose for which it was collected and to determine any potential liabilities that may arise from said purpose.
Rights of the Data Subjects
You have the right to know if our entity is processing your personal data; therefore, you have the right to access your data, correct it if it is inaccurate, or request its deletion when the data is no longer necessary.
You may also exercise your right to restrict processing or data portability if deemed appropriate by contacting our entity in writing via email at info@experienciaandalusi.com and attaching a copy of your ID for identification purposes.
If you wish to make a suggestion or inquiry about how your data is handled, please let us know, and we will connect you with our data protection consultancy.
If you believe your rights have been violated, you may file a complaint with the Spanish Data Protection Agency at C/ Jorge Juan, 6, 28001 Madrid, or at www.aepd.es.
Profiling
We do not create profiles using your personal data, but if we do so, you will be informed and asked for your permission.
Similarly, you have the right to oppose this type of processing at any time.
Data Disclosure
Your personal data will not be disclosed to other countries or third-party entities except in cases where there is a legal obligation.
In the case of product purchases or service contracts, your personal data may be shared with entities necessary to deliver the purchased products or provide our services.
Our bank will have access to your data to manage the payment of products or services, as will data processors required for executing contracts and/or purchases.
If data is to be shared with other entities or countries, you will be informed and your prior consent will be sought.
Corporate Commitment to Data Protection
Scope
This Code of Conduct is mandatory for all departments and individuals associated with this website.
Purpose
We have established protocols for handling personal data, as required by specific regulations, to ensure the confidentiality of such data at all times.
Principles
Legality, Fairness, Transparency, Data Minimization, Accuracy, Retention Limitation, Integrity, Confidentiality, and Active Responsibility.
Special Categories of Data
The processing of personal data revealing ethnic or racial origin, political opinions, religious or philosophical beliefs, or union membership, as well as the processing of genetic, biometric, health-related, or sexual orientation data, is prohibited, except in legally authorized cases and with the prior consent of the individual.
Rights of the Data Subjects
Data subjects have the right to access their personal data, correct inaccuracies, delete it when it is no longer necessary, limit processing, easily receive their data in structured and commonly used formats, and object to processing for specific reasons or for profiling purposes.
Activity Log and Security Measures
Our entity will maintain a record of processing activities reflecting the most important and legally required information, including details about the responsible party, processor, data protection delegate (if applicable), purposes of processing, categories of data subjects and data, recipients, international transfers, retention periods, and all necessary security measures to safeguard personal data under principles of confidentiality and secrecy as part of a risk and impact assessment analysis.