Personal Data Protection in accordance with the GDPR

Legacy Roots F.S., S.L., in accordance with current regulations on the protection of personal data, informs you that the personal data collected through the forms on the website https://refugiopalmsheja.com/ are included in the specific automated files of users of the services of Legacy Roots F.S., S.L.

The collection and automated processing of personal data is intended for maintaining the commercial relationship and performing information, training, advisory, and other activities inherent to Legacy Roots F.S., S.L.

These data will only be transferred to those entities that are necessary for the sole purpose of fulfilling the aforementioned objectives.

Legacy Roots F.S., S.L. adopts the necessary measures to guarantee the security, integrity, and confidentiality of the data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing the former Spanish Data Protection Act (LOPD), as well as Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

The user may at any time exercise the rights of access, objection, rectification, erasure, restriction, and portability recognized in the aforementioned Regulation (EU). These rights may be exercised by the user via email at reservas@refugiopalmsheja.com or at the following address: Refugio Ecológico Palm Sheja, Cala del Plomo, Agua Amarga, C.P. 04150 – Cabo de Gata (Almería), Spain.

The user declares that all data provided are true and correct and undertakes to keep them updated, communicating any changes to Legacy Roots F.S., S.L.

Purpose of the Processing of Personal Data

For what purpose will we process your personal data?

At Legacy Roots F.S., S.L., we will process your personal data collected through the website https://refugiopalmsheja.com/ for the following purposes:

To comply with the company’s commercial, labor, corporate, and accounting obligations.
To execute a contract entered into remotely with the user.
To provide the services contracted by the user.
For security purposes or fraud prevention.
To send promotional information electronically.
To provide the information requested by the user through any of the contact channels available on the website.
To comply with legal obligations regarding public safety and guest registration (Royal Decree 933/2021), which implies the communication of your data to the State Security Forces and Corps.
To inform about the services offered on the website.

We remind you that you may object to the sending of commercial communications by any means and at any time by sending an email to the address indicated above.

The fields in these forms are mandatory, and it will be impossible to fulfill the stated purposes if these data are not provided.

How long are the collected personal data retained?

The personal data provided will be kept for as long as the commercial relationship is maintained or until you request their deletion, and for the period during which legal liabilities may arise from the services provided.

Legal Basis

The processing of your data is based on the following legal grounds:

Compliance with legal obligations, including tax, accounting, or administrative obligations applicable to Legacy Roots F.S., S.L.
The request for information and/or the contracting of the services of Legacy Roots F.S., S.L., whose terms and conditions will always be made available to you prior to any potential contract.
Your free, specific, informed, and unambiguous consent, as you are informed through this Privacy Policy and may accept it by a statement or clear affirmative action, such as checking a designated box.
The legitimate interest in responding to requests and/or inquiries submitted through any available contact channel, as well as for fraud prevention and website security purposes.

If you do not provide your data or provide them incorrectly or incompletely, we will not be able to process your request, making it impossible to provide the requested information or to contract the services.

Source of Data and Method of Collection

The personal data we process have been provided directly by you. If you provide data belonging to other persons, you guarantee that you have their express consent and that you have informed them of the content of this Policy. You also release us from any liability arising from failure to comply with this obligation.

Furthermore, if your reservation is made through external platforms (such as Airbnb or Booking.com), Legacy Roots F.S., S.L. will receive the identification and contact data necessary to manage your stay. These platforms act as independent data controllers and have their own privacy policies, which we recommend you consult.

Accuracy of Personal Data

If you do not provide your data or provide them incorrectly or incompletely, we will not be able to process your request.

The data subject guarantees that the data provided are true, accurate, complete, and up to date and undertakes to inform us of any changes through the channels indicated at the beginning of this Policy.

Recipients

Data will not be communicated to any third party outside Legacy Roots F.S., S.L., except where legally required.

Data Collected by Service Users

In cases where the user includes files containing personal data on shared hosting servers, Legacy Roots F.S., S.L. shall not be held responsible for the user’s non-compliance with the GDPR.

Intellectual Property Rights https://refugiopalmsheja.com/

Legacy Roots F.S., S.L. holds all copyright, intellectual property, industrial property, know-how, and any other rights related to the contents of the website https://refugiopalmsheja.com/ and the services offered therein, as well as the programs necessary for its implementation and related information.

Reproduction, publication, and/or non-strictly private use of the contents, in whole or in part, of the website is not permitted without prior written consent.

Software Intellectual Property

The user must respect third-party programs made available by Legacy Roots F.S., S.L., even if they are free of charge and/or publicly available.

Legacy Roots F.S., S.L. holds the necessary exploitation and intellectual property rights for the software.

The user does not acquire any right or license over the contracted service, nor over the software necessary for providing the service, nor over the technical information for monitoring the service, except for the rights and licenses necessary for fulfilling the contracted services and only for their duration.

For any action beyond the fulfillment of the contract, the user will require written authorization from Legacy Roots F.S., S.L. The user is prohibited from accessing, modifying, or viewing the configuration, structure, and files of the servers owned by Legacy Roots F.S., S.L., assuming civil and criminal liability for any incident resulting from negligent or malicious actions.

Intellectual Property of Hosted Content

The use of services provided by Legacy Roots F.S., S.L. contrary to intellectual property legislation is prohibited, particularly:

Any use contrary to Spanish law or infringing third-party rights.
The publication or transmission of content that, in the opinion of Legacy Roots F.S., S.L., is violent, obscene, abusive, illegal, racist, xenophobic, or defamatory.
The distribution of cracks, serial numbers, or any content infringing third-party intellectual property rights.
The collection and/or use of personal data of other users without their express consent or in breach of Regulation (EU) 2016/679.
The use of the domain’s mail server and email addresses to send unsolicited bulk email.

The user bears full responsibility for the content of their website, transmitted and stored information, hyperlinks, third-party claims, and legal actions relating to intellectual property, third-party rights, and child protection.

The user must comply with applicable laws and regulations and the rules related to online services, e-commerce, copyright, public order, and universal Internet usage principles.

The user shall indemnify Legacy Roots F.S., S.L. for any expenses incurred due to claims attributable to the user, including legal fees and defense costs, even in the case of a non-final judicial decision.

Protection of Hosted Information

Legacy Roots F.S., S.L. performs backups of content hosted on its servers. However, it is not responsible for loss or accidental deletion of data by users. Likewise, it does not guarantee full restoration of data deleted by users, as such data may have been deleted and/or modified since the last backup.

Services offered, except specific backup services, do not include restoration of backup content when the loss is attributable to the user. In such cases, a fee will be determined based on the complexity and volume of recovery, subject to prior acceptance by the user.

Restoration of deleted data is only included in the service price when the loss is attributable to Legacy Roots F.S., S.L.

Commercial Communications

In accordance with the LSSI, Legacy Roots F.S., S.L. will not send advertising or promotional communications by email or any equivalent electronic communication method unless previously requested or expressly authorized by the recipients.

In the case of users with whom there is a prior contractual relationship, Legacy Roots F.S., S.L. is authorized to send commercial communications regarding products or services similar to those initially contracted.

In any case, the user may request not to receive further commercial information through Customer Service channels after verifying their identity.