Who is responsible for processing your data?

The data controller for the processing activities related to the management of our users, clients, or suppliers is Raquel Cerezo Rodríguez, with address at C/ Real 46, Quintanar de Rioja, 26259, La Rioja, and Tax ID (NIF) 16587598K.

For the purposes of this document, the contact telephone number is +340619 95 86 20 and the contact email address is info@casaruralelhayedo.es.

What type of data do we hold about you and how have we obtained it?

The categories of personal data that our company processes in relation to our clients and suppliers are:

• Identification data
• Professional data such as job title, skills, etc.
• Postal or email addresses
• Commercial information
• Economic and transaction data

We do not process any specially protected data.

All the data mentioned above has been obtained either directly from you through the submission of a contact form or the presentation of a commercial offer, contractual proposal, etc., or through your company by providing us with identification data and any other information necessary to carry out the purpose of the contractual relationship between the parties. You or your company are obliged to provide us with updated data in the event of any changes.

For what purpose do we process your data?

We process the data provided by interested parties in order to manage various activities derived from specific procedures relating to sales, after-sales service, supplier management, service quality, etc. In this way, we will use your data to carry out some of the following actions:

a) Sending the information you request through the contact form on our website or through any other means of contacting our company.
b) Providing potential clients as well as our clients with offers for products and services that may be of interest.
c) Carrying out the administrative, tax, and accounting management of our clients and/or suppliers.
d) Conducting satisfaction surveys, market studies, etc., in order to offer you the most suitable offers and an optimized quality of service, etc.

We will not create commercial profiles based on the information provided and, consequently, we will not make automated decisions about you based on a commercial profile.

How long will we keep your data?

Personal data relating to individuals linked to potential clients, clients, and suppliers that is collected through the different contact and/or information collection forms will be kept unless the data subject requests its deletion. Data provided by our clients and suppliers will be kept for as long as the business relationship between the parties is maintained, while in all cases respecting the minimum legal retention periods applicable to the relevant matter.

In any case, we will keep your personal data for the period of time that is reasonably necessary, taking into account our need to respond to queries, resolve problems, implement improvements, activate new services, and comply with applicable legal requirements. This means we may retain your personal data for a reasonable period even after you stop using our products or stop using this website. After this period, your personal data will be deleted from all our company systems.

What is the legal basis for processing your data?

Depending on the type of data processing, we summarize below the legal basis for such processing:

With regard to the legal bases mentioned above, you are required to provide the personal data. If you do not provide your personal data, it will not be possible to perform your contract, comply with legal obligations, or meet requirements from public authorities.

To which recipients will your data be disclosed?

Our company will never share your personal data with any third-party company that intends to use it for direct marketing purposes, except where you have expressly authorized us to do so.

We inform you that we may provide your personal data to Public Administration bodies and competent authorities where we receive a legal request from such authorities or where, acting in good faith, we consider that such action is reasonably necessary to comply with a judicial proceeding; to respond to any claim or legal action; or to protect the rights of our clients and the general public.

We inform you that your data will not be transferred or disclosed to third parties, and our company is solely responsible for its processing and safekeeping.

What are your rights as a data subject or interested party?

Anyone has the right to obtain confirmation as to whether or not we are processing personal data concerning them.

In particular, data subjects may request the right of access to their personal data, as well as to receive it in a commonly used, machine-readable format where the processing is carried out by electronic means (right to data portability).

Likewise, data subjects may request the rectification of inaccurate data or, where applicable, request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In addition, in certain circumstances, data subjects may request the restriction of the processing of their data, or in certain circumstances and for reasons related to their particular situation, data subjects may exercise their right to object to the processing of their data. Our company will stop processing the data except for compelling legitimate reasons, or for the exercise or defense of potential claims, or in those exceptions established by the applicable regulations.

We also inform you that you have the right to withdraw any consents given at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Users are also informed that they may exercise the aforementioned rights at any time by writing to us using the contact details provided in Section 1, “Data Controller”, of this Data Protection and Privacy Policy, attaching a copy of their ID document. You also have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos), especially where you have not obtained satisfaction in the exercise of your rights.

Spanish Data Protection Agency (Agencia Española de Protección de Datos).
C/ Jorge Juan, 6
28001 – Madrid
Tel. 901100099 / 912663517

Data protection for website users.

In accordance with Regulation (EU) 2016/679, we inform you that the personal data of website users will be processed for the processing activity indicated in each data collection form on our website by the company. Such processing of your data is based on your consent. By clicking the “SEND” button, the user consents to the processing of their data by our company.

We also inform you that, except where there is a legal obligation or your express consent, our company will not transfer your data to third parties.

Likewise, the user is informed that they may at any time exercise their rights of access, rectification, or erasure, as well as other rights recognized in this document and regulated in Regulation (EU) 2016/679, by notifying the owner.

Furthermore, in accordance with Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, our company undertakes not to send advertising by email without first obtaining the recipient’s express authorization. The user may object to receiving advertising by ticking the corresponding box.

Other information of interest about our privacy policy

Security Measures

Our company adopts the security levels required by current European and Spanish data protection regulations, taking into account the state of the art, implementation costs, and the nature, scope, context, and purposes of the processing described, as well as the risks of varying likelihood and severity to your rights and freedoms as an individual.

Processing of minors’ data

Under the EU GDPR 679/2016 and Royal Decree 1720/2007, minors over 14 years of age may consent to the contracting of information society services, such as registering on a forum, completing a contact form, etc. However, it is the responsibility of the person collecting the data to verify the truthfulness of the minor’s stated age.
For the processing of data of minors under 14 years of age, such data collection will always be carried out with the express consent of parents or legal guardians.

Changes to our Data Protection and Privacy Policy

Occasionally, our company may make changes and corrections to this section of the Data Protection Policy for users, clients, and suppliers. Please check this section regularly to review any changes that may have been made and how they may affect you.

Why is it necessary to accept this Data Protection and Privacy Policy?

This Data Protection Policy section for users, clients, and suppliers provides, in an easily accessible manner, all the information you need to understand the types of data we hold about potential clients, clients, and/or suppliers, the purposes pursued, the rights that data protection regulations grant to you as a data subject, and how to exercise those rights. Therefore, by deliberately sending your personal data through our contact methods and/or by starting a business relationship with our company, we consider that you acknowledge and accept the processing of your personal data as described in this policy. This personal information will only be used for the purposes for which you provided it, or as permitted by certain national or regional regulations.

In any case, we must warn you that refusing to provide certain requested data could hinder the development of the contractual relationship between the parties, with possible serious consequences when providing the various services contemplated in the business contract entered into with the contracting party.

If you have any questions regarding this section of the Data Protection Policy for Potential Clients, Clients, and Suppliers of our company, please contact the company using the address provided in the first section, “Data Controller”, and we will be happy to assist you and respond to any additional questions you may have.

Applicable Legislation

These Terms shall at all times be governed by the provisions of Spanish and European legislation on the protection of personal data and privacy.