Privacy Policy The personal data linked to this website complies with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, and other current legislation on data protection. Who is the Data Controller? The data controller is CESAR SANCHEZ-BALLESTEROS FERNANDEZ, with Tax ID (NIF) 05265040H, domiciled at Avenida da Romana 30, 36370 Nigrán, Pontevedra - Spain, telephone +34 630488325, and contact email csb@ecoresorts.es. Purpose, Legal Basis, and Retention Period What is the purpose and legal basis for processing your data, and how long will we keep it? * Data of individuals who contact us through the means enabled on the website: We process your data to handle your requests for information, questions, inquiries, suggestions, or complaints. We can process your data for this purpose because we have a legitimate interest in managing the communications necessary to carry out our activity. Data will be kept for the time necessary to fulfill the indicated purposes. * Data of individuals who make a room reservation (confirmation, modification, cancellation, payment, etc.): * 2.1 Management of the contractual relationship: We can process your data because a pre-contract/contract exists, along with a legitimate interest in its formalization and execution. * 2.2 Accounting management: In the event of payment, we may process your data because there is a legal obligation established in the Royal Decree of August 22, 1885, publishing the Commercial Code. * 2.3 Tax management: In the event of payment, we may process your data because there is a legal obligation established in Law 58/2003 of December 17, General Tax Law, and other applicable legislation. Your data will be kept for the time necessary to fulfill the indicated purposes and, duly blocked, for the longest limitation period in accordance with applicable legislation. Is it Mandatory to Provide Your Data? The data of individuals who make a room reservation or request a reservation for halls and events are mandatory; without them, the corresponding contract cannot be concluded or executed. To Whom Will Your Data Be Disclosed? * Data of individuals who make a room reservation: * a) To the Tax Administration, data necessary to comply with legal obligations. * b) To banking entities and payment gateways, data necessary to carry out bank deposits and payments derived from the contractual relationship. * c) To insurance and reinsurance companies, insurance and reinsurance brokerages, lawyers, court representatives (procuradores), courts, and tribunals, data necessary for the management of compensation collections/payments or for addressing, exercising, or defending claims. * In all cases: Your data will be communicated to our data processors when necessary for the proper provision of the services contracted from them. International Transfers Will your data be transferred to third countries? No international data transfers will be carried out. What Are Your Rights When You Provide Us with Your Data? * Access: The right to obtain confirmation as to whether or not we are processing your personal data, to know what they are, what they are used for, how long they will be kept, their origin, and whether they have been or will be communicated to a third party. * Rectification: The right to request the rectification of inaccurate data and to complete incomplete personal data. * Erasure: The right to request the deletion of personal data when they are inadequate, excessive, or no longer necessary for the purposes for which they were collected, including the right to be forgotten. * Opposition: The right to object, under certain circumstances, to the processing of your personal data or to request that the processing be ceased. * Restriction of Processing: The right to request, under legally established circumstances, that your data not be processed beyond its mere storage. * Portability: The right to receive personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller, whenever technically possible. Where Can You Exercise Your Rights? The exercise of rights must be done in writing, addressed to Avenida da Romana 30, 36370 Nigrán, Pontevedra - Spain, or via email to csb@ecoresorts.es. CESAR SANCHEZ-BALLESTEROS FERNANDEZ provides forms for exercising rights, which can be obtained at the aforementioned address or email. For more information: www.aepd.es. Do You Have the Right to Lodge a Complaint with the Supervisory Authority? If your rights have not been respected, you can lodge a complaint by writing to the Agencia Española de Protección de Datos (Spanish Data Protection Agency) located at Calle Jorge Juan, 6, 28001 Madrid, or using its electronic office: https://sedeagpd.gob.es. In both cases, you must attach the relevant documentation.