Privacy policy

STATEMENT REGARDING THE PROCESSING OF PERSONAL DATA

The protection of personal data in the online environment has become a legally regulated and mandatory requirement. Any controller must inform the client/collaborator about the processing of personal data and guarantee that such data is kept safe.

-, headquartered at C. Fotógrafos Darblade, 22, registered with the Trade Register under number -, VAT ID -, as controller, hereby informs you about the processing and storage of your personal data transmitted through operations related to the provision of services and products.

WHAT IS PERSONAL DATA

– information regarding an identified/identifiable natural person: surname, first name, address, email, telephone number, signature, financial information, information requested by authorities specific to the provision of services and products, information from audio-video monitoring following the client’s visit to a location where - services are provided, audio-video monitoring during technical support services, IP address, any other information required for the activity of -.
– any action (set of actions), such as collection, recording, organization, storage, adaptation or modification, extraction, consultation, use, disclosure to third parties by transmission, dissemination, alignment or combination, blocking, archiving, deletion, destruction, which operates on data, may fall within the scope of personal data, directly or indirectly.

COLLECTION OF INFORMATION

Sources for collecting information:
1. when https://arluxuryapartment.es/ is used or applications of - are used, users may be asked to complete forms or questionnaires, without obligation to accept, required for the provision of services;
2. direct and indirect transactions between -, partners, and users;
3. external sources specific to public institutions.

How we collect personal data from users of https://arluxuryapartment.es/
– directly;
– using the user’s browser and traffic data;
– using cookies.

1. Direct collection of personal data.
A1. Placing an order with or without account creation on https://arluxuryapartment.es/ may require surname, first name, address, email, and any other data required for contracting, invoicing, and delivery.
• contractual data is kept for 3 years, according to the general limitation period;
• tax data is kept for 10 years, according to tax legislation;
• orders cannot be processed without the data mentioned above.

A2. As part of the support services offered, we may ask you to provide your telephone number or email address so that we can contact you in order to resolve your issue. Where necessary, other data that falls within the category of personal data may also be requested. Communication within the support services of https://arluxuryapartment.es/ may be recorded.

A3. Newsletter subscription requires you to provide an email address for personalized communication, with storage ceasing once consent is withdrawn.

A4. Payments made into our account are processed by our banking partners, and banking information is transmitted to them.

2. Collection of personal data using traffic data

During your visit to https://arluxuryapartment.es/ from any device, you provide information such as your IP address, visit time, location, and pages visited. External traffic analysis services, such as Google Analytics, are used exclusively by https://arluxuryapartment.es/ to improve services and to ensure and maintain website security.

3. Collection of data through cookies, both session and fixed cookies
Cookies are used to remember passwords, language preferences, filters for the protection of minors, accepted types of advertisements, or advertisement limitation.

FOR WHAT PURPOSES DOES - PROCESS PERSONAL DATA

- identifies, through the fixed means defined above, potential users who access the services provided, monitors related operations, conducts surveys and/or profiles within marketing activities, and performs internal analyses specific to the services provided. - also processes personal data in order to resolve various legal procedures related to the provision of services, with archiving carried out both physically and electronically. Certain legally regulated Romanian state institutions may request reports containing personal data.

ON WHAT LEGAL BASIS IS PERSONAL DATA PROCESSED

The law defining the General Data Protection Regulation has been promulgated and produces effects in Romania as follows:
– Art. 6(1)(b) GDPR refers to the collection of personal data through the order form;
– Art. 6(1)(c) GDPR refers to mandatory data required for issuing invoices;
– Art. 6(1)(a) GDPR requires consent for the use of personal data for marketing purposes, such as newsletter subscription, cookies, etc.;
– Art. 6(1)(f) GDPR and Law 506/2004, Art. 12(2), refer to the legitimate interest of https://arluxuryapartment.es/ in securing and optimizing its own website, according to Recital 49 GDPR.

COMMUNICATION OF PERSONAL DATA IS MANDATORY FOR THE USER,

as refusal makes it impossible to provide services. The user has the right to refuse the processing of data for direct marketing purposes.

RECIPIENTS OF PERSONAL DATA

We have specified above the purposes for which personal data is collected. At the same time, where truly necessary, - may make available to legal authorities and contractual partners various limited personal data of users, which the latter undertake not to use for any other purpose, such as public authorities, auditors, lawyers, accountants, and companies that are part of the - group.

Based on Law no. 2016/679 (GDPR) adopted by the European Parliament, there is the possibility of TRANSFER OF PERSONAL DATA OUTSIDE THE COUNTRY.

Personal data may be stored for as long as the law provides, respectively 3 years for contractual data storage and 10 years for financial data storage. Data processing may take place until the purpose for which it was collected has been achieved, after which the data will be archived or destroyed.

MEASURES REGARDING THE SECURITY OF PERSONAL DATA PROCESSING

– maintaining data confidentiality is mandatory, which is why users use their own username and password;
– any user who accesses/collects/modifies personal data is recorded with the date, time, and operation performed;
– only authorized users have the right to print invoices, delivery notes, contracts, and other documents containing personal data.

The user or potential user affected by personal data processing has the following rights:

  1. The right to be informed about data collection, according to Art. 13 and 14 GDPR;
  2. The right to access processed data – Art. 15 GDPR;
  3. The right to request modification or even deletion of data – Art. 17 GDPR, except for the cases provided by law;
  4. The right to request minimal processing or to refuse the processing of personal data – Art. 18 GDPR;
  5. The right to transfer data to another controller – Art. 20 GDPR;
  6. Withdrawal of the right to process data after consent was initially given;
  7. Refusal of data processing for marketing purposes and profiling;
  8. When the user feels wronged, the user has the right to contact ANSPDCP or to address the competent court.

- RESERVES THE RIGHT TO MAKE CHANGES TO THIS STATEMENT REGARDING THE PROCESSING OF PERSONAL DATA WITHOUT PRIOR NOTICE, BY PUBLISHING THE UPDATED VERSION ON THE WEBSITE.

Any notification may be sent electronically to info@arluxuryapartment.es or in writing to the address: C. Fotógrafos Darblade, 22