1. Data Controller
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), users are informed that personal data collected through this website will be processed by:
Data Controller: XMRLESTUDI S.C.P.
Email: savastyana24@gmail.com
Phone: +34 640 649 158
Hereinafter referred to as the “Controller”.
2. Personal Data Collected
Through the contact forms on this website, the following categories of personal data may be collected:
- Name
- Email address
- Phone number (if provided)
- Information included in the message (such as requested dates, number of guests, activity details, or other voluntarily provided information)
Users guarantee that the personal data provided is accurate and truthful.
3. Purpose of Data Processing
Personal data will be processed for the following purposes:
- To respond to information requests.
- To manage availability inquiries regarding the Savastyana house or creative space.
- To communicate regarding potential bookings.
- To carry out pre-contractual measures requested by the user.
No automated decision-making or profiling is carried out.
4. Legal Basis for Processing
The legal basis for processing personal data is:
- The user’s consent when submitting the contact form.
- The implementation of pre-contractual measures at the user’s request.
- Compliance with legal obligations if a booking is formalized.
Consent may be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.
5. Data Retention
Personal data will be retained:
- For the time necessary to respond to the user’s inquiry.
- If a booking is confirmed, for the legally required fiscal and administrative retention periods.
- Subsequently, for the legally established limitation periods for potential liabilities.
6. Recipients and Data Processors
Personal data will not be disclosed to third parties except where legally required.
However, data may be processed by technological service providers necessary for website operation (such as hosting providers, email services, or website maintenance services), with whom appropriate data processing agreements have been signed in accordance with Article 28 of the GDPR.
No international data transfers outside the European Economic Area are foreseen. If such transfers occur, they will comply with the safeguards established by the GDPR.
7. Data Subject Rights
Users have the right to:
- Access their personal data
- Request rectification of inaccurate data
- Request erasure of their data
- Object to processing
- Request restriction of processing
- Request data portability
To exercise these rights, users may send a request to:
📧 savastyana24@gmail.com
The request must specify the right being exercised and include a copy of a valid identification document.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at: www.aepd.es if they believe their data is being processed in violation of applicable regulations.
8. Data Security
XMRLESTUDI S.C.P. applies appropriate technical and organizational measures in accordance with Article 32 of the GDPR to ensure a level of security appropriate to the risk, protecting personal data against loss, misuse, unauthorized access, disclosure, or alteration.
9. Mandatory or Optional Nature of the Data
Fields marked as mandatory in the contact form are required to process the user’s request. Failure to provide such data may prevent proper handling of the inquiry.
10. Changes to This Privacy Policy
The Controller reserves the right to modify this Privacy Policy to adapt it to legislative or jurisprudential developments.