1. RIGHT OF INFORMATION
This data protection policy aims to regulate the access and use of the services of the Website www.ecoturismosierranevada.com, (hereinafter “Website”) which the Association Forum of the European Charter for Sustainable Tourism of the Sierra Nevada (hereinafter referred to as “provider”) makes available, for free, to the Internet users (hereinafter referred to as “users”) interested in them as well as in its contents.
Subject to the provisions of the Organic Law 15/1999 of 13 December on the Protection of Personal Data (hereinafter “LOPD”) and its implementing regulations, Royal Decree 1720/2007 of 21 December, the Provider, as the owner of the Website, makes known to the user the existence of personal data files created by it and under its responsibility. Also, in compliance with article 26 of the LOPD, and following the guidelines of the General Registry of Personal Data of the Spanish Data Protection Agency, the supplier has registered, in the latter, the aforementioned files, to which has assigned the corresponding registration code.
In the same way, the provider informs the user that such personal data are hosted on a server located within the European Union, with the hosting company Linode, LLC acting as entity in charge in the treatment of said data, an American entity adhering to the “Safe Harbour Principles”, recognizing in this way the Spanish Data Protection Agency.
The user accepts all of the above voluntarily, expressly, unequivocally, and without any reservations.
2. RIGHT TO ACCESS, RECTIFY AND CANCEL DATA
The user has the right to access this information, to rectify it if the data is wrong and to unsubscribe from the services of the provider.
Asociación Foro de la Carta Europea de Turismo Sostenible de Sierra Nevada
C / Barrio, 35
Beas de Granada, 18184, Spain
They will do so through a letter, sent to that address, indicating the subject of reference. The user shall also send an email to firstname.lastname@example.org, providing in both cases a photocopy of his or her national identity document, passport or other valid document that may identify the user. In the event of deciding to exercise these rights and if the e-mail provided as part of the personal data provided by the user appears there, we would be grateful if, within the said communication, that circumstance would be specifically stated, and that it indicated the e-mail address with respect to which the rights of access, rectification, cancellation and opposition are being exercised.
The provider reserves the right to modify this Policy to adapt it to future legislative or jurisprudential developments.
The data that the registered user facilitates through a form provided to that purpose on the Website are collected by the provider with the following purposes:
– To elaborate a detailed profile of the user for him or her to enjoy the service offered by the provider.
– To send informative and promotional electronic communications about the service provided by the provider.
– To participate in the various services that the Website makes available to the registered user. Among others:
– To evaluate the suggestions received.
– To establish direct contact with the contact person assigned by the provider.
– To manage the communication system that the Website makes available to the user.
– Other services offered by the Website.
In addition, the provider may obtain information about the registered user through the opinions expressed by him or her, the use of the various functions of the community, or the administration and use of the Website by the user. Likewise, the correspondence that the user sends to the provider can be stored and evaluated.
The provider conducts these internal investigations regarding the demographics, interests and behaviour of the user. These investigations are based on the personal information provided during registration or during tasks performed by users. The only purpose of this activity is to perform an analysis to better understand and optimise what our users demand.
5. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER AND THE TRUTHFULNESS OF THE SAME
In the registration form that the provider makes available to the user there are certain fields whose completion is strictly necessary to be able to provide the service that the Website makes available to the registered user. The inclusion of data in the remaining non-mandatory fields remains voluntary.
The user guarantees that the data provided to the provider is true and is responsible for keeping them up to date and communicating any changes in relation to them.
Likewise, the user guarantees that all personal information provided is accurate and up-to-date in a way that responds truthfully to the current situation of the same. It is the obligation of the user to maintain, at all times, his or her data updated. The user is the sole party responsible for the inaccuracy, falsehood or illegality in which the data may incur and for any damages that it may cause to the supplier or third parties with respect to the use of the services offered by the provider.
6. UTILISATION OF THE WEBSITE BY MINORS
The service offered by the provider is exclusively aimed at users over 14 years of age. Minors under this age are not allowed to access them.
However, the provider requires users between the ages of 14 and 18 to inform and consult with their parents or legal guardians about the possibility of using the services offered by the Website. In this way, the user and, if applicable, their parents or guardians will be solely responsible for the damages caused to third parties by the publication of contents or images that contravene the legality and the present General Conditions of Use.
Notwithstanding the foregoing, the provider reserves the right to verify, by appropriate means, the actual age of any user registered on the Website. If the provider has the slightest suspicion that a registered user is under 14 years and that the data entered in the registration form is false, the provider may remove or block that user profile, preventing access to the services offered.
This same right of cancellation or unilateral suppression may be exercised by the supplier on those registered users who, in any way, damage the stability of the community or the Website.
7. DATA PROVIDED BY MINORS
Those over fourteen years of age may register on the Website as users, provided they guarantee the accuracy and truthfulness of the information provided and act with the prior and express consent of their parents or guardians, for the processing of their personal data, and they manifest this when completing the subscription form.
In no case shall the data concerning the professional, economic or intimate status of the other family members be collected from the minor without the consent of the other members of the family.
If you are a minor and you are visiting this Website without the knowledge and approval of your parents, you should not register as a user.
8. USER CONSENT
The action of sending personal data through the electronic form that the provider makes available to the user to allow registration, or, as the case may be, through e-mail messages, implies the express and unequivocal consent of the sender to the automatic processing of the data included in the means indicated, to all actions of a functional nature that may be necessary for the correct provision of the service offered by the supplier, as well as the to the sending of electronic communications, of an informative and commercial nature, with the products, initiatives and services of the provider.
9. CONTROL OF THE PRIVACY OF THE USER MEMBER OF THE WEBSITE
The user authorises the provider to access his/her personal data provided in the electronic registration form, with the purpose and effect of offering specific suggestions that are suited to the user’s profile.
10. ELECTRONIC COMMUNICATIONS
By completing and sending the electronic form of the Website, the user consents, expressly and unequivocally, to receive an electronic newsletter that includes the most relevant news, information and news on the Website. The newsletter may also include any other type of communication, whether commercial or informational, related to the services of the provider.
The provider establishes a mechanism by which users who request it can modify or delete these services in a simple, fast and free way. For this purpose, the user may exclude this service following to the instructions indicated in the footer of the body of said electronic communication.
The provider informs its users that it has adopted the technical and organisational measures established by regulations that guarantee the security of personal data, preventing its alteration, loss, treatment or unauthorised access, taking into account the state of the technology, the nature of the data stored and the risks to which they are exposed, all in accordance with the provisions of the Royal Decree 1720/2007 of 21 December, which approves the Regulation to implement the Organic Law 15/1999 of 13 December on the Protection of Personal Data and other control procedures for the security of information systems.
12. COOKIES AND IPS
The provider does not use “spamming” techniques and will only use the data that the user provides through the electronic form enabled on this Website or in e-mails (commercial communications).
The usage of these personal data, as well as the sending of commercial communications carried out by electronic means (ut supra), is performed by the provider according to the provisions of Organic Law 15/1999, of December 13, on the Protection of Personal Data and Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce, as well as on the regulations that develop them.
13. APPLICABLE LEGISLATION