BOOKING

Privacy Policy

The Owner informs you about its Privacy Policy regarding the processing and protection of personal data of users that may be collected while browsing the Website: https://dondersteen-resort.com

In this regard, the Owner guarantees compliance with the current regulations on personal data protection, reflected in Organic Law 3/2018 of December 5 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons (GDPR).

Use of the Website implies acceptance of this Privacy Policy as well as the conditions included in the Legal Notice.

Identity of the Data Controller

Principles Applied in Data Processing

When processing your personal data, the Owner will apply the following principles, in accordance with GDPR requirements:

  • Lawfulness, fairness, and transparency: The Owner will always require consent for the processing of personal data, which may be for one or more specific purposes, about which the User will be informed in advance with absolute transparency.
  • Data minimization: The Owner will request only the strictly necessary data for the purpose or purposes for which it is requested.
  • Storage limitation: The Owner will keep the collected personal data only for the time strictly necessary for the purpose(s) of processing. The User will be informed of the corresponding retention period according to the purpose. In the case of subscriptions, the Owner will periodically review the lists and delete records that have been inactive for a considerable time.
  • Integrity and confidentiality: Personal data will be processed in such a way that its security, confidentiality, and integrity are guaranteed. The Owner takes the necessary precautions to prevent unauthorized access or misuse of users’ data by third parties.

Collection of Personal Data

No personal data is required to browse the Website.

User Rights

The Owner informs you that you have the right to:

  • Request access to stored data
  • Request rectification or erasure
  • Request restriction of processing
  • Object to processing

You cannot exercise the right to data portability.

The exercise of these rights must be done personally by the data subject, which means that any client, subscriber, or collaborator who has provided their data at any time may contact the Owner to request information about the data stored, how it was obtained, request rectification, object to processing, restrict use, or request deletion.

To exercise these rights, you must send your request along with a photocopy of your National Identity Document or equivalent to the email address: info@dondersteen-resort.com.

The exercise of these rights does not include any data the Owner is obliged to keep for administrative, legal, or security purposes.

You also have the right to effective judicial protection and to file a complaint before the supervisory authority — in this case, the Spanish Data Protection Agency — if you believe that the processing of your personal data infringes the Regulation.

Purpose of Data Processing

When you connect to the Website to send an email to the Owner, subscribe to a newsletter, you are providing personal information for which the Owner is responsible. This may include personal data such as your IP address, name, surname, physical address, email address, phone number, and other information. By providing this information, you consent to its collection, use, management, and storage by — 1&1 IONOS España S.L.U. — only as described in:

  • Legal Notice
  • Privacy Policy

The processing of personal data by the Owner varies depending on the method of data capture.

Other purposes include:

  • To ensure compliance with the conditions outlined in the Legal Notice and applicable law. This may involve developing tools and algorithms that help ensure the Website guarantees the confidentiality of collected personal data.
  • To support and improve the services offered by this Website.
  • To analyze user browsing behavior. The Owner collects non-identifiable data obtained through cookies that are downloaded to the User’s computer when browsing, as detailed in the Cookie Policy page.

Security of Personal Data

To protect your personal data, the Owner takes all reasonable precautions and follows industry best practices to prevent its loss, misuse, unauthorized access, disclosure, alteration, or destruction.

The Website is hosted by 1&1 IONOS España S.L.U. Data security is guaranteed as they take all necessary security measures. You can consult their privacy policy for more information.

The Owner informs the User that their personal data will not be transferred to third-party organizations except where there is a legal obligation or where the provision of a service requires a contractual relationship with a data processor. In such cases, data transfer will only take place with the express consent of the User.

In some cases, collaboration with other professionals may occur, in which case the User’s consent will be required, providing information about the collaborator’s identity and purpose of the collaboration, always ensuring maximum security standards.

Content from Other Websites

The pages of this Website may include embedded content (videos, images, articles, etc.). Embedded content from other websites behaves exactly as if the User had visited the other website directly.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction using such embedded content.

Cookie Policy

For this Website to function properly, it uses cookies, which are small data files stored in your browser.
You can consult detailed information about the collection and processing of cookies in the Cookie Policy page.

Legal Basis for Data Processing

The legal basis for the processing of your data is:

  • The User’s consent.

Categories of Personal Data

The categories of personal data processed by the Owner are:

  • Identifying data.
  • No specially protected data categories are processed.

Retention of Personal Data

The personal data provided will be retained until you request its deletion.

Web Browsing

When browsing the Website, non-identifying data may be collected, including IP address, geolocation, records of service usage, browsing habits, and other non-identifiable data.

The Website uses the following third-party analytics services:
The Owner uses the information obtained to gather statistics, analyze trends, administer the site, study browsing patterns, and collect demographic information.

The Owner is not responsible for the processing of personal data carried out by websites accessible through the links contained in this Website.

Accuracy and Truthfulness of Personal Data

You agree that the data provided to the Owner is correct, complete, accurate, and up to date, and undertake to keep it duly updated.

As a User of the Website, you are solely responsible for the accuracy and correctness of the data submitted, releasing the Owner from any liability in this regard.

Acceptance and Consent

As a User of the Website, you declare that you have been informed of the conditions regarding the protection of personal data, and you accept and consent to the processing of such data by the Owner in the manner and for the purposes stated in this Privacy Policy.

To contact the Owner, subscribe to a newsletter, or make comments on this Website, you must accept this Privacy Policy.

Changes to the Privacy Policy

The Owner reserves the right to modify this Privacy Policy to adapt it to legislative or jurisprudential developments, as well as industry practices.

These policies will remain in effect until they are replaced by duly published updates.