Privacy policy - Spa Jardines de Albia

Purpose

With this “Legal Information”, SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) aims to communicate to users of its website the personal data protection policy it has in place, thus complying with the principles on provision of information that Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter, the GDPR), the Spanish Data Protection Act 15/1999 of 13 December (hereinafter, LOPD), and Act 34/2002 of 11 July on Information Society Services and Electronic Commerce (hereinafter, the LSSI) recognise for all users (data subjects).

Identification Data

Pursuant to the provisions of Article 10 of Act 34/2002 of 11 July on information society services and electronic commerce, the following information is reported:

Data Controller’s details

Website owner: Gestión y Desarrollo Bilbaína de Hoteles, S.L. (SPA Jardines de Albia).
C.I.F. (Tax Identification No.): B-95746939
Registered offices: C/ San Vicente, Nº6. 48001 Bilbao.
E-mail: recepcion@spajardinesdealbia.com
Phone number: 944.355.026
Registry details: Company Registered in the Companies Register of Bizkaia. Volume 5415 – Page 186 – BI63362 1st entry.

Personal data protection

a) What personal data do we process? - categories of data.

The Company collects personal data through this Website:

When you fill in a form (for example, to contact us, register etc.); and
Automated, through the use of cookies or similar technologies: you can find more information in our Cookies Policy.

This Website helps you provide the following personal data, as well as other data:

Your first name and surname(s) and contact information (address, telephone numbers and email address).
Other contact information, preferences and personal characteristics, including selective data on your health.

The data requested is considered necessary in order to manage and provide the services offered by our Company, to answer your queries and requests, and to manage the commercial relationship that may be established; we would not be able to provide our services (or do so optimally) if the personal data requested in each of the forms available for this purpose were not provided. In any case, the forms available on the website indicate the data that is considered strictly necessary for the provision of the service requested by the user.

b) How do we use your personal data? – Purposes of the processing.

We process the personal data we collect to:

Answer your queries and requests (e.g. queries about the SPA’s services, treatments etc.).
Manage and improve the activities carried out by our Company, as well as our relationship with you (e.g. vouchers, offers etc.).
Manage electronic commerce operations that may be carried out (e.g. shopping basket).
Answer your questions or respond to claims.
Conduct satisfaction surveys.
Send commercial communications about our products and services in line with electronic commerce regulations.
Comply with the legal obligations associated with the marketing of a service, respond to information requests in the case of legal proceedings or orders from government authorities or other third parties, in order to detect and prevent fraud, or to protect your interests, our interests or those of third parties.
Operate this Website, personalise your experience and understand how this Website is used and how we can improve it.

Additionally, we may combine and analyse your personal data (using non-automated techniques that use current and historical data) to:

Help us develop and improve our products, processes, services and marketing strategies.
Personalise our products and services.
Manage and improve our relationship with our clients and users of this Website (e.g. vouchers, offers etc.).

c) Under what legal bases do we process your personal data? - Legal basis for the processing.

When the processing is necessary to fulfil a contract or contracts to which you are a party or the data is necessary under a pre-contractual relationship. These contracts could include, for example, the provision of a SPA treatment service, or when you participate in a prize draw or offer.
When the use of your personal data is necessary for the purposes of our legitimate interests or those of the organisation with which we have shared your personal data and we have ensured that your personal data and your rights in relation to the same are protected. For example, we may use this legal basis if we use your personal data to improve our products and services, or the care provided during the same; to adjust treatments to your physical characteristics or health situation; to help find out what information, products and services are most likely to interest you and to send or show you information, offers and online ads for these products or services; to ensure that our products and services are provided and used in accordance with the law and the terms and conditions that apply to them; and when necessary, to protect or defend our rights or property or those of third parties, and to detect, prevent or manage fraud, security, protection or privacy issues.
When the processing of the data is necessary to be able to comply with the regulations governing the legal obligations of the provider and the seller in force at any given time, including those relating to the placing of products and services on the market, consumer and user defence, product safety and the provision of services related to the marketing of therapeutic or aesthetic treatment services etc.
In accordance with the provisions of applicable regulations on Information Society Services, if a prior relationship exists in the context of the sale of a product or service of SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.), the data may be used to send commercial communications concerning the Company’s products and services that are similar to those under the contract, unless you object to this in the manner provided for this purpose. This includes, but is not limited to, information that may be sent by post or email.
When we consider that it is necessary to process your personal data to comply with a legal or regulatory obligation.
When we have your consent, for example, to collect technical information such as data from cookies and similar technologies as is described in the Cookies Policy, to use said data to send you commercial communications by email and text message. If we use your consent as the basis for processing your personal data, you have the right to withdraw said consent at any time.

d) What is the retention period for your data? - Data retention period.

We will retain your personal data in a form in which we can identify you for as long as it is necessary to fulfil the indicated purposes and comply with our legal obligations. In general, this purpose includes the following situations:

Your personal data is reasonably necessary to provide you the services you have requested from us.
Your personal data is reasonably necessary to protect and defend us against claims (generally during the statute of limitations).
When we are required to retain your personal data under current regulations that apply.

SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) will delete the data collected when it is no longer necessary or relevant for the purpose for which it was collected or registered. In the event that the data collected is going to be used for a purpose other than that for which it was collected, users will be informed and their prior consent for such processing obtained.

e) Who do we share your personal data with? - Data transfer.

Your personal data may be communicated by SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) to:

Companies and other organisations that have been contracted to provide services, such as web hosting, marketing services, market analysis and information society services.
Providers of professional services related to the treatments being provided, when their specialisation requires it.
Other professional services, such as lawyers, insurance or other similar professionals.
Public bodies, courts, regulators and other government authorities, when we consider it necessary to comply with a legal or regulatory obligation, or otherwise for protection against claims against us or third parties, or for personal safety, as well as to prevent, or otherwise fight, against fraud or for security or protection reasons.

In such cases, we will ensure that your data is used for appropriate purposes in accordance with this Privacy Policy and the corresponding contracts or clauses for the data processing will be signed, applying the same or similar security measures to those applied by SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.).

Your rights

Users of the WEBSITE http://www.spajardinesdealbia.com/ may exercise their rights regarding data protection at any time, this includes:

Right of access. You can ask the Company if it is processing your data and how.
Right to rectification. You can ask us to update your personal data if it is incorrect, or to delete it if you wish.
Right to restrict processing. In this case, the data will only be retained by the Company for the exercise or defence of claims.
Right to object. Following your request to object to processing, the Company will stop processing your data as you have requested, unless it still needs to be processed due to compelling legitimate grounds or for the exercise or defence of possible claims.
Right to data portability. If you want your data to be processed by another company, the portability of your data to the new data controller will be arranged.
Right to erasure. You can request that we delete your data when it is no longer necessary for the processing, you withdraw your consent, if the processing is unlawful or there is a legal obligation to do so. We will analyse the case and apply the law.

Likewise, if you have consented to the sending of commercial communications from SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.), you can withdraw your consent at any time.

If you do not wish to continue receiving commercial communications or would like to exercise any of the aforementioned rights with SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.), please send a letter stating your full name, along with a copy of your national ID card (DNI) or similar identification document, and the right you wish to exercise over your personal data as follows:

Email: recepcion@spajardinesdealbia.com.
Post: Ref. RGPD. SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.). C/ San Vicente, Nº6. 48001 Bilbao.

If you have any questions about how to exercise your rights, please call 944 355 026.

To cancel electronic commercial and/or marketing communications, you can email recepcion@spajardinesdealbia.com directly to request such cancellation, or use the link included in each of the communications you receive.

The Spanish Data Protection Agency’s website (www.aepd.es) provides additional information concerning your rights and how you can exercise them. Likewise, if you believe that we have not processed your personal data in accordance with the regulations, you can file a claim with the Spanish Data Protection Agency (www.aepd.es).

Data collection and quality

Users of the WEBSITE www.spajardinesdealbia.com will be solely responsible for the veracity and accuracy of the data provided; SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) acts in good faith as a mere service provider. In the event of having been provided false data or a third party’s data without their consent, SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) reserves the right to immediately destroy said data in order to protect the rights of the data subject(s).

In compliance with the principle of data quality, set out in Art. 5 of the GDPR, the user undertakes to provide true, accurate, complete and up-to-date data, in such a way that it correctly represents the user’s situation.

Likewise, the user undertakes not to provide personal data relating to third parties through the forms available on this Website.

In any case, the use of the Website by minors under 14 is prohibited. Consequently, the user states and guarantees that they are at least that age.

Intellectual and industrial property

The content, images and logos shown on the web pages are the property of SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.). Their use, transfer or reproduction – whether in whole or in part – is prohibited, even if the source is cited, without the appropriate authorisation.

The User undertakes to respect the industrial property rights of SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.). The use or granting of access to the Website does not imply the granting of any rights whatsoever over the trademarks, trade names or any other distinctive signs used therein.

The content accessed through this Website is the property of SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.). None of the exploitation rights that exist or may exist over said content may be understood as transferred to the user, under the provisions of this Legal Notice, beyond what is strictly necessary for appropriate use of the Website and its services.

The total or partial reproduction of the content of this Website, its modification and/or distribution is prohibited without citing the source and requesting prior authorisation.

Security Measures

SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) is committed to complying with its obligation of secrecy of personal data and its duty to store it securely, and will adopt all the technical and organisational measures needed to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the stored data and the risks to which it is exposed, all in accordance with the provisions of Regulation (EU) 2016/679 (GDPR), and the applicable Data Protection regulations in force.

Liability

SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) makes every effort to avoid any errors in the content of the website, but does not guarantee it is error free or accept any liability for any possible errors in said content. Thus, our company accepts no liability for damages of any kind that could possibly arise from an interruption to the operation or lack of availability of access to the Website, the privacy and security in the User’s use of the Website, unauthorised access by unauthorised third parties, or the accuracy, completeness and timely updating of the content of its Website.

Likewise, SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) may not be held liable for any misuse of the content displayed on these web pages and reserves the right to update, delete, establish limitations or restrict access to them at any time, both temporarily and permanently.

SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) may remove unlawful or allegedly unlawful content from the Website without prior notice.

Cookies

The SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) Website uses cookies (small information files that the server sends to the computer of the person accessing the web page) so the user can use and view the Website correctly, as well as for statistical purposes and to analyse user browsing habits. Please see our Cookies Policy for more information.

Links (hyperlinks to other websites and social media)

This Website may contain links to other third-party websites, which are beyond our control and are not covered by this Privacy Policy. If you access third-party websites through these links, their operators may collect your data for use based on their privacy policies, which may differ from ours.

SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) does not assume any liability for the content, information or services that may appear on said websites, which will be for information purposes only and under no circumstances imply any relationship whatsoever between SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) and the persons or entities that own such content or the owners of the websites where it can be found.

Likewise, SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) hereby states that the use of links directed to our Website without our prior consent is strictly prohibited. SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) accepts no liability for the content of any web pages that include links to our Website.

Likewise, this Website could offer the opportunity to share or follow information about the Company, the Website or the products and/or services offered through social media functionalities (such as ‘Share’, ‘Like’ or ‘Follow’).

This functionality is offered to generate the interest of social media users in the Website, as well as to let users share and track opinions, news and recommendations on the Website with their contacts. You should be aware that if you share information on social media, such information could be collected by the social network service provider and made public, including through automated mechanisms.

Consequently, you should carefully read the privacy policy or similar policy of any websites you access or social media with which you share information to be sufficiently aware of the consequences that could arise from doing so.

International personal data transfers

The personal data is exclusively processed within the European Union, and no international data transfers (outside the European Union) are planned.

Updates to this Privacy Policy

SPA Jardines de Albia (Gestión y Desarrollo Bilbaína de Hoteles, S.L.) reserves the right to modify this Privacy Policy in accordance with the legislation applicable at any given time, with effect from the date of publication of said modification. If we make significant changes to the way we use your personal data we will clearly notify you on this website or contact you directly. If you do not agree to any such changes, please do not continue to use this Website.

Applicable Law and Jurisdiction

Spanish legislation will apply for the resolution of any disputes or issues relating to this Website or the activities carried out on it, to which the parties expressly submit; the competent courts for the resolution of any disputes arising or relating to the use of this Website will be the Courts of Bilbao.