Handling and caring for your personal data
ANDALUCIAN SKY S. COOP. AND. (CIF: F 19691344) is the ‘data controller’ responsible for your personal information for the purposes of European Union data protection law:
[Plaza de la Alpujarra, Orgiva, Granada insert Andalucian Sky address and contact details here, email, phone]
We collect your personal data details for the specific purpose of assisting you with your holiday booking and with the legal basis of fulfilling a booking contract with the owner of a holiday villa or assisting with a potential booking. Data collected will be for example: your name, your contact details (including email), bank account, your date of birth, passport details, details about people in your party, any other information which is needed to arrange your holiday to the best of our abilities.
Sometimes we need to process information regarding the health of either you or a member of your party if you bring to our attention that special requirements are needed for your holiday. This may be, for example, in relation to mobility issues when you ask us for advice about choosing a villa. We hold this special category of information on the basis that you or the member of your party concerned has given us consent to process this information.
The consequences of not allowing us to process your personal data means that we won’t be able to organise your holiday for you.
We’ll be sharing your personal data with the following third parties:
Third parties involved in your holiday booking in order to fulfil your holiday requirements: the owner of the villa, agencies providing services that you have requested, for example ticket bookings, holiday activities, taxis, further travel arrangements.
Law enforcement and other government authorities, for example tax offices and customs.
Andalucian Sky will never sell or pass your personal data to outside parties unless we have your express consent.
Andalucian Sky does not intend to transfer personal data to a third country or international organisation.
Communication with our website is done using SSL/HTTPS protocols ensuring that all data transmitted to and from the website is fully encrypted and cannot be accessed by third parties.
Our company server runs an up to date MS Windows-based operating system protected by a router with full hardware firewall facilities. We only store electronically the minimum amount of information to ensure that we comply with local legal requirements (tax authorities, police authorities etc). We do not store customer bank details or any kind of customer password/access information on-line.
Personal information on paper records for administrative purposes will be stored in locked filing cabinets in our secure premises.
Your information will be kept for no longer than is necessary to complete your holiday booking and to comply with national tax laws.
If you have given your specific consent, we will hold your data for the purpose of sending you our newsletters/details of our special offers.
You may withdraw your consent to receiving these at any time by contacting us at email@example.com or you can unsubscribe using the link at the bottom of any of the marketing emails that you have previously received from us.
If you are a resident of the European Economic Area (EEA), you have certain data protection rights, listed below, all of which can be exercised by contacting us at firstname.lastname@example.org. These rights are:
The right to be informed about how we are going to use your personal data.
The right of access to the personal information we hold for you. If you request such access then we must respond to your request within one month.
The right of rectification, if you think the data we hold is incorrect you can ask that we put it right.
The right to delete your personal data from our records.
The right to object to direct marketing.
The right to restrict processing of your personal data (by changing your communication preferences it restricts how we communicate with you).
The right to data portability which means you can obtain and reuse your personal data that we hold for your own purposes.
The right to withdraw your consent at any time.
Rights in relation to automated decision-making and profiling. This is something that we don’t do at the moment, but if the situation changes, this policy will be updated accordingly.