Privacy policy

This privacy policy complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), as well as Organic Law 3/2018 of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), and insofar as it is not contrary to this legislation, Organic Law 15/1999, on the Protection of Personal Data (LOPD) and its implementing regulations, and/or those that may replace or update them in the future.

Our organisation is committed to the privacy of your personal data. The personal data provided is necessary for the provision of our services and is treated in a lawful, fair and transparent manner, ensuring adequate security thereof, including protection against unauthorised or unlawful processing and against its loss, accidental destruction or damage through the application of technical and organisational measures.

This document is intended to provide you with a transparent and straightforward explanation of how your personal data is processed by this organisation.

I. DATA CONTROLLER

• IDENTITY: LA SELLA GOLF, S.A.
• NIF: A03280674
• ADDRESS: C/ José María Olazábal, s/n - ()
• TELEPHONE : 966 454 252
• E-MAIL: info@lasellagolf.com

II. RECIPIENTS OF PERSONAL DATA

1. The personal data provided shall not be subject to any transfer unless this is required for specific data processing.
2. Optionally, when cloud computing services and/or services for sending e-mails, communication, as well as other related computer services are engaged, personal data may be:
1. Transferred to IT service companies located within the European Economic Area (EEA) or,
2. Transferred to computer service companies located outside the EEA under the Privacy Shield service, which, therefore, have adequate protection measures to ensure the security of personal data. More information is available at this link: https://www.privacyshield.gov/welcome
3. Optionally, to administrations and other bodies when they are required in compliance with legal obligations

 

III. LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA

During each specific processing of personal data, we shall inform you of the legal basis thereof.

IV. RIGHTS

Right to Access

This is the right to obtain from the data controller confirmation of whether or not he/she is processing personal data concerning the data subject and, in this case, the right of access to the personal data and the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data was or will be disclosed, the retention period or the criteria used to determine that period, the existence of the right to request from the data controller the rectification or deletion of personal data or the limitation of the processing of personal data concerning the interested party or to object to such processing, the right to file a complaint with the Spanish Data Protection Agency (AEPD), the existence, where appropriate, of automated decisions, including profiling, when data is transferred to third countries, and the right to be informed of the appropriate safeguards applied.

Right to Rectification

This is the right to request the rectification of your personal data if it is inaccurate, including the right to complete incomplete data. You must bear in mind that by providing us with personal data by any means, you guarantee that it is true and accurate, and you undertake to notify us of any change or modification thereof. Therefore, any damage caused by reason of a communication of erroneous, inaccurate or incomplete information in the website’s forms will be the sole responsibility of the interested party.

Right to elimination

This is the right to request the deletion of your personal data when, among other reasons, it is no longer necessary for the purpose for which it was collected, it is being treated in a different manner or consent has been withdrawn. It should be borne in mind that the deletion shall not proceed when the processing of personal data is necessary, among other reasons, for the fulfilment of legal obligations or for the formulation, exercise or defence of claims.

Right to limitation

This is the right to request the limitation of the processing of your personal data, which means that in certain cases you can ask us to temporarily suspend the processing of your personal data or to keep it beyond the necessary time when you may need it.

Right to withdraw consent

This is the right to withdraw the consent you have provided by clicking “I have read and accept the privacy policy” at any time and as specified in the “Exercise of rights” section or in the specific processing of commercial communications or newsletters. It should be borne in mind that this right shall not take effect if, among other reasons, the processing of personal data is necessary for the fulfilment of a legal obligation, the execution and maintenance of a contractual relationship, or for the formulation, exercise or defence of claims. Likewise, the withdrawal of consent shall not have retroactive effects, that is, it shall not affect the legality of the processing based on the consent prior to its withdrawal.

Right to portability

This is the right to receive personal data concerning you and that you have provided us. It shall be communicated in a structured, commonly used and mechanically readable format, and to transfer it to another data controller, provided that the processing is based on your consent and is carried out by automated or computer means.

Right to opposition

This is the right to object to the processing of your personal data based on our legitimate interest. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defence of claims.

Right to file a complaint with a supervisory authority

If you think that we are processing your personal data incorrectly, you can contact us or file a complaint with the Spanish Data Protection Agency (AEPD): https://www.agpd.es/portalwebAGPD/index-ides-idphp.php

Exercise of rights

You can exercise your rights by addressing a letter to the postal address indicated above or sending an e-mail to info@lasellagolf.com, attaching in both cases a copy of your NIF/NIE/Passport or equivalent document..

V. PROCESSING OF PERSONAL DATA

Generic provisions

The personal data requested in each of the specific processing is adequate, relevant and limited to what is necessary in relation to the purposes for which it is being processed, complying with the principle of data minimisation.

The personal data requested in each of the specific processing are those strictly necessary, and the refusal to deliver it will mean that the requested service can not be provided.

The communications of personal data provided for in each specific processing are in some cases necessary for the execution and maintenance of a contract and in other cases for the fulfilment of a legal obligation applicable to the data controller.

Digital assistant – “chatbot” or “chat online”

If this website uses online chat software, provided as a self-service to facilitate users an adequate and rapid response to common questions and to improve customer service for the benefit of users who visit the website, the following data will be processed during the ChatBot conversation: the IP address and other personal data entered into the ChatBot conversation function.

The collected data shall not be used to personally identify the website visitor and shall not be merged with personal data about the pseudonym bearer, unless the personal data is voluntarily provided when using online chat.

The legal basis for this processing is set out in Art. 6(1)(f) GDPR.

Contact form

The personal data shall be processed to channel requests for information, suggestions and complaints from users or customers.

The legal basis for the processing of personal data is the express consent indicated by clicking “I have read and accept the privacy policy”.

The personal data shall be kept for a period of two years from the moment it ceases to be processed, notwithstanding the exercise of your rights as an interested party.