We take respect for privacy and the protection of our users’ personal data very seriously. Below, we explain how we collect data and how we process it.

1. Details of the data controller

Company name: COMPLEJO TURISTICO RURAL LA GARGANTA, S.L.
CIF: B29896131
Address: AVENIDA CAMINITO DEL REY, 1, – BARRIADA EL CHORRO, S/N, 29552, ALORA (Málaga)
Phone: 607707759
Mail: ana@lagarganta.com
Activity: Hospitality
Web: www.lagarganta.com

2. Applicable regulations

This Privacy Policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, and Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE or LSSI).

3. Principles applicable to personal information

The following principles apply to the processing of personal data:

Principle of lawfulness, fairness and transparency: for personal data to be lawfully processed, consent must be obtained or the processing must be necessary for compliance with a legal obligation. The data must be provided in a comprehensible and accessible manner.
Principle of data minimisation: Personal data shall be adequate, relevant and limited to what is necessary for the purposes for which it was collected.
Principle of data retention limitation: personal data shall be erased when it is no longer necessary for the purpose for which it was collected.
Principle of integrity and confidentiality: personal data shall be processed in such a way as to ensure appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, through the implementation of appropriate technical or organisational measures.

4. Purpose of the processing of personal data

We process personal data for the following purposes:

To process your request and provide you with information regarding the services offered by COMPLEJO TURISTICO RURAL LA GARGANTA, S.L., specifically relating to HOSPITALITY. The website contains the following forms that collect personal data:
- Contact form: its purpose is to respond to enquiries from customers and prospective customers. It collects the following personal data: name and email address.
- Booking form: its purpose is to manage customers’ booking requests. It collects the following personal data: first name and surname, email address, telephone number and bank details, which are to be processed by the relevant bank.
To send marketing communications, such as newsletters, promotions and special offers, and to manage the subscription list provided by the user.
Managing social media: the processing of personal data relating to individuals who follow the official social media pages of COMPLEJO TURISTICO RURAL LA GARGANTA, S.L. will be governed by this privacy policy. The data will be processed for the purpose of properly managing our presence on social media, providing information about the activities, products or services of COMPLEJO TURISTICO RURAL LA GARGANTA, S.L.
If you begin the process of contracting any of our services, we will request your consent at a later stage for the relevant purpose.

5. Legal basis for the processing of personal data

The legal basis for the processing of your data is consent. By completing the relevant forms, ticking the box marked ‘I accept the privacy policy’ and clicking to submit the data, or by sending emails to COMPLEJO TURISTICO RURAL LA GARGANTA, S.L. via the accounts set up for this purpose, the user confirms that they have read and expressly accepted this privacy policy; thereby giving their unequivocal and express consent to the processing of their personal data in accordance with the purposes and terms set out herein.

You may withdraw your consent to the processing of your personal data at any time. Such withdrawal will not have retroactive effect.

6. Categories of personal data processed

The categories of data that will be processed for the purposes indicated are as follows: Identifying data: first name and surname, email address and telephone number.
Other non-identifying data obtained through certain cookies that are downloaded to the user’s computer whilst they are browsing the website.
No special category data is processed.
Mandatory data will be clearly marked on the information collection forms. If you choose not to provide us with any of the data marked as mandatory, we will be unable to fulfil the intended purpose, and neither the data processing nor the provision of the corresponding service will take place.
You warrant that the Personal Data you provide to us is true and accurate, and you are responsible for notifying us of any changes to it.

7. Security measures in place

COMPLEJO TURÍSTICO RURAL LA GARGANTA, S.L. undertakes, when processing users’ personal data, to respect their confidentiality and to use such data solely for the purpose for which it was collected.
As part of our commitment to ensuring the security and confidentiality of your personal data, we wish to inform you that we have implemented the necessary technical and organisational measures to guarantee the security of personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data stored and the risks to which it is exposed. Notwithstanding the above, users should be aware that security measures on the internet are not impregnable.
With regard to the confidentiality of data processing, we will ensure that any person authorised to process the data (staff, collaborators and service providers) is subject to an appropriate duty of confidentiality.
You can obtain further information about the security measures we implement by contacting us using the details provided in section one of this privacy policy.

8. Data retention period

Personal data will be retained for as long as is necessary to respond to the request, or generally for the duration of the business relationship, or for as long as is necessary to comply with legal obligations.

9. Recipients to whom the data is disclosed

The user acknowledges and accepts that their personal data may be disclosed to third parties where necessary to fulfil the purposes of the processing, whilst in all cases complying with the security measures required by current legislation on the protection of personal data.

10. User rights

The User has the following rights regarding the processing of their personal data:

Right of access to your personal data.
Right to rectify inaccurate data.
The right to have data erased that is no longer necessary for the purposes for which it was collected.
Right to restrict the processing of data for a specific purpose.
Right to data portability.
Right to object to the processing of personal data.
The right to lodge a complaint with the Spanish Data Protection Agency (the competent supervisory authority for data protection matters), particularly where you have not received a satisfactory response regarding the exercise of your rights.

You may exercise your rights by sending a request, accompanied by a copy of your national identity card, to the address given in section 1 or to the email address ana@lagarganta.com.

11. Changes to the privacy policy

COMPLEJO TURÍSTICO RURAL LA GARGANTA, S.L. may amend this privacy policy to bring it into line with any new legislation, case law or interpretations issued by the Spanish Data Protection Agency. These privacy terms may be supplemented by the Legal Notice, the Cookies Policy and the General Terms and Conditions which, where applicable, are set out for specific products or services, should such access involve any specific provisions regarding the protection of personal data.