Privacy Policy

1. Data Controller:

The Public Foundation for Nerja Cave Services, with VAT number G29162278 and address at Paseo de Sancha, 64, 29017 Málaga, is responsible for processing the provided data. We inform you that this data will be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of individuals with regard to the processing of personal data and the free movement of such data, as well as with Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights.

2. Legitimacy of Data Processing:

The legitimacy for processing your data is the consent obtained from the user. Users, by ticking the corresponding box, expressly and freely give their consent for their data to be processed for the purpose stated by the provider. The user guarantees that the provided personal data is truthful and is responsible for communicating any changes to it.

All data requested through the web service is mandatory, as it is necessary for the provision of the service. If all the data is not provided, we do not guarantee that the information and service provided by the provider will meet your needs completely.

The legal basis for data processing under European Regulation 2016/679 of the European Parliament and of the Council is as follows:

1. Art. 6.1 a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
2. Art. 6.1 b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
3. Art. 6.1 c) processing is necessary for compliance with a legal obligation to which the controller is subject.

3. Purpose of Processing:

The purpose is to maintain a commercial relationship with the user of the websites, app, and any other electronic means or digital platforms of the company. To carry out the processing, the intended operations are:

1. Process orders, requests, or any type of request made by the user through any of the contact forms provided.
2. Sending advertising commercial communications related to our products and services by any electronic or physical means, present or future, that enables commercial communications when the user has given consent for this.
3. In the case of providing us with your curriculum vitae or sending us your resume, we will use your data for contact management and for the selection processes we carry out.

4. Data Retention:

They will be kept as long as there is a mutual interest in maintaining the purpose of the processing. When they are no longer necessary for that purpose, they will be deleted with appropriate security measures to ensure their total destruction. The personal data provided by the data subject will be kept even if their deletion is requested by the data subject, limiting their processing only for the fulfillment of legal obligations and/or the exercise or defense of claims.

5. Your Rights When Providing Us with Your Data:

You have the following rights:

1. Right of Access, according to Article 15 of the GDPR.
2. Right to Rectification, according to Article 16 of the GDPR.
3. Right to Erasure (Right to be Forgotten), according to Article 17 of the GDPR.
4. Right to Restriction of Processing, according to Article 18 of the GDPR.
5. Right to Data Portability, according to Article 20 of the GDPR.
6. Right to Object, according to Article 21 of the GDPR.

These rights allow you to:

• Know whether we process your data or not.
• Access your personal data that we have.
• Rectify your data if it is not correct.
• Request the deletion of your data or withdraw the consent given.
• Request the restriction of the processing of your data, in which case they will only be kept in accordance with current regulations.
• Obtain your data in a structured, commonly used format. We can also send them to the new controller you indicate. This right is only valid in certain cases.

You also have the right to lodge a complaint with the supervisory authority (www.aepd.es) if you believe that the processing does not comply with current regulations.

To exercise your rights, you must send a photocopy of your ID card or passport to:

Public Foundation for Nerja Cave Services VAT number G29162278 Paseo de Sancha, 64 29017 Málaga Email: admon@cuevadenerja.es

6. Recipients of Your Data:

The Company expressly informs and guarantees to users that their personal data will not be transferred to third parties under any circumstances, except in cases where there is a legal obligation or it is necessary for the development and execution of the processing purposes.

Any data provided to our service providers (management, etc.) is done under the signing of the Processing Manager contract required by current data protection regulations. If any type of transfer of personal data is made, express, informed, and unequivocal consent will be requested from users beforehand.

7. Minors:

If you are a minor user, you must obtain the prior consent of your parents or guardians before providing your personal data on our website. The Company disclaims any responsibility for non-compliance with this requirement.

8. Security Measures:

In accordance with current regulations on the protection of personal data, the provider complies with all provisions and principles established in Article 5 of the GDPR. It is guaranteed that appropriate technical and organizational policies have been implemented to apply the security measures established in the GDPR and the LOPDGDD, in order to protect the rights and freedoms of users. In addition, users have been provided with adequate information so that they can exercise their rights.

9. International Data Transfers:

The data we collect is stored within the European Economic Area. In the event that they may be transferred and processed in a country outside the European Economic Area, we guarantee an adequate level of protection for personal data.

In summary, at the Public Foundation for Nerja Cave Services, we are committed to ensuring the privacy and protection of your personal data in accordance with current legislation. If you have any questions or concerns about our Privacy Policy, please do not hesitate to contact us through the contact means provided.

Thank you for trusting us!