In application of the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and the Organic Law 3/2018 of 5 December, on the Protection of Personal Data and guarantee of digital rights. The Privacy Policy must be mandatorily included on a website when it collects any personal data from the user.
PROTECTION OF PERSONAL DATA
KAYSA VACACIONAL S.L., hereinafter MALAGAFLAT, informs users of its website malagaflat.com through this Privacy Policy about the processing and protection of personal data of users that may be collected through their browsing or contracting of services they perform on this portal. The use of this website by the user implies their acceptance of this Privacy Policy.
MALAGAFLAT adopts the necessary measures to guarantee the security, integrity, and confidentiality of the data in accordance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement thereof, and in matters not provided for by this, by the Organic Law 3/2018 of 5 December, on the Protection of Personal Data and guarantee of digital rights and the Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce.
Through the registration forms on this website or by sending an email, personal data of each user is collected and processed, the treatment of which is governed by this Privacy Policy. These data are necessary for the management and maintenance of some of the services provided by MALAGAFLAT.
RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA
The entity responsible for processing the personal data that the user provides when accessing and using the website is, as owner, MALAGAFLAT, with Tax ID B93300614, registered office at C/ Diputado Ignacio Huelin, 5. 29140 Málaga (Spain), telephone +34 951 20 42 79 and email info@malagaflat.com.
MALAGAFLAT commits to applying the computer security measures provided for in the aforementioned regulations, with the aim of preventing unauthorized access or use of the data, its manipulation, deterioration, or loss.
DURATION OF DATA STORAGE
MALAGAFLAT, as the data controller, commits to store and manage the personal data and information collected through this website with due confidentiality while the professional relationship continues and the interested party does not request its deletion, and in any case, for a period not exceeding 5 years, counting from the end of the commercial relationship established between the user and MALAGAFLAT. However, the data controller may retain, duly blocked, the data to address possible administrative or jurisdictional responsibilities.
PURPOSES OF DATA PROCESSING
The operations, management, and technical procedures, whether carried out in an automated or non-automated manner, that enable the collection, storage, modification, transfer, and other actions on personal data, are considered personal data processing.
At MALAGAFLAT, we process the personal data that the user provides us through malagaflat.com in order to include them in the contact agenda, manage the requested commercial relationship, and thus use this information as a means of contact for said company. In addition, the processing of this collected data also involves managing the sending of the information that is requested from us and being able to respond to the queries or questions that the user sends through the website, also providing interested parties with service offers that are of interest to them. Likewise, they will be used to process the agreed commercial relationship. Finally, they may be used for sending commercial information when the user subscribes to our newsletter.
The fields in the registrations must be filled in mandatorily so that MALAGAFLAT can fulfill the purposes mentioned above.
The user can oppose the sending of commercial communications at any time by sending an email message to the address indicated above.
LEGITIMATION FOR DATA PROCESSING
The processing of personal data provided by the user is carried out based on the following legal grounds that legitimize it:
The contracting of MALAGAFLAT services and the execution of the requested professional assignment, whose terms and conditions will be made available to the user prior to any potential contracting. To carry out this requested professional relationship, the interested party is obliged to provide their data.
The free, specific, informed, and unequivocal consent, as after reading this Privacy Policy, the user is informed and, if in agreement, can accept it through a declaration or a clear affirmative action, such as marking a box provided for this purpose.
In the event that the interested party does not provide the aforementioned data or if it is erroneous or inaccurate, we will not be able to attend to their request, making it impossible to provide the requested information or carry out the contracting of services. Therefore, the data controller, MALAGAFLAT, will be exonerated from any responsibility that may arise from the non-execution of the professional assignment or from the consequences that derive from this inaccurate or erroneous information.
DATA COMMUNICATION
In general, MALAGAFLAT will not communicate this personal data to third parties, except when the provision of a service implies the need for a contractual relationship with a data processor and this is strictly necessary to manage and maintain the relationship between the user and the aforementioned company, with prior express authorization from the user. This will be done only for the time essential to enable the execution of the assignment contract, and under the same conditions and with the same responsibilities required of the controller. Once the assignment is completed, the data processor will return the personal data to the Controller and delete any copy they have.
On the other hand, only third parties with whom MALAGAFLAT has a legal or contractual obligation to provide them will have the right to access this personal data, including, for example, the Ombudsman and Judges and Courts interested in the procedures related to the claims presented.
RIGHTS OF THE INTERESTED PARTIES
The user may exercise at any time, in the terms established in the current legislation, the rights of access, rectification or deletion of data, request that the processing be limited, oppose it, request the portability of their data, as well as revoke the consent given, rights recognized in the aforementioned Regulation (EU). The exercise of these rights can be carried out by the user by contacting MALAGAFLAT at the address of its registered office indicated above; through sending an email to the following address info@malagaflat.com or to the postal address C/ Diputado Ignacio Huelin, 5. 29140 Málaga (Spain),
For the effective exercise of these rights, the user must prove their identity by providing their name and surname, photocopy of their ID or equivalent identification document that proves their identity, request specifying the application, address for notifications, and date and signature of the applicant.
Likewise, the user may file a complaint with the Spanish Data Protection Agency (Competent Control Authority in this matter), especially when they have not obtained satisfaction in the exercise of their rights, by writing to it at C/ Jorge Juan, No. 6, 28001 – Madrid, or through the website: https://www.agpd.es
