Privacy Policy

The OWNER of the website is committed to protecting the privacy of users who access this website and/or any of its services. The use of the website and/or any of the services offered by the OWNER implies the User’s acceptance of the provisions contained in this Privacy Policy.

Please note that, although there may be links from our website to other websites, this Privacy Policy does not apply to the websites of other companies or organizations to which the website may redirect. The OWNER does not control the content of third-party sites nor accept any liability for the content or privacy policies of these sites, as stated in our Legal Notice.

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (GDPR), and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), we provide the following information regarding the processing of your personal data:

Who is responsible for processing your data?

The Data Controller is Gemma Serrats Bou (hereinafter, “Mas Gran de Cruïlles”), with DNI 77999475N and address at Veïnat d’Aró, 8, postal code 17116, in the town of Cruïlles. Our details appear in the Legal Notice of this website.

For what purpose do we process your personal data?

We process the information provided to us in order to provide and invoice our services and/or respond to requests for information or contact.
With your consent, we may also process your data to send you information about our activities and services.

For how long will we keep your data?

The personal data provided by the Data Subject will be kept for as long as the relationship and/or contract between the Data Subject and Mas Gran de Cruïlles remains in force and, once it ends, will be blocked until the applicable statute of limitations periods have elapsed.

In the event that you have consented to their processing, the data will be kept until the Data Subject requests its deletion, at which point it will be blocked until the applicable statute of limitations periods have elapsed.

What is the legal basis for processing your data?

The legal basis for processing your data for the purposes described above is your consent, freely given by ticking the acceptance boxes on the data collection forms of our website.

The performance of the contract between the Data Subject and Mas Gran de Cruïlles also constitutes a legal basis. In this regard, the Data Subject is obliged to provide the data necessary for its performance. Should you fail to provide this data, it will not be possible to enter into the contract.

To which recipients will your data be disclosed?

The Data Subject’s personal data may be disclosed to the following recipients:

Public Administrations and Courts and Tribunals, when an applicable legal provision so establishes.
Suppliers that provide services to Mas Gran de Cruïlles related to the management of the formalized contract and that act as data processors, such as, but not limited to, financial institutions, technology service providers, logistics, transport and delivery service providers and partners, or providers of customer service-related services, among others.
Suppliers and partners that provide services related to marketing and advertising, only in the event that the Data Subject has given their express consent.
In any case, third parties with whom certain personal data of the Data Subject is shared will have previously demonstrated the adoption of appropriate measures for its proper protection.

What are your rights when you provide us with your data?

Anyone has the right to obtain confirmation as to whether we are processing personal data concerning them. Data Subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain cases, the Data Subject will have the right to request the restriction of the processing of their data, in which case we will only keep it for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, Data Subjects may object to the processing of their data. In such cases, Mas Gran de Cruïlles will stop processing the data, except for compelling legitimate reasons or for the exercise or defense of possible claims.

In any of the above cases, Mas Gran de Cruïlles will communicate any rectification or deletion of personal data, as well as any restriction of processing carried out, to each of the recipients to whom the personal data has been disclosed, unless this proves impossible or requires a disproportionate effort. Should the Data Subject so request, Mas Gran de Cruïlles will inform them about these recipients.

Likewise, the Data Subject will have the right to receive the personal data concerning them, which they have provided to Mas Gran de Cruïlles, in a structured, commonly used and machine-readable format, and to transmit it to another controller when the processing is based on consent or on a contract and is carried out by automated means.

The Data Subject will have the right to object at any time, for reasons related to their particular situation, to personal data concerning them being subject to processing based on public or legitimate interest by Mas Gran de Cruïlles or a third party, including profiling, so that Mas Gran de Cruïlles stops processing the personal data, unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the Data Subject, or for the formulation, exercise or defense of claims.

Likewise, the Data Subject will have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects on them or significantly affects them, unless this decision is necessary for entering into or performing a contract with Mas Gran de Cruïlles and is authorized by current European or national law, or is based on the explicit consent of the Data Subject.

Finally, the Data Subject will have the right to file a complaint with the data protection authorities.

How can you exercise your rights?

The aforementioned rights of access, rectification, deletion, objection, portability and restriction, as well as the right not to be subject to automated individual decisions, may be exercised by sending a written request with an attached copy of your DNI to the following email address: info@masgrancruilles.com.

How did we obtain your data?

The personal data we process comes from the Data Subject themselves, who guarantees that the personal data provided is accurate and takes responsibility for communicating any changes. The data that must be entered in a field marked with an asterisk is mandatory in order to provide the requested service.

What data do we process?

The categories of data we may process are:

Identification data.
Postal or email addresses.
Phone number.