Legal notice and privacy policy

Privacy Policy This legal text provides details on how we collect and process your personal data through the use of our website http://www.casaluque.com, including any information you may provide us through the site when you contract a service or purchase a product, register for our newsletter, or provide your data through the form provided for that purpose. By providing us with your data, we inform you that our services are not possible for those who are legally unable to give consent. Therefore, when you submit the forms, you guarantee that you have the legal capacity to give consent. Below, we inform you about the data protection policy of: Car y Kovalskyy, S.L.

  1. Data Controller Contact details of the data controller: Car y Kovalskyy, S.L, with CIF: B93246312 and address at: Plaza de Cavana Nº 2 29780, Nerja, Málaga and phone: 604465524. Email: info@casaluque.com Mercantile Registry of Málaga, T 5116, L 4023, F 155, S 8, H MA117404, I/A 1 (02.04.13) Car y Kovalskyy, S.L is responsible for your data. (Hereinafter we or our).

  2. What data do we collect? The General Data Protection Regulation defines personal data as any information about an identified or identifiable natural person, that is, any information capable of identifying a person. This would not include anonymous or percentage data. Personal data that may be collected directly from the data subject will be treated confidentially and will be incorporated into the corresponding processing activities owned by Car y Kovalskyy, S.L. On our website, we can process certain types of personal data, which may include: • Identity data: first name, last name. • Contact data: email and phone. We do not collect any data related to special categories of personal data (those revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and information about health, genetic or biometric data). If you are required to collect personal data by law or under the terms of the contract between us and you refuse to provide them, it is possible that we may not be able to perform that contract or provide the service, and you must inform us in advance.

  3. How do we collect your personal data? The means we use to collect personal data are: • Through the form on our website, through our contact email, by phone, or postal mail, when: o You request information about our services o You contract our services

To ensure the quality of our portal, we reserve the right to reject any registration request or to suspend or cancel a previously accepted registration if we believe it does not meet these requirements or any other law or regulation. If this happens, we will attempt to explain the reasons for our decision, but we cannot commit to doing so in all cases.

• Through technology or automated interactions: on our site, we may automatically collect technical data about your equipment, browsing actions, and usage patterns. These data are collected through cookies or similar technologies. If you want more information, you can check our cookie policy here (link) • Through third parties: o Google: analytical data or search data. Outside the European Union.

  1. Purpose and legitimacy for the use of your data. The most common uses of your personal data are:

For the formalization of a contract between Car y Kovalskyy, S.L and you.

When you give your consent to the processing of your data.

When we need to comply with a legal or regulatory obligation.

When necessary for our legitimate interest or that of a third party. The User may revoke the consent given at any time by sending an email to info@casaluque.com or consulting the section on the exercise of rights below. Below, we attach a table where you can consult the ways in which we will use your personal data and the legitimacy for its use, in addition to knowing what type of personal data we will process. We may process some personal data for some additional legal reason, so if you need details in this regard, you can send an email to info@casaluque.com.

Form

Purpose

Type of Data

Legitimacy for Processing

Reservations

The purpose is the management of reservations

- Name <br> - Surname <br> - Email <br> - Phone

Consent of the interested party (art. 6.1.a GDPR) <br> Processing necessary for compliance with a legal obligation applicable to the data controller (art. 6.1.c GDPR) <br> Processing necessary for the execution of a contract to which the interested party is a party or for the application at the request of the latter of pre-contractual measures (art. 6.1.b GDPR) <br> Processing necessary for the satisfaction of legitimate interests pursued by the data controller (art. 6.1.f GDPR)

Commercial communications: you will only receive communications if

You requested information or made a contract with us for a product or service.

You provided us with your data by accepting the box provided for this purpose on our form.

As long as you have not expressed your desire to stop receiving such communications. We obtain your express consent before sending you any communication, and you can request at any time that we stop sending you communications at the email info@casaluque.com. When you choose to stop receiving our communications, your personal data will remain stored as a result of the contract made by you to comply with legal requirements. Purpose: we will only use your data for the purposes for which we collected them, unless we reasonably consider that we need to use them for another reason, notifying you in advance to keep you informed of the legal reason for their processing and as long as the purpose is compatible with the original purpose.

  1. How long will we keep your data? They will be kept for as long as necessary to fulfill the purpose for which they were collected and to determine any possible liabilities that may arise from that purpose and the processing of the data. The provisions of the different regulations regarding the retention period will apply, as far as applicable to this processing. Data of subscribers by email or form: From the moment the user subscribes until they unsubscribe.

  2. Minors. Car y Kovalskyy, S.L does not authorize minors under 14 years of age to provide their personal data through the means provided on this website (completion of web forms to request services, contact, or by sending emails). Therefore, people who provide personal data using these means formally declare to be over 14 years old, and Car y Kovalskyy, S.L is exempt from any responsibility for the breach of this requirement. If your child under the established age limit has provided personal information to Car y Kovalskyy, S.L, please contact us to request the exercise of their applicable rights. In those cases where the services offered by Car y Kovalskyy, S.L are intended for minors under 14 years old, the means to collect the authorization of parents or legal guardians of the minor will be enabled.

  3. Exercise of Data Protection Rights: How to exercise these rights? Users may send a communication to the registered office of Car y Kovalskyy, S.L or email address info@casaluque.com, including in both cases a photocopy of their ID card or other similar identification document, to request the exercise of the following rights:

Access to your personal data: you can ask Car y Kovalskyy, S.L if it is using your personal data.

To request its rectification if it is not correct, or to exercise the right to be forgotten with respect to it.

To request the limitation of its processing, in this case, they will only be kept by Car y Kovalskyy, S.L for the exercise or defense of claims.

To object to its processing: Car y Kovalskyy, S.L will stop processing the data in the way you indicate, unless for legitimate reasons or the exercise or defense of possible claims, they must continue to be processed.

To data portability: if you want your data to be processed by another firm, Car y Kovalskyy, S.L will facilitate the portability of your data to the new data controller. You can use the models provided by the Spanish Data Protection Agency to exercise your rights: Here Claim before the AEPD: if you consider that there is a problem with the way Car y Kovalskyy, S.L is handling your data, you can address your claims to the corresponding control authority, being in Spain, the competent authority for this: Spanish Data Protection Agency. We will ask you for specific information to help us confirm your identity and ensure your right to access your personal data (or exercise any of the other rights mentioned above). This is a security measure to ensure that personal data is not disclosed to anyone who does not have the right to receive it. All requests will be resolved within the legal period indicated of one month. However, it may take us more than a month if your request is particularly complex. In this case, we will notify you and keep you updated.

  1. Data communication: service provision. It is possible that in the performance of our work, we need the help of third parties who will only process the data to provide the contracted service, and with whom we have the corresponding measures to ensure your rights:

Service providers who provide system administration and information technology services.

Professional advisors including lawyers, auditors, and insurers who provide banking, legal, insurance, and accounting consulting services. All processors to whom we transfer your data will respect the security of your personal data and will treat it in accordance with the GDPR. We only allow such processors to process your data for specified purposes and in accordance with our instructions. However, you can request from us, in compliance with transparency, a list of who these companies are that provide us with services; you can do so at the email: info@casaluque.com.

  1. Data Security. We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized manner, altered, or disclosed. Additionally, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know such data. They will only process your personal data according to our instructions and are subject to a duty of confidentiality. We have implemented procedures to deal with any suspected personal data breach and will notify you and the Control Authority in case it occurs, as regulated in the GDPR in Articles 33 and 34, a security breach. Approximate translation; the prevailing language is Spanish.