The Data Controller undertakes to comply with personal data protection regulations and to respect Users’ privacy. The objective is to provide the best possible service to the User, and for this purpose it is necessary to process their personal data. The User may only include their own personal data and under no circumstances the personal data of another person without their express consent, being solely responsible if they do so.
1. Data Controller
Costaluz Estates S.L.; Sousa Legal and Properties S.L.; Aura Costaluz S.L.; Álvaro Morales Sousa and Juan Antonio García Rodríguez
Tax ID Numbers: B16892499; B02659381; B16845794; 44028538Y and 52922922Z respectively.
Address: C/ Virgen de la Luz, s/n (corner of c/ Poniente), 11.140. Conil de la Frontera, Cádiz, Spain.
Telephone: +34 956 440 172
2. Purposes and Legal Basis
Handling enquiries: To respond to User enquiries submitted through the Forms or communication tools available on the Website. The legal basis for processing is the User’s consent, pursuant to Article 6.1.a) of the GDPR.
Ethics Channel: Data collected through the Ethics Channel form, both from the whistleblower and affected third parties, necessary for managing the internal suggestion or reporting system of the following entities: Costaluz Estates S.L.; Sousa Legal and Properties S.L.; Aura Costaluz S.L. Individuals using this channel may voluntarily choose whether or not to identify themselves. The legal basis for processing is the User’s consent, pursuant to Article 6.1.a) of the GDPR, in the case of non-anonymous reports. Where the implementation of the internal reporting system is mandatory, the legal basis for processing is compliance with a legal obligation, pursuant to Article 6.1.c) of the GDPR, in accordance with Organic Law 7/2021 of 26 May on the protection of personal data processed for the purposes of prevention, detection, investigation and prosecution of criminal offences and the enforcement of criminal penalties, and Law 2/2023 of 20 February on the protection of persons reporting regulatory infringements and combating corruption. Where the implementation of the internal reporting system is voluntary, the legal bases for processing are the performance of a task carried out in the public interest, pursuant to Article 6.1.e) of the GDPR, and the legitimate interest of the entity in preventing non-compliance and improving internal management, pursuant to Article 6.1.f) of the GDPR and the enabling framework provided in Article 24 of the LOPDGDD.
Browsing data: Data collected by first-party or third-party cookies that may be generated by this Website, after the User has been informed and has accepted them. The legal basis for processing is the User’s consent, pursuant to Article 6.1.a) of the GDPR.
The data processed for this purpose are those collected by the cookies generated on the Website, according to their respective purposes. For more information, you may consult our Cookies Policy or modify your preferences in our cookie management tool.
The Data Controller shall not be responsible for the processing of information collected by third-party advertising cookies, nor shall it have access to the data collected by them. The Data Controller informs Users that such third parties will process data for their own purposes depending on each type of cookie and may also transfer the information to other service providers or process the data in combination with data collected on other websites by them or other publishers in order to provide the services entrusted to them.
3. Retention Period
The data shall be retained for as long as the relationship is maintained and deletion is not requested, and in any case in compliance with the applicable legal limitation periods.
4. Data Transfers
No transfers of Users’ personal data collected through this Website to third parties are foreseen without a legal basis legitimising such processing.
The Data Controller uses external providers that use Cookies to carry out analytical studies regarding use and advertising generation, which may involve behavioural advertising. The Data Controller does not have access to the data generated by these Cookies. The User may select in advance which Cookies will be generated on this Website, may subsequently manage their preferences, and may consult the Cookies Policy at any time.
In relation to service management, Users’ data may be processed by companies providing the Data Controller with various services, including shipping, courier services, accounting, consultancy, IT maintenance, or any other service where access to or processing of such data is indispensable or unavoidable in their capacity as Data Processors. Such processing shall under no circumstances be considered a transfer of data.
5. Rights of Data Subjects
The User may exercise their rights of access, rectification, erasure, objection, restriction of processing, data portability, and the right not to be subject to automated individual decision-making (including profiling), by sending a request with the subject “Data Protection” to the address: C/ Virgen de la Luz, S/N (Corner of C/ Poniente), 11.140. Conil de la Frontera, Cádiz, Spain, or by email to info@templecambria.com, from the same account previously provided, always indicating their contact details. If the User considers that their rights have been infringed, they may file a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Free Text Fields
The free text fields that may appear in Website forms and are made available to the User have the sole purpose of collecting information to improve the quality of the Services.
The User shall not include in any area offered by the Website as “free text fields” any personal data that may be classified as requiring a special level of protection, including but not limited to data relating to financial status, psychological profiles, ideology, religion, beliefs, trade union membership, health, racial origin and/or sexual life.
7. Non-Mandatory Fields
The Data Controller informs the User that the collection of certain data is not mandatory, except in fields where otherwise indicated by an (*). However, failure to complete such data may prevent the provision of all Services linked to such data, releasing the Data Controller from any liability for the non-provision or incomplete provision of such Services.
8. Access and Rectification of Personal Data
The User undertakes to provide truthful information regarding their personal data and to keep the data provided to the Data Controller updated at all times. The User shall, in any case, be responsible for the accuracy of the data provided, and the Data Controller reserves the right to exclude from the services any User who has provided false data, without prejudice to any other legal actions that may apply. The data provided by the User shall be presumed accurate; therefore, in the event of erroneous submission of data by the User, the Data Controller declines any responsibility in the event of incorrect execution or non-execution of the submission, as well as incorrect completion of the necessary administrative procedures.
9. Confidentiality
Furthermore, any information exchanged between the parties, information agreed by them to be confidential, or information simply relating to the content of such information, shall also be considered confidential. The viewing of data over the Internet shall not imply direct access to such data, except with the express consent of the data subject on each occasion.
10. Photographs
In compliance with current Personal Data Protection regulations, Users are informed that photographs in which persons appear are considered personal data. By means of this notice, Users are informed that photographs of persons may appear on this Website for promotional purposes and that such persons have voluntarily consented to this. Should any person appearing in such photographs wish for a photograph not to be displayed, they are requested to contact us and it will be removed as soon as possible. This shall not apply to persons who have provided services in a professional capacity.