Privacy Policy

I. PRIVACY POLICY AND DATA PROTECTION

In accordance with current legislation, Despedidas de Soltera/o (hereinafter, the Website) is committed to implementing the necessary technical and organizational measures appropriate to the level of security required for the risk associated with the collected data.

Legislation Incorporated into this Privacy Policy

This privacy policy complies with current Spanish and European regulations on the protection of personal data on the internet. Specifically, it adheres to the following:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data.

  • Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).

  • Royal Decree 1720/2007, of 21 December, approving the regulation implementing Organic Law 15/1999 on the Protection of Personal Data (RDLOPD).

  • Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The controller of the personal data collected on Despedidas de Soltera/o is:
José Julián Camargo González, NIF: CAGJ930712CR8
Address: C/ Bugambilia M26 L1, Riviera Tulum, 77760
Email: info@thebachelorettetulum.com

Registration of Personal Data

In compliance with GDPR and LOPD-GDD, we inform you that any personal data collected through our forms will be stored and processed in our file to facilitate, expedite, and fulfill the commitments between Despedidas de Soltera/o and the User, or to respond to a request or inquiry made by the User.

Unless the exception under Article 30.5 of the GDPR applies, a record of processing activities is maintained that specifies, based on their purposes, the processing activities carried out and other established conditions.

Principles Applicable to Personal Data Processing

The processing of User personal data will adhere to the following principles as per Article 5 of the GDPR and Articles 4 onward of Organic Law 3/2018:

  • Lawfulness, fairness, and transparency: Prior consent will always be required with full disclosure of the purposes for data collection.

  • Purpose limitation: Data will be collected for specific, explicit, and legitimate purposes.

  • Data minimization: Only the necessary data will be collected.

  • Accuracy: Data must be accurate and up to date.

  • Storage limitation: Data will only be retained as long as necessary.

  • Integrity and confidentiality: Data will be processed securely and confidentially.

  • Accountability: The controller will be responsible for compliance.

Categories of Personal Data

Only identifying information is collected. No special categories of personal data are processed as defined in Article 9 of the GDPR.

Legal Basis for Processing

The legal basis for processing personal data is consent. Despedidas de Soltera/o undertakes to obtain express and verifiable consent for each specific purpose.

Users may withdraw consent at any time. Withdrawing consent shall be as easy as granting it and will not affect use of the Website.

If Users provide data through forms to request information or services, they will be informed which fields are required.

Purpose of the Data Processing

The data is collected and processed to fulfill commitments between the Website and the User, or to respond to inquiries.

Data may also be used for commercial, operational, and statistical purposes and for marketing analysis to improve the Website’s content, navigation, and performance.

At the time of data collection, Users will be informed of the specific purposes.

Data Retention Period

Data will be retained only as long as necessary and for a maximum of 18 months, or until the User requests its deletion.

Users will be informed of the retention period or the criteria for determining it at the time of data collection.

Data Recipients

User data may be shared with:

  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA — provider of services such as Google Ads and Google Analytics.

  • Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA — developer of WordPress, the platform this website is built on.

If data is transferred to a third country or international organization, Users will be informed of the destination and the adequacy decision.

Data of Minors

Only persons over the age of 14 may give valid consent. If under 14, parental or guardian consent is required.

Confidentiality and Security

Despedidas de Soltera/o undertakes to implement appropriate security measures to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data.

This Website uses an SSL certificate to ensure data is transmitted securely and encrypted.

While Despedidas de Soltera/o strives to protect data, it cannot guarantee absolute security against unauthorized access (e.g., hackers). In the event of a security breach posing a high risk to User rights and freedoms, Users will be notified without undue delay.

Data will be treated as confidential. The controller will ensure confidentiality through legal or contractual obligations with all parties who may access the data.


II. USER RIGHTS

Users may exercise the following rights under GDPR and Organic Law 3/2018:

  • Right of access: To know whether your data is being processed and access specific personal data.

  • Right to rectification: To correct inaccurate or incomplete data.

  • Right to erasure («right to be forgotten»): To have data deleted under certain conditions.

  • Right to restriction of processing: To limit how data is processed in specific scenarios.

  • Right to data portability: To receive personal data in a structured, commonly used, and machine-readable format and transfer it to another controller.

  • Right to object: To object to the processing of your data.

  • Right not to be subject to automated individual decision-making, including profiling.

To exercise these rights, Users must send a written request to the controller with the reference «GDPR – https:thebachelorettetulum/«, including:

  • Full name and a copy of an ID document.

  • Specific reason for the request.

  • Notification address.

  • Date and signature.

  • Any supporting documentation.

Requests can be sent to:

Postal address: C/ Bugambilia M26 L1, Riviera Tulum, 77760
Email: info@thebachelorettetulum.com


III. LINKS TO THIRD-PARTY WEBSITES

This Website may include links to third-party sites. Despedidas de Soltera/o is not responsible for the privacy practices or policies of those sites. Each is responsible for its own data protection practices.


IV. COMPLAINTS TO SUPERVISORY AUTHORITIES

If Users believe their data is being misused or a regulation is being violated, they may lodge a complaint with the competent authority in their country of residence, workplace, or where the alleged breach occurred.

In Spain, the supervisory authority is the Spanish Data Protection Agency: https://www.aepd.es/


V. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

Use of this Website implies acceptance of this Privacy Policy.

Despedidas de Soltera/o reserves the right to amend this policy in accordance with legislative or regulatory changes or interpretations by the Spanish Data Protection Agency. Changes will not be explicitly communicated to Users. Regular consultation of this page is recommended.

This Privacy Policy was updated to comply with Regulation (EU) 2016/679 and Organic Law 3/2018 on the protection of personal data and digital rights.