Privacy policy vacation home L’Escala, Costa Brava
Fundamentals
In this privacy policy, we inform you about which personal data we store, for what purpose and to what extent. Personal data is data that relates to you personally, such as your name, your address, your telephone number or your e-mail address. The controller within the meaning of this privacy policy is
Villa El Retiro
Frank Deussen
Haigerweg 14
40229 Düsseldorf
mail@villa-elretiro.es
www.villa-elretiro.es
Villa El Retiro takes your data protection very seriously and treats your personal data confidentially and in accordance with legal regulations. As new technologies and the constant further development of this website may result in changes to this data protection declaration, we recommend that you read through the data protection declaration at regular intervals.
Definitions of the terms used (e.g. “personal data” or “processing”) can be found in Art. 4 GDPR.
Access data
We, as website operators or the website provider, collect data about access to the website and store these as “server log files” on the website server. Legal basis Art. 6 para. 1 f) GDPR. The following data is logged in this way:
. Browser type/version
. Operating system used
. Name of the retrieved file
. Amount of data transferred
. Notification of successful retrieval
. Referrer URL (the previously visited page)
. Host name of the accessing computer (IP address)
. Time of the server request
This data cannot be assigned to specific persons. This data is not merged with other data sources.
The server log files are stored and deleted when they are no longer needed. The data is stored for security reasons, e.g. to be able to investigate cases of misuse. If data has to be deleted for reasons of proof, it is exempt from deletion until the incident has been finally clarified.
You can also visit this website without providing any personal information. However, we store your access data to this website (without personal reference) in order to improve our online offering. This access data includes, for example, the file you have requested or the name of your Internet provider. By anonymizing the data, it is not possible to draw conclusions about your person.
Collection and processing of personal data
Villa El Retiro only collects, uses and passes on your personal data if this is permitted by law or if you have consented to this.
You can also visit this website without providing any personal information. However, we store your access data to this website (without personal reference) in order to improve our online offering. This access data includes, for example, the file you have requested or the name of your Internet provider. By anonymizing the data, it is not possible to draw conclusions about your person.
We provide you with a contact form (processing of first name, last name, e-mail address, postal code, place of residence, telephone number, fax number, country, your particular interest, your request) or our e-mail address for the purpose of contacting us in order to be able to take advantage of an offer from us or so that you can obtain information in advance. It is up to you to decide whether you wish to provide us with further information/data in addition to the basic information (first name, surname, e-mail address and your request). Legal basis Art. 6 para. 1 b) GDPR.
With your contact details we can process your requests. We do not use this data for other purposes or pass it on to third parties without your consent.
Email contact
1. description and scope of data processing
You can contact us via the email address provided on our website. In this case, the user’s personal data transmitted with the email will be stored.
The data is used exclusively for processing the conversation.
2. purpose of data processing
In the case of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.
3. legal basis for data processing
The legal basis for the processing of the data, if the user has given consent, is Art. 6 para. 1 lit. a GDPR.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the email contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
4. duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. possibility of objection and removal
The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
You can revoke your consent at any time for the future by sending an e-mail to mail@villa-elretiro.es.
All personal data stored in the course of contacting us will be deleted in this case.
Contact form
1. description and scope of data processing
There is a contact form on our website which can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.
The following data is stored at the time the message is sent:
– Email address
– Name
– First name
– Telephone / mobile phone number
– Subject
– Message
– IP address of the calling computer
– Date and time of contact
Your consent is obtained for the processing of the data as part of the sending process and reference is made to this privacy policy.
Alternatively, you can contact us via the email address provided. In this case, the user’s personal data transmitted with the email will be stored.
The data is used exclusively for processing the conversation.
2. purpose of data processing
The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in the processing of the data.
The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
3. legal basis for data processing
The legal basis for the processing of the data, if the user has given consent, is Art. 6 para. 1 p. 1 lit. a GDPR.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 p. 1 lit. f GDPR. If the email contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 lit. b GDPR.
4. duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. possibility of objection and removal
The user has the option to revoke their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
You can revoke your consent at any time for the future by sending an e-mail to mail@villa-elretiro.es.
All personal data stored in the course of contacting us will be deleted in this case.
Use of cookies
1. description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
– Frequency of page views
– Use of website functions
The user data collected in this way is pseudonymized by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the user.
When accessing our website, the user is informed about the use of cookies for analysis purposes and his consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this privacy policy.
2. purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. This requires the browser to be recognized even after a page change.
We need cookies for the following applications:
When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done using cookies and so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information on this can be found in the following privacy policy. You can object to this analysis. We will inform you about the possibilities of objection in this privacy policy.
The user data collected by technically necessary cookies is not used to create user profiles.
These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 p. 1 lit. f GDPR.
3. legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 p. 1 lit. f GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR if the user has given consent to this. 1 p. 1 lit. a GDPR.
4. duration of storage, possibility of objection and removal
Cookies are stored on the user’s computer and transmitted by it to our site. As a user, you therefore also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be automated. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
If you use a Safari browser version 12.1 or higher, cookies are automatically deleted after seven days. This also applies to opt-out cookies, which are set to prevent tracking measures.
Use of Google Analytics
1. scope of the processing of personal data:
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and its representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). Google Analytics analyzes, among other things, the origin of visitors, the time they spend on individual pages and the use of search engines, thus enabling better monitoring of the success of advertising campaigns. Google places a cookie on your computer. This allows personal data to be stored and evaluated, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements have been displayed and whether the user has clicked on them) and also data from advertising partners (in particular pseudonymized user IDs). The information generated by the cookie about your use of this online presence is transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this online presence, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google has submitted to the Privacy Shield Agreement concluded between the European Union and the USA and is certified. This means that Google undertakes to comply with the standards and regulations of European data protection law. Further information can be found in the following linked entry: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
IP anonymization is active on this online presence. On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, to compile reports on the activities of the online presence and to provide other services related to the use of the online presence and internet usage to the operator of the online presence. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. Further information on the collection and storage of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de
2. purpose of data processing:
The purpose of processing personal data is to specifically address a target group that has already expressed an initial interest by visiting the website.
3. legal basis for the processing of personal data:
The legal basis for the processing is Art. 6 Abs. 1 S.1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.
4. duration of storage:
Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. Advertising data in server logs is anonymized by Google deleting parts of the IP address and cookie information after 9 and 18 months respectively.
5. possibility of objection and removal:
You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, by using the “Do Not Track” function of a supporting browser, by deactivating the execution of script code in your browser or by using a script blocker such as NoScript (www.noscript.net) or Ghostery (www.ghostery.com) in your browser. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de
Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de
Use of Contact Form 7
1. scope of the processing of personal data
We use the WordPress plugin Contact Form 7 from RockLobster LLC, Sakai 810-0001 Fukuoka Prefecture Chuo-ku Tenjin 1-chome 8-1, Fukuoka City Hall, Japan (hereinafter: RockLobster) to manage contact forms on our online presence. Entered form data is transmitted by email. This allows personal data to be stored and analyzed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) and device and browser information (in particular the IP address and operating system). Data may be transmitted to RockLobster servers in Japan. With regard to Japan, there is an adequacy decision of the European Union. You can find it here: https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=OJ:L:2019:076:TOC
Further information on the collection and storage of data by Contact Form 7 can be found here: https://contactform7.com/privacy-policy/
2. purpose of data processing
The use of the Contact Form 7 plugin serves to improve the user-friendliness of our online presence. We use this plug-in to easily create, integrate and present contact forms in an appealing way.
3. legal basis for the processing of personal data
The legal basis for data processing is Art. 6 para. 1 S.1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.
4. duration of storage
Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.
5. possibility of objection and removal
You can prevent the collection and processing of your personal data by Contact Form 7 by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or using a script blocker such as NoScript (www.noscript.net) or install Ghostery(www.ghostery.com) in your browser. Further information on objection and removal options vis-à-vis Contact Form 7 can be found at: https://contactform7.com/privacy-policy/
Rights of the data controller
As the data subject, you have the right to receive information free of charge upon request (verbally or in writing) as to whether “yes” or “no” and, if “yes”, which personal data about you has been stored:
what data, for what purpose, for how long, who can view it, where does the data come from?
This feedback may be max. 1 month, in exceptional cases even longer, and is made in writing by secure means (by post or, if available, by encrypted e-mail).
You also have the right to have incorrect data corrected and to have the processing of your personal data restricted or deleted. If applicable, you can also assert your right to data portability. If you believe that your data has been processed unlawfully, you can lodge a complaint with the competent supervisory authority.
State Commissioner for Data Protection and Freedom of Information NRW
P.O. Box 200444
poststelle@ldi.nrw.de
Kavalleriestraße 24
40213 Düsseldorf
Deletion of data
If your request does not conflict with a legal obligation to retain data (e.g. minimum data retention period under tax law and commercial law of 6 or 10 years), you have the right to have your data deleted. Data stored by us will be deleted if it is no longer required for its intended purpose and there are no statutory retention periods. If deletion cannot be carried out because the data is required for permissible legal purposes, data processing will be restricted. In this case, the data will be blocked and not processed for other purposes.
Right of objection
Users of this website and other Villa El Retiro services may exercise their right to object to the processing of their personal data at any time.
If you would like a correction, blocking, deletion or information about the personal data stored about you, or if you have questions regarding the collection, processing or use of your personal data or would like to revoke your consent, please contact the following e-mail address: mail@villa-elretiro.es
The legal basis for the rights of the data controller is Art. 15-21 GDPR.
Further questions
Did our privacy policy not answer one of your questions? Would you like more information on a specific point? Then please let us know. We will be happy to provide you with further information at any time. For all inquiries regarding data protection, please contact the following e-mail address: mail@villa-elretiro.es.