1. Identification Data
ESTACIÓN TERMAL DE CALDAS DE BOI S.A. hereinafter SPA STATION OF CALDES DE BOI, owner of the web domain https://www.caldesdeboi.com/ with address for this purpose in C / AFUERAS S / N, CP25528, CALDES DE BOÍ, LLEIDA, CIF number: A25011610, and contact email: INFO@CALDESDEBOI.COM
2. Data Protection
SPA STATION OF CALDES DE BOI, in compliance with the Organic Law 3/2018, of December 5, on Protection of Personal Data and guarantee of digital rights , and the GDPR , ensure the correct use and treatment of the user’s personal data. To do this, together with each personal data collection form, in the services that the user may request from CALIES DE BOI SPA, he will inform the user of the existence and acceptance of the particular conditions of the processing of his data in Each case, informing you of the responsibility of the file created, the address of the person in charge, the possibility of exercising your rights, the purpose of the processing and the communication of data to third parties where appropriate.
3. IP Addresses
The website’s servers can automatically detect the IP address and domain name used by the user.
An IP address is a number automatically assigned to a computer when it connects to the Internet. All this information is recorded in a duly registered server activity file that allows the subsequent processing of the data in order to obtain only statistical measurements that allow to know the number of page impressions, the number of visits made to the web services, the order of visits, the access point, etc.
4. Security
The website uses information security techniques generally accepted in the industry, such as firewalls, access control procedures and cryptographic mechanisms, all in order to prevent unauthorized access to data.
To achieve these purposes, the user / client expressly accepts that the provider obtains data for the purposes of the corresponding authentication of the access controls.
Any hiring process or that involves the introduction of sensitive personal data (health, ideology, …) will always be transmitted through a secure communication protocol (Https: //, …), so that no third party has access to the information transmitted electronically.
5. Minors
EChildren under 14 must not transfer their personal data to SPA STATION OF CALDES DE BOI, without the prior consent of their parents or guardians.
With the publication of the GDPR, the determination of the age to consent to the transfer of personal data between 16 and 13 years is foreseen, an issue that is currently to be defined.
In the event that SPA STATION OF CALDES DE BOI detects users on the web that could be under 14 years , reserves the right to request a copy of your ID, or, where appropriate, the authorization of their parents or guardians, causing their withdrawal if they fail to prove compliance with this requirement or lack of response.
6. Exercise of rights
At any time the web user may modify their preferences for commercial shipments, as well as exercise their rights provided in the regulations, by means of a written communication addressed to SPA STATION OF CALDES DE BOI, to the postal address of ADDRESS, or via email addressed to INFO @ CALDESDEBOI.COM. In both cases, the user must accompany a copy of their ID, passport or similar.
ACCESS: Get confirmation of whether your data is being processed.
DELETE: Obtain the deletion of your data.
RECTIFICATION: Modify inaccurate, erroneous or incomplete data.
PORTABILITY: Receive from CALI STATION OF CALI DE BOI SPA the personal data that are incumbent on you and transmit them to another person in charge of the treatment.
OPPOSITION: Oppose that personal data concerning you are subject to a treatment based on the fulfillment of purposes of public interest, or of legitimate interest for the person in charge.
LIMITATION OF TREATMENT: Obtain from the data controller the limitation of the data processing.
Also, you can use the models and forms that the AEPD portal makes available to you to exercise these rights.
And, if you do not wish to receive communications by email, you can exercise your right to cancel and oppose by requesting your withdrawal also by ordinary or electronic mail, in addition to the link you will have in each email you receive from SPA STATION OF CALDES DE BOI.
7. Treatment activity and purpose
SPA STATION CALDES DE BOI collects the information of each client / provider / etc. for the provision of our Thermal Station service Data categories to which you have access: Identification data, health data and bank data Data transfers from the data controller:
SPA STATION OF CALDES DE BOI informs users of the website that their personal data will not be transferred to third parties or organizations except when the transfer of data is covered by a legal obligation or when the provision of service implies the need for a contractual relationship with service providers in charge of the treatment. In the latter case, the transfer of data to the third party will only take place when SPA STATION OF CALDES DE BOI has the express consent of the user and maintains a contractual relationship with the person in charge of the treatment that guarantees its confidentiality and compliance.
SPA STATION CALDES DE BOI expressly prohibits the user of the web share, facilitate or transfer data of third parties, which could obtain from the contact, interaction or navigation or consultation through this website, except if you could prove the express authorization of the user whose data you intend to transfer.
We remind web users that DATA also includes image files of people. The personal image is a data protected by the regulations (Article 5.1 of the LOPD Development Regulation). Therefore, no one can use it without the express consent of the person who appears in it.
8. Applicable Legislation
The privacy policy of SPA STATION OF CALDES DE BOI is governed by the following rules:
• The Parliament Regulation (EU) 2016/679 European and of the Council, of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data and the free movement of these data.
• The Law 34/2002, of July 11, Services of the Information Society and Electronic Commerce (LSSI-CE).
• The Organic Law 3/2018 , of December 5, Protection of Personal Data and guarantee of digital rights.
