1. Information for users
Anthony Paul Lloyd, as data controller, informs you that, under EU Regulation 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Digital Rights (LOPDGDD), we will process your personal data as set out in this Privacy Policy.
In this Privacy Policy we describe how we collect your personal data and why we collect it, what we do with it, with whom we share it, how we protect it, and your choices regarding the processing of your personal data.
This Policy applies to the processing of your personal data collected by Casa Jardín in the provision of its services. If you accept the terms of this Policy, you agree that we may process your personal data as described.
2. Controller
Legal name: Anthony Paul Lloyd
Trading name: Casa Jardín Cómpeta
CIF/NIE: Y9261644H
Address: Calle Parras 11, 29754 Cómpeta, Málaga, Spain
Email: casajardincompeta@gmail.com
3. Key principles
We are committed to providing our services to the highest standard, including processing your data securely and transparently. Our principles are:
- Lawfulness: we will only collect your personal data for specified, explicit and legitimate purposes.
- Data minimisation: we limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it is collected.
- Purpose limitation: we will only collect your personal data for the stated purposes and only as you wish.
- Accuracy: we will keep your personal data accurate and up to date.
- Security: we apply appropriate technical and organisational measures proportionate to the risks, to ensure that your data is not damaged, lost, altered, accessed without authorisation, or unlawfully processed.
- Access and rectification: we provide means for you to access or rectify your data when appropriate.
- Retention: we keep your personal data lawfully and only for as long as necessary for the purposes for which it was collected.
- International transfers: if your data is transferred outside the EU/EEA, it will be appropriately protected.
- Third parties: access and transfer of personal data to third parties is carried out in accordance with applicable laws and with appropriate contractual safeguards.
- Direct marketing and cookies: we comply with applicable advertising and cookie law.
4. Data we collect and process
The types of data we may request and process include:
- Identifying data (name, contact details).
- Booking-related data passed to our reservations system.
- Data about your visit to our website, as described in our Cookie Policy.
Whenever we ask for your personal data, we will clearly inform you what data we collect and for what purpose. In general, we collect and process your personal data in order to:
- Provide information, services, and updates about Casa Jardín.
- Manage bookings, communications and guest enquiries.
- Send communications you have agreed to receive.
5. Lawful basis
Under applicable data protection law, your personal data may be processed where:
- You have given consent for the processing. You may withdraw consent at any time.
- It is required by law.
- There is a legitimate interest that is not overridden by your privacy rights — for example, sending commercial information by newsletter subscription or as part of an existing customer relationship.
- It is necessary for the performance of a contract between you and Casa Jardín.
6. Sharing of personal data
Data may be shared with companies engaged by Anthony Paul Lloyd for the provision of services, acting as data processors — for example our booking platform provider (Eviivo). Casa Jardín will not make any other transfer of your data except where legally required.
7. Your rights
In relation to the collection and processing of your personal data, you may contact us at any time to:
- Access your personal data and any other information set out in Article 15.1 of the GDPR.
- Rectify personal data that is inaccurate or incomplete (Article 16 GDPR).
- Erase your personal data (Article 17 GDPR).
- Restrict the processing of your personal data (Article 18 GDPR).
- Request the portability of your data (Article 20 GDPR).
- Object to the processing of your personal data (Article 21 GDPR).
If you have given consent for any specific purpose, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on the prior consent.
You may exercise these rights by sending a reasoned and supported communication to casajardincompeta@gmail.com.
You also have the right to lodge a complaint with the competent supervisory authority — in Spain, the Agencia Española de Protección de Datos (www.aepd.es) — if you consider that the processing does not comply with applicable law.
8. Legal information
The requirements of this Policy complement, and do not replace, any other requirement under applicable data protection law, which will prevail in any case. This Policy is subject to periodic review and may be amended at any time. Where this happens, we will notify you of any changes and ask you to read and confirm acceptance of the most recent version.
