Security in Third-Party Relationships

Legal Notice

Video Surveillance

As stipulated in the current and applicable data protection regulations, personal data is considered any information about an identified or identifiable natural person (data subject), where a natural person is understood to be any person whose identity can be determined, directly or indirectly, in particular by means of an identifier.

Images, considered graphic or photographic information, are established as personal data according to the applicable and current data protection regulations. Therefore, the capture and, where applicable, recording of personal information in the form of images when it affects identified or identifiable individuals is considered personal data.

Entities may carry out the processing of images through camera or video camera systems for the purpose of preserving the security of individuals, property, and their facilities. Likewise, the processing of personal data obtained from images captured by the use of cameras and video cameras by the Security Forces and Bodies shall be governed by the provisions regarding such matter. Similarly, the processing of images in the personal and domestic sphere, understood as being carried out by an individual within the framework of exclusively private or family activity, shall be exempted and shall be governed by the corresponding provisions.

As a consequence, the use of video cameras, cameras, or any other similar technical means for surveillance purposes impacts the fundamental freedoms and rights of individuals, and it is mandatory to establish guarantees.

With regard to the rights of workers, the installation of video surveillance cameras in the workplace shall always respect the right to privacy and the image of the workers, although the processing shall be limited to the purposes provided for by the Workers’ Statute, and/or in any case to legitimate purposes recognized by the current and applicable regulations.

Entities may process images obtained through camera or video surveillance systems for the exercise of control functions of workers as provided for in Article 20.3 of the Workers’ Statute, provided that these functions are carried out within their legal framework and within the inherent limits thereof. Entities shall inform workers and, where applicable, their representatives in advance, and in a clear, express, and concise manner, about this measure.

In no case shall the installation of sound recording or video surveillance systems be allowed in areas intended for the rest or recreation of workers, such as changing rooms, toilets, dining areas, and similar spaces.

The use of similar systems for sound recording in the workplace shall only be allowed when the risks to the security of facilities, assets, and individuals arising from the activity carried out in the workplace are relevant, always respecting the principles of proportionality, minimum intervention, and adopting appropriate safeguards. The deletion of sound recordings retained by these recording systems shall be carried out within a maximum period of one month from their capture, unless they need to be retained to prove the commission of acts that jeopardize the integrity of persons, assets, or facilities.

The Controller or Processor shall abide by the following principles when processing data for the purpose of video surveillance:

• In any case, the use of video surveillance systems must respect the rights of individuals and comply with the rest of the legal framework.
• The images will be deleted within a maximum period of one month from their capture, unless they need to be retained to prove the commission of acts that threaten the integrity of individuals, property, or facilities. In such cases, the images must be made available to the competent authority within a maximum period of seventy-two hours from the moment the recording’s existence was known.
• It must adopt the necessary technical and organizational measures to guarantee the security of data and prevent their alteration, loss, unauthorized processing, or access. Likewise, any person who, by reason of the exercise of their functions, has access to the data must observe due reservation, confidentiality, and secrecy in relation to the same.

The special characteristics of video surveillance entail the design of specific procedures to inform individuals whose images are captured. At least one informative sign must be placed in the areas under video surveillance, in a sufficiently visible location, both in open and closed spaces. To comply with the duty of information, the informative sign must identify:

The informative sign may also include a QR code or internet address for accessing this information.

On the other hand, the Data Controller must have a printed form with all the necessary information to comply with the duty of information and transparency. Therefore, ADHIKARA S.L has available an ‘Information Notice’ to be provided to interested parties upon request

INFORMATION NOTICE – VIDEO SURVEILLANCE

In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the processing system owned by ADHIKARA S.L with CIF B06778112 and registered address at CAMINO DISEMINADOS. POL.21 PARCELA 197,50160 LECIÑENA(ZARAGOZA), and that the images obtained from our video surveillance cameras are stored in a physical medium and will be processed according to the following criteria:

• Purpose: Ensure the security of facilities, assets, and/or individuals.
• Retention Period: 1 month, in compliance with article 22.3 of Law 3/2018 of December 5, on Data Protection and Digital Rights Guarantee.
• Legal basis: Public interest or exercise of Public Powers.
• Transfers: Your data may be disclosed to law enforcement agencies, courts and tribunals, if necessary, for the purpose of fulfilling the obligations established by applicable laws and ensuring the safety and protection of individuals. Furthermore, it is informed that the legal basis for such transfers is the compliance with a legal obligation.

In accordance with the rights granted by the current and applicable data protection regulations, you may exercise the rights of access, rectification, restriction of processing, erasure (“right to be forgotten”), data portability, and objection to the processing of your personal data, as well as the revocation of the consent given for the processing of such data, by sending your request to the postal address CAMINO DISEMINADOS. POL.21 PARCELA 197,50160 LECIÑENA(ZARAGOZA) or the email address turismoruralasha@gmail.com. You may also contact the relevant supervisory authority to file any complaints you may deem necessary.

Contractual conditions

Cookies Policy

It should be noted that the use of cookies on users’ terminal equipment has significant implications for data protection. Through the use of cookies, entities obtain data related to users that may be used later on. Therefore, it is necessary to inform users about the use of cookies so that they are aware of the data processing carried out.

ADHIKARA S.L must conduct a thorough analysis of the Cookies that may be installed on users’ computer devices through its website. Once the purpose of these Cookies is known, ADHIKARA S.L must comply with Law 34/2002, of July 11, on Information Society Services and Electronic Commerce.

In accordance with the Electronic Communications Law (LSSI-CE), data protection regulations, and the recommendations published by the Spanish Data Protection Agency in its Guide on the use of Cookies.

– To solely allow communication between the user’s device and the network.
– Solely provide a service explicitly requested by the user.

It is important to note that ADHIKARA S.L may use devices for storing and retrieving data on end-user devices, provided that they have given their consent after being provided with clear and comprehensive information about their use.

The information related to cookies must be displayed following the following requirements:

– The information or communication must be concise, transparent, and comprehensible.
– Clear and simple language should be used, avoiding the use of phrases that may induce confusion or distort the clarity of the message.
– The information must be easily accessible.

It is recommended to use layered privacy notices, meaning that the information is presented in layers, allowing the user to access those aspects of the notice that are of greater interest to them, thereby avoiding information overload, without prejudice to the fact that the complete information is available in a single location or in a comprehensive document that can be easily accessed if the interested party wishes to consult it in its entirety.

ADHIKARA S.L will periodically review possible changes that may occur in the management and use of cookies in order to update the information displayed to users regarding cookies.

Prior information to the cookie policy

The information about cookies provided at the time of seeking consent must be sufficiently comprehensive to enable users to understand their purposes and the use that will be made of them.

– Identification of the website owner.

– Identification of the purposes of the cookies that will be used.

– Information on whether the cookies are first-party or third-party.

– Generic information about the type of data that will be processed in case profiles are created.

– Way in which the user can accept, configure, and reject the use of cookies.

– A clearly visible link directed to supplementary and more detailed information (cookie policy).

It will be necessary for the information in the first layer to be complemented with a configuration system or panel where the user can opt to accept or reject cookies in a granular manner.

In this regard, we provide you with the information that ADHIKARA S.L must choose and insert on its website, depending on the Cookies it uses, through a header bar or a pop-up window:

PREVIOUS INFORMATION – COOKIE POLICY

Use of own technical cookies

Use of own and third-party technical cookies

Use of own and behavioral advertising cookies

This website uses own, third-party, and behavioral advertising cookies

This website uses own, third-party, advertising, and analytics cookies

Use of own technical and analytical cookies

Use of own, third-party, technical and analytical cookies

Use of own, third-party and analytical cookies, aimed at users under 14 years of age

Reservations

Settings Panel

When Custom Settings or HERE is clicked, a link should be inserted that leads to a settings panel where the user can choose to accept or reject cookies on a granular basis:

ADHIKARA S.L informs the user that they have the possibility to configure their preferences regarding the installation of cookies:

Use of proprietary cookies for behavioral advertising or use of proprietary and third-party cookies for behavioral advertising

Use of own analysis cookies or use of own and third-party analysis cookies

Use of own cookies, third-party cookies for analysis and behavioral advertising

When you click on “ACCEPT ALL”, you will accept the installation of all cookies, and when you click on “REJECT ALL”, you will reject all cookies.

When clicking on ‘SAVE SETTINGS’, the cookie preferences selected by the user will be saved. If no option has been selected, clicking on this button will be equivalent to rejecting all cookies.

Finally, remember to update the table in the Cookie Policy document, indicating the Cookies that your website installs with user navigation.

– Definition and generic function of cookies.
– Information on the type of cookies used and their purpose.
– Identification of who uses the cookies.
– Information on how to accept, reject or revoke consent for the use of cookies.
– In case of transfers of data to third countries carried out by the editor, information about them.
– In case it is applicable, inform about the profiling carried out.
– The period of retention of personal data or the criteria used to determine the retention period

Right of Withdrawal

Cookie Policy

In accordance with the provisions of article 22.2 of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE) in force, ADHIKARA S.L must comply with the obligation to inform about the cookies it uses and their purposes

This website uses cookies and/or similar technologies that store and retrieve information as you browse. Cookies allow a website, among other things, to store and retrieve information about a User’s or their computer’s browsing habits, and depending on the information it contains and how the computer is used, they can be used to recognize the User.

Additionally, ADHIKARA S.L informs in more detail about the cookies used by their owners, the use or specific purpose, the conservation periods, as well as the possible International Transfers of data of each one of them used on our website:

You can find out about international transfers to third countries that, where appropriate, are carried out by THIRD PARTIES, identified in this cookie policy, in their corresponding policies (click on the owner of the cookie).

ADHIKARA S.L informs in a more exhaustive way the information related to international transfers derived from the use of its own cookies:

Take into account that, if you accept third-party cookies, you must delete them from the browser options or from the system offered by the third party itself.

Below, we provide you with the links of various browsers, through which you can modify the settings of your browser on the use of cookies:

– Firefox: http://support.mozilla.org/es/kb/habilitar-y-deshabilitar-cookies-que-los-sitios-we

– Chrome: http://support.google.com/chrome/bin/answer.py?hl=es&answer=95647

– Internet Explorer: http://windows.microsoft.com/es-es/internet-explorer/delete-manage-cookies#ie=ie10

– Microsoft Edge: https://support.microsoft.com/es-es/microsoft-edge/eliminar-las-cookies-en-microsoftedge 63947406-40ac-c3b8-57b9-2a946a29ae09

– Safari: https://support.apple.com/kb/ph17191?locale=es_ES medidas para el cumplimiento normativo · servicio compliance

– Opera: https://help.opera.com/en/latest/web-preferences/#cookies

To learn more about the processing of personal data, we recommend you visit our “Privacy Policy” section.

Última actualización: 10 de noviembre de 2022

Measures for regulatory compliance

Website privacy policy

Data of the owner of the web:

Data Protection

In accordance with current and applicable regulations on the protection of personal data, we inform you that your data will be incorporated into the treatment system owned by ADHIKARA S.L with NIF B06778112 and registered office at CAMINO DISEMINADOS. POL.21 PLOT 197.50160 LECIÑENA (ZARAGOZA), and their respective purposes, conservation periods and legitimizing bases are listed below:

TREATMENTS CARRIED OUT

Purpose: Collection, registration and processing of data to be able to register as a user
Conservation period: while the consent given is maintained, except legal obligation.
Legitimate basis: The consent of the interested party.
Type of Data: Basic data: Name and surname, Telephone, NIF, Postal address,
Electronic address

Purpose: Capture, registration and treatment of data of web users for the correct provision of the service
Conservation period: conservation of the copies of the documents until the prescription of the actions to claim a possible responsibility.
Legitimate basis: The execution of the contract.
Type of Data: Basic data: Name and surname, NIF, Email address, Economic or insurance data
Transfers: your data will be communicated, if necessary, to Bodies and/or public administration with competence in the matter in order to comply with the obligations established in the applicable regulations. In addition, it is reported that the legitimizing basis of the assignment is

Purpose: Collection, registration and processing of data for the purpose of responding to your queries and/or requests, as well as advertising and commercial prospecting.
Conservation period: while the consent given is maintained, except legal obligation.
Legitimate basis: The consent of the interested party.
Type of Data: Basic data: Name and surname, Email address

Purpose: Management of the subscription to the newsletter, to make the corresponding shipments
Conservation period: while the consent given is maintained.
Legitimate basis: The consent of the interested party.
Type of Data: Basic data: Name and surname, Email address

Purpose: Capture, registration and treatment of user data
Conservation period: while the consent given is maintained, except legal obligation.
Legitimate basis: The consent of the interested party.
Type of Data: Basic data: Name and surname, Email address

Purpose: Management and installation of cookies
Conservation period: while the consent given is maintained.
Legitimate basis: The consent of the interested party.
Type of Data: Basic data: Email address, IP address

Purpose: Respond to your queries and/or requests
Conservation period: as long as the consent given is maintained

Legitimate basis: The consent of the interested party.
Type of Data: Basic data: Name and surname, Email address, IP address

Rights of the interested parties

ADHIKARA S.L informs Users that they may exercise the rights of access, rectification, limitation, deletion, portability, opposition to the processing of their personal data and the right not to be subject to automated decisions, including profiling, before the Data Controller, as well as the withdrawal of the consent given.

• Right of Access: It is the right of the user to obtain confirmation as to whether their data is being processed and, in such a case, the specific personal data processed and the legal information of the treatment (purposes, legitimizing basis, conservation periods, assignments, origin of the data, etc).
• Right of Rectification: It is the right of the affected party to modify the data that turns out to be inaccurate or incomplete. In relation to the web page, it can only be satisfied in relation to that information that is under the control of the website, for example, deleting comments published on the page itself, images or web content containing personal data of the user.
• Right to Limitation of treatment: It is the right to limit the purposes of the treatment originally provided by the person in charge of the treatment in certain cases.
• Right of Deletion: It is the right to delete the personal data of the user, except for the provisions of the GDPR itself (freedom of expression and information, obligations of conservation, formulation, exercise or defense of claims, etc.).
• Right to Portability: The right to receive the personal data that the user has provided, in a structured format, of common use and mechanical reading, and to transmit them to another person in charge when the treatment is based on the consent or in the execution of a contract. and is carried out by automated means.
• Right of Opposition: It is the right of the user not to carry out the processing of their personal data or to cease their processing by the website when the processing is based on legitimate interest or public interest. or in the case of direct marketing treatments.
• Right not to be subject to automated decisions, including profiling: When the treatment is not necessary for the conclusion or execution of a contract, nor is it authorized by the Law of the European Union or of the Member States, nor is it based on the consent, you have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or significantly affects you in a similar way.
• Right to withdraw consent: For any treatment based on your consent, you have the right to withdraw it, at any time and free of charge.

To exercise any of the data protection rights described above, you must follow the following instructions:

• Presentation of a letter to the address CAMINO DISEMINADOS. POL.21 PLOT 197.50160 LECIÑENA (ZARAGOZA) (to the attention of ADHIKARA S.L) or by email to turismoruralasha@gmail.com.
• The letter sent by the owner of the personal data (interested party) requesting the exercise of rights must take into account the following: o They must be reliably identified and, in the event that there are doubts about the identity of the applicant, they will be asked to to rectify the request (for example, requesting more information, such as the ID number, the ID document, the email address you provided, etc.)

o The request can be made by the representative, legal or voluntary, when he is duly identified and authorized by the owner of the data (by means of an express authorization of the owner to exercise the very personal rights regulated in the regulations on the protection of personal data).

o Petition in which the request is specified (Right/s that is/are intended to be exercised). If you do not refer to a specific treatment, you will be provided with a response in relation to all the treatments that affect your personal data. If you request information about a specific treatment, only the information about it. If you request it by phone, you will be told to do so in writing and you will be informed of how you can do it and the address to which you have to send it. You will never be given information over the phone.
o Postal or electronic address for notification purposes.
o Supporting documents of the request made, if necessary.
o The applicant must use any means to prove the sending and receipt of the application.

Finally, we inform you that you have the right to file a claim with the Spanish Agency for Data Protection in the event that you are aware of or consider that an event may entail a breach of the applicable regulations on data protection.

ADHIKARA S.L undertakes to adopt the necessary technical and organizational measures, according to the level of risks that accompany the treatments carried out by them and indicated in the section of the terms and conditions of use, so as to guarantee their integrity, confidentiality and availability.

Last updated: November 10, 2022

Social media privacy policy

In accordance with the provisions of the current and applicable regulations for the protection of personal data and Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE), ADHIKARA S.L informs users that they have proceeded to create a profile on the Social Network(s) Facebook, Instagram, Linkedin, with the main purpose of advertising their products and services.

Data of ADHIKARA S.L:

– NIF: B06778112
– ADDRESS: CAMINO DISEMINADOS. POL.21 PLOT 197.50160 LECIÑENA (ZARAGOZA)
– EMAIL: turismoruralasha@gmail.com.

The user has a profile on the same Social Network and has decided to join the page created by ADHIKARA S.L, thus showing interest in the information that is published on the Network. By joining our page, you provide us with your consent for the treatment of those personal data published in your profile.

The user can access the privacy policies of the Social Network itself at any time, as well as configure their profile to guarantee their privacy.

ADHIKARA S.L has access to and processes the user’s public information, especially their contact name. These data are only used within the Social Network itself. They are not incorporated into any treatment system.

Rights of the interested parties

In relation to the rights of access, rectification, limitation of treatment, deletion, portability and opposition to the treatment of your personal data, which you have and which can be exercised before ADHIKARA S.L, in accordance with the RGPD, you must have take into account the following nuances

• Right of Access: It is the right of the user to obtain information about their specific personal data and the treatment that has been carried out or carried out, as well as the information available on the origin of said data and the communications made or planned thereof. .
• Right of Rectification: It is the right of the affected party to modify the data that turns out to be inaccurate or incomplete. It can only be satisfied in relation to that information that is under the control of ADHIKARA S.L, for example, deleting comments published on the page itself, images or web content where personal data of the user is recorded.
• Right to Limitation of treatment: It is the right to limit the purposes of the treatment originally provided by the person in charge of the treatment.
• Right of Suppression: It is the right to delete the personal data of the user, except for what is provided in the RGPD itself or in other applicable regulations that determine the obligatory nature of their conservation, in a timely manner.
• Right of portability: The right to receive the personal data that the user has provided, in a structured format, of common use and mechanical reading, and to transmit them to another person in charge. measures for regulatory compliance · compliance service
• Right of Opposition: It is the right of the user not to carry out the processing of their personal data or to cease their processing by ADHIKARA S.L.

ADHIKARA S.L will carry out the following actions:

• Access to public profile information.
• Publication in the user profile of all the information already published on the ADHIKARA S.L. page.
• Send personal and individual messages through the channels of the Social Network.
• Page status updates to be posted on the user’s profile.

The user can always control their connections, delete the content that ceases to interest them and restrict who they share their connections with, for this they must access their privacy settings.

Publications

The user, once joined to the ADHIKARA S.L page, may post comments, links, images or photographs or any other type of multimedia content supported by the Social Network on the latter. The user, in all cases, must be the owner of the same, enjoy the copyright and intellectual property rights or have the consent of the affected third parties. Any publication on the page, whether text, graphics, photographs, videos, etc., is expressly prohibited. that violate or are likely to violate morality, ethics, good taste or decorum, and/or that infringe, violate or violate intellectual or industrial property rights, the right to image or the Law. In these cases , ADHIKARA S.L reserves the right to immediately withdraw the content, being able to request the permanent blocking of the user.

ADHIKARA S.L will not be responsible for the content that a user has freely published.

The user must keep in mind that his publications will be known by other users, so he himself is the main person responsible for his privacy.

The images that can be published on the page will not be stored in any treatment system by ADHIKARA S.L, but they will remain on the Social Network.

Contests and promotions

ADHIKARA S.L reserves the right to carry out contests and promotions, in which the user linked to its page may participate. The bases of each of them, when the Social Network platform is used for this purpose, will be published on it. Always complying with the LSSI-CE and any other applicable standard.

The Social Network does not sponsor, endorse or administer, in any way, any of our promotions, nor is it associated with any of them.

Advertising

ADHIKARA S.L will use the Social Network to advertise its products and services, in any case, if it decides to process your contact information to carry out direct commercial prospecting actions, it will always be in compliance with the legal requirements of the regulations on data protection and of the LSSI-CE.

The fact of recommending the ADHIKARA S.L page to other users so that they can also enjoy the promotions or be informed of its activity will not be considered publicity.

Next, we detail the link to the privacy policy of the Social Network:

• Facebook: https://es-es.facebook.com/privacy/explanation 
• Instagram: http://instagram.com/about/legal/privacy/ 
• Linkedin: https://es.linkedin.com/legal/privacy-policy?