PRIVACY POLICY OF THE WEBSITE
villalize.com
In compliance with current legislation, Villalize.com (hereinafter also referred to as the «Website») commits to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risks of the collected data.
Laws Incorporated in This Privacy Policy
This privacy policy is aligned with current Spanish and European legislation concerning personal data protection on the internet. Specifically, it complies with the following regulations:
• Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR).
• Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007, of December 21, which approves the Regulation for the development of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
• Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the Data Controller
The data controller of the personal data collected on Villalize.com is: Villalize Group, S.L., with tax identification number (CIF): B55468755, and registered in the Commercial Register of Lanzarote
• Address: Av. Mamerto Cabrera 68
• Contact phone number: +34 662 560 949
• Contact email: info@villalize.com
Personal Data Register
In compliance with the provisions of the GDPR and the LOPD-GDD, we inform you that the personal data collected by Villalize.com through the forms provided on its pages will be incorporated and processed in our database in order to facilitate, expedite, and fulfill the commitments established between Villalize.com and the User, or to maintain the relationship established in the forms filled out by the User, or to attend to any request or inquiry made by the User. Additionally, in accordance with the GDPR and LOPD-GDD, unless an exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying, according to its purposes, the processing activities carried out and other circumstances set out in the GDPR.
Principles Applied to the Processing of Personal Data
The processing of the User’s personal data will be subject to the following principles established in Article 5 of the GDPR and Articles 4 and following of Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights:
• Principle of lawfulness, fairness, and transparency: The User’s consent will always be required, with full and transparent information regarding the purposes for which their personal data is collected.
• Purpose limitation principle: Personal data will be collected for specified, legitimate, and explicit purposes.
• Data minimization principle: Only personal data strictly necessary for the purposes of processing will be collected.
• Accuracy principle: Personal data must be accurate and kept up to date.
• Storage limitation principle: Personal data will only be retained for as long as necessary for the purposes for which it was collected.
• Integrity and confidentiality principle: Personal data will be processed in a way that ensures its security and confidentiality.
• Accountability principle: The Data Controller will be responsible for ensuring compliance with the aforementioned principles.
Categories of Personal Data
The categories of data processed on Villalize.com are solely identifying data. In no case are special categories of personal data, as defined in Article 9 of the GDPR, processed.
Legal Basis for Processing Personal Data
The legal basis for processing personal data is the User’s consent. Villalize.com commits to obtaining the explicit and verifiable consent of the User for the processing of their personal data for one or more specific purposes. The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as giving it. As a general rule, the withdrawal of consent will not affect the use of the Website. In cases where the User must or may provide their data through forms to make inquiries, request information, or for reasons related to the content of the Website, the User will be informed if the completion of any of these forms is mandatory, as the data provided is necessary for the proper execution of the requested operation.
Purposes for Processing Personal Data
The personal data is collected and managed by Villalize.com for the purpose of facilitating, expediting, and fulfilling the commitments established between the Website and the User, or for maintaining the relationship established in the forms filled out by the User, or to respond to any requests or inquiries. Additionally, the data may be used for commercial purposes related to personalization, operational statistics, and other activities within the corporate scope of Villalize.com, as well as for data extraction, storage, and marketing studies to customize the content offered to the User, and to improve the quality, functionality, and navigation of the Website. At the time of data collection, the User will be informed of the specific purposes for which their personal data will be processed.
Retention Periods for Personal Data
Personal data will only be retained for the minimum period necessary for the purposes of processing and, in any case, for the following period: 12 months or until the User requests its deletion. At the time of collecting personal data, the User will be informed about the retention period or, when that is not possible, the criteria used to determine such period.
Recipients of Personal Data
The personal data of the User will not be shared with third parties. In any case, when personal data is collected, the User will be informed about the recipients or categories of recipients of the personal data.
Personal Data of Minors
In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights, only individuals over the age of 14 may provide lawful consent for the processing of their personal data by Villalize.com. In the case of minors under 14, consent from parents or guardians is required for processing, and this will only be considered lawful if authorized by them.
Confidentiality and Security of Personal Data
Villalize.com commits to adopting the necessary technical and organizational measures, according to the level of security appropriate to the risks of the collected data, to ensure the security of personal data and prevent accidental or unlawful destruction, loss, or alteration of data, or unauthorized disclosure or access to such data. The Website is equipped with an SSL (Secure Socket Layer) certificate, ensuring that personal data is transmitted securely and confidentially, with all data transfer between the server and the User, as well as feedback, fully encrypted. However, as Villalize.com cannot guarantee the invulnerability of the internet or the complete absence of hackers or others who might fraudulently access personal data, the Data Controller commits to informing the User promptly in the event of a data security breach likely to result in a high risk to the rights and freedoms of individuals. According to Article 4 of the GDPR, a data security breach is any breach of security that leads to the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or processed, or unauthorized communication or access to such data. Personal data will be treated as confidential by the Data Controller, who also commits to ensuring that confidentiality is maintained by their employees, partners, and anyone they allow to access the data.
Rights Arising from the Processing of Personal Data
The User has the following rights under the GDPR and Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights:
• Right of access: The right to obtain confirmation as to whether or not Villalize.com is processing their personal data, and if so, to obtain information on their specific personal data and the processing Villalize.com has carried out or is carrying out.
• Right of rectification: The right to request the correction of inaccurate or incomplete personal data.
• Right of deletion («right to be forgotten»): The right to request the deletion of personal data when it is no longer necessary for the purposes for which it was collected, or if the User withdraws consent and no other legal basis for processing exists.
• Right to restrict processing: The right to limit the processing of personal data.
• Right to data portability: The right to receive personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.
• Right to object: The right to object to the processing of personal data.
• Right not to be subject to automated decisions, including profiling.
To exercise these rights, the User must send a written request to the Data Controller with the subject line «GDPR-villalize.com,» specifying:
• Name and surname of the User and a copy of their ID.
• Request with specific reasons or information to be accessed.
• Address for notifications.
• Date and signature of the requester.
• Any document proving the request.
The request and any other documents can be sent to:
• Postal address: Av. Mamerto Cabrera 68
• Email: info@villalize.com
Links to Third-Party Websites
The Website may include hyperlinks or links to third-party websites that are not operated by Villalize.com. The owners of such websites have their own privacy policies and are responsible for their own files and privacy practices.
Complaints to the Supervisory Authority
If the User believes there is a problem or infringement of current regulations regarding the way their personal data is being processed, they have the right to effective judicial protection and to file a complaint with a supervisory authority, particularly in the state where they reside, work, or where the alleged infringement occurred. In Spain, the supervisory authority is the Spanish Data Protection Agency (https://www.aepd.es/).
The User must have read and agreed to the conditions regarding personal data protection contained in this Privacy Policy, and accept the processing of their personal data so that the Data Controller can proceed with such processing in the manner, during the periods, and for the purposes indicated. The use of the Website implies acceptance of this Privacy Policy. Villalize.com reserves the right to modify its Privacy Policy at its discretion or due to legislative, jurisprudential, or doctrinal changes by the Spanish Data Protection Agency. Changes or updates to this Privacy Policy will not be explicitly notified to the User. It is recommended that the User periodically consult this page to be aware of the latest changes or updates. This Privacy Policy was updated to comply with Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, on the protection of individuals regarding the processing of personal data and the free movement of such data (GDPR) and Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights. This Privacy Policy document was created using the online privacy policy generator template on 16/09/2022.
memories start here
NEWSLETTER
