Privacy Policy
Our goal is to be as transparent as possible with our users and clients regarding the personal data we collect. Your privacy is important to us.
By reading this Privacy Policy, the user is informed about how CASTELL SANT MORI collects, processes, and protects the personal data provided through the website https://castellsantmori.com/ (hereinafter, the website), as well as any other data that may be provided in the future through other means.
The user must read this Privacy Policy carefully, which has been written in a clear and simple manner to facilitate understanding, and decide freely and voluntarily whether to provide personal data to CASTELL SANT MORI.
By completing any form and clicking the checkbox “I have read the privacy policy” or similar, the user expressly states that they have read this privacy policy, where the data processing activities and purposes are indicated, among other information, thereby complying with the data protection legal duty of information.
Where the corporate website requests consent for a specific purpose, by clicking the “Accept” checkbox or similar, the user gives unequivocal and express consent for the corresponding data processing.
Who is responsible for processing your data? • Identity: Sector Loan Properties, S.L. – Tax ID: B60556925
• Address: c/Figueres 5-7, Sant Mori, 17467
• Phone: 699245520
• Email: info@castellsantmori.com
DATA PROCESSING VIA THE WEBSITE
What is the purpose of processing your personal data?
At CASTELL SANT MORI, we process the information provided by interested individuals to respond to their inquiries and, where applicable, to send information about our products or services, as well as our newsletters.
No automated decisions will be made based on the provided data.
How long will we retain your data?
Data will be retained as long as the data subject does not request its deletion or for as long as the business relationship continues, always respecting the applicable limitation periods.
What is the legal basis for processing your data?
Consent of the data subject (via selection checkbox): To respond to inquiries and, if applicable, send information about our products or services, and newsletters.
To whom will your data be disclosed?
Data will not be transferred to third parties, unless legally required
Will your data be transferred to third countries?
No data transfers to third countries are foreseen.
How have we obtained your data?
The personal data we process at CASTELL SANT MORI comes from the data subject or their legal representative.
– Processing of DATA for STAFF RECRUITMENT
For what purpose do we process your personal data?
At CASTELL SANT MORI, we process the information provided by interested persons with the aim of carrying out recruitment processes.
How long will we retain your data?
They will be kept for two years, unless the data subject withdraws their consent before the maximum retention period.
What is the legal basis for processing your data?
Consent of the data subject: To participate in recruitment processes.
To whom will your data be disclosed?
Data will not be transferred to third parties, unless legally required
Will your data be transferred to third countries?
No data transfers to third countries are foreseen.
How have we obtained your data?
The personal data we process at CASTELL SANT MORI comes from the data subject or their legal representative.
The categories of data processed are:
• Identifying data
• Postal and electronic addresses
• Professional and academic data
– Processing of IMAGE USE
For what purpose do we process your personal data?
At CASTELL SANT MORI, we process the data obtained (image and, where applicable, voice), with the purpose of publishing said images on websites or social networks, as well as on other dissemination media, such as magazines, publications, etc., to carry out advertising or promotional actions of our activities.
How long will we keep your data?
The data will be kept from the moment the user gives their consent until they withdraw such consent.
What is the legal basis for the processing of your data?
Consent of the data subject: Use of photographs and, where applicable, videos in which the image of the data subject appears.
Likewise, it is informed that by giving consent, the images may be published on the company’s website, social networks, and any media that the company deems appropriate to promote its activities, events, and services.
To whom will your data be disclosed?
Will be published in the enterprise website or social media.
Will your data be transferred to third countries?
The use of images on social networks may imply international data transfers.
– Processing of CUSTOMER DATA
For what purpose do we process your personal data?
At CASTELL SANT MORI, we process the information provided by interested persons with the main purpose of providing the requested services, as well as performing the administrative, accounting, and tax management derived from such services or product sales, and, where appropriate, to send commercial communications about our products and services.
How long will we keep your data?
The data will be kept as long as the data subject does not request its deletion, and, if applicable, for the years necessary to comply with legal obligations.
What is the legal basis for the processing of your data?We indicate the legal basis for the processing of your data:
Performance of a contract: To provide the requested services
Legal obligation: To carry out the administrative, accounting, and tax management of the requested services
Legitimate interest of the Controller: To send commercial communications about our products and services
To whom will your data be disclosed?
The data will be disclosed to the following recipients:
Tax Agency, in order to comply with legal obligations. (Legal requirement)
Financial entities, for the purpose of issuing the corresponding invoices, where applicable. (Contractual requirement)
Tax Agency, in order to comply with legal obligations. (Legal requirement)
Financial entities, for the purpose of issuing the corresponding invoices, where applicable. (Contractual requirement)
Will your data be transferred to third countries?
No data transfers to third countries are foreseen.
How have we obtained your data?
The personal data we process at CASTELL SANT MORI comes from the data subject or their legal representative.
The categories of data processed are:
Identifying data
Postal and electronic addresses
Commercial information
Banking information, where applicable
– Processing of data for ADVERTISING
For what purpose do we process your personal data?
At CASTELL SANT MORI, we process the information provided by interested parties for the purpose of managing the sending of commercial communications about our products and/or services via electronic means (e-mail, WhatsApp, SMS…).
How long will we keep your data?
The data will be kept from the moment the user gives their consent until they withdraw such consent.
What is the legal basis for processing your data?
Consent of the data subject (by signing the consent form, checking the selection box, or any other valid method): For sending commercial communications.
To whom will your data be disclosed?
Advertising delivery platforms via electronic means, for the purpose of ensuring secure delivery and obtaining statistical data
Will your data be transferred to third countries?
No data transfers to third countries are foreseen.
How have we obtained your data?
The personal data we process at CASTELL SANT MORI comes from the data subject or their legal representative.
The categories of data processed are:
• Postal and electronic addresses
• Commercial information
– Processing of VIDEO SURVEILLANCE DATA
Basic information on Data Protection
Controller: CASTELL SANT MORI
Purpose: To ensure the security of people, property, and facilities
Legal basis: Public interest mission
Recipients: Data may be disclosed to: Where appropriate, law enforcement agencies and courts
Rights: You have the right to access, rectify, and delete your data, as well as other rights indicated in the additional information, which you may exercise by contacting the data controller
Complete information on Data Protection
For what purpose do we process your personal data?
At CASTELL SANT MORI, we process the information provided by interested persons with the purpose of ensuring the security of people, property, and facilities.
How long will we keep your data?
The data will be kept for a maximum of 30 days, unless communicated to law enforcement agencies and/or courts.
What is the legal basis for processing your data?
Public interest mission: To ensure the security of people, property, and facilities.
To whom will your data be disclosed?
Where appropriate, to law enforcement agencies and courts, for the purpose of providing images if a crime or offense has been committed.
Will your data be transferred to third countries?
No data transfers to third countries are foreseen.
What categories of personal data do we process?
Image
INTEREST RIGHTS
RIGHTS OF THE DATA SUBJECT
Any person has the right to obtain confirmation as to whether or not CASTELL SANT MORI is processing personal data concerning them.
Data subjects have the right to access (Art. 15 GDPR) their personal data, as well as to request the rectification (Art. 16 GDPR) of inaccurate data or, where appropriate, request its erasure (Art. 17 GDPR) when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
In certain circumstances, data subjects may request the restriction (Art. 18 GDPR) of the processing of their data, in which case we will only keep it for the exercise or defense of claims.
In certain circumstances and for reasons related to their particular situation, data subjects may object (Art. 21 GDPR) to the processing of their data. In this case, CASTELL SANT MORI will stop processing the data, unless there are compelling legitimate grounds, or for the exercise or defense of possible claims.
You also have the right to request the portability (Art. 20 GDPR) of your personal data. This means you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format so that it can be transmitted to another entity directly, where technically feasible.
If you have given your consent for a specific purpose, you have the right to withdraw your consent (Art. 7 GDPR) at any time, without affecting the lawfulness of the processing based on the consent before its withdrawal.
You may exercise your rights by contacting the data controller either in person by postal mail or by email to the controller’s address, sending the appropriate form/request. Forms for exercising your rights can be found on the Spanish Data Protection Agency’s website:
https://www.aepd.es/reglamento/derechos/index.html#anchor
If you believe your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Authority via the Spanish Data Protection Agency’s electronic headquarters:
https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/canalesAcceso.jsf
OBLIGATION TO PROVIDE DATA
The data requested in the forms accessible from CASTELL SANT MORI’s website and, in general, those requested by the company for the provision of services/product sales, are, in general, mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if such data is not provided or is not provided accurately, it may not be possible to properly handle the requests.
In the event that the data subject provides third-party data, they declare that they have the consent of such third parties and commit to informing the data subject, owner of said data, about the information contained in this Privacy Policy, releasing CASTELL SANT MORI from any liability in this regard.
SECURITY MEASURES
Personal data will be processed lawfully, fairly, and transparently in relation to the data subject (“lawfulness, fairness, and transparency”); collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes; adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed; maintained in a form which permits identification of data subjects for no longer than is necessary for the purposes of the data processing (respecting limitation periods); processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures (“integrity and confidentiality”).
We follow strict criteria in the selection of service providers with access to personal data, all in compliance with data protection obligations, and we formalize with them the corresponding data processor contract (Art. 28 GDPR), by which they are bound, among others, to: apply appropriate technical and organizational measures; process data following our instructions; and delete or return the data once the service provision ends.
