“Unsquared Studio” is deeply committed to complying with Spanish and European regulations on the protection of personal data, and guarantees full compliance with the obligations set out, as well as the implementation of the security measures set out in the General Data Protection Regulation (GDPR) (EU) 2016/679, of 27 April, and in Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPD and GDD, hereinafter LOPD). In accordance with these regulations, we inform you that the use of our website may require certain personal data to be provided through registration or contact forms, or by sending emails, and that these will be processed by “ Refugis de Catalunya” , the Data Controller, whose data are:
- Company Name: SP350, SLU
- Commercial Number: Unsquare Studio
- NRT: L-716538-J
- Address: Carrer Prat de la Creu, 24-26, AD500, Andorra la Vella
Collection and Processing of Personal Data
Personal data is any information relating to a person: name, email, address, telephone number, NIF/NIE… Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by their Internet access provider. “Refugis de Catalunya”, as Data Controller, has the duty to inform Users of its website about the collection of personal data that may be carried out, either by sending an email or by filling in the forms included on the website. Only the data necessary to perform the contracted service, or to respond adequately to the request for information made by the User, will be obtained. The data collected are identifying and correspond to a reasonable minimum to be able to carry out the activity carried out. In no case will the data be used for purposes other than the purpose for which they were collected. Contact forms/email Purpose : To respond to your request for information made through our contact form(s). Legitimation : The legal basis that legitimizes this processing is the User’s consent, which may be revoked at any time. Data transfer : Personal data will be processed through servers managed by Tropical Server, which will be considered the Data Controller.
Reservation forms + user registration
Purposes :
- Manage your shelter reservation through our form.
- Manage your User registration on our website.
- Sending communications via email and/or telephone, in order to inform the User of possible incidents, errors, etc.
Legitimation : The legal basis that legitimizes this treatment is the consent of the User, which may be revoked at any time. Data transfer : Personal data will be processed through servers managed by Tropical Server, which will be considered the Data Controller. In addition, the data will be shared with the selected refuge for the management of the reservation.
Only people over the age of 14 may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under the age of 14, the consent of their parents or guardians will be a mandatory condition for us to process their personal data. On the other hand, only people over the age of 18 may contract our services. In the case of minors under the age of 18, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.
User Registration
Registration as a User will occur once the first reservation is made on the website through the corresponding form. The information we collect includes:
- Name and surnames
- ID or passport number
- Full address
- Telephone
- IP
- Username
The User will receive a password in the registration confirmation email. This can be modified in the private user panel to which they will have access later. Passwords must meet certain security requirements and do not expire. To recover the password, the User must go to the specific recovery form and enter their email to continue with the process and be able to modify it, by clicking on the link that will be sent to the email address entered. The User is responsible for keeping their password confidential, as well as all uses they make of it. They must notify “Refugis de Catalunya” of any unauthorized use of their account or password as soon as possible. As mentioned in the previous paragraph, the User, once registered, has access to a private panel, in which they can see certain contents, options of their account (such as the password or User data), etc. The User may receive the following notifications:
- When registering on the platform (account validation email).
- When making reservations as proof of the same, incidents, shipments made, etc.
- For password recovery (specified in the previous field).
- When you unsubscribe or delete your account.
The “Refugis de Catalunya” Website also has SSL encryption, which allows the User to securely send their personal data through the contact or registration forms on the website.
Data accuracy
The User declares that all the data provided by him is true and correct and undertakes to keep it updated. The User will be responsible for the veracity of his data and will be solely responsible for all conflicts or litigation that may result from the falsity of these. It is important that, so that we can keep the personal data updated, the User informs “Refugis de Catalunya” whenever there has been any modification to them.
- Associated shelters to manage the reservation
- Technology or IT service providers
- Payment service providers
- Courier and parcel companies
- Third parties or intermediaries, as service providers, who operate on our own behalf (management, consultancy, etc.).
The transfers of data will be carried out respecting the strictest confidentiality, using the necessary measures, such as signing confidentiality contracts, or adhering to their privacy policies established on their respective websites. The User may refuse the transfer of their data to the Data Processors, by written request, by any of the means previously referenced. In addition, in those cases where it is necessary, Customer data may be transferred to certain organizations, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspectorate, etc.
The LOPD and GDD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do this, the User must contact, providing documentation that proves their identity (ID card or passport), by email to info@refugisdecatalunya.com, or by written communication to the address that appears in our Legal Notice. This communication must reflect the following information: name and surname of the User, the object of the request, the address and the accrediting data. The exercise of rights must be carried out by the User himself. However, they may be executed by a person authorized as the legal representative of the User, and documentation must be provided that accredits this representation. The User may request the exercise of the following rights:
- Right to request access to personal data, which is the right to obtain information about whether your own personal data is being processed, the purpose of the processing that, if applicable, is being carried out, as well as the information available about the origin of this data and the communications made or planned of the same.
- Right to request rectification , in the event that personal data is incorrect or inaccurate, or deletion of data that proves to be inadequate or excessive.
- Right to request the limitation of its processing, in which case only the data strictly necessary for the exercise or defense of claims will be kept by “Refugis de Catalunya”.
- Right to object to processing: refers to the right of the interested party not to have their personal data processed or to cease processing in cases where their consent is not necessary for the processing, which involve commercial prospecting files or which are intended to take decisions concerning the interested party and based solely on the automated processing of their data, unless for legitimate reasons or the exercise or defense of possible claims they must continue to be processed.
- Right to data portability : if you want your data to be processed by another company, “Refugis de Catalunya” will provide you with the portability of your data in an exportable format.
In the event that consent has been granted for a specific purpose, the User has the right to withdraw consent at any time , without this affecting the lawfulness of the processing based on consent prior to its withdrawal. We undertake to exercise all these rights within the maximum legal period (1 month). If a User considers that there is a problem with the way in which “Refugis de Catalunya” is handling their data, they can direct their complaints to the Security Manager or to the corresponding data protection authority, being the Spanish Data Protection Agency the indicated one in the case of Spain.
The personal data of Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to respond to the request for information, or until the consent granted is revoked. The personal data of customers will be processed until the end of the contractual relationship. The period of conservation of personal data will be the minimum necessary, and may be maintained until:
- 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registration, termination, contribution, payment of salaries…); Arts. 66 et seq. General Tax Law (accounting books…)
- 5 years: Art. 1964 Civil Code (personal actions without special term)
- 6 years: Art. 30 Commercial Code (accounting books, invoices, etc.)
- 10 years: Art. 25 Law on the Prevention of Money Laundering and Financing of Terrorism.
- No deadline: disaggregated and anonymized data.
Social Networks
In no case will “Refugis de Catalunya” extract data from social networks, unless the User’s consent to do so has been obtained promptly and expressly. Furthermore, “Refugis de Catalunya” is not responsible for the privacy practices of these social networks or their applications, especially with regard to confidentiality, processing of personal data and content.
Confidentiality
The information provided by the User will, in any case, be considered confidential, and may not be used for purposes other than those described here. “Refugis de Catalunya” undertakes not to disclose or reveal information about the User’s claims, the reasons for the advice requested or the duration of its relationship with him.
Validity
This privacy and data protection policy was drafted on April 23, 2024. It may vary depending on the changes in regulations and jurisprudence that occur, and it is the responsibility of the data owner to read the updated document, in order to know their rights and obligations in this regard at all times.
