When you interact with us we collect your personal data. Casa de las Flores (Extra Choice Ltd) is committed to protecting your privacy. Please read the following policy that explains how we use and protect your information. We are the data controller of the information you provide to us.
On 25th May 2018 the regulations about how your personal data are used and stored changed. The new European regulations often referred to as GDPR (General Data Protection Regulation) supersede the Data Protection Act 1998. We have tried to provide a relevant and accurate summary within this policy to help you understand your rights whilst also allowing us to hold and use relevant information about you for your benefit.
1. Explaining the legal bases we rely on
The law on data protection sets out a number of different reasons for which a company may collect and process your personal data, including:
In specific situations, we can collect and process your data with your consent.
For example, when you tick a box to receive email newsletters.
When collecting your personal data, we’ll always make clear to you which data is necessary in connection with a particular service.
In certain circumstances, we need your personal data to comply with our contractual obligations. For example, when we are booking with us, we will need to pass on your information to the Guardia Civil website.
If the law requires us to, we may need to collect and process your data.
For example, we can pass on details of people involved in fraud or other criminal activity affecting the Partnership to law enforcement.
In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests.
For example, we will use your purchase history to send you or make available personalised offers.
We also combine the booking history of many customers to identify trends and ensure we can keep up with demand, or develop new products/services. We will also use your address details to send you direct marketing information by post, telling you about products and services that we think might interest you.
2. When do we collect personal information about you?
When you request information about our products and services.
When you make a booking both through our website or over the phone.
When you sign up for the newsletter on our website.
When you create an online account.
When you engage with us on social media.
When you contact us by any means with queries, complaints etc.
When you enter prize draws or competitions.
When you choose to complete any surveys we send you.
3. What personal information do we collect about you?
In the natural course of requesting product information for example a brochure we will ask for your name, address and telephone number.
In the natural course of making a reservation we will ask for your name, address, gender, date of birth, email address and phone numbers, both home and mobile if different.
Any special requirements you may have such as dietary and any disabilities which we should know about in order to ensure you have a safe and enjoyable trip. We will collect and process payment card details for the purposes of the transaction at that time but this data is not retained for future transactions or reference.
Passport details where advance passenger details are required.
If you create an online account we will store an encrypted version of your login password.
Calls to the Casa de las Flores offices may recorded for training purposes. These will contain any personal data you have provided to us during that call.
If you engage with us via social media, your social media username.
We log your preferences as to how your data can be used e.g. for direct marketing.
IP addresses and cookies:
We may collect information about your computer, including where available your IP address, operating system and browser type, for system administration. This is statistical data about our users browsing actions and patterns, and does not identify any individual.
For the same reason, we may obtain information about your general internet usage by using a cookie which is stored on the hard drive of your computer. Cookies are used to assist the operation of our website and are designed to deliver a better and more personalised service. They enable us:
To estimate our audience size and usage pattern.
To store information about your preferences, and so allow us to customise our website according to your individual interests.
To speed up your searches.
To recognise you when you return to our website.
4. How we use the information we collect about you and why we would do this.
Casa de las Flores will only process (collect, store and use) the information you provide if there is a reason for doing so in a manner compatible with the EU’s General Data Protection Regulation (GDPR).
We will endeavour to keep your information accurate and up to date, and not keep it for longer than is necessary. Casa de las Flores is required to retain information in accordance with the law, such as information needed for income tax and audit purposes. How long certain kinds of personal data should be kept may also be governed by specific business-sector requirements and agreed practices.
Personal data may be held in addition to these periods depending on individual business needs. The Casa de las Flores Document Retention Policy will define how long we securely retain each set of personal data.
Generally we collect information at the time of booking or making a request for information in order to provide you with a service, a service which you have requested and to fulfil our legal obligations as far as providing a holiday are concerned.
The data privacy law allows this as part of our sole interest in striving to understand our customers and answering their needs and wants as far as service and product design are concerned.
We will contact you via telephone, SMS text, letter and/or email when appropriate to keep you informed about travel updates that might affect your upcoming trip.
We ask for your consent to use your personal data and preferences to keep you informed by email, post and telephone about our products and services including special offers and promotions. We’ll do this on the basis of our legitimate business interest. You are free to change your preferences at any time and to opt in or out of any or all of these channels.
5. Do we share your information with anyone else?
Yes, but only as necessary and when legally required to do so in the fulfilment of our obligation to provide you with a product or service you have requested or booked.
All of our partners also have to conform to the GDPR standard and when they no longer need your data to fulfil this service, they will securely dispose of your personal data in line with Casa de las Flores procedures.
We may need to retain your reservation data in order to comply with their own income tax and audit purposes.
If we wish to pass your sensitive personal data onto a third party we will only do so once we have obtained your consent, unless we are legally required to do otherwise.
We do not sell, transfer or otherwise disclose this personally identifiable information outside this company, except where disclosure is required by law.
6. Under what circumstances will Casa de las Flores contact me?
Our aim is not to be intrusive, and we undertake not to ask irrelevant or unnecessary questions. Moreover, the information you provide will be subject to rigorous data security measures and procedures to minimise the risk of unauthorised access or disclosure.
7. How we will protect your personal data?
We will treat your data with the utmost care and take appropriate measures to protect it.
Our business systems are protected by robust technologies and policies to ensure the personal information stored is suitably protected.
We take steps to protect your information from unauthorised access and against unlawful processing, accidental loss, destruction and damage.
We secure all transactional areas of our website using https technology.
Where you have chosen a password that allows you to access certain parts of the Sites, you are responsible for keeping this password confidential. We advise you not to share your password with anyone.
We regularly monitor our systems for possible vulnerabilities and attacks, and we carry out penetration testing to identify ways to further strengthen security.
8. How long will we keep your personal data?
We will only keep your personal data for as long as necessary for the purpose for which it was collected. At the end of that retention period, your data will be deleted or anonymised so that it can be used in a non-identifiable way for analysis and business planning.
9. An overview of your different rights.
You have the right to request:
Access to the personal data we hold about you, free of charge in most cases.
The correction of your personal data when incorrect, out of date or incomplete.
That we stop using your personal data for direct marketing (either through specific channels, or all channels).
That we stop any consent-based processing of your personal data after you withdraw that consent.
Review by a Partner of any decision made based solely on automatic processing of your data (i.e. where no human has yet reviewed the outcome and criteria for the decision).
You can contact us to request to exercise these rights at any time as follows:
To ask about the information we hold about you can either;
or write to Casa de las Flores, 62 Apartado, 18400, Órgiva, Granada, Spain.
We will provide you with a request form to complete and, following proof of your identification, we will be able to answer your questions.
To simply ask for your information to be amended or preferences to be updated then please contact our customer services team on +34 642 36 34 84 / +44 (0)7748 630 267.