We comply with the provisions of the obligations set out in the second paragraph of Article 22 of Law 34/2002, dated 11 July and regulating Information Society Services and Electronic Commerce (hereinafter, the LSSI), in relation to Regulation (EU) 2016/679 of the European Parliament and of the Council, dated 27 April 2016 and regulating General Data Protection (hereinafter, the RGPD) and Organic Law 3/2018, dated 5 December and regulating Data Protection and Guarantee of Digital Rights (hereinafter, the LOPDGDD).

This Privacy Policy, issued by UNION DE EMPRESAS ABADES, S.L., hereinafter referred to as “the Provider,” explains how we handle the personal data you provide, or may provide, while browsing our website, as well as outlining the data protection measures that will be applied to that information in order to help users decide, freely and voluntarily, whether they wish to continue providing their data while browsing.

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

The Data Controller, the party responsible for such processing, is the commercial entity UNION DE EMPRESAS ABADES, S.L with Company Tax Code (CIF) no.: B19510510 and registered in the Mercantile Register of Granada, Volume: 1477, Book: 0, Page: 196, Section: GR-42477 Entry 1.

Unión de Empresas Abades SL may act as the sole or joint Data Controller together with any of the companies that make up the Abades Group as part of the following relationship:

Abades Group domains and companies

Contact details for data protection purposes:

Registered office: Autovía A92 km. 189, 18300 Loja, Granada, Spain
Telephone No: +34 958 327 200
Email: lopd@abades.com

At the following link: https://derechos.datagestion.net/UEABADES

2. FOR WHAT PURPOSES AND ON WHAT GROUNDS DO WE PROCESS YOUR PERSONAL DATA?

The processing of your data pursues the following purposes, with the corresponding legitimacy that we set out below.

(*) In those cases where making a request requires filling in a form and clicking the Send button, the completion of the same necessarily implies that you have been informed and have expressly given your consent and acceptance of the Privacy Policy.

All our forms have check boxes that must be ticked to access the services offered.

1. Provision, development and execution of a service.

Purpose:

We process your personal data in order to (i) manage the requested service; (ii) follow up the service and send you information that relates to your request by electronic means.

Legal basis:

The legal basis is the provision of a service on the basis of a contract or pre-contract (i.e. provision of services that binds us to you).

2. Website contact.

Purpose:

To send you the requested information and answer any queries you may have through the contact section(s) made available to you on the Website.

We hereby inform you that your telephone calls may be recorded in order to improve the quality of our customer service and to carry out the contracting of our services. If this is the case, you will be informed in advance.

Legal basis:

The legal basis is the consent given and that of legitimate interest.

3. Marketing

Purpose:

Sending communications, news or actions that may be of interest to you or that you request. As this is an accessory purpose to the main purpose, you must tick the box provided for this purpose.

This applies, for example, when you agree to receive personalised information through various means.

In order to be able to offer you products and services more suited to your needs, we may inform you about offers and promotions of interest to you through commercial advertising communications by e-mail, or any other electronic or physical medium that exists (or may exist in the future) and makes such communications possible. They will be carried out by us and will always be related to our services or those of our companies in the Abades Group.

Regarding subscriptions to any of our present or future informative Newsletters, you must provide us with an email address to which — as you have been advised — information related to our activity will be sent, and in providing us with your email, you thereby consent to the use of your personal data for sending advertising or other marketing activities. This personal data will be stored and used on an ongoing basis for uses such as sending the aforementioned newsletters and any other news through communication channels such as e-mail, SMS, WhatsApp, the post or any other channel authorised by you. We may use your data to create and update your User profile in order to send you personalised information about advertising or promotions. We may also use the information you provide to analyse and improve the effectiveness of our Website products/services, advertising, marketing, market research and sales activities.

In order to achieve the above objective, we will create a marketing profile based on the information provided, but we will not make automated decisions based on this profile.

Legal basis:

The legitimate basis for processing your data for marketing purposes is the consent you give us.

4. Job offers / submission of curriculum vitae

Purpose:

To take part in the selection processes that we may carry out.

We will include the CVs we receive in our recruitment processes. If you send us your curriculum vitae to the e-mail address cv@abades.com, or by using the CV and human resources form provided for this purpose, you authorise us to analyse the documents you send us in order to assess your candidacy and, if necessary, offer you a position in any of the companies that make up the Abades Group.

If you are not selected, we may store your curriculum vitae for future vacancies, for a maximum of one year, unless you tell us otherwise.

Legal basis:

Providing us with express consent by sending us your CV. To do so, you must accept the information on the Privacy Policy applied to curriculum vitae indicated at the end of the form before sending it.

5. Use of Cookies

Purpose:

As you browse our Website we may collect information through the cookies placed on our Website. The purpose is to gain knowledge about how Users use our Website and to enable us to improve it, and/or to carry out performance analytics. The aforementioned data is stored by means of cookies and is subject to the submission of objections to the processing of this data, as detailed in the Cookies Policy. You can consult the Cookies Policy in the corresponding section of our Website.

Your browsing information may be stored by Google Analytics, for which we refer to Google’s Privacy Policy, as it collects and processes such information: http://www.google.com/intl/en/policies/privacy

Similarly, our Website provides a Google Maps facility which can access to your location, assuming you allow it, in order to provide you with more precise details of the distance and / or routes to our premises. In this regard, we refer you to the Privacy Policy used by Google Maps for more information on the use and processing of such data: http://www.google.com/intl/en/policies/privacy

Legal basis:

The legal basis for the processing of your data is our (i) legitimate interest in knowing our Users’ browsing habits in order to adapt to their interests and improve our relations with them; as well as (ii) their consent when browsing our Website and accepting the Terms of Use of the cookies.

6. Social media/blog contacts.

Purpose:

The Website may host blogs and other social networking applications or services for the purpose of facilitating the exchange of content. Any personal information provided by the User may be shared with other Users of that service, over whom we have no control

We process your personal data for the purposes of (i) answering your queries and requests, (ii) managing the requested service, interacting with you and creating a community of followers.

The Website may offer functionalities for sharing content through third-party applications, such as Facebook, Twitter, LinkedIn, Instagram, WhatsApp, etc. These applications may collect and process information related to the User’s browsing on the different Websites. Any personal information collected through these applications may be used by third party Users of these applications. Your interactions are subject to the Privacy Policies of the companies providing the applications.

Legal basis:

The legal basis for the processing of your data is the acceptance of the contractual relationship with the relevant social network provider expressed when you register with their application and in accordance with their Privacy Policy, which is external to us and over which we have no control.

7. Exercise of data protection rights or complaints

Purpose:

When your query is related to the exercise of the data protection rights explained to you below, or to claims related to our products or services, the legal basis is to deal with the User’s request or claim. To fulfil these obligations, we may communicate your data to the Public Administrations and courts if such information is required in accordance with the established legal processes.

Legal basis:

We are authorised to process your data by virtue of our compliance with legal obligations.

Finally, where services or applications exist, these shall contain their particular conditions with specific provisions on the protection of personal data. It must be read and accepted prior to requesting the service in question.

8. User Registration/Making purchases:

Purposes:

REGISTRATION:

This refers to management of the Users registered with the Website, as well as obtaining discount coupons, recording your purchases and tracking your order statuses.

MAKING PURCHASES:

The main purpose of this processing is to maintain contractual relationships with our customers, facilitate the processing of orders, grant discounts and promote products and services.

Therefore, we process your personal data for the purpose of (i) managing the service provided; and (ii) sending you information by electronic means concerning your request.

REGISTRATION OF COMPANIES:

To be able to register for discounts on bookings.

PAYMENT PLATFORM:

To be able to manage your payments online quickly and securely.

Legal basis:

The legal basis is the provision of a service based on a sales contract or pre-contract and User consent.

Grupo Abades assures the confidentiality of the data provided and guarantees that under no circumstances will it be transferred for any other use without the prior express consent of our Users. We will only ask you for data that is necessary for the provision of the requested service, and it will only be used for this purpose.

9. Sending of invoices:

Purpose:

After filling in the form provided for this purpose, we will be able to send you the invoice(s) requested.

Legal basis:

Compliance with legal obligations.

3. WHAT KIND OF DATA DO WE PROCESS AND HOW DO WE COLLECT IT?

For the purposes set out in the previous section, a set of personal data is processed that we can divide into the following sources:

  • Data provided directly by the User:
    When sent through the various forms provided on the Website or any other means available to you.The User must guarantee that the data provided to facilitate the requested services truthfully reflects his or her actual situation, and that he or she will communicate any changes that affect such data. Consequently, the User will be liable to the Provider for any damages caused as a result of breaching the obligations assumed in this clause.

 

  • Data collected indirectly:
    All data that the Provider collects from the typology of external sources (if you have given your consent).

 

  • Data derived from the provision of the service itself.
    All such data collected during the provision of the service.

 

4. HOW LONG WILL WE KEEP YOUR DATA?

Your personal data will be kept for as long as it is necessary for the performance of the contractual relationship. Once this period has elapsed, the data will be deleted in accordance with the provisions of the data protection regulations, meaning that it will be blocked and available only at the request of Judges and courts, the Public Prosecutor’s Office or the competent Public Administrations (in particular the Data Protection Authority) during the statute of limitations for any potential actions, after which time it will be permanently deleted.

Limitation periods vary depending on the type of service, but for illustrative purposes, the limitation period for most personal civil actions is around 5 years.

In addition to the general treatment described in the previous point, the following particular points regarding data conservation will be observed:

  • Customer Data: retention period of 4 years (Art. 66 et seq. of the General Tax Law), and 6 years for accounting books and invoices (Art. 30 of the Commercial Code).
  • Customer Service: We will process your data for as long as it is necessary to deal with your request.
  • Data contained in curricula vitae: a maximum of 1 year for future selection processes unless you state otherwise.
  • Data provided for the purpose of receiving commercial communications and communications of interest: from the time the User gives his/her consent until he/she withdraws it.

5. WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

Data protection regulations give you a number of rights in relation to the data processing involved in our services, which can be summarised as follows:

  • Right to access: To know what type of data we are processing and the characteristics of the processing we are carrying out.
  • Right to rectification: To be able to request the modification of your data due to it being inaccurate or untrue.
  • Right to portability: To be able to obtain a copy in an interoperable format of the data being processed.
  • The right to treatment limitation, in the cases included in the Law.
  • Right to deletion: Request the deletion of your data when such processing is no longer necessary.
  • Right to object: To request the cessation of the sending of commercial communications in the terms indicated.
  • The right to withdraw the consent given.

In order to exercise these rights, you must send an express request, together with a copy of your ID card or equivalent document, through the means indicated below: If you do not receive a reply to your request from us in a timely manner, or you find it unsatisfactory, please be aware that the competent supervisory authority is the Spanish Data Protection Agency (www.agpd.es).

  • E-MAIL addressed to lopd@abades.com with “Data Protection” in the subject line.
    This email must be sent from the e-mail address you included on the form(s). They will not otherwise be shown to you, as your identity will not be considered sufficiently proven.
  • Through the following link: https://derechos.datagestion.net/UEABADES On the Website of the Spanish Data Protection Agency (AEPD) you can find a series of templates that will help you to exercise your rights.

5. RECIPIENTS

Users are hereby expressly informed that under no circumstances will personal data be passed on to third parties, except under legal obligation or in the cases described below. Any exception to this rule will require your prior, unequivocal, express and informed consent.

  • In fulfilling our obligations, we may disclose your data to:
    Public Administrations and courts, law enforcement authorities whenever such information is required in accordance with established legal processes.

 

  • Your data may be communicated to the following recipients for the purpose of purchasing:
  1. Banks for payment of purchases by credit card.
  2. To the Office of Consumers and Users in the event of a complaint.
  3. To those transport companies that may have been entrusted with the delivery of the corresponding orders to customers.

 

  • Social media:
    If you contact us through any of the corporate profiles that we have on social networks and that we make available to Users, those accounts will be aware of your activities and comments and be able to access your photos and videos. In addition to providing us with the data you pass on to us, you will also be providing it to the entities responsible for that social network. To find out how these entities use and treat your data, we recommend that you read the privacy policies of the social networks upon which you are active very carefully.

 

6. SECURITY MEASURES

In accordance with the provisions of the current regulations on the protection of personal data (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights), we comply with all the provisions for the treatment of personal data for which we are responsible, and manifestly with the principles described in Article 5 of the GDPR, under which it is processed in a lawful, fair and transparent manner in relation to the data subject and must be appropriate, relevant and limited to what is necessary in relation to the purposes for which it is processed.

The Website uses HTTPS (secure connection). This is a security protocol that makes your data travel in an integral and safe manner, meaning that the transmission of the data between a server and a Website User, and during feedback, is totally encrypted.

We guarantee that we have implemented appropriate technical and organisational policies to apply the security measures established by the GDPR and the LOPD in order to protect your rights and freedoms, providing you with all the necessary information so that you can exercise your rights. We have installed all the technical means and measures at our disposal to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data you provide us. However, you must be aware that Internet security measures are not impregnable.

 

7. MINORS

Minors (14 years of age) may not use the services available through the Website without the prior authorisation of their parents, guardians or legal representatives, who shall be solely responsible for all acts carried out through the Website by the minors in their care, including the completion of the forms with the personal data of said minors and the ticking, where applicable, of the boxes that accompany them. We are not responsible for the veracity or accuracy of the data that is filled in.

The processing of personal data of a minor may only be based on his or her consent if he or she is over 14 years of age.

Exceptions are those cases in which the law requires the assistance of the holders of parental authority or guardianship for the conclusion of the legal act or transaction in the context of which the consent to processing is sought.

The processing of the data of minors under 14 years of age, based on consent, shall only be lawful if the consent of the holder of parental authority or guardianship is given, to the extent determined by the holders of parental authority or guardianship.

 

8. DURATION AND AMENDMENT OF PRIVACY POLICY

We reserve the right to amend this Privacy Policy, in whole or in part, by posting changes on the Website. Likewise, we may change, delete or add, without prior notice, both the contents and services provided, as well as the way in which they are presented. Consequently, as the general conditions/policies published at the time you access will be understood to be valid, you should read them on a periodic basis.

Notwithstanding the foregoing, we may terminate, suspend or interrupt access to the contents of the Website at any time and without prior notice, and the User shall not be entitled to demand any compensation whatsoever.