Privacy policy
​Introduction
Welcome to Alice Lockyer's holiday rental house website. Your privacy is important to us, and this policy explains how we handle any information collected from visitors.
This website is hosted by the IT service provider we have commissioned:
Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel.
When you visit our website, Wix may collect various log files, including your IP addresses.
Details can be found in Wix's privacy policy: https://www.wix.com/about/privacy .
Please read this privacy policy carefully before using this website, as it explains how we process personal data. By using this website, you agree to this statement.
1. Data Protection Overview
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as described in this privacy policy.
1.1 How do we process your data?
When you use this website, different types of data are collected:
1.1.1 Non-personal data
We collect non-identifiable user data provided through the use of the website. This may include aggregated usage data and technical data transmitted by your device, such as browser type, operating system, language settings, and access time. This data helps us improve the functionality of our website.
1.1.2 Personal data
We collect personal data, which includes data that can identify you, such as:
-
Device data: This includes your IP address, geolocation, and unique identifiers (e.g., MAC address and UUID).
-
Information you provide to us: This may include your name, address, email address, and phone number entered in contact forms.
-
Data collected via cookies.
1.2 Legal Basis for Data Processing
We process your personal data in accordance with the General Data Protection Regulation (GDPR). If you have provided explicit consent, we process your data based on Art. 6 para. 1 lit. a GDPR. If your data is necessary for the fulfillment of a contract or pre-contractual measures, we process it based on Art. 6 para. 1 lit. b GDPR. In some cases, we process data based on legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR.
1.3 Storage Period
We store your personal data only for as long as necessary to provide our services, comply with legal obligations, or resolve disputes. Retention periods depend on the type of data and the purpose for which it was collected.
1.4 Recipients of Personal Data
We generally only share personal data with external entities if it is necessary to:
-
Comply with legal obligations.
-
Enforce our policies and investigate potential violations.
-
Investigate or prevent illegal activities or security issues.
-
Defend or enforce legal claims.
-
Cooperate with law enforcement authorities.
2. Your Rights
As a data subject, you have the right to access, rectify, or erase your personal data (the "right to be forgotten"), restrict processing, request data portability, and object to the processing of your personal data under Art. 6(1)(e) or (f) GDPR.
Please note that these rights are limited by law and may only be exercised under certain conditions. To exercise your rights, contact us at: hello@luciaballesteros.de
2.1 Revocation of Your Consent
You may revoke consent for data processing at any time. The legality of the processing carried out before the revocation remains unaffected.
2.2 Right to Appeal
To exercise your right to appeal, you can contact the relevant supervisory authority.
2.3 How Do We Protect Your Data?
To ensure the security of your data during transmission, we use modern encryption methods (e.g., SSL) via HTTPS. However, data transmission over the internet (e.g., communication via email) may have security gaps.
5. Transmission of data outside the European Economic Area
Note that some recipients may not be based in the European Economic Area. If this is the case, we will only transfer your data to countries approved by the European Commission with an adequate level of data protection or to ensure an adequate level of data protection through a legal agreement.
​
6. Social media and tools
Elements of social media are used on this website (e.g. B. Facebook, Instagram). You can usually recognize the social media elements by the respective social media logos.
As soon as you click on the social media element, the respective provider receives the information that you have visited this website with your IP address. If you are at the same time in your respective social media account (e.g. B. Facebook), the respective provider can assign the visit to this website to your user account. The use of the plugin constitutes consent within the meaning of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. You can revoke this consent at any time with effect for the future. The service is used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.
6.1 Instagram
Functions of the Instagram service are integrated on this website. These features are offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When you click on the social media element, a direct connection is established between your device and the Instagram server. Instagram receives information about your visit to this website. If you are logged in to your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to assign the visit to this website to your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The consent can be revoked at any time.
Insofar as personal data is collected on our website with the help of the tool described here and send to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook or Instagram. The processing carried out after the forwarding by Facebook or Instagram is not part of the joint responsibility. The joint obligations incumbent on us were laid down in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are in favor of providing data protection information when using the Facebook or Instagram tools and responsible for the data protection-safe implementation of the tool on our website. For the data security of Facebook or Instagram products is responsible for Facebook. Rights of affected persons (e.g. B. Request for information) with regard to the on Facebook or You can claim Instagram processed data directly from Facebook. If you assert the rights of the data subject with us, we are obliged to forward them to Facebook.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum?paipv=0&eav=AfZ7dL-v8T1A9px2eIS8V--6cKQLzK2tJvebtXuzQSrZm5zyAc0tIWNIwvOuMToHCMc&_rdr
https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.
Further information can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy/.
The company is certified according to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified according to the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail? contact=true&id=a2zt0000000GnywAAC&status=Active
6.2 Google Analytics
We use Google Analytics on our website. This is a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, place, time or frequency of the visit to our website are transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. Through this function, Google already shortens the IP address within the EU or the EEA.
The data collected in this way is in turn used by Google to provide us with an evaluation of the visit to our website as well as of the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.
Google indicates that it does not connect your IP address with other data. In addition, Google provides further data protection information for you at https://policies.google.com/technologies/partner-sites?hl=en-US, such as the possibilities to prevent the use of data.
In addition, Google offers at https://tools.google.com/dlpage/gaoptout? hl=en a so-called deactivation add-on along with further information about it. This add-on can be installed with the common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about visiting our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. Of course, you can also find out whether and which other web analysis services are used by us in this privacy policy.
​
7. Updates or changes to this privacy policy
We reserve the right to change or review this privacy policy from time to time. You will find the date of the current version at the end of this statement. Your continued use of the platform after the announcement of such changes on our website constitutes your consent to such changes to the privacy policy and shall be deemed to be your agreement to the binding of the amended provisions.
Status: October 2024
© 2024 Barcelona