PRIVACY POLICY BASED ON THE GENERAL DATA PROTECTION REGULATION (GDPR) AND ORGANIC LAW 3/2018 OF DECEMBER 5 (LOPD-GDD)
The following privacy policy has been prepared in accordance with the principles of lawfulness, fairness, and transparency established in the General Data Protection Regulation (GDPR). It will be reviewed periodically in order to improve and expand it whenever necessary.
BASIC INFORMATION ON DATA PROTECTION AND PRIVACY
In compliance with European and Spanish data protection regulations, we hereby provide information regarding the use of your personal data as a user of this website and, where applicable, as a follower of our profiles on different social media platforms.
Who is responsible for processing the personal data of users of this website?
HIS TRAVEL 2014 SL
Address: CALLE CORIN TELLADO, 14 5º I – 33204 GIJON (Asturias), Spain
Email: info@hiddeninspain.com
We inform you that HIS TRAVEL 2014 SL will process the data provided through this website as the DATA CONTROLLER, and the personal data of followers on social media as JOINT CONTROLLERS together with the corresponding social network platform. In accordance with European data protection regulations, we guarantee the protection, confidentiality, and security of personal data.
What personal data will we process and is it mandatory to provide it?
Following the principles of data minimization, proportionality, and privacy by default, we will only request the data necessary to fulfill the purpose for which it was collected, ensuring that only proportional and non-excessive data is requested.
During browsing, we collect your IP address or device ID.
If you wish to make an inquiry or request information through the contact form, we will process identifying data such as your first name, last name, telephone number, and email address. Failure to complete these fields or the provision of incorrect data will prevent us from responding to your request, although you may freely browse the contents of the website.
Regarding our fan pages on different social media platforms, we follow the same criteria, processing only the data strictly necessary for the specific purpose for which it was collected. We also inform users that they must be at least 14 years old to use social media platforms.
Through the Google Analytics tool, website usage can be monitored in order to obtain information about user access to the website. This tool is provided by Google, Inc., a Delaware company headquartered at 1600 Amphitheatre Parkway, Mountain View, California, CA 94043, USA. Some of the data stored for later analysis includes: the number of times the user has visited the website, dates of the first and last visit, duration of visits, the page from which the user accessed the website, the search engine used to reach the website or the selected link, and the geographical location from which the user accesses the website.
The configuration of these cookies is predetermined by the service offered by Google. Therefore, we suggest that you consult Google’s privacy policy at:
and:
for more information about the cookies used and how to disable them (it being understood that we are not responsible for the content or accuracy of third-party websites).
For what purposes will we process your personal data?
We inform visitors to this website that their data will be processed for the following purposes:
- Management of inquiries submitted through the website.
We will carry out the necessary data processing activities in order to respond to requests for information, communications, inquiries, and legal obligations. - Management of user browsing through the website (cookie data processing).
Your data will be processed in accordance with the cookie policy available on this website and the purposes specified therein. - Newsletter subscription management.
Whenever we have your express authorization, we will process your data to manage your subscription to our newsletters and informational bulletins. - Social Media.
We will carry out the necessary data processing activities to disseminate information regarding activities and projects developed by the Entity. - Website IT monitoring and security control.
We will carry out monitoring actions regarding the use of the website in order to prevent and detect any improper use.
What is the legal basis for processing your personal data?
Below we inform you of the legal grounds for processing your data as a visitor to this website:
Contact forms and private areas
- The consent granted by you for one or more specific purposes by checking the corresponding box enabled at the bottom of the form. The forms used on this website include a first-layer information notice and an acceptance checkbox, meaning that if the user does not check it, they will not be able to submit their personal information.
- The performance of a contract or the application of pre-contractual measures, if through the menu available on this website you become a customer or potential customer of our entity (Article 6.1.b GDPR), as well as compliance with legal obligations applicable to the DATA CONTROLLER (Article 6.1.c GDPR).
- The legitimate interest in conducting, for example, satisfaction surveys aimed at evaluating the quality of the services offered by this entity or sending information related to them.
- The legitimate interest of the Controller in guaranteeing the integrity, confidentiality, and availability of the website and its systems.
- The express consent granted by you in the case of publishing photographs, testimonials, or your personal image.
In cases where the processing of personal data is based on user consent, you are informed that you may withdraw the consent granted for the processing of your data at any time by contacting info@hiddeninspain.com. Such withdrawal will not have retroactive effects.
Social Media
Regarding the processing of personal data on social media platforms, the LEGAL BASIS legitimizing the processing of your personal data is the consent you provide by following our fan page, thereby authorizing us to process your data as Joint Controllers together with the respective social network. If you do not wish to consent to the processing of your data, you should refrain from following our fan page. Therefore, you are free to decide and consent to the use and processing of your personal data.
Will we send you commercial communications?
If we have your express consent, we will send communications related to our activities by postal mail and electronic means, based on the consent requested by the Entity and previously granted by the user. We may also send you commercial communications in the cases contemplated under Article 21 of the LSSI-CE.
We inform you that if you have given your consent to receive such communications, you may withdraw it at any time, although such withdrawal will not have retroactive effects. To do so, you may contact the Entity at the postal address indicated on this website or by email at: info@hiddeninspain.com
How long will we retain your data?
The personal data provided will be retained for the time necessary to fulfill the purpose for which it was collected and to determine any potential liabilities arising from said purpose, in addition to the periods established by applicable regulations.
However, even if deletion is requested, the data may remain blocked for the necessary period and with restricted processing solely for one of the following reasons:
- Compliance with legal or contractual obligations to which we are subject.
- During the legally established limitation periods for any liabilities.
- For the exercise or defense of claims arising from the relationship maintained with the data subject.
For web forms, the maximum retention period is 1 year.
To whom will we disclose your data?
Personal data will not be transferred or disclosed to third parties except where necessary for the development, monitoring, and fulfillment of the stated purposes, as well as in cases provided for by law.
However, your data may be disclosed to our hosting providers and technology service providers.
Regarding the processing of your personal data on different social media platforms, we inform you that your data may be transferred to other countries. Therefore, we recommend that our followers consult the personal data processing policies of the respective social network.
How have we obtained your data?
Personal data has been obtained through the contact form available on this website or through browsing activity.
What are your data protection rights?
Data protection regulations allow you to exercise the following rights before the data controller:
- Right of access
- Right to rectification
- Right to object
- Right to data portability
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right not to be subject to automated individual decision-making
all in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation – GDPR) and Organic Law 3/2018 of December 5 on Personal Data Protection and Guarantee of Digital Rights (LOPD-GDD).
To exercise these rights, you may contact the Controller at: info@hiddeninspain.com
Likewise, you have the right to lodge a complaint with the Spanish Data Protection Agency if you consider that your rights regarding the protection of your personal data have been violated.
Information Security
We take your privacy very seriously and therefore have developed and implemented various information security measures. Among other measures, we have prepared a record of processing activities, conducted a risk assessment of processing operations, and ensured that our staff is trained and aware regarding the proper handling of personal data.