PRIVACY POLICY

The company responsible for the processing of your data in accordance with this Privacy Policy is: CÀMPING SANGULÍ, S.A.U.

CÀMPING SANGULÍ, S.A.U. with registered office at Prolongación de la Calle E, s/n, de 43840-Salou, CIF A43055177 and contact telephone +34 977 381 641, processes personal data in order to carry out some of its activities.

In this data processing, we comply at all times with the current applicable regulations on the subject: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (RGPD) and Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPD).

1. Privacy statement

At CÀMPING SANGULÍ, S.A.U., we are fully aware of the importance for users of the processing of their personal data. We are therefore committed to guaranteeing their protection, confidentiality and security, in accordance with the principles of proactive responsibility, transparency and respect for individual rights.

The purpose of this Privacy Policy is to provide clear and accessible information on what personal data we collect through the website www.sangulisalou.com, for what purpose we use it, on the basis of what legitimacy we process it and what rights the persons concerned may exercise.

We undertake to process only the personal data strictly necessary for the specified and legitimate purposes described in this policy, and to take all appropriate technical and organisational measures to prevent unauthorised access, loss or misuse.

2. Categories of personal data processed

The data we may process, depending on the relevant purpose, include:

• Identification data: name, surname, DNI/NIE or equivalent document.
• Contact details: telephone, e-mail, postal address.
• Other data that the user voluntarily provides through the available channels (forms, emails, etc.).

No special categories of personal data are collected or processed, except in the cases provided for by law and with the express consent of the person concerned.

3. Purpose and duration of the processing of personal data

The personal data provided by users through the website will be processed by CÀMPING SANGULÍ, S.A.U. for the following purposes, depending on the services or functionalities with which they interact:

• Management of bookings through the external booking engine: the website uses an external booking engine to manage our customers' bookings. This engine collects personal data such as name, contact information, booking dates and payment details in order to complete the booking process and provide the requested services. The processing of the data is subject to the privacy policy of the external provider, who is responsible for the security and management of the data during this process.
• Management of the sending of newsletters: processing of personal data to manage the sending of commercial and promotional communications and newsletters, by e-mail or other digital channels, with the aim of keeping users informed about products, services or news related to the company. This processing will only be carried out with the prior consent of the user, who may withdraw it at any time.
• Management of bookings and registrations for activities: processing of personal data through the application integrated in the website to manage bookings and registrations for activities carried out at the facilities of CÀMPING SANGULÍ, S.A.U. This processing will be carried out with the consent of the user in order to optimise their experience, guarantee the correct performance of the activities and provide information related to them. Users may manage and update their registrations through the application at any time.
• Management of whistleblowing channels (Ethics Channel): the processing of personal data provided through the Ethics Channel for the purpose of preventing, detecting and correcting breaches of current regulations or the Company's internal regulations, as well as the processing and investigation of the complaint, in compliance with Law 2/2023, of 20 February, regulating the protection of persons who report breaches of regulations and the fight against corruption, will be managed by ROCA MUSCLERA, S.L.U., parent company of GRUP BLASI, a business group of which CÀMPING SANGULÍ, S.A.U. forms part.
• Data of minors: the website does not process personal data of minors. However, in the case of bookings via the app for activities at our facilities, data may be collected from minors when these activities are aimed at this age group. In these cases, the processing of data of minors is carried out with the explicit consent of the parents or legal guardians. CÀMPING SANGULÍ, S.A.U. will be in charge of processing this data and will manage the information securely and in accordance with current personal data protection regulations.
• Compliance with legal obligations: storage and processing of data when necessary to comply with legal obligations or the requirements of the competent authorities.

Personal data will be kept for the time necessary to comply with the purpose for which they were collected, or until their opposition or deletion is requested, always respecting the legally established deadlines.

4. Principles applied to the processing of personal data

In processing your personal data, CÀMPING SANGULÍ, S.A.U. will follow the following principles, in accordance with the requirements of the RGPD and the LOPD:

• Lawfulness, fairness and transparency: The data are processed in a lawful, fair and transparent manner. Prior information is always provided about the purposes of the processing, and consent is obtained when necessary.
• Purpose limitation: Data are collected for specific, explicit and legitimate purposes and are not further processed in a way that is incompatible with these purposes.
• Data minimisation: Only personal data that are strictly necessary in relation to the purposes for which they are collected are processed.
• Accuracy: We ensure that the data is accurate and up to date, taking the necessary steps to correct or delete inaccurate data without delay.
• Limitation of the retention period: Data is kept only for the time necessary to fulfil the purposes of the processing and, where appropriate, for the applicable legal periods.
• Integrity and confidentiality: Data are processed securely, ensuring their protection against unauthorised access, loss or alteration by means of appropriate technical and organisational measures.
• Proactive responsibility: The data controller, CÀMPING SANGULÍ, S.A.U., assumes the commitment to comply with these principles and can demonstrate this through the effective application of measures that ensure regulatory compliance.

5. Legitimisation

The processing of your personal data will be carried out on the basis of the following legitimisations that make it lawful:

• Execution of services requested by the user or application of pre-contractual measures: The processing is necessary to manage requests for information, queries, communications related to tourism services, hotel or attention to the user. The specific terms and conditions of each service will be available prior to their formalisation.
• Consent of the person concerned: The processing of certain data is based on the free, specific, informed and unequivocal consent of the user. This consent is collected through clear actions such as ticking the boxes provided for this purpose or through the express acceptance of this Privacy Policy.
• Compliance with legal obligations: Processing may be necessary in order to comply with legal obligations applicable to CÀMPING SANGULÍ, S.A.U. In these cases, the organisation is legally obliged to keep personal information for specific periods of time. This includes, among other matters, the management of complaints and claims received through the authorised channels, which will be managed by ROCA MUSCLERA, S.L.U., the parent company of GRUP BLASI, the business group of which CÀMPING SANGULÍ, S.A.U. forms part.

6. Assignment or communication of personal data and international transfers

The data will not be communicated to any third party outside the organisation, except in cases where there is a legal obligation to do so or to those providers linked to the Controller who act as data processors.

Likewise, CÀMPING SANGULÍ, S.A.U. does not carry out international data transfers. If they are made in the future, they will be duly informed.

7. Responsibility of the user

The user guarantees that he/she is over eighteen (18) years of age and that the data provided to CÀMPING SANGULÍ, S.A.U. are true, accurate, complete and up-to-date. In this sense, the user undertakes to keep the information provided duly updated and will be responsible for its veracity at all times.

The user shall be liable for any false or inaccurate information provided through the website, as well as for any damages - direct or indirect - that this may cause to CÀMPING SANGULÍ, S.A.U. or to third parties.

8. Rights of users in relation to the processing of their personal data

In general, users have the following rights in relation to the processing of their personal data by CÀMPING SANGULÍ, S.A.U. and/or the other companies in the organisation:

• Right of access: You may request confirmation as to whether personal data concerning you are being processed and, if so, access them and obtain information on their processing.
• Right of rectification: You have the right to request the modification of your data if it is inaccurate or incomplete.
• Right of erasure: You may request the deletion of your personal data when they are no longer necessary for the purposes for which they were collected.
• Right to restriction of processing: In certain circumstances, you may request that we restrict the processing of your data.
• Right to data portability: In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller, or to request that it be sent directly to you, where this is technically possible.
• Right to object: You may object to the processing of your data on grounds relating to your particular situation.
• Right not to be subject to automated decisions: You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or significantly affect you.
• Right to withdraw consent: For processing operations based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent will not be retroactive and will not affect the lawfulness of processing operations carried out previously.

9. How to assert the user's rights

Users may exercise their rights by sending an express request through any of the following channels:

• By e-mail: lopd@sangulisalou.com
• By post: Prolongación de la Calle E, s/n, de 43840-Salou.

In any case, if you consider that the processing of your personal data violates current legislation on data protection, or if you have not obtained a satisfactory response in the exercise of your rights, the user has the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Security measures

CÀMPING SANGULÍ, S.A.U., and the rest of the companies in the organisation, undertake to treat the personal data of the user with the utmost confidentiality, respecting at all times the duty of secrecy and acting in accordance with the provisions of current legislation on data protection. Therefore, it will adopt the necessary technical and organisational measures to guarantee their security and avoid their alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they may be exposed.

11. Modifications to the Privacy Policy

CÀMPING SANGULÍ, S.A.U. reserves the right to modify this Privacy Policy. Any change will be communicated through the website or by other appropriate means.

    12.Treatment of cookies

A cookie is a small file that is downloaded and stored on the user's computer when the user accesses a website. Cookies allow the website, among other things, to store and retrieve information about the browsing habits of the user or their computer and, depending on the information they contain and the way in which they use their computer, they may allow them to recognise the user. The user has the option of preventing the generation of cookies by selecting the corresponding option in their browser. You can obtain more information by reading our Cookies Policy.