Privacy Policy

1. Data Controller

In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018, of December 5, on Data Protection and Guarantee of Digital Rights (LOPDGDD), the user is informed that the personal data collected through this Website will be processed under the responsibility of:

• Holder: INVERSIONES Y PROYECTOS LAS CAMELIAS, S.L.U.

• NIF/CIF: B70814348

• Address: Avenida Alcalde Alfonso Molina nº 2, Bajo Derecha, 15005 A Coruña (A Coruña), Spain

• Contact email: reservas@casteloandrade.com

2. Purposes of Processing

The data provided by users may be processed for the following purposes:

• Manage information requests, reservations, and related communications.

• Formalize, manage, and execute reservations and contracted services.

• Comply with the legal obligations applicable to the controller.

• Send commercial communications related to similar services, provided there is express consent or legitimate basis.

3. Legal Basis for Processing

The legal bases that legitimize the processing of data are:

• The execution of a contract or the application of pre-contractual measures at the request of the data subject (reservations, inquiries, management).

• The compliance with legal obligations (tax, accounting, consumer).

• The express consent of the user for certain purposes (e.g., commercial communications).

• The legitimate interest of the controller in maintaining the relationship with clients and users.

4. Data Retention

Personal data will be retained as long as there is a contractual or commercial relationship with the user and during the legally required periods.
In the case of express consent for commercial communications, the data will be retained until the user requests its deletion or withdraws such consent.

5. Data Transfer

Data will not be transferred to third parties, except for legal obligations or in cases necessary for the provision of the service (e.g., technology providers, financial or administrative management entities).
In any case, measures will be taken to ensure the confidentiality and security of the data.

6. User Rights

The user can exercise their rights at any time:

• Access: know what data we process.

• Rectification: request the correction of inaccurate data.

• Deletion: request the deletion of data when they are no longer necessary.

• Limitation: restrict processing in certain cases.

• Opposition: oppose the processing of their data in certain cases.

• Portability: receive their data in a structured electronic format.

The exercise of rights can be carried out by sending a written communication to reservas@casteloandrade.com, attaching a copy of the identity verification document.

Additionally, the user has the right to file a complaint with the Spanish Agency for Data Protection (AEPD) if they believe that the processing of their data does not comply with current regulations.

7. Security

INVERSIONES Y PROYECTOS LAS CAMELIAS, S.L.U. will apply the necessary technical and organizational measures to ensure the security, confidentiality, and integrity of the data, preventing its alteration, loss, unauthorized processing, or access.

8. Commercial Communications

When the user expressly authorizes it, their data may be used to send them commercial communications related to the company’s services and activities.
The user may revoke their consent at any time by sending an email to reservas@casteloandrade.com with the subject “Unsubscribe from communications”.

9. Modifications

The controller reserves the right to modify this Privacy Policy at any time, respecting the applicable regulations and communicating the changes on the Website.

Last update: October 3, 2025.