Privacy Policy

This legal notice explains how we collect and process your personal data through the use of our website www.puertoazul.net, including any information you provide through the forms made available for this purpose or when subscribing to our newsletter.

By providing us with your data, you are informed that our services are not available to persons who, under applicable law, are unable to provide valid consent. Therefore, by submitting any form, you declare that you have sufficient legal capacity to do so.

Below, we inform you about the data protection policy of Apartamentos Puerto Azul, S.L.

1. Data Controller

Controller contact details:

Apartamentos Puerto Azul, S.L.
Tax ID: B92308386
Address: Calle Camilo José Cela, nº 3, 29602 Marbella, Málaga, Spain
Telephone: 952 76 56 81
Email: dir@puertoazul.net

Registered in the Commercial Registry of Málaga, Volume 2987, Book 1900, Folio 114, Section 8, Sheet MA-54451.

Apartamentos Puerto Azul, S.L. is the controller of your personal data (hereinafter “we”, “us”, “our” or “the company”).

2. What data do we collect?

The General Data Protection Regulation (GDPR) defines personal data as any information relating to an identified or identifiable natural person, that is, any information capable of identifying a person directly or indirectly. Anonymous data is not included within this concept.

Any personal data collected directly from the data subject will be processed confidentially and incorporated into the relevant processing activities owned by Apartamentos Puerto Azul, S.L.

On our website, we may process the following categories of personal data:

• Identity data: first name, surname and username.
• Personal characteristics data: date of birth, gender, nationality and similar information.
• Social circumstances data: hobbies, lifestyle and marital status.
• Contact data: email address, telephone number and postal address.
• Financial data: bank details and details of purchases or transactions made.
• Technical data: IP address, login data, browser type and version, time zone settings, operating system, platform, browser plug-in types and versions, and other technologies on the devices used to access the website.
• Profile data: username, password, purchases made, comments and survey responses.
• Usage data: information about how you use our website, products and services.
• Marketing and communications data: your preferences for receiving marketing communications and your preferred contact channels.

We do not collect special categories of personal data, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, or genetic or biometric data.

If we are required to collect personal data by law or under the terms of a contract with you, and you fail to provide such data, we may not be able to enter into the contract or provide the requested service. In such a case, we will inform you accordingly.

3. How do we collect your personal data?

The methods we use to collect personal data are as follows:

• Through direct interaction, via forms on our website, email, telephone or post, when you:
  • request information about our products or services;
  • purchase our products or services;
  • request a quotation;
  • subscribe to any of our services or publications;
  • send us comments or enquiries.

In order to ensure the quality and security of our portal, we reserve the right to reject any registration request, and to suspend or cancel any previously accepted registration, if we consider that it does not comply with the required conditions or applicable law. In such cases, we will try to explain the reasons for our decision, although we cannot guarantee this in every case.

• Through automated technologies or interactions: we may automatically collect technical data about your equipment, browsing actions and usage patterns through cookies or similar technologies. You can obtain more information in our cookie policy.
• Through third parties:
  • Google: analytics or search data. These processing activities may involve international data transfers outside the European Economic Area, depending on the services used.

4. Purpose and legal basis for using your data

The most common uses of your personal data are as follows:

• To manage and, where appropriate, formalise a contract between Apartamentos Puerto Azul, S.L. and you.
• To process your data where you have given your consent.
• To comply with legal or regulatory obligations.
• To pursue our legitimate interests or those of third parties, provided your fundamental rights and freedoms do not prevail.

You may withdraw your consent at any time by sending an email to dir@puertoazul.net or by exercising the rights set out below.

Below is a table showing the purposes for which we process your personal data, the legal basis for such processing and the categories of data involved. In certain cases, we may process your data on the basis of an additional legal ground. If you would like more information, you may contact us at dir@puertoazul.net.

Commercial communications: we will only send you marketing communications if:

• you have requested information from us or previously purchased a product or service;
• you have provided your details and expressly accepted the corresponding checkbox on the form;
• you have not expressed your wish to stop receiving such communications.

We will obtain your express consent before sending you marketing communications where required by applicable law. You may request at any time that we stop sending you such communications by writing to dir@puertoazul.net.

If you choose to stop receiving marketing communications, your personal data may still be retained where there is a prior contractual relationship or a legal obligation requiring retention.

Purpose limitation: we will only use your data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose. In that event, we will inform you in advance of the reason and legal basis for the new processing.

5. How long will we keep your data?

Your data will be kept for as long as necessary to fulfil the purpose for which it was collected, and to determine any potential liabilities arising from the processing. In each case, the retention periods established by the applicable regulations will apply.

Subscriber data collected via form or email: it will be retained from the time the user subscribes until they unsubscribe.

6. Minors

Apartamentos Puerto Azul, S.L. does not authorise children under 14 years of age to provide personal data through the means made available on this website, whether through service request forms, contact forms or email communications.

Therefore, persons who provide personal data through such means formally declare that they are over 14 years of age, and Apartamentos Puerto Azul, S.L. shall not be liable in the event of non-compliance with this requirement.

If a child below the established age limit has provided us with personal information, please contact us so that the relevant rights may be exercised.

In cases where the services of Apartamentos Puerto Azul, S.L. are aimed at children under 14, appropriate means will be established to obtain authorisation from their parents or legal guardians.

7. Exercise of data protection rights

How can you exercise your rights? Users may send a communication to the registered office of Apartamentos Puerto Azul, S.L. or to the email address dir@puertoazul.net, in both cases enclosing a copy of their national identity document or equivalent identification document, in order to exercise the following rights:

• Access: to know whether we are processing your personal data and to access it.
• Rectification: to request the correction of inaccurate or incomplete data.
• Erasure or right to be forgotten: to request deletion of your data where legally applicable.
• Restriction of processing: to request that we suspend the processing of your data, retaining it only for the exercise or defence of legal claims.
• Objection: to object to the processing of your data on grounds relating to your particular situation.
• Portability: to request the transfer of your data to another controller, where technically feasible.

You may use the forms provided by the Spanish Data Protection Agency to exercise your rights at the following link: Rights exercise forms.

Likewise, if you consider that there is a problem with the way we process your personal data, you may lodge a complaint with the competent supervisory authority. In Spain, this authority is the Spanish Data Protection Agency (AEPD).

We may request additional information to confirm your identity and to guarantee your right of access to your personal data or the exercise of any of the rights referred to above. This security measure is intended to prevent disclosure of data to unauthorised persons.

We will respond to your request within the legal period of one month. However, this period may be extended if the request is particularly complex or if multiple requests are made. In such case, we will inform you accordingly.

8. Disclosure of data: provision of services

In the course of our business, we may need to rely on third-party service providers who process personal data on our behalf, exclusively for the proper performance of the contracted services and with appropriate safeguards to protect your rights.

These third parties may include:

• providers of system administration and information technology services;
• professional advisers, including lawyers, auditors, insurers and banking, legal, tax or accounting consultants.

All processors to whom we disclose personal data will be required to respect the security of your data and to process it in accordance with the GDPR and our instructions.

We only allow such processors to process your data for specific purposes and in accordance with our instructions. If you would like more information about the entities that provide services to us, you may request it at dir@puertoazul.net.

9. Data security

We have implemented appropriate technical and organisational security measures to prevent accidental loss, alteration, unauthorised access, misuse or disclosure of your personal data.

In addition, we limit access to your personal data to those employees, collaborators, agents, contractors and third parties who have a legitimate need to know it in order to perform their duties. All of them will process your data in accordance with our instructions and will be subject to an appropriate duty of confidentiality.

We have also put in place procedures to deal with any suspected personal data breach. In the event of a security breach, we will notify you and, where appropriate, the competent supervisory authority, in accordance with Articles 33 and 34 of the GDPR.