In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and the guarantee of digital rights, we inform you about the processing of personal data provided through this website.
1. Data controller
- Ducado de Argés — Calle Gardenia, 9, 45122 Argés, Toledo, España
- Contact: ducadodearges@gmail.com · +34 678746600
2. Purposes of processing
- Managing and answering enquiries and messages sent through the contact form.
- Processing booking requests, checking availability and communicating the conditions of the stay.
- Complying with legal obligations applicable to tourist accommodation, including the traveller register required by the competent authorities where applicable.
3. Legal basis
Processing is based on the consent given when submitting the form, on the performance of the pre-contractual or contractual accommodation relationship, and on compliance with the controller's legal obligations.
4. Data processed
Name and surname, phone number, email address, dates of stay, number of guests and any information voluntarily included in the message. No special categories of data are requested.
5. Retention
Data are kept for as long as necessary to handle the request and thereafter for the periods legally required for tax, accounting and traveller-register purposes. After those periods, data are securely deleted.
6. Recipients and processors
No data are shared with third parties except where legally required. A transactional email service provider acts as data processor for the messages generated by the forms, under the guarantees set out in article 28 GDPR. The website is hosted with cloud providers with servers in the European Union or with adequate international transfer safeguards.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to ducadodearges@gmail.com or to the postal address above, proving your identity. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
Appropriate technical and organisational measures are applied to protect data against loss, misuse or unauthorised access, including encryption in transit and storage of service credentials in server-side environment variables.