Privacy Policy
Oier Gartzia Agirre y Otra CB (hereinafter ‘Ocean Tours Hondarribia’), in accordance with the legal requirements imposed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and in particular, in application of Article 25 and Recital 78, is recognized as the Controller of personal data processing and undertakes to process them in accordance with regulatory requirements and the risks associated with their processing that have been identified beforehand.
Ensuring the proper management of personal data, all Ocean Tours Hondarribia staff involved in processing processes are familiar with the data protection policies established in the organization, thereby ensuring the confidentiality, integrity, availability, and resilience of personal data as well as the ability to effectively restore personal data in the event of an incident, as quickly as possible.
In accordance with current regulations, Ocean Tours Hondarribia is not obliged to appoint a Data Protection Officer (DPO) since the processing carried out does not involve sensitive data.However, for any complaints, inquiries, and/or suggestions, we are at your disposal and inform you of the following aspects:
1. Data controller of your personal data
Identification of the Data Controller: Oier Gartzia Agirre y Otra CB, Tax ID: E56924475
Postal Address: Katalin Erauso Kalea 18 3ºB 20280 Hondarribia, Gipuzkoa
Website: oceantourshondarribia.com
Contact Email: info@oceantourshondarribia.com
Contact Phone: 623 924 050
2. Purpose and duration of the processing of your personal data
Each time Ocean Tours Hondarribia requests your personal data, we will expressly inform you, at the time of data collection, of the purpose of the processing for which you are providing your consent. In the event that Ocean Tours Hondarribia wishes to use your data for other purposes (generally for sending information about Ocean Tours Hondarribia activities that we believe may be of interest to you), we will request your express consent beforehand. In cases where you have authorized us to send commercial information, we inform you that we may create a “commercial profile” based on the data provided in order to tailor our information to your interests; however, please note that exclusively automated decisions will not be made based on this profile.
The duration of the processing of your personal data will be indefinite unless you exercise your right to erasure, at which point we will delete your personal data except for those that we are legally obliged to retain for the period specified (for example, billing data for our services).
3. Legitimacy of the processing of your personal data
The legal basis that legitimizes us to process your personal data is your own consent for the processing. In general, Ocean Tours Hondarribia requests your consent for the primary purpose (being able to provide you with the service you are requesting), so your refusal to consent prevents us from providing you with the service you demand. In the case of the secondary purpose (being able to send you commercial information from Ocean Tours Hondarribia), you must expressly consent voluntarily to this purpose; if you do not wish to expressly consent to the secondary purpose, Ocean Tours Hondarribia will consider itself not authorized to send you commercial information and will act accordingly.
4. Recipient of your personal data
Ocean Tours Hondarribia does not plan to transfer your personal data to third parties. In the event that such a transfer is to be made, your express consent will be requested beforehand, informing you of the recipients of the transfers or, if they are not clearly predetermined, you will be informed of the category of recipients.
Ocean Tours Hondarribia may contract the provision of services to third parties that involve access to your personal data on behalf of a third party, but always within the scope of providing a service resulting in a data processing agreement under the conditions set out in Articles 28 and 29 of the aforementioned European Regulation. In these cases, Ocean Tours Hondarribia will regulate the data processing agreement through the corresponding data protection framework contract, where the commitments that both parties undertake regarding the processing of your personal data, regarding their confidentiality and security, will be clearly reflected.
In the event that the data processor is an entity outside the European space, we will work with entities that, in the opinion of the Spanish Data Protection Agency, have a demonstrably equivalent level of security through these channels:
- The service provider company is listed in the countries with a level of protection equivalent to that of the European Union.
- The international transfer of personal data is expressly authorized by the Spanish Data Protection Agency.
- The service provider company operates under the EU-US Privacy Shield agreement.
5. Rights related to the processing of your personal data
As the data subject of personal data processed by Ocean Tours Hondarribia, and in accordance with Articles 15 to 21 of the aforementioned European Regulation, you can exercise, at any time, the rights of access, rectification, erasure, restriction of processing, objection, and/or data portability. To do so, you should contact Ocean Tours Hondarribia through any of the usual communication channels, and especially through the contact details provided in point 1 of this Data Protection Policy, requesting the desired right. Before doing so, you must identify yourself unequivocally, ensuring that you are the owner of the personal data on which you wish to exercise the right. Ocean Tours Hondarribia will fulfill it as soon as possible and, in any case, without undue delay.
If you have doubts about what your rights are and how to exercise them, Ocean Tours Hondarribia is at your disposal to provide you with the necessary information and facilitate the exercise of them. If you believe that your request to exercise your rights has not been properly addressed, you may file a complaint with the competent supervisory authority; for this purpose, we provide you with the main contact details of the Spanish Data Protection Agency:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6
28001 Madrid
www.agpd.es
Contact Phones: 901 100 099 – 912 663 517
6. Data source
The origin of the personal data processed by Ocean Tours Hondarribia will be the data subject themselves or their legal representative, or the person or persons authorized expressly by the data subject. The categories of data processed will always correspond to identifiable, economic, commercial information, academic and professional data, and in general, any type of personal data that is not considered as specially protected data.
