PRIVACY POLICY

The company responsible for the processing of your data in accordance with this Privacy Policy is: CAMBRILS PARK RESORT, S.L.U.

CAMBRILS PARK RESORT, S.L.U., with registered office at Prolongación de la Calle E, s/n, de 43840-Salou, CIF B43454123 and contact telephone +34 977 351 031, processes personal data in order to carry out some of its activities.

In this data processing, we comply at all times with the current applicable regulations on the subject: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (RGPD) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPD).

1. Privacy statement

At CAMBRILS PARK RESORT, S.L.U. we are fully aware of the importance for users of the processing of their personal data. For this reason, we are committed to guaranteeing their protection, confidentiality and security, in accordance with the principles of proactive responsibility, transparency and respect for individual rights.

The purpose of this Privacy Policy is to provide clear and accessible information on what personal data we collect through the website www.cambrilspark.com, for what purpose we use it, on the basis of what legitimacy we process it and what rights the persons concerned may exercise.

We undertake to process only the personal data strictly necessary for the specified and legitimate purposes described in this policy, and to take all appropriate technical and organisational measures to prevent unauthorised access, loss or misuse.

2. Categories of personal data processed

The data we may process, depending on the relevant purpose, include:

• Identification data: name, surname, DNI/NIE or equivalent document.
• Contact details: telephone, e-mail, postal address.
• Other data that the user voluntarily provides through the available channels (forms, emails, etc.).

No special categories of personal data are collected or processed, except in the cases provided for by law and with the express consent of the person concerned.

3. Purpose and duration of the processing of personal data

The personal data provided by users through the website will be processed by CAMBRILS PARK RESORT, S.L.U. for the following purposes, depending on the services or functionalities with which they interact:

• Booking management through the external booking engine: the website uses an external booking engine to manage our clients' bookings. This engine collects personal data such as name, contact information, booking dates and payment details in order to complete the booking process and provide the requested services. The processing of the data is subject to the privacy policy of the external provider, who is responsible for the security and management of the data during this process.

• Management of the sending of newsletters: processing of personal data to manage the sending of commercial and promotional communications and newsletters, by e-mail or other digital channels, with the aim of keeping users informed about products, services or news related to the company. This processing will only be carried out with the prior consent of the user, who may withdraw it.

• Management of bookings and registrations for activities: processing of personal data through the application integrated in the website to manage bookings and registrations for activities carried out in the facilities of CAMBRILS PARK RESORT, S.L.U. This processing will be carried out with the consent of the user in order to optimise their experience, guarantee the correct performance of the activities and provide information related to them. Users may manage and update their registrations through the application at any time.

• Management of whistleblowing channels (Ethics Channel): the processing of personal data provided through the Ethics Channel in order to prevent, detect and correct breaches of current regulations or the Company's internal regulations, as well as the processing and investigation of the complaint, in compliance with Law 2/2023, of 20 February, regulating the protection of persons who report breaches of regulations and the fight against corruption, will be managed by ROCA MUSCLERA, S.L.U., parent company of GRUP BLASI, a business group of which CAMBRILS PARK RESORT, S.L.U. forms part.

• Data of minors: the website does not process personal data of minors. However, in the case of bookings through the application for activities in our facilities, data may be collected from minors when these activities are aimed at this age group. In these cases, the processing of the data of minors is carried out with the explicit consent of the parents or legal guardians. CAMBRILS PARK RESORT, S.L.U. will be in charge of the processing of this data and will manage the information securely and in accordance with current personal data protection regulations.

• Compliance with legal obligations: storage and processing of data when necessary to comply with legal obligations or requirements of competent authorities.

Personal data will be kept for the time necessary to comply with the purpose for which they were collected, or until their opposition or deletion is requested, always respecting the legally established deadlines.

4. Principles applied to the processing of personal data

In processing your personal data, CAMBRILS PARK RESORT, S.L.U. will follow the following principles, in accordance with the requirements of the RGPD and the LOPD:

• Lawfulness, fairness and transparency: The data is processed in a lawful, fair and transparent manner. Prior information is always provided about the purposes of the processing, and consent is obtained when necessary.

• Purpose limitation: Data are collected for specific, explicit and legitimate purposes and are not further processed in a way that is incompatible with these purposes.

• Data minimisation: Only personal data that are strictly necessary in relation to the purposes for which they are collected are processed.

• Accuracy: We ensure that the data is accurate and up to date, taking the necessary steps to correct or delete inaccurate data without delay.

• Limitation of the retention period: Data is kept only for the time necessary to fulfil the purposes of the processing and, where appropriate, for the applicable legal periods.

• Integrity and confidentiality: Data are processed securely, ensuring their protection against unauthorised access, loss or alteration by means of appropriate technical and organisational measures.

• Proactive responsibility: The data controller, CAMBRILS PARK RESORT, S.L.U. is committed to complying with these principles and can demonstrate this through the effective implementation of measures to ensure regulatory compliance.

5. Legitimation

The processing of your personal data will be carried out on the basis of the following legitimacies that make it lawful:

• Execution of services requested by the user or application of pre-contractual measures: The processing is necessary to manage requests for information, queries, communications related to tourism services, hotel or attention to the user. The specific terms and conditions of each service will be available prior to their formalisation.

• Consent of the person concerned: The processing of certain data is based on the free, specific, informed and unequivocal consent of the user. This consent is collected through clear actions such as ticking the boxes provided for this purpose or through the express acceptance of this Privacy Policy.

• Compliance with legal obligations: The processing may be necessary to comply with legal obligations applicable to CAMBRILS PARK RESORT, S.L.U. In these cases, the organisation is legally obliged to keep personal information for certain periods of time. This includes, among others, the management of complaints and claims received through the authorised channels, which will be managed through ROCA MUSCLERA, S.L.U., parent company of GRUP BLASI, the business group of which CAMBRILS PARK RESORT, S.L.U. forms part.

6. Assignment or communication of personal data and international transfers

The data will not be communicated to any third party outside the organisation, except in cases where there is a legal obligation to do so or to those providers linked to the Controller who act as data processors.

Likewise, CAMBRILS RESORT PARK, S.L.U. does not carry out international data transfers. If they occur in the future, it will be duly informed.

7. Responsibility of the user

The user guarantees that he/she is over eighteen (18) years of age and that the information provided to CAMBRILS PARK RESORT, S.L.U. is true, accurate, complete and up to date. In this sense, the user undertakes to keep the information provided duly updated and will be responsible for its accuracy at all times.

The user will be responsible for any false or inaccurate information provided through the website, as well as for any damages - direct or indirect - that this may cause to CAMBRILS PARK RESORT, S.L.U. or third parties.

8. Rights of the user in relation to the processing of his or her personal data

The user has, to all intents and purposes, the following rights in relation to the processing of his/her personal data by CAMBRILS PARK RESORT, S.L.U., and/or the other companies of the organisation:

• Right of access: You may request confirmation as to whether personal data concerning you are being processed and, if so, access them and obtain information about their processing.

• Right of rectification: You have the right to request the modification of your data if it is inaccurate or incomplete.

• Right of erasure: You may request the deletion of your personal data when they are no longer necessary for the purposes for which they were collected.

• Right to restriction of processing: In certain circumstances, you may request that we restrict the processing of your data.

• Right to data portability: In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller, or to request that it be sent directly to you, where this is technically possible.

• Right to object: You may object to the processing of your data on grounds relating to your particular situation.

• Right not to be subject to automated decisions: You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or significantly affect you.

• Right to withdraw consent: For processing operations based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not be retroactive and will not affect the lawfulness of processing operations carried out previously.

9. How to assert the user's rights

Users may exercise their rights by sending an express request through any of the following channels:

• By e-mail: lopd@cambrilspark.com.
• By post: Prolongación de la Calle E, s/n, de 43840-Salou.

In any case, if you consider that the processing of your personal data violates current data protection regulations, or if you have not obtained a satisfactory response in the exercise of your rights, the user has the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Security measures

CAMBRILS PARK RESORT, S.L.U., and the rest of the companies in the organisation, undertake to treat the personal data of the user with the utmost confidentiality, respecting at all times the duty of secrecy and acting in accordance with the provisions of current legislation on data protection. For this reason, it will adopt the necessary technical and organisational measures to guarantee their security and avoid their alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they may be exposed.

11. Modifications to the Privacy Policy

CAMBRILS PARK RESORT, S.L.U., reserves the right to modify this Privacy Policy. Any changes will be communicated through the website or by other appropriate means.

   12.Treatment of cookies

A cookie is a small file that is downloaded and stored on the user's computer when the user accesses a website. Cookies allow the website, among other things, to store and retrieve information about the browsing habits of the user or his/her computer and, depending on the information they contain and the way he/she uses his/her computer, they can enable the website to recognise him/her. The user has the option of preventing the generation of cookies by selecting the corresponding option in their browser. You can obtain more information by reading our  Cookies Policy .

****