Book Crane
Book Crane

Privacy and Data Protection Policy

In accordance with Article 10 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, we hereby inform you that PORT NÀUTIC CASTELLÓ S.L., with Tax ID B64521875 and registered address at [C/ ZONA DEL PORT s.n, apt. 37 – 17487 – EMPURIABRAVA, is responsible for the management and operation of the website www.portnauticcastello.com.

If you wish to contact us, you may do so by postal mail at the address indicated above or via email at info@portnauticcastello.com.

Access to our domain can be direct or through any existing redirection, with this Privacy Policy being applicable.

Privacy Policy

This Privacy Policy describes how we process your personal data (e.g., collection, use, disclosure, retention, and protection of your personal information) and provides information about your rights as a data subject.

Port Nàutic Castelló S.L., (hereinafter THE OWNER) is the Data Controller, as well as responsible for the collection, use, disclosure, retention, and protection of your personal data, in accordance with the General Data Protection Regulation, internal rules and policies, or any applicable national regulations. In compliance with Organic Law 3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), as well as the new General Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, THE OWNER hereby informs:

Identity and Contact Details of the Data Controller

Our identifying information:

PORT NAUTIC CASTELLÓ S.L.

You can contact us:

  • By Postal Mail: C/ ZONA DEL PORT s.n, apt. 37 – 17487 – EMPURIABRAVA

Categories of Personal Data

We process the following categories of personal data:

  • Identification data – name and surname, DNI or equivalent
  • Administrative data – company name, address, bank details, and contact persons
  • Contact data – email, phone number, and address.
  • Digital data – cookies, IP address, websites and social networks, and other publicly accessible data on the Internet, etc.
  • Employment data – data of own employees, resume, education, professional experience, and health.
  • Business data – suppliers and clients.
  • Other data necessary for processing – for more information on the category of personal data in the development of our Activity, you can consult our Register of Activities, section “Category of Data”.

How do we collect your data?

We collect information about you from the following sources:

  • When we communicate or interact with you by phone, email, or through other contact methods.
  • Through the Contact form on the website.
  • Through the Booking Request form on the website.
  • Through the newsletter subscription form
  • Through time control tools, if applicable.
  • When you visit our facilities.
  • When you provide us with a resume.

How long do we retain your data?

Data will be retained as long as there is a commercial, contractual, or professional relationship with the data subject and subsequently for the years necessary to comply with the corresponding legal obligations in each case. Notwithstanding the foregoing, data will be retained as long as necessary for processing and the data subject does not request its deletion.

Regarding employment data or data related to social security, documentation, or computer records or media through which the corresponding data proving compliance with obligations regarding affiliation, registrations, cancellations, or variations that may occur in relation to these matters, as well as contribution documents and receipts justifying the payment of wages and delegated payment of benefits, according to Article 21 of Royal Legislative Decree 5/2000, of August 4, which approves the revised text of the Law on Infractions and Sanctions in the Social Order, their retention period will be 4 years.

Regarding accounting and tax documentation, for tax purposes, accounting books and other mandatory record books according to applicable tax regulations (IRPF, IVA, IS, etc.), as well as supporting documents justifying the entries recorded in the books (including computer programs and files and any other supporting document with tax implications), must be retained, at least, for the period during which the Administration has the right to check and investigate and, consequently, to settle tax debt, according to Articles 66 to 70 of the General Tax Law, which will be 4 years.

Regarding accounting and tax documentation, for commercial purposes, books, correspondence, documentation, and supporting documents concerning your business, duly organized from the last entry made in the books, unless otherwise established by general or special provisions, this commercial obligation extends to both mandatory books (income, expenses, investment goods, and provisions), in addition to the documentation and supporting documents on which the entries recorded in the books are based (invoices issued and received, tickets, corrective invoices, bank documents, etc.), according to Article 30 of the Commercial Code, which will be 6 years.

Data related to employee time controls will be retained, as established by Royal Decree-Law 8/2019, of March 8, on urgent social protection measures to combat precarious employment in the workday, for 4 years.

To whom do we disclose your data?

Depending on the purpose of processing, your personal data may be disclosed or processed by different categories of recipients:

  • Collaborators or External Professionals (Labor and Tax Advisory Services, Mutual Insurance Company responsible for health surveillance, Occupational Risk Prevention Company, …)
  • Public Administrations (General Treasury of Social Security, State Public Employment Service, Ministry of Labor, Ministry of Finance, and entities or organizations that grant aid or subsidies of interest to the company, which will use them in the legitimate exercise of their powers).

In any case, we only disclose your data to the extent strictly necessary and in the manner required to carry out the purposes described in this privacy policy, and only to entities with whom we have signed agreements protecting your rights and freedoms in relation to your personal data. These entities and/or professionals considered Data Processors will be governed by the provisions of Art. 28 of the GDPR, and this entity ensures that they take all necessary security measures in accordance with Art. 32 of this GDPR.

Where do we process your data?

In order to carry out our activity and provide our services, we process your personal data in accordance with the conditions established in this privacy policy within the European Union (EU).

For what purposes do we process your data?

Your data will be collected for processing operations relevant to the following purposes:

  • Receiving contact information or other requests made by you through any of our communication channels.
  • Administrative tasks derived from the provision of our services.
  • Preparation of a quote at your request through the website.
  • Employee time control.
  • Including your resume in our job bank.

You may withdraw your consent at any time free of charge by exercising your rights, directing your written request, duly identified with a verifiable document, to our address C/ ZONA DEL PORT s.n, apt. 37 – 17487 – EMPURIABRAVA or by email at info@portnauticcastello.com.

Why can we process your data?

The use of your data under the conditions described above is permitted by European and Spanish data protection regulations in accordance with the following legal bases:

Art. 6. GDPR

  • The data subject has given consent to the processing of his or her personal data for one or more specific purposes
  • Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract
  • Processing is necessary for compliance with a legal obligation to which the Data Controller is subject.

What are your rights?

Data protection regulations allow you to exercise your rights of access, rectification, opposition, erasure (“right to be forgotten”), restriction of processing, data portability, and not to be subject to individualized decisions before the Data Controller.

Any data subject has the right to be provided, BEFORE their data is collected, with basic information at a first level, in summary form, at the same time and through the same medium in which their personal data is collected, and furthermore, to receive the rest of the information through a more appropriate medium for its presentation and comprehension.

The information to be provided in layers or levels would be as follows:

1st Layer Information

  • The identity of the Data Controller.
  • What data will be processed.
  • For what purpose.
  • Where and how it was obtained.
  • The legal basis for processing.
  • Whether it will be communicated, transferred, or processed by third parties.
  • Reference to the procedure for Exercising Rights.

2nd Layer Information

  • Contact details of the Data Controller. Identity and details of the representative (if any). Contact details of the Data Protection Officer (if any).
  • Expanded description of the purposes of processing. Retention periods or criteria for data. Automated decisions, profiling, and applied logic.
  • Detail of the legal basis for processing, in cases of legal obligation, public interest, or legitimate interest. Obligation or not to provide data and consequences of not doing so.
  • Recipients or categories of recipients. Adequacy decisions, guarantees, binding corporate rules, or specific applicable situations.
  • How to exercise the rights of access, rectification, erasure, and data portability, and the restriction or opposition to their processing.
  • Right to withdraw consent given.
  • Right to lodge a complaint with the Supervisory Authority.

(The following table indicates your rights).

Right of accessTo know what data of yours is being processed, for what purpose it is processed, where the data was obtained, and if it will be or has been communicated to anyone
Right of rectificationTo modify any inaccurate or incomplete data of yours
Right of erasureTo cancel your inadequate or excessive data
Right to objectTo prevent your data from being processed or to stop its processing, but only in the cases established by law
Right to restriction of processingTo request that data processing be suspended in the cases established by law.
Right to data portabilityTo be able to receive your provided data in a structured, commonly used electronic format and to transmit it to another Controller.
Right not to be subject to individualized decisionsIn order that a decision concerning you that produces legal effects or affects you is not taken solely based on the processing of your data.

These rights are characterized by the following:

  • Their exercise is free of charge.
  • You can exercise the rights directly or through a legal representative.
  • If the request is submitted by electronic means, the information will be provided by these means when possible, unless the data subject requests otherwise.
  • Before exercising your rights, we must identify you to protect your personal data against fraudulent attempts.
  • Your request will be resolved within one month.

If the requests are manifestly unfounded or excessive (e.g., repetitive in nature), the controller may:

  • The controller is obliged to inform you about the means to exercise these rights. These means must be accessible, and this right cannot be denied solely because you choose another means.
  • If the controller does not act on the request, they will inform you, at the latest within one month, of the reasons for their inaction and the possibility of lodging a complaint with a Supervisory Authority.

If you wish to exercise any of the rights described, you can contact us through our Internal Data Protection Officer:

  • By postal address:

Port Nàutic Castelló S.L.

Attn: Data Protection Officer

C/ ZONA DEL PORT s.n, apt. 37 – 17487 – EMPURIABRAVA

Supervisory Authority

If you wish to lodge a complaint regarding the processing of your data by THE OWNER, we inform you that you can contact the Spanish Data Protection Agency, C/ Jorge Juan, 6 28001-Madrid http://www.agpd.es

Cookies

Cookies are files downloaded to your computer to collect standard Internet log information and information about browsing habits. This information is used, for example, to track website visitor usage and compile statistical reports on website activity.

You can configure your browser not to accept cookies. However, some first-party cookies are necessary to allow the website user’s session to use our services.

For more information, please visit our website’s Cookie Policy.

Minors

The User certifies that they are over 14 years of age and therefore possess the necessary legal capacity to give consent for the processing of their personal data, all in accordance with the provisions of this Privacy Policy.

If you wish to use our services through the website and are 14 years of age or younger, we will need the consent of your legal guardian to store your data; otherwise, we may proceed to block or delete it.

Register of Activities

You can request an updated copy of our Register of Activities via our email address info@portnauticcastello.com.

Security

THE OWNER adopts organizational and technical measures to guarantee the security of personal data and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.

Updates

We keep our privacy policy under review and may change it occasionally (primarily to comply with legal and data protection practices). Updated versions will be posted on our website.

Applicable Law and Competent Courts

The terms and conditions governing this website, as well as any relationships that may arise, are protected by and subject to Spanish law. For the resolution of any type of controversy, dispute, or discrepancy that may arise between the USER and Port Nàutic Castelló regarding the use of this website, the parties agree to submit to the Courts of Girona, Spain.