Privacy Policy

CÓRDOBA EMBRUJADA, S.L., with CIF. B-14.993.489 (hereinafter, the “COMPANY”), with registered address at Calle Ángel de Saavedra, 5 local; Postcode: 14003 – Córdoba, phone: 957963074, and email: info@cordobaembrujada.es is the owner of the websites www.cordobapie.es, www.malagapie.es, www.sevillapie.es, www.granadatours.com.es (hereinafter the “Website”) and the data controller for the personal data that the user provides when accessing or using the website and for all personal data in general that is collected on it or managed by the Company.

The Company, through this Privacy Policy, provides information on the processing and protection of personal data of users that may be collected through their browsing or contracting of services on this portal or through other channels with the Company. The user’s use of this website implies their acceptance of this Privacy Policy.

The Company adopts the necessary measures to guarantee the security, integrity, and confidentiality of the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and in that not provided for by this, by Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights, and Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce.

 

Purpose

The data is collected for the following purposes:

1. To ensure the correct management of customer service and event organization (guided tours):
   • Preparing quotes for the products or services offered by the data controller and their subsequent commercial follow-up.
   • Contracting our services by accepting the corresponding quote, order, and/or signing a commercial contract.
   • Providing you with information related to the products and services offered by our company and detailed on this website.
   • Invoicing for the products and/or services contracted.
   • Ensuring the correct administrative, commercial, tax, and accounting management of the company.

   When data is used for the purposes described above, the data processed will be identification data (name, surname, address, postcode, city, province, NIF, email, phone, mobile) and bank details for payment and collection management.

2. Sending information, handling inquiries, and newsletters:
   • Managing inquiries, complaints, or requests made by the user.
   • Keeping you informed about our activities, services, promotions, news, events, and other information that may be of interest to you.

   In this regard, the data provided will be those necessary for your identification (name, surname, email). The user can object to the sending of commercial communications at any time by sending an email to the address indicated above.

3. Security:
   • Ensuring the security of our facilities and assets, as well as the people who access our facilities or work in them.

   The data processed for access control to the facilities will be name, surname, NIF, and the company they work for. Images will also be collected through the video surveillance cameras installed in our facilities.

4. Personnel selection:
   • Carrying out personnel selection processes to fill the job vacancies required by the data controller.

   The data collected for this purpose will be: identification data (name, surname, address, postcode, city, province, NIF, email, mobile phone), training data, professional experience data, and any other information that the applicant deems appropriate to improve their job application.

5. Website:
   • Processing of data obtained through Cookies (see the Cookies Policy).
   • Monitoring the use of the website, with the aim of preventing and detecting fraudulent actions on it, as well as any unauthorized access.
6. Addressing the rights of individuals:
   • Handling requests from data subjects in the exercise of their rights established in the General Data Protection Regulation.

The purpose of the data processing is in no case the creation of profiles for the personalization of our own or third-party advertising or the analysis of traffic on our website.

We do not make automated decisions based on profiles, with the exception of advertising personalization and the prevention of internet fraud.

We inform you that you may revoke your consent, in each commercial or advertising communication sent to you, and at any time, by notifying the Company at the address mentioned above, or by email to info@cordobaembrujada.es.

 

Legal Basis and Retention Period

The processing of personal data provided by the user is carried out under the following legal bases that legitimize it:

• Contracting of services requested from the Company, whose terms and conditions will be made available to the user prior to a potential contract. To carry out this requested professional relationship, the data subject is obliged to provide their data. The data will be kept for the duration of the contractual relationship.
• Free, specific, informed, and unequivocal consent, both in the submission of a CV, which is voluntary, in the case of the Company sending marketing material (promotions, news, etc.) by email, SMS, or any other electronic means, as well as in the inclusion of your data in any section of this website, since after reading this Privacy Policy the user is informed and, if in agreement, can accept it by means of a declaration or a clear affirmative action, such as ticking a box provided for this purpose.

If the data subject does not provide the data or if it is incorrect or inaccurate, we will not be able to fulfill their request, making it impossible to provide the requested information. The data will be kept as long as you do not request its deletion. As we have informed you previously, you will have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on consent before its withdrawal.

• Legal obligations that the Company must comply with, for which the processing of your data is necessary, for example, issuing invoices or submitting taxes to the public administration or to address the rights you request. The data will be kept for the legally required periods.
• Legitimate interest that assists us in the processing of contact data and, where applicable, those related to the function or position held by natural persons who provide services in a legal entity, when the processing refers only to the data necessary for their professional location and the purpose of the processing is only to maintain relationships of any kind with the legal entity in which the data subject provides their services. It also represents a legitimate interest of this Company to guarantee the safety of people and our facilities, so we may collect your image through video surveillance cameras. These images will be deleted within one month.

Recipients

As a general rule, the Company will not communicate this personal data to third parties, with the exception that the provision of a service implies the need for a contractual relationship with a data processor and this is strictly necessary to manage and maintain the relationship between the user and the aforementioned company, with the user’s prior express authorization. This will be done only for the time essential to enable the execution of the processing contract, and under the same conditions and with the same responsibility that are required of the data controller. Once the assignment is completed, the data processor will return the personal data to the Data Controller and delete any copies it has.

On the other hand, only third parties with whom the Company has a legal or contractual obligation to provide them will have the right to access this personal data, which includes, for example, Judges and Courts interested in proceedings related to the claims filed.

No international data transfers are foreseen.

 

Rights of Data Subjects

Cordoba Embrujada S.L. participates in and complies with the IAB Europe Transparency & Consent Framework’s Policies and Specifications. It uses Consent Management Platform no. 92.

You may modify your choices at any time by clicking here.

The user may at all times exercise, under the terms established in the current legislation, the rights of access, rectification or deletion of data, request that the processing be limited, object to it, request the portability of their data, as well as revoke the consent given, rights recognized in the aforementioned Regulation (EU). The user can exercise these rights by contacting the Company at its registered address indicated above or by sending an email to the email address info@cordobaembrujada.es. For the effective exercise of these rights, the user must prove their identity by providing their name and surname, a photocopy of their DNI or equivalent identification document that proves their identity, a request specifying the request, the address for notifications, and the date and signature of the applicant.

Likewise, the user may file a claim with the Spanish Data Protection Agency (AEPD), especially when they have not obtained satisfaction in the exercise of their rights, by means of a letter addressed to it, at C/. Jorge Juan, nº 6; Postcode: 28001 – Madrid, or through the website: https://www.agpd.es.