Privacy policy

This section contains all the information on how your personal data is managed and our policy for processing it. Your privacy matters a great deal to us. In this privacy statement we explain what personal data we collect from our users and how we use it. We encourage you to read these terms carefully before providing your personal data on this website.

For children under thirteen, the consent of their parents or guardians is required to process their personal data. Under no circumstances will data about the professional or financial situation or the privacy of other family members be collected from a minor without their consent. If you are under thirteen and have accessed this website without telling your parents, you must not register as a user or send any information.

This website respects and looks after its users' personal data. As a user, you should know that your rights are guaranteed. We have worked to create a safe and trustworthy space, which is why we want to share our principles regarding your privacy:

• We never ask for personal information unless it is really needed to provide the services you request.
• We never share our users' personal information with anyone, except to comply with the law or where we have your express authorisation.
• We never use your personal data for a purpose other than those stated in this privacy policy.

Please note that this Privacy Policy may change in line with legal or self-regulatory requirements, so users are advised to visit it regularly.

This website complies with Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR), and Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSICE or LSSI).

A) Who is the controller of the personal data?

• Owner: "CARAVANAS JUAN, S.L." (hereinafter "CARAVANASJUAN").
• Registered office: POL. IND. A GRANXA, PPI-6, PARCELA 18 · O PORRIÑO (PONTEVEDRA) · 36475 · Spain.
• Tax ID (CIF): B36331130.
• Email: comercial@caravanasjuan.com.
• Phone: +34 986 335 004.

For the purposes of the General Data Protection Regulation mentioned above, the personal data you send us through the website's forms is processed as "Website users and subscribers". The data you send us when making a purchase (with registration) is processed as "Website customers".

To process our users' data, we apply all the technical and organisational security measures required by current legislation.

B) Basic information on data protection

Main purposes of processing:

• Managing the purchase of products and/or services on our e-commerce site www.caravanasjuan.com.
• Answering enquiries made through the website.

Main legal bases:

• Performance of the contract.
• Legitimate interest.
• Compliance with legal obligations.

Main recipients:

• Banks and financial institutions.
• Law enforcement authorities.
• Service providers.
• No international data transfers are planned.

Rights:

Among others, the rights of access, rectification, erasure, objection and data portability, and the right to object to processing at any time, on grounds relating to your particular situation, where processing is based on legitimate interest.

Source:

• Provided by the data subject.
• Obtained from browsing behaviour.

C) Principles we apply to your personal information

When processing your personal data, we apply the following principles, in line with the requirements of the European data protection regulation:

• Lawfulness, fairness and transparency: We will always ask for your consent to process your personal data for one or more specific purposes, which we will tell you about in advance with complete transparency.
• Data minimisation: We will only ask for data strictly necessary for the purposes we need it for. As little as possible.
• Storage limitation: data will be kept no longer than necessary for the purposes of processing. Depending on the purpose, we will tell you the corresponding retention period; for subscriptions, we will regularly review our lists and delete records that have been inactive for a considerable time.
• Integrity and confidentiality: Your data will be processed in a way that ensures appropriate security and confidentiality of personal data. We take all necessary precautions to prevent unauthorised access to or misuse of our users' data by third parties.

D) How have we obtained this data?

The personal data we process on our website may come from:

• The contact form.
• Email.
• Purchases through our e-commerce platform.

E) What are your rights when you give us your data?

Anyone has the right to obtain confirmation of whether or not we are processing personal data concerning them on our website.

Data subjects have the right to:

• Request access to their personal data.
• Request its rectification or erasure.
• Request restriction of its processing.
• Object to processing.
• Request data portability.

Data subjects may access their personal data and request the rectification of inaccurate data or, where applicable, its erasure when, among other reasons, the data is no longer needed for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of processing of their data, in which case we will only keep it for the exercise or defence of claims.

In certain circumstances and on grounds relating to their particular situation, data subjects may object to the processing of their data. In that case we will stop processing the data, except for compelling legitimate grounds or the exercise or defence of possible claims. As a data subject, you have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, and to transmit it to another controller when:

• Processing is based on consent.
• The data has been provided by the data subject.
• Processing is carried out by automated means.

When exercising your right to data portability, you have the right to have the personal data transmitted directly from one controller to another where technically possible.

Data subjects also have the right to an effective judicial remedy and to lodge a complaint with the supervisory authority, in this case the Spanish Data Protection Agency (AEPD), if they consider that the processing of their personal data infringes the Regulation.

F) For what purpose do we process your personal data?

This website has different ways of collecting personal information, and we process the information provided by data subjects for the following purpose in each case:

Purchase

When a user makes a purchase on this website, they provide personal information for which the website owner is responsible. This information may include personal data such as your IP address, name, billing address, delivery address, email address, phone number and other information. By providing this information, the user consents to it being collected, used, managed and stored by this website, only as described in the Legal notice and this Privacy Policy.

Contact form

We ask for your name, email and phone number to respond to the requests of this website's users. For example, we may use this data to reply to your request and answer any questions, complaints, comments or concerns you may have about the information on the website, the services provided through it, the processing of your personal data, the website's legal texts, and any other enquiries you may have that are not subject to the terms of purchase.

Please note that the data you give us in this form reaches us by email and will be stored on our email provider's servers. Our email server is within the EU, currently covered by the EU security framework.

Sending an email

When a user contacts this website to send an email to the owner, they provide personal information for which the website owner is responsible. This information may include personal data such as your IP address, name, postal address, email address, phone number and other information. By providing this information, the user consents to it being collected, used, managed and stored by this website, only as described in the Legal notice and this Privacy Policy.

There are other purposes for which we process your personal data:

• To ensure compliance with the terms of use and the applicable law. This may include developing tools and algorithms that help this website keep the personal data it collects confidential.
• To support and improve the services this website offers.
• Other non-identifying data is also collected through some cookies downloaded to the user's computer when browsing this website, as detailed in our cookie policy.
• We may have a presence on social networks to manage our website's social media. The processing of data of people or companies who follow the official pages of this website on social networks is governed by this section, as well as by the terms of use, privacy policies and access rules of the relevant social network, previously accepted by the user. Their data will be processed to manage our presence on the social network properly, informing them of the website's activities, products or services, and for any other purpose allowed by the social networks' rules. We will never use followers' social media profiles to send individual advertising.

We may share the data collected through our contact forms with service providers such as the accountancy firm that handles our bookkeeping and invoicing, or the company that manages our website and marketing. In that case your data is only processed for the purpose for which they are contracted. For more information about these companies, please contact us.

In accordance with the European General Data Protection Regulation (GDPR) 2016/679, the website Owner is the controller of the data of Website users and subscribers.

We do not sell, rent or transfer personal data that could identify the user to third parties without prior consent, and will not do so in the future. However, in some cases we may work with other professionals; in those cases, users' consent will be requested, informing them of the identity of the partner and the purpose of the collaboration. This will always be done to the strictest security standards.

G) Legal basis for processing your data

The legal basis for processing your data is: consent.

Contacting us or commenting on this website requires consent to this privacy policy.

We don't send offers or commercial communications without your prior consent: the emails you get from this website are about your own booking.

H) Categories of data

The categories of data processed are identification data.

No special categories of data are processed.

I) How long will we keep your data?

The personal data provided will be kept until the data subject requests its erasure or until it is deleted from the database or mail server due to inactivity.

J) To which recipients will your data be disclosed?

Many of the tools we use to manage your data are provided by third parties.

To provide services strictly necessary for the business, the website Owner shares data with the following providers under their corresponding privacy terms:

• Hosting: Our hosting provider is QUADRALIA, S.L., at C/ Tranvía, 1 1º, 36400 O Porriño (Pontevedra), Spain, tax ID B27742337. It processes the data in order to provide its hosting services to us.
• Mail server: The service that hosts our company's emails and some of our website's forms. Our provider is 1&1 IONOS España S.L.U., registered office at Avenida de la Vega, 1 Edificio Veganova 3 Planta 5 Puerta C, Alcobendas, 28108 Madrid, Spain.

K) Data secrecy and security

This website undertakes to use and process users' personal data respecting its confidentiality and in line with its purpose, to fulfil its obligation to safeguard it, and to take all measures to prevent its alteration, loss, processing or unauthorised access, in accordance with current data protection regulations.

This website has an SSL certificate. This is a security protocol that makes your data travel intact and securely; that is, the transmission of data between a server and the web user, and back, is fully encrypted.

The website Owner cannot guarantee that the Internet is completely impregnable, and therefore cannot rule out data breaches through fraudulent access by third parties.

Regarding the confidentiality of processing, the website Owner will ensure that anyone authorised by this website to process customer data (including its staff, partners and providers) is under an appropriate obligation of confidentiality (whether contractual or legal).

If a security incident occurs, once the website Owner becomes aware of it, they must notify the customer without undue delay and provide timely information about the Security Incident as it becomes known or when the Customer reasonably requests it.

L) Accuracy and truthfulness of data

As a user, you are solely responsible for the truthfulness and accuracy of the data you send to this website, releasing the website Owner from any liability in this respect.

Users guarantee and are in all cases responsible for the accuracy, validity and authenticity of the personal data provided, and undertake to keep it up to date. The user agrees to provide complete and correct information in the contact or subscription form.

M) Acceptance and consent

The user declares that they have been informed of the conditions on personal data protection, accepting and consenting to its processing by the website Owner in the manner and for the purposes stated in this privacy policy.

N) Withdrawal of consent

The consent given, both for processing and for transferring data subjects' data, may be withdrawn at any time by informing the website Owner as set out in this Policy for exercising data protection rights. Withdrawal will never have retroactive effect.

O) Changes to the privacy policy

The website Owner reserves the right to change this policy to adapt it to new legislation or case law, and to industry practice. In such cases, the website Owner will announce the changes on this page reasonably in advance of their implementation.

P) Commercial emails

In accordance with the LSSICE, this website does not engage in SPAM, so it does not send commercial emails that have not been previously requested or authorised by the user. The emails it sends are about your booking.

In accordance with Spanish Law 34/2002 on Information Society Services and Electronic Commerce, this website undertakes not to send commercial communications without properly identifying them.