Privacy policy

1.- PURPOSE OF THE PRIVACY POLICY

The purpose of this “Privacy and Data Protection Policy” is to make known the conditions that govern the collection and processing of personal data by PROMOCIONES INMOBILIARIAS EURO-HORIZON SL, making every effort to ensure the fundamental rights, honor and freedoms of the people whose personal data is processed in compliance with the regulations and laws in force that regulate the Protection of Personal Data according to the European Union and the Spanish Member State and, specifically, those expressed in the “Processing Activities” section of this Privacy Policy.

For all of the above, in this Privacy and Data Protection Policy, users of the website http://eurohorizon.com are informed of all the details of interest to them regarding how these processes are carried out, for what purposes, what other entities may have access to their data and what their rights are.

2.- DEFINITIONS

«Personal data»
Any information relating to an identified or identifiable natural person (“Website User”); an identifiable natural person is any person whose identity can be determined, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

«Treatment»
Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

«Limitation of processing»
The marking of personal data stored in order to limit their processing in the future.

«Profiling»
Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

«Pseudonymization»
the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

«File»
Any structured set of personal data, accessible according to specific criteria, whether centralized, decentralized or distributed functionally or geographically.

«Data controller» or «controller»
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing; where the purposes and means of the processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

«Data processor» or «processor»
The natural or legal person, public authority, service or other body which processes personal data on behalf of the controller.

«Addressee»
The natural or legal person, public authority, agency or other body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of such data by those public authorities shall be in compliance with the data protection rules applicable to the purposes of the processing.

«Third»
a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and persons authorised to process personal data under the direct authority of the controller or the processor.

«Consent of the interested party»
Any manifestation of free, specific, informed and unequivocal will by which the interested party accepts, whether by a declaration or a clear affirmative action, the processing of personal data concerning him or her.

«Breach of personal data security»
any breach of security leading to the accidental or unlawful destruction, loss, alteration, or unauthorized disclosure of or access to personal data transmitted, stored or otherwise processed;

«Genetic data»
Personal data relating to the inherited or acquired genetic characteristics of a natural person which provide unique information concerning that person’s physiology or health, obtained in particular from the analysis of a biological sample from that person.

«Biometric data»
Personal data obtained from specific technical processing relating to the physical, physiological or behavioural characteristics of a natural person which allow or confirm the unique identification of that person, such as facial images or fingerprint data.

«Health-related data»
Personal data relating to the physical or mental health of a natural person, including the provision of health care services, which reveal information about their health status.

«Main establishment»
a) in relation to a controller with establishments in more than one Member State, the place of its central administration in the Union, unless the decisions on the purposes and means of processing are taken at another establishment of the controller in the Union and that latter establishment has the power to enforce those decisions, in which case the establishment that has taken those decisions shall be considered the main establishment; b) in relation to a processor with establishments in more than one Member State, the place of its central administration in the Union or, if there is no such place, the establishment of the processor in the Union where the main processing activities are carried out in the context of the activities of an establishment of the processor to the extent that the processor is subject to specific obligations under this Regulation.

«Representative»
A natural or legal person established in the Union who, designated in writing by the controller or processor pursuant to Article 27 of the GDPR, represents the controller or processor with regard to their respective obligations under this Regulation.

«Company»
A natural or legal person engaged in an economic activity, regardless of its legal form, including companies or associations that regularly carry out an economic activity.

«Controlling authority»
The independent public authority established by a Member State pursuant to Article 51 of the GDPR. In the case of Spain, this is the Spanish Data Protection Agency.

«Cross-border processing»
a) the processing of personal data carried out in the context of the activities of establishments in more than one Member State of a controller or processor in the Union, if the controller or processor is established in more than one Member State; or
b) the processing of personal data carried out in the context of the activities of a single establishment of a controller or processor in the Union, but which substantially affects or is likely to substantially affect data subjects in more than one Member State.

«Information society service»
Any information society service, that is, any service normally provided for remuneration, remotely, electronically and at the individual request of a service recipient.

3.- IDENTITY OF THE DATA CONTROLLER

The Data Controller is the natural or legal person, public or private, or administrative body, who alone or jointly with others determines the purposes and means of processing personal data; if the purposes and means of processing are determined by the law of the European Union or the law of the Spanish Member State.

In the aspects expressed in this Data Protection Policy, the identity and contact details of the Data Controller are:

PROMOCIONES INMOBILIARIAS EURO-HORIZON S.L – CIF B12485835

Centro Comercial “Les Fonts”, Local 4. 12579, Alcocebre (Castellón), Spain

  • E-mail: mariafg@eurohorizon.com
  • Phone: 964 157 235

4.- APPLICABLE LAWS AND REGULATIONS

This Privacy and Data Protection Policy is developed based on the following data protection regulations and laws:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. GDPR.
  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights. Hereinafter LOPD/GDD.
  • Law 34/2002, of July 11, on Information Society Services and Electronic Commerce. Hereinafter LSSICE.

5.- PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA

Personal data collected and processed through this website will be processed in accordance with the following principles:

  • Principle of legality, loyalty and transparency:All personal data processing carried out through this Website will be lawful and fair, and the user will be fully aware of when their personal data is being collected, used, consulted, or processed. Information regarding the processing carried out will be provided in advance, in an easily accessible and understandable manner, in plain and clear language.
  • Principle of purpose limitation:All data will be collected for specific, explicit, and legitimate purposes and will not be further processed in a manner incompatible with the purposes for which it was collected.
  • Data minimization principle:The data collected will be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
  • Principle of accuracy:The data will be accurate and, if necessary, updated, taking all reasonable measures to ensure that personal data that is inaccurate with respect to the purposes for which it is processed is deleted or rectified without delay.
  • Principle of limitation of the conservation period:The data will be kept in a manner that allows identification of the interested parties for no longer than necessary for the purposes of processing the personal data.
  • Principle of integrity and confidentiality:The data will be processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss or damage, through the application of appropriate technical and organizational measures.
  • Principle of proactive responsibility:The entity that owns the Website will be responsible for compliance with the principles set forth in this section and will be able to demonstrate this.

6.- DATA PROCESSING ACTIVITIES

The data processing activities carried out through the Website are detailed below, specifying each of the following sections:

  • Activity:Name of the data processing activity
  • Purposes:Each of the uses and treatments carried out with the data collected
  • Legal basis:The legal basis that legitimizes the processing of data
  • Data processed:Types of data processed
  • Origin:Where the data comes from
  • Conservation:Period during which the data is retained
  • Recipients:Third-party persons or entities to whom the data is provided
  • International transfers:Cross-border transfers of data outside the European Union

6.1 MAIN PROCESSING ACTIVITIES

These are data processing activities whose purposes are necessary and essential for the provision of services.

6.2 OPTIONAL PROCESSING ACTIVITIES (if the user has indicated their acceptance)

These are personal data processing activities whose purposes are not essential for the provision of the service and are only carried out if the user has indicated YES in their consent to carry out these activities.

Website Consultations

Legal bases

Explicit consent of the interested party

Purposes

Response to queries received through the website’s electronic form

Data categories and groups

Web contacts(Identification data)

Data origin

The interested party or his legal representative

Category of recipients

Not planned

International transfer

Not planned 

Storage period

For a period of 1 year from the last confirmation of interest

 

Subscriber management

Legal bases

Explicit consent of the interested party

Purposes

Marketing, advertising and commercial prospecting

Data categories and groups

Subscribers(Identification data)

Data origin

The interested party or his legal representative

Category of recipients

Not planned

International transfer

Not planned 

Storage period

As long as its deletion is not requested by the interested party

7.- NECESSARY AND UPDATED INFORMATION

All fields marked with an asterisk (*) on the Website forms must be completed. Failure to do so may make it impossible to provide you with the requested services or information.

You must provide truthful information, so that the information provided is always up-to-date and does not contain errors, you must notify the Data Controller as soon as possible of any modifications and corrections to your personal data by sending an email to the following address: mariafg@eurohorizon.com .

Likewise, by clicking the “I Accept” button (or equivalent) included in the aforementioned forms, you declare that the information and data you have provided therein are accurate and truthful, and that you understand and accept this Privacy Policy.

8.- DATA OF MINORS

In compliance with the provisions of article 8 of the GDPR and article 7 of the LOPD/GDD, only those over 14 years of age may give their consent for the legal processing of their personal data by PROMOCIONES INMOBILIARIAS EURO-HORIZON SL.

Therefore, minors under 14 years of age may not use the services available through the Website without the prior authorization of their parents, guardians or legal representatives, who will be solely responsible for all actions carried out through the Website by minors in their care, including the completion of electronic forms with the personal data of said minors and the marking, where applicable, of the accompanying boxes.

9.- TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES

The Data Controller adopts the necessary organizational and technical measures to guarantee the security and privacy of your data, and to prevent its alteration, loss, unauthorized processing, or access, depending on the state of the technology, the nature of the data stored, and the risks to which it is exposed.

Among others, the following measures stand out:

  • Ensure the ongoing confidentiality, integrity, availability, and resilience of treatment systems and services.
  • Restore availability and access to personal data quickly in the event of a physical or technical incident.
  • Regularly verify, evaluate, and assess the effectiveness of the technical and organizational measures implemented to ensure the security of the processing.
  • Pseudonymize and encryptpersonal data, in the case of sensitive data.

 

Furthermore, the Data Controller has decided to manage the information systems according to the following principles:

  • Principle of regulatory compliance:All information systems must comply with applicable legal, regulatory, and sectoral regulations affecting information security, especially those related to the protection of personal data, system security, data, communications, and electronic services.
  • Risk management principle:Risks will be minimized to acceptable levels, and a balance will be sought between security controls and the nature of the information. Security objectives must be established, reviewed, and aligned with information security aspects.
  • Principle of awareness and training:Training, awareness-raising programs, and awareness campaigns will be implemented for all users with access to information regarding information security.
  • Principle of proportionality:The implementation of controls that mitigate asset security risks will be achieved by seeking a balance between security measures, the nature and information, and risk.
  • Principle of responsibility:All members of the Data Controller shall be responsible for their conduct regarding information security, complying with established standards and controls.
  • Principle of continuous improvement:The effectiveness of the security controls implemented in the organization will be reviewed regularly to increase its ability to adapt to the constantly evolving risk and technological environment.

10.- RIGHTS OF INTERESTED PARTIES

Current data protection regulations protect users with a series of rights regarding the use of their data. Each and every one of these rights is personal and non-transferable; that is, they can only be exercised by the data subject, after verifying their identity.

The rights of Website users are detailed below:

  • Right of access:It is the right of the Website user to obtain confirmation of whether or not the Data Controller is processing their personal data and, if so, to obtain information about their specific personal data and the processing that the Data Controller has carried out or is carrying out, as well as, among other things, information available about the origin of said data and the recipients of the communications made or planned for them.
  • Right of rectification:It is the right of the Website user to have their personal data modified if it is found to be inaccurate or, taking into account the purposes of the processing, incomplete.
  • Right to erasure:Commonly known as the “right to be forgotten,” it is the right that Website users have, unless otherwise established by current legislation, to obtain the deletion of their personal data when they are no longer necessary for the purposes for which they were collected or processed; the User has withdrawn their consent to the processing and there is no other legal basis for this; the User objects to the processing and there is no other legitimate reason to continue; the personal data have been processed unlawfully; the personal data have been obtained as a result of a direct offer of information society services to a child under 14 years of age. In addition to deleting the data, the Data Controller, taking into account available technology and the cost of its implementation, will take reasonable measures to inform other potential data controllers processing the personal data of the data subject’s request to delete any links to such personal data.
  • Right to data restriction:Website Users have the right to restrict the processing of their personal data. Website Users have the right to obtain restriction of processing when they contest the accuracy of their personal data; the processing is unlawful; the Data Controller no longer needs the personal data, but the User needs it to make legal claims; and when the Website User has objected to the processing.
  • Right to data portability:In cases where processing is carried out by automated means, the Website User shall have the right to receive their personal data from the Data Controller in a structured, commonly used, and machine-readable format, and to transmit it to another data controller. Whenever technically possible, the Data Controller shall transmit the data directly to that other controller.
  • Right to object:It is the User’s right to have their personal data not processed or to have their processing stopped by the Data Controller.
  • Right not to be subject to automated decisions and/or profiling:The right of the Website User not to be subject to an individualized decision based solely on the automated processing of his or her personal data, including profiling, unless otherwise provided by current legislation.
  • Right to revoke consent:It is the right of the Website User to withdraw, at any time, the consent given for the processing of their data.

 

The Website user may exercise any of the aforementioned rights by contacting the Data Controller and after identifying the User using the following contact information:

  • Responsible: PROMOCIONES INMOBILIARIAS EURO-HORIZON S.L 
  • Address:  Centro Comercial “Les Fonts”, Local 4. 12579, Alcocebre (Castellón), Spain
  • Phone:964 157 235
  • E-mail: mariafg@eurohorizon.com
  • Web page:http://eurohorizon.com

11.- RIGHT TO COMPLAIN BEFORE THE CONTROL AUTHORITY

Users are informed of their right to file a complaint with the Spanish Data Protection Agency if they believe that a violation of data protection legislation has occurred regarding the processing of their personal data.

Contact information of the supervisory authority:

Spanish Data Protection Agency
E-mail:info@aepd.es
Phone:912663517
Website: https://www.aepd.es
Address:C/. Jorge Juan, 6. 28001, Madrid (Madrid), Spain

12.- ACCEPTANCE AND CHANGES IN THE PRIVACY POLICY

It is necessary that the Website user has read and agrees to the data protection conditions contained in this Privacy Policy, as well as accept the processing of their personal data so that the Data Controller can proceed with the processing in the manner, timeframe, and for the purposes indicated.

The Data Controller reserves the right to modify this Privacy Policy, at its sole discretion, or as a result of legislative, jurisprudential, or doctrinal changes from the Spanish Data Protection Agency. Any changes or updates to this Privacy Policy that affect the purposes, retention periods, transfers of data to third parties, international data transfers, or any rights of the Website User will be explicitly communicated to the user.

Version of June 5, 2024

Alquiler Alcossebre
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.