The Owner informs you about its Privacy policy regarding the processing and protection of the personal data of users that may be collected while browsing the Website: https://viaferrata.cat
In this regard, the Owner guarantees compliance with current personal data protection legislation, set out in Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).
Use of the Website implies acceptance of this Privacy policy and of the terms included in the Legal notice.
Identity of the data controller
- Data controller: Daniel Nuñez.
- Tax ID (NIF): 46715837X
- Address: Bellsolell SN, Barcelona – Spain.
- Email: info@viaferrata.cat
- Contact phone: +34 644223555
- Website: https://viaferrata.cat
Principles applied to data processing
When processing your personal data, the Owner will apply the following principles, in line with the requirements of the European General Data Protection Regulation (GDPR):
- Lawfulness, fairness and transparency: the Owner will always require consent to process personal data, which may be for one or more specific purposes about which the Owner will inform the User in advance with complete transparency.
- Data minimisation: the Owner will only request the data strictly necessary for the purpose or purposes for which it is requested.
- Storage limitation: the Owner will keep the personal data collected only for as long as strictly necessary for the purpose or purposes of the processing. The Owner will inform the User of the corresponding retention period depending on the purpose. In the case of subscriptions, the Owner will periodically review the lists and delete records that have been inactive for a considerable time.
- Integrity and confidentiality: the personal data collected will be processed in such a way that its security, confidentiality and integrity are guaranteed. The Owner takes the necessary precautions to prevent unauthorised access to, or misuse of, users’ data by third parties.
Collection of personal data
You do not need to provide any personal data to browse the Website.
You do provide personal data in the following cases:
- When contacting us through the contact forms or sending an email.
Rights
The Owner informs you that, regarding your personal data, you have the right to:
- Request access to the stored data.
- Request rectification or erasure.
- Request restriction of processing.
- Object to processing.
You cannot exercise the right to data portability.
These rights are personal and must therefore be exercised directly by the data subject, by making a request directly to the Owner. This means that any customer, subscriber or collaborator who has provided their data at any time may contact the Owner and ask for information about the data stored and how it was obtained, request its rectification, object to its processing, restrict its use or request its erasure from the Owner’s files.
To exercise your rights, you must send your request together with a copy of your national identity document or equivalent to the email address: info@viaferrata.cat
The exercise of these rights does not include any data that the Owner is obliged to keep for administrative, legal or security purposes.
You have the right to effective judicial protection and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency (Agencia Española de Protección de Datos), if you consider that the processing of your personal data infringes the Regulation.
Purpose of processing personal data
When you connect to the Website to send an email to the Owner or subscribe to its newsletter, you provide personal information for which the Owner is responsible. This information may include personal data such as your IP address, first name and surname, postal address, email address, telephone number and other information. By providing this information, you consent to your information being collected, used, managed and stored by Nominalia, only as described on the following pages:
The personal data and the purpose of processing by the Owner differ depending on how the information is collected:
- Contact forms: the Owner requests personal data, which may include first name and surname, email address, telephone number and website address, in order to answer Users’ enquiries. For example, the Owner uses this data to respond to messages, questions, complaints, comments or concerns that Users may have regarding the information on the Website, the processing of personal data, the legal texts included on the Website, or any other enquiry the User may have that is not subject to the Website’s terms.
There are other purposes for which the Owner processes personal data:
- To ensure compliance with the terms set out in the Legal notice and with applicable law. This may include developing tools and algorithms that help the Website guarantee the confidentiality of the personal data it collects.
- To support and improve the services offered by this Website.
- To manage social networks. The Owner is present on social networks. If you follow the Owner on social networks, the processing of your personal data will be governed by this section, as well as by the terms of use, privacy policies and access rules of the relevant social network, which you have previously accepted. You can consult the privacy policies of the main social networks at these links: Facebook, Twitter, LinkedIn, YouTube, Instagram. The Owner will process your personal data in order to properly manage its presence on the social network, inform you of its activities, and for any other purpose permitted by the social networks’ rules. The Owner will never use followers’ profiles on social networks to send individual advertising.
Security of personal data
To protect your personal data, the Owner takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, improper access, disclosure, alteration or destruction.
The Website is hosted by: Nominalia. Data security is guaranteed, as they take all the necessary security measures. You can consult their privacy policy for more information.
The Owner informs the User that their personal data will not be transferred to third-party organisations, except where such transfer is covered by a legal obligation or where the provision of a service requires a contractual relationship with a data processor. In the latter case, data will only be transferred to the third party when the Owner has the User’s express consent.
However, in some cases collaborations may take place with other professionals; in such cases, the User’s consent will be requested, informing them of the identity of the collaborator and the purpose of the collaboration. This will always be done to the strictest security standards.
Content from other websites
Pages on this Website may include embedded content (for example, videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if you had visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking code and monitor your interaction using this code.
Cookie policy
For this Website to work properly it needs to use cookies, which are pieces of information stored in your web browser.
Legal basis for processing
The legal basis for processing your data is:
- The consent of the data subject.
Categories of personal data
The categories of personal data processed by the Owner are:
- Identification data.
- No special categories of data are processed.
Retention of personal data
The personal data provided to the Owner will be kept until you request its erasure.
Recipients of personal data
- Google Analytics is a web analytics service provided by Google, Inc., a Delaware company whose head office is at 1600 Amphitheatre Parkway, Mountain View (California), CA 94043, United States (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help the Owner analyse how Users use the Website. The information generated by the cookie about your use of the Website (including your IP address) will be transmitted directly to and stored by Google on servers in the United States. More information at: https://analytics.google.com
You can see how Google manages privacy with regard to the use of cookies and other information on the Google Privacy Policy page.
You can also see a list of the types of cookies used by Google and its partners and all information on their use of advertising cookies at:
Web browsing
When you browse the Website, non-identifying data may be collected, which may include your IP address, geolocation, a record of how services and sites are used, browsing habits and other data that cannot be used to identify you.
The Website uses the following third-party analytics services:
- Google Analytics.
The Owner uses the information obtained to produce statistics, analyse trends, administer the site, study browsing patterns and gather demographic information.
The Owner is not responsible for the processing of personal data carried out by web pages that you may access through the various links on the Website.
Accuracy and truthfulness of personal data
You undertake to ensure that the data provided to the Owner is correct, complete, accurate and current, and to keep it duly updated.
As a User of the Website, you are solely responsible for the truthfulness and accuracy of the data sent to the Website, releasing the Owner from any liability in this regard.
Acceptance and consent
As a User of the Website, you declare that you have been informed of the conditions regarding the protection of personal data, and you accept and consent to its processing by the Owner in the manner and for the purposes indicated in this Privacy policy.
To contact the Owner, subscribe to a newsletter or post comments on this Website, you must accept this Privacy policy.
Changes to the Privacy policy
The Owner reserves the right to amend this Privacy policy to adapt it to new legislation or case law, as well as to industry practice.
These policies will remain in force until they are amended by others duly published.
This text is a translation of the Spanish original. In the event of any discrepancy, the Spanish version shall prevail.