Privacy policy
I. PRIVACY AND DATA PROTECTION POLICY
Respecting current legislation, ASTORIA PARK (hereinafter, also Website) undertakes to adopt the necessary technical and organizational measures according to the security level appropriate to the risk of the collected data.
Laws incorporated in this privacy policy
This privacy policy is adapted to Spanish and European regulations on personal data protection on the internet, specifically:
- Regulation (EU) 2016/679 of the European Parliament and Council, of April 27, 2016, on the protection of natural persons regarding the processing of personal data and the free movement of such data (GDPR).
- Organic Law 3/2018, of December 5, on Personal Data Protection and guarantee of digital rights (LOPD-GDD).
- Royal Decree 1720/2007, of December 21, approving the Regulation implementing Organic Law 15/1999, of December 13, on the protection of personal data (RDLOPD).
- Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).
Identity of the data controller
The data controller of personal data collected on ASTORIAPARK.COM is: ASTORIA PARK SA, NIF B65432109 (hereinafter, Data Controller).
Contact information:
Address: CARRER D’HIPÒLIT LÀZARO, 18, LLORET DE MAR (GIRONA)
Phone: +34 972 364 812
Email:
Personal data records
In compliance with GDPR and LOPD-GDD, ASTORIA PARK collects and processes users' data through forms to facilitate, streamline, and fulfill commitments with the User or maintain the relationship. A record of processing activities is kept according to the purposes established by law.
Principles applicable to personal data processing
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
Categories of personal data
Only identification data are processed. No special categories of data are processed.
Legal basis for data processing
Express and verifiable consent of the User.
Purpose of data processing
To facilitate and fulfill commitments between ASTORIA PARK and the User, personalization, statistics, and activities related to the Website.
Data retention periods
Data will be retained for 24 months or until the User requests deletion.
Recipients of personal data
Data will not be shared with third parties.
Personal data of minors
Only users over 14 years old may provide consent. Parental authorization is required for younger minors.
Confidentiality and security of personal data
ASTORIA PARK implements technical and organizational measures, including SSL encryption. Any security breach will be communicated to the User.
Rights regarding personal data processing
- Right of access
- Right of rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object
- Right not to be subject to automated decision-making, including profiling
Requests should be sent to:
Address: CARRER D’HIPÒLIT LÀZARO, 18, LLORET DE MAR (GIRONA)
Email:
Third-party website links
Third parties have their own privacy policies and are responsible for their content.
Complaints to the supervisory authority
Users may file complaints with the Spanish Data Protection Agency: https://www.aepd.es/
II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY
Use of the Website implies acceptance of this policy. ASTORIA PARK reserves the right to modify it due to legal or regulatory changes. Users are advised to review the policy periodically.