Privacy Policy
Introduction
Occasionally, and due to the activity of this site, Time in Spain Holidays, S.L., hereinafter referred to as Time in Spain, will process personal data. The following sections address any questions that the user may have regarding the processing of such data, as well as the commitments and obligations assumed by the data controller when accessing, storing, and managing the information that may be collected.
What regulations apply to the processing of personal data?
In this regard, the processing of personal data is governed by the General Data Protection Regulation (GDPR), which is Regulation (EU) 2016/679 of the European Parliament and Council, dated April 27, 2016, regarding the protection of individuals concerning the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC. It is also governed by the Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights, Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, as well as other applicable regulations in this matter.
Data controller and contact details
This Privacy Policy applies to all personal data that the user provides through this online platform (by completing various forms and making purchases in the online store) or through other means (for example, social networks). Therefore, we inform you that the controller of the personal data you may provide is:
Time in Spain Holidays, S.L., with NIF B93192862 and registered office at Puerto Paraíso Bloque 7 Local 23 29680 Estepona (Málaga). The user or customer can contact the site owner through the contact details provided.
Based on the content of the current Privacy Regulations, the user or customer of this site must ensure that the data provided is true, accurate, complete, and up to date, being responsible for any direct or indirect damage or harm that may arise as a result of non-compliance with this obligation.
When and why are personal data processed from the website user?
The user can browse the page without providing personal data, but in some cases, this information will be necessary for communication processes, as well as for the delivery of purchased products.
If necessary, and when the processing requires it, Time in Spain, as the data controller, will request the user’s explicit consent before the provision of personal data.
The objective of the Privacy Policy is to provide transparency on how personal data is processed and to protect such information online.
For what purpose is personal data processed?
The personal data requested through the forms, or those provided to the controller, will be processed for the following purposes:
- Management and response to inquiries received, service requests, or requests for general information.
- Sending electronic communications if requested and/or with explicit consent.
Legal basis for the processing of personal data
Among the possible legal grounds for the processing of personal data are the following:
The legal basis for the processing of personal data provided for the management of inquiries and requests, and/or for managing selection processes, and/or for sending commercial communications, will be explicit consent.
However, prior to the start of the personal data collection process, the user or customer will be informed about the identity of the controller, the purpose of the processing, the legal basis, the recipients of the information (if any), the manner of exercising the rights granted by the current data protection legislation, as well as any other information required by data protection regulations.
How are your data processed? To whom is your personal data communicated?
Time in Spain collects personal information only to the extent necessary to achieve a specific purpose. The information will not be used for a purpose incompatible with that described.
Time in Spain discloses information to third parties only when necessary to fulfill the service's purpose and only to those who need to know it, or due to legal obligation. All of this is to provide the service while processing your personal data with confidentiality, integrity, and discretion, in accordance with current legislation.
In any case, Time in Spain adopts security measures to protect the data against possible misuse, unauthorized access, alteration, or loss.
Storage time and processing of collected personal data
Time in Spain will store and process the collected personal data for the time necessary to fulfill the established purpose and for the time required for its immediate subsequent processing. The storage period depends on each purpose, as indicated below:
- The data for managing inquiries and requests will be kept for as long as necessary to respond, with a maximum period of one year.
- Data for managing selection processes will be kept until a job is assigned or until the various selection processes are completed, or until the individual exercises the right of deletion or opposition.
- Data for sending commercial communications will be kept until consent is withdrawn.
Rights of the individual
- Right of access: The individual can ask Time in Spain if it is processing their data, what data is being processed, and for what purpose or legal basis.
- Right of rectification: The individual can request that their personal data be updated if incorrect, and can request deletion if desired and if there is no contradictory legal basis.
- Right to limit processing: In this case, Time in Spain will retain the data only for exercising or defending claims.
- Right to object: Time in Spain will stop processing the data as indicated, unless necessary for legitimate reasons or for exercising or defending potential claims.
- Right to data portability: Time in Spain will facilitate the transfer of the individual's data to the new controller.
- Right to deletion: The individual may request that their data be deleted if its processing is no longer necessary, after the withdrawal of consent, if they believe the processing is unlawful, or if there is a legal obligation to do so. Each case will be analyzed, and the law will be applied accordingly.
- Right not to be subject to a decision based solely on automated processing: Every individual has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or significantly affects them in a similar way.
How can the individual exercise their rights?
The individual can exercise their rights of access, rectification, deletion, limitation of processing, data portability, opposition to processing, and not being subject to automated individual decisions, including profiling, by sending an email to info@timeinspain.com, accompanied by documentation and information proving their identity or that of their representatives, or, if they prefer, by writing to Time in Spain Holidays, S.L., Puerto Paraíso Bloque 7 Local 23 29680 Estepona (Málaga), referencing: "exercise of rights."
If the individual believes that the processing or any phase of it does not comply with current Privacy Regulations, they may file a complaint with the control authority through the website aepd.es.
Unsubscribing from commercial communications (compliance with the LSSI-CE - Law 34/2002, of July 11, on Information Society Services and Electronic Commerce)
The user may give their consent for Time in Spain to use their data to send them information and advertising about products, possible offers, special promotions, or news about products of interest.
The user has the right to revoke, at any time and expressly, the consent given for the sending of commercial communications by simply notifying Time in Spain through any contact method that provides evidence of this revocation.
Security measures
Time in Spain uses appropriate technical and organizational measures to protect your personal information and privacy, preventing alteration, loss, processing, or unauthorized access, according to applicable regulations, considering the state of technology, the nature of the stored data, and the risks to which it is exposed, all in compliance with the GDPR (EU) 2016/679 of April 27, 2016.
Changes to this policy
Time in Spain may update its privacy policy to adapt it to the requirements of the regulations in force at any given time. Substantial changes will be communicated through this website, making the updated version available to users.
Last updated
This privacy policy was last updated in September 2020.