Legal Notice

1. INFORMATION TO THE USER

PURPAHISA, S.L. is the DATA CONTROLLER of the USER’s personal data and informs you that these data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR), and the Organic Law 3/2018 of 5 December (LOPDGDD).

In accordance with the aforementioned legislation, the data controller provides the user with an email address so that they may raise any queries regarding this material.

Why do we process your personal data?

The DATA CONTROLLER will process the user’s data, manually and/or automatically, for the following purposes:

  • To maintain a commercial relationship with the user. The operations planned for processing are: Sending commercial advertising communications by email, fax, SMS, MMS, social media or any other electronic or physical means, present or future, that enables commercial communications to be made. These communications will be carried out by the DATA CONTROLLER and will relate to its products and services, or those of its collaborators or suppliers, with whom it has reached a promotional agreement. In this case, third parties will never have access to personal data.
  • To process orders, requests, respond to queries or any type of request made by the USER through any of the contact forms made available on the DATA CONTROLLER’s website.
  • To send the online newsletter, with news, offers and promotions relating to our activity.
  • To respond to queries and doubts raised in the various contact forms.
  • To properly manage navigation through this website.
  • Statistical analysis based on website visits and user behaviour on the site.
  • Preparation of anonymous statistical profiles regarding the data provided.
  • To comply with legally established obligations.

What data is included in the processing?

The DATA CONTROLLER processes the following category of data:

  • Identificational data: name, surname, postal address, email address, postcode, telephone number, town/city, etc.
  • Electronic data: Electronic addresses, such as non-official email, IP address (Internet Protocol), MAC address (Media Access Control address).
  • Transactional data: payments, income, transfers, direct debits.
  • Personal characteristic data: marital status, age, family data, sex, date of birth, nationality, place of birth, language.

Why are we allowed to process your personal data?

As regulated in Article 6 of the GDPR, the legitimacy of the processing is essential for the DATA CONTROLLER to be able to properly handle and manage requests, with the consent of the data subject being necessary in each case.

Furthermore, the management of service contracting via the Website, corresponding billing and shipping, is legitimised by the performance of the contract itself. The processing of data provided through the “Contact” section is legitimised by the resolution of the query raised by the user.

The processing of data for the purpose of sending electronic newsletters relating to tourist information, tourist bookings, as well as commercial information and the preparation of anonymous statistical reports regarding the data provided for the provision of contracted services marketed by THE DATA CONTROLLER, is based on the legitimate interest of the DATA CONTROLLER to carry out such processing in accordance with current regulations.

The consents obtained for the aforementioned purposes are independent, so the user may revoke one or more of them without affecting the others. Likewise, THE DATA CONTROLLER may use the user’s information to comply with different legal obligations.

How long can we keep your data?

They will be kept for no longer than necessary, for a period not exceeding five years, to maintain the purpose of the processing or where legal limitations dictate their custody, and when no longer necessary for that purpose, they will be deleted with appropriate security measures to guarantee the anonymisation of the data or their complete destruction.

Who do we disclose your personal data to?

No disclosure of personal data to third parties is envisaged, except where necessary for the development and execution of the processing purposes, to:

  • Our service providers related to communications, with whom the DATA CONTROLLER has signed the confidentiality and data processor agreements required by current privacy regulations.
  • PURPAHISA employees, so that they may correctly carry out the tasks assigned for the marketing of the products or services offered on the company’s website.
  • Public Administrations, security forces and bodies by virtue of the provisions of the regulations.
  • Banks and financial entities for the collection of the services offered.
  • Service providers to manage the processing of the data described in this privacy policy, in accordance with current data protection regulations. Such providers will not process your data for their own purposes that have not been previously communicated by PURPAHISA.

What are your rights?

The User may exercise their rights of Access, Rectification, Cancellation and Objection (‘ARCO Rights’), Portability and, where applicable, the Right to be Forgotten, by contacting us under the terms legally provided, by sending a communication via email or postal mail to the addresses indicated below. Furthermore, the user has the right to lodge a complaint with the supervisory authority (www.aepd.es) if they consider that the processing does not comply with current regulations.

Contact details to exercise your rights:

  • THE DATA CONTROLLER: PURPAHISA, S.L.
  • TAX ID NUMBER (NIF): B18356519
  • Address: Calle Callejón del Ángel, Edif. Cristina, – 3 A 18006 Granada, Spain
  • Email: reservas@islantur.es
  • Telephone: 959 486 093

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

USERS, by ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) in the contact or registration form, expressly and freely and unequivocally accept that their data are necessary for the provider to attend to their request, with the inclusion of data in the remaining fields being voluntary.

The USER guarantees that the personal data provided to the DATA CONTROLLER are truthful and is responsible for communicating any changes to them. The DATA CONTROLLER informs that all data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the USER. If all data are not provided, the information and services provided are not guaranteed to be fully tailored to the user’s needs.

3. SECURITY MEASURES

That, in accordance with the provisions of current regulations on personal data protection, the DATA CONTROLLER is complying with all the provisions of the GDPR and LOPDGDD regulations for the processing of personal data for which it is responsible, and manifestly with the principles described in Article 5 of the GDPR, by which they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The DATA CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS and has provided them with adequate information so that they may exercise them. For more information on privacy guarantees, you can contact the DATA CONTROLLER via PURPAHISA, S.L., Calle Callejón del Ángel, Edif. Cristina, – 3º A, 18006, Granada. Email: reservas@islantur.es

4. COOKIES POLICY

In compliance with the provisions of Article 22.2 LSSI, PURPAHISA will only use data storage and retrieval devices (‘Cookies’) when the user has given their prior consent for this in accordance with what is indicated in the user’s browser pop-up window when first accessing the Portal and in the other terms and conditions indicated in PURPAHISA’s Cookies Policy, which all users must be aware of.

5. CHANGES TO THE PRIVACY POLICY

The DATA CONTROLLER reserves the right to modify this Privacy Policy in order to adapt it to legislative developments that may be applicable to the processing. In such cases, it will announce the changes introduced on the Website within a reasonable period before their implementation.

Last updated: 9 November 2020