Privacy policy
Privacy Policy This legal notice explains how we collect, use, and process your personal data through your use of our website http://www.puertoazul.net, including any information you provide through the forms available for this purpose or when subscribing to our newsletter. By providing us with your data, you acknowledge that our services are not intended for persons who do not have the legal capacity to give consent. Therefore, when you send us your forms, you guarantee that you have sufficient legal capacity to consent to the processing of your data. Below we provide information about the data protection policy of Apartamentos Puerto Azul, S.L. 1. Data Controller Controller contact details: Apartamentos Puerto Azul, S.L., tax ID number B92308386, with registered address at Calle Camilo José Cela, nº 3, 29602 Marbella, Málaga, Spain. Telephone: +34 952 765 681. Email: info@puertoazul.net. Registered in the Commercial Registry of Málaga, Volume 2987, Book 1900, Folio 114, Section 8, Sheet MA-54451. Apartamentos Puerto Azul, S.L. is the controller of your personal data (hereinafter “we”, “our”, or “the company”). 2. What data do we collect? The General Data Protection Regulation (GDPR) defines personal data as any information relating to an identified or identifiable natural person; that is, any information capable of identifying a person. This does not include anonymous data. Any personal data collected directly from the data subject will be treated confidentially and incorporated into the corresponding processing activities owned by Apartamentos Puerto Azul, S.L. On our website we may process the following categories of personal data: We do not collect special categories of personal data (for example, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, genetic data, or biometric data). If we are required to collect personal data by law or under the terms of a contractual relationship with you, and you do not provide such data, we may not be able to enter into the contract or provide the relevant service. In that case, we will inform you accordingly. 3. How do we collect your personal data? The means we use to collect personal data are as follows: In order to ensure the quality of our website, we reserve the right to reject any registration request, as well as to suspend or cancel any previously accepted registration if we consider that it does not meet the required conditions or violates any applicable law or regulation. In such cases, we will try to inform you of the reasons for our decision, although we cannot guarantee that we will do so in every case. 4. Purpose and legal basis for using your data The most common uses of your personal data are as follows: The user may withdraw the consent given at any time by sending an email to info@puertoazul.net or by consulting the section on the exercise of rights below. Below is a table showing the ways in which we use your personal data, the legal basis for doing so, and the type of data processed. If you require further information, you may contact us at info@puertoazul.net. Commercial communications We will only send you commercial communications if one of the following conditions is met: We will request your express consent before sending you commercial communications, except where otherwise permitted by applicable law. You may request that we stop sending such communications at any time by writing to info@puertoazul.net. If you decide to stop receiving our communications, your personal data may still be retained where there is a prior contractual relationship or a legal obligation requiring us to do so. Purpose limitation: we will only use your data for the purposes for which it was collected, unless we reasonably consider that it needs to be used for another compatible purpose. In such case, we will inform you in advance of the reason and the corresponding legal basis. 5. How long will we keep your data? We will retain your data for as long as necessary to fulfil the purpose for which it was collected and to determine any possible liabilities arising from that purpose and processing. The retention periods established by applicable legislation shall apply. Data provided through forms or email subscriptions: it will be retained from the moment the user provides it until the user requests deletion or unsubscribes, without prejudice to any applicable legal retention periods. 6. Minors Apartamentos Puerto Azul, S.L. does not authorize minors under 14 years of age to provide their personal data through the means enabled on this website (forms, email, or any other contact channel). Therefore, any person providing personal data through such means formally declares that they are over 14 years of age, and Apartamentos Puerto Azul, S.L. shall not be liable in the event of non-compliance with this requirement. If a child below the established age limit has provided us with personal data, please contact us so that the relevant rights may be exercised. In cases where the services of Apartamentos Puerto Azul, S.L. are intended for children under 14 years of age, appropriate means shall be put in place to obtain authorization from their parents or legal guardians. 7. Exercise of data protection rights Users may send a communication to the registered address of Apartamentos Puerto Azul, S.L. or to info@puertoazul.net, attaching in both cases a copy of their ID card or equivalent identification document, in order to exercise the following rights: You may use the forms made available by the Spanish Data Protection Agency (AEPD) to exercise your rights: here. Likewise, if you believe that there is a problem with the way we process your personal data, you may lodge a complaint with the competent supervisory authority. In Spain, this authority is the Spanish Data Protection Agency (AEPD). We may request additional information from you to confirm your identity and ensure your right of access or the exercise of any of the rights mentioned above. This security measure is intended to prevent your personal data from being disclosed to unauthorized persons. We will respond to all requests within the legal period of one month. However, this period may be extended in the case of particularly complex requests, in which case we will duly inform you. 8. Disclosure of data and third-party service providers In the course of our business, we may need to rely on third parties who process personal data on our behalf. In such cases, we will adopt the necessary measures to ensure the security of your data and the protection of your rights. All data processors to whom we disclose your data will be required to respect the security of your personal data and to process it in accordance with applicable legislation. We only allow such processors to process your data for specific purposes and in accordance with our instructions. If you wish to know which companies provide services to us with access to data, you may request this information by writing to info@puertoazul.net. 9. Data security We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used improperly, accessed without authorization, altered, or disclosed. In addition, we limit access to your personal data to employees, contractors, agents, and other third parties who need to know it for professional reasons. These persons will only process your data on our instructions and are subject to a duty of confidentiality. We have also implemented procedures to deal with any suspected personal data breach and, where appropriate, we will notify you and the competent supervisory authority, in accordance with Articles 33 and 34 of the GDPR. Form Purpose Type of data Legal basis Contact To manage contacts and information requests received through the website. Data subject’s consent (Art. 6.1.a GDPR), pre-contractual measures (Art. 6.1.b GDPR), and the controller’s legitimate interest (Art. 6.1.f GDPR), where applicable. Newsletter To manage the sending of information about our services, updates, and promotions. Data subject’s consent (Art. 6.1.a GDPR), pre-contractual measures (Art. 6.1.b GDPR), and the controller’s legitimate interest (Art. 6.1.f GDPR), where applicable.


