1. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, www.landinginspain.com (hereinafter also referred to as the “Website”) undertakes to implement the necessary technical and organizational measures, appropriate to the level of security required based on the risk associated with the collected data.

Laws Incorporated into this Privacy Policy

This privacy policy is adapted to current Spanish and European regulations regarding the protection of personal data on the Internet. Specifically, it complies with the following legal instruments:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR).
• Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Royal Decree 1720/2007 of 21 December approving the regulations implementing Organic Law 15/1999 of 13 December on the Protection of Personal Data (RDLOPD).
• Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

The data controller responsible for the processing of personal data collected via www.landinginspain.com is:

Cinthya Jo, with NIF: 50516855T (hereinafter, the “Data Controller”).
Contact details:
Address: Paseo de los Parques 30, 28109, Madrid
Phone: +34 608 813 207
Email: info@landinginspain.com

Personal Data Registration
In accordance with the GDPR and the LOPD-GDD, we inform you that the personal data collected by www.landinginspain.com through the forms provided on its web pages will be incorporated into and processed in our file for the purpose of facilitating, streamlining, and fulfilling the commitments established between www.landinginspain.com and the User, or maintaining the relationship set out in the forms completed by the User, or to address a request or inquiry.

Additionally, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained specifying, based on their purposes, the processing operations carried out and other conditions set forth in the GDPR.

Principles Applicable to the Processing of Personal Data

The processing of the User’s personal data shall be subject to the following principles as outlined in Article 5 of the GDPR and Articles 4 and subsequent of Organic Law 3/2018:

• Lawfulness, fairness, and transparency: Consent will always be required from the User following full disclosure of the purpose(s) of data collection.
• Purpose limitation: Data will be collected for specified, explicit, and legitimate purposes.
• Data minimization: Only the data strictly necessary for the purposes for which they are processed will be collected.
• Accuracy: Data must be accurate and kept up to date.
• Storage limitation: Data will only be retained as long as necessary for processing purposes.
• Integrity and confidentiality: Data will be processed in a way that ensures their security and confidentiality.
• Accountability: The Data Controller shall be responsible for ensuring compliance with these principles.

Categories of Personal Data

The categories of data processed via www.landinginspain.com are solely identifying data. No special categories of personal data are processed, as defined in Article 9 of the GDPR.

Legal Basis for the Processing of Personal Data

The legal basis for the processing of personal data is the User’s consent. The Data Controller undertakes to obtain explicit and verifiable consent from the User for the processing of their personal data for one or more specific purposes.

Users may withdraw their consent at any time. Withdrawing consent shall be as easy as granting it. As a general rule, the withdrawal of consent will not affect the use of the Website.
When a User is required or allowed to provide data via forms (e.g., for inquiries or information requests), they will be informed if completion is mandatory, as such data is essential for the proper conduct of the operation.

Purposes of Data Processing

The personal data collected will be processed to facilitate, expedite, and fulfill commitments between the Website and the User or maintain the relationship initiated via the forms completed by the User or to address any request or inquiry.

Additionally, data may be used for commercial, personalization, operational, and statistical purposes, and activities related to www.landinginspain.com’s business purpose, including marketing studies and content optimization for the User, as well as improving Website functionality and navigation.

At the time personal data is collected, the User will be informed about the specific purpose(s) of the processing.

Personal Data Retention Period
Personal data will be retained only for the minimum time necessary to fulfill the purposes for which they were collected, and in any event, for a maximum period of 24 months or until the User requests their erasure. At the time of data collection, the User will be informed about the expected retention period or the criteria used to determine it.

Recipients of Personal Data
The User’s data may be shared with the following recipients:

• Hosting Provider: Hostinger, Jonavos Gatvė 60C, 44192 Kaunas, Lithuania.
• Payment gateway: Stripe.

Should the Data Controller intend to transfer personal data to a third country or international organization, the User will be informed of such transfer, including details about the destination and whether an adequacy decision by the European Commission exists.

Personal Data of Minors

In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, only Users over the age of 14 may lawfully give consent for the processing of their personal data. For those under 14, the consent of their parents or guardians will be required, and such processing will only be lawful if that consent has been granted.

Confidentiality and Security of Personal Data

The Data Controller undertakes to implement the necessary technical and organizational measures to guarantee the security of personal data and prevent their accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

The Website is secured with an SSL certificate (Secure Socket Layer), which ensures encrypted transmission of data between the server and the User.
However, since www.landinginspain.com cannot guarantee the absolute security of the Internet, or the absence of hackers or other unauthorized access, the Data Controller commits to promptly inform the User of any data breach that may pose a high risk to personal rights and freedoms, in accordance with Article 4 of the GDPR.

All personal data shall be treated as confidential, and the Data Controller shall ensure that this confidentiality is respected by any employee, partner, or third party with access to the data.

Rights Derived from Personal Data Processing

Users are entitled to exercise the following rights under the GDPR and Organic Law 3/2018:

• Right of access: To obtain confirmation of whether personal data is being processed, and access to such data and relevant information.
• Right to rectification: To request correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”): To request the deletion of personal data under certain circumstances.
• Right to restriction of processing: To limit the processing of data under specific conditions.
• Right to data portability: To receive personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
• Right to object: To oppose the processing of personal data.
• Right not to be subject to automated decision-making, including profiling: To request not to be subject to decisions based solely on automated processing.

Users may exercise these rights by writing to the Data Controller, referencing “GDPR www.landinginspain.com”, and including:

• Full name and a copy of the national identity document (or equivalent proof of identity).
• Specific details of the request.
• Address for notifications.
• Date and signature.
• Any supporting documents.

Requests may be sent to:

Postal address: Paseo de los Parques 30, 28109, Madrid
Email: info@landinginspain.com

Links to Third-Party Websites

The Website may include links to third-party websites not operated by www.landinginspain.com. These third parties are responsible for their own data protection practices and policies.

Complaints to Supervisory Authorities
If the User believes there is a violation of data protection laws in the way their personal data is handled, they have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or place of the alleged infringement. In Spain, the competent authority is the Spanish Data Protection Agency (https://www.aepd.es/).

1. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

It is necessary that the User has read and agrees with the terms of this Privacy Policy and consents to the processing of their personal data in order for the Data Controller to proceed as described. Use of the Website implies acceptance of this Privacy Policy.
www.landinginspain.com reserves the right to modify its Privacy Policy at its sole discretion or in accordance with legal, jurisprudential, or regulatory changes. Users are advised to review this page periodically to stay informed of any changes or updates.
This Privacy Policy was last updated to comply with Regulation (EU) 2016/679 and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.