Privacy Notice
1. User information
Who is the controller of your personal data?
Alma Forest Sotogrande S.L. is the CONTROLLER of the user’s personal data and processes that data in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Organic Law 3/2018 of 5 December (LOPDGDD).
Why do we process your personal data?
To maintain a commercial relationship with the user. Planned processing operations are:
- Processing orders and requests, and responding to queries or other requests made through available contact methods.
- Sending the online newsletter with news, offers and promotions relating to our activity.
Why can we process your personal data?
Processing is legitimised by Article 6 of the GDPR as follows:
- With the user’s consent, for commercial communications and the newsletter.
- In the legitimate interest of the CONTROLLER, for market research and statistical analysis, and to process requests made by the user.
How long will we keep your personal data?
Data is stored no longer than necessary for the purpose of processing or as required by law. When no longer required, data is erased with appropriate security measures to ensure anonymisation or complete destruction.
To whom do we disclose your personal data?
No communication of personal data to third parties is foreseen except, where necessary for the purposes of processing, to communications service providers with which the CONTROLLER has signed the confidentiality and data-processing contracts required by current privacy regulations.
What are your rights?
- The right to withdraw consent at any time.
- The rights of access, rectification, portability and erasure, and the right to limit or object to processing.
- The right to file a claim with the Spanish Supervisory Authority at www.aepd.es, opens in a new tab if you consider processing does not comply with current legislation.
Contact information for exercising rights
Alma Forest Sotogrande S.L., C/ Manuel Gavilan Oncala, 19, 11310 San Roque (Cádiz). Email: info@almaforestschool.com.
DPO: OFFICE HIDALGO ASOCIADOS, rgpd@hidalgoasociados.com.
2. Compulsory or optional information
Users who enter data in fields marked as required accept that the data is necessary for the supplier to meet their request. Users ensure that personal data provided to the CONTROLLER is accurate and are responsible for communicating changes.
Data requested through website forms is required when necessary to provide the requested service. If required data is not provided, the information and services supplied may not be fully adapted to the user’s needs.
3. Security measures
In accordance with current personal-data regulations, the CONTROLLER complies with the provisions of the GDPR and LOPDGDD for processing personal data for which it is responsible, including the principles described in Article 5 of the GDPR.
The CONTROLLER applies appropriate technical and organisational policies to protect the rights and freedoms of users and provides the information needed to exercise those rights.
