Privacy Policy
In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, regarding the protection of data of natural persons with regard to the processing of personal data and the free movement of the same and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights, we detail the Privacy Policy.
We reserve the right to modify this Privacy Policy to adapt it to new legislation, jurisprudence or interpretation of the Spanish Agency for Data Protection. In this case, said changes will be announced, clearly indicating the modifications made in advance, and requesting, if necessary, the acceptance of said changes.
The User agrees that all the data provided by him are true and correct.
WHAT KIND OF DATA ARE WE GOING TO USE?
Identifying data.
FOR WHAT PURPOSES ARE WE GOING TO USE USER DATA?
- In the case of making a reservation, we will treat the data collected from the sale forms in order to provide the service.
- To answer the queries of the Users who contact us through the Contact forms or Forms enabled for it.
- For fiscal, accounting and administrative management in order to be able to manage the service that the User requests and the corresponding legal obligations that give rise to the service provided.
- By sending us the CV for personnel selection processes.
- If the User accepts cookies, data such as IP address, geolocation, service use record, sites and habits will be collected, in order to improve the quality of the service / product and for statistical purposes.
- In the case of Users with whom there is a contractual relationship, we can send commercial advertising communications related to products or services similar to those that were initially contracted by e-mail, fax, SMS, MMS, social communities or other electronic or physical means.
WHAT ARE THE LEGITIMATE BASES FOR THE TREATMENT?
We may process the User’s personal data due to a legitimate interest, regarding the service we provide and the sending of personalized commercial communications or newsletters, both by ordinary and electronic means, regarding our services.
When the basis of the treatment is consent, we will request acceptance as a legitimate basis for using the data. Taking into account that the User may revoke it at any time by sending us a message to info@ercst.org
HOW LONG WILL WE KEEP USER DATA?
We will keep the User’s personal data in our information systems as long as they are necessary, continue the relationship as a client and to comply with legal obligations.
TO WHOM CAN WE COMMUNICATE USER DATA?
User data will not be transferred to third parties except in cases where there is a legal obligation, we are expressly authorized to do so and / or when necessary to comply with the contract agreed to provide our services.
In order to manage the services and / or products that you request, in some cases, it will be necessary to transfer the data to companies of the same group and / or service providers, for administrative purposes, storage or to support communication.
Data transfers outside the European Union are not foreseen, except in cases where the User expressly authorizes us to manage the service we offer.
HOW CAN THE USER EXERCISE THEIR RIGHTS?
The User can exercise their rights of access, rectification, opposition and deletion of their data, as well as request their limitation and portability to the following email: info@ercst.org
In the following cases:
- To rectify inaccurate data or, where appropriate, request its deletion (right to be forgotten) when, for example, you have withdrawn your consent. In that case, we will only keep them for the exercise or defense of claims and / or for the fulfillment of a legal obligation.
- To request the limitation of data processing when, for example, the data is no longer necessary for the purposes for which it was collected.
- To request the portability of the User’s data in an automated format that allows its copying, transfer and transmission, when the treatment is carried out by automated means.
- You can also complain to the Control Authority (Spanish Agency for Data Protection www.agpd.es)
WHAT KIND OF DATA IS NECESSARY?
The non-mandatory nature will be communicated in the forms that are on the web, with respect to the collection of some data, except in the fields indicated otherwise by a (*). Failure to fill in said data may prevent the provision of all those services linked to such data, freeing us from all responsibility for the non-provision or incomplete provision of these services.
