VAOVA HOSTELERIA Y GESTION SL (hereinafter, VAOVA GASTRO) is committed to privacy and transparency.

Below, we detail the personal data processing we carry out, as well as all the related information.

PERSONAL DATA PROTECTION – PRIVACY

The provider is deeply committed to compliance with personal data protection regulations and guarantees full compliance with the obligations established, as well as the implementation of the technical and organizational security measures as established in the European General Data Protection Regulation EU 2016/679 (GDPR) and in Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPD-GDD).

The provider makes the Privacy Policy of the entity available to users, informing them of the following aspects:

1. Data Controller information.
2. Purpose.
3. Legal basis.
4. Recipients.
5. Source.
6. Additional information.

When we need to obtain personal information from you, we will always ask you to provide it voluntarily and explicitly.

In compliance with personal data protection regulations, you explicitly consent to the processing of the personal data provided under our responsibility for the following purposes:

1.- Manage our relationship and offer you the requested personalized service.
2.- Handling inquiries, advice, orders, requests, or any type of request made by the user through any of the contact forms available to the user on the VAOVA GASTRO website.
3.- Sending commercial communications about our products via email, fax, SMS, MMS, social media, or any other electronic or physical means, present or future, that enable commercial communications.

All requested data are mandatory; if not provided, it would be impossible to fulfill the purpose for which they are requested in each case.

PROCESSING INFORMATION

According to Article 13 of the European General Data Protection Regulation EU 2016/679 and Article 11 of the Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights, the user must receive timely and specific information from the data controller and the purposes of the processing.

To this end, the following information is provided:

1. Who is responsible for processing your data?

VAOVA HOSTELERIA Y GESTION SL
B44779866
C/ DIEGO MUÑOZ TORRERO 2 – 06800 MÉRIDA – BADAJOZ (SPAIN).
(+34) 924 963 181
info@vaovagastro.com

2. What is the purpose of processing your personal data?

At VAOVA GASTRO, we process the information provided by interested persons to achieve the following purposes:

1. CLIENT MANAGEMENT: To carry out the administrative, accounting, and tax management of the requested services, as well as to send commercial communications about our products and services.

2. SUPPLIER MANAGEMENT: The administrative, accounting, and tax management of the contracted services, as well as the contact persons.

3. MANAGEMENT OF EXERCISING RIGHTS OF DATA SUBJECTS: To manage and respond to the requests of data subjects in exercising their rights established in data protection regulations.

4. NEWSLETTER SUBSCRIPTION FORM: To send our newsletter and other promotional communications of interest to the subscribers.

5. CONTACT FORMS: To address your request and send you commercial communications, including electronically.

3. How long will we retain your data?

Data will be retained:

1. As long as the contractual relationship is maintained or for the years necessary to comply with legal obligations.

2. For data processing related to the exercise of rights, data will be retained for the time necessary to resolve requests and at least for three years to address potential claims.

3. For data processing related to contact forms and newsletters, data will be retained as long as the data subject does not request their deletion.

4. What is the legal basis for processing your data?

We indicate the legal basis for processing your data:

1. CLIENT MANAGEMENT:

a. Performance of a contract: Fiscal, accounting, and administrative management of customers. (GDPR Art. 6.1.b).

b. Legitimate interest of the Controller: Sending commercial communications, including electronically. (GDPR Recital 47, LSSICE Art. 21.2).

2. SUPPLIER MANAGEMENT:

a. Performance of a contract: Administrative, accounting, and tax management of the contracted services. (GDPR Art. 6.1.b).

b. Legitimate interest of the Controller: Management of professional contact data. (LOPDGDD Art. 19, GDPR Art. 6.1.f).

3. NEWSLETTER SUBSCRIPTION FORM:

a. Consent of the data subject: To send our newsletter and other promotional communications of interest to the subscribers (GDPR Art. 6.1.a, LSSICE Art. 21).

4. CONTACT FORMS:

a. Performance of a contract: Management of potential customers interested in our products and/or services. (GDPR Art. 6.1.b, LSSICE Art. 21).
b. Legitimate interest of the Controller: Management of professional contact data (LOPDGDD Art. 19, GDPR Art. 6.1.f).

5. Who will receive your data?

Data will be communicated to the following recipients:

1. CLIENT MANAGEMENT:

a. Tax Administration, to comply with legal obligations (legal requirement).

b. Banking institutions, to issue the corresponding receipts (contractual requirement).

2. SUPPLIER MANAGEMENT:

a. Tax Administration, to comply with legal obligations (legal requirement).

b. Banking institutions, to make the corresponding payments (contractual requirement).

3. MANAGEMENT OF EXERCISING RIGHTS OF DATA SUBJECTS:

a. Supervisory authorities, public administration bodies, and the Ombudsman, if applicable, to manage and respond to requests and potential claims (legal requirement).

4. CONTACT FORMS AND NEWSLETTER SUBSCRIPTION:

No data will be disclosed to third parties, except under legal obligation.

6. Are there any data transfers to third countries?

The following data transfers to third countries are anticipated for the use of our social media networks, in those cases where communication media such as Facebook are used, or the organization publishes content on our social media spaces:

• Facebook Ireland Limited (Facebook and Instagram), for social media platform services to publish organization content. The guarantee for this transfer has been established through: Standard data protection clauses. For more information, please visit: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; https://www.facebook.com/help/contact/540977946302970;

https://www.facebook.com/about/privacy/update.

7. What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether VAOVA GASTRO is processing personal data concerning them.

Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where applicable, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

They also have the right to data portability.

In certain circumstances, data subjects may request the limitation of the processing of their data, in which case we will only retain it for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to the processing of their data. In such a case, VAOVA GASTRO will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of potential claims.

You can exercise your rights by contacting info@vaovagastro.com or C/ Diego Muñoz Torrero 2, 06800 Mérida, Badajoz (Spain).

When commercial communications are sent using the legitimate interest of the controller as the legal basis, the data subject may object to the processing of their data for that purpose.

The consent given is for all purposes indicated where the legal basis is the data subject’s consent. You have the right to withdraw such consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

If you feel that your rights regarding the protection of your personal data have been violated, especially when you have not been satisfied in the exercise of your rights, you may file a complaint with the competent Data Protection Authority through their website: www.aepd.es.

8. How did we obtain your data?

The personal data processed at VAOVA GASTRO is provided by the data subject or their legal representative.

The categories of data processed are:

• Identification data.
• Postal and electronic addresses.
• Commercial information.
• Banking and economic data.