Privacy Policy

OUR PRIVACY POLICY AT A GLANCE

Who are we? We are CASAS HEDDY, S.A. and we process your data as the Data Controller. That means we are responsible for how your personal data is used and protected.

What do we use your data for?  We obtain your personal data directly while you browse the site by means of cookies and similar technologies, which allow us to analyse your behaviour and preferences. We may also receive your data through e-mails you send us voluntarily in order to communicate with us or to subscribe to our services.

Why do we hold it? We are entitled to process your data for various reasons. When you fill in a form or send an e-mail with a query or suggestion, we have a legitimate interest in responding to it.

Who do we share your data with? We will only share the data with partner companies in order to handle the requests received and provide our services or supply you with products, as well as with banks and bodies required by law. Under no circumstances do we sell your data to third parties.

What rights do you have? You have the right to access, rectify or erase your personal data. You also have the right to object to our use of data you have previously authorised us to use, to data portability, and not to be subject to automated individual decision-making.

When processing your personal data, we apply the following principles to guarantee the greatest possible protection for you:

• Principle of lawfulness, fairness and transparency: We will always require your consent to process your personal data for one or more specific purposes, of which we will inform you in advance with complete transparency.

• Principle of data minimisation: We will only request data that is strictly necessary in relation to the purposes for which we require it. The minimum possible.

• Principle of storage limitation: data will be kept for no longer than is necessary for the purposes of the processing. Depending on the purpose, we will inform you of the corresponding retention period; in the case of subscriptions, we will periodically review our lists and delete records that have been inactive for a considerable time.

• Principle of integrity and confidentiality: Your data will be processed in a way that ensures appropriate security of the personal data and guarantees confidentiality. You should know that we take all necessary precautions to prevent unauthorised access to or misuse of our users' data by third parties.

In this privacy policy you will find more detailed information on the use we make of the personal data of our customers, suppliers and users, and in general of all persons who are in contact with us, regardless of the means they have used to communicate (online form, telephone, e-mail or in person).

We like to be transparent about what we do with your personal data, so that you understand the implications of the uses we make of it and the rights you have in relation to your data. For that reason we keep our Privacy Policy, Legal Notice and Cookie Policy up to date; you can consult this information on this same website.

If you have any questions or would like more information about the privacy policy, you can continue reading this document.

1. WHO IS THE CONTROLLER OF YOUR DATA?

The controller of your data is CASAS HEDDY, S.A.:

CASAS HEDDY, S.A. informs the user that the data provided to us through browsing our website, through the various data collection forms or by sending e-mails, will be processed by CASAS HEDDY, S.A., and that this processing is recorded in the Register of Processing Activities managed by CASAS HEDDY, S.A. in accordance with the GDPR.

WHAT IS YOUR PERSONAL DATA USED FOR?

At www.casasheddy.com we process data both of the users of our website and of third parties who have dealings with us. In order to help you understand how we process your data, we have set out separately the purpose for which we use the data, the types of data and the legal basis, according to the category of person whose data we process. Below, we classify the persons whose data we process according to the type of relationship they have with CASAS HEDDY, S.A.

• WEBSITE USERS

What data do we collect from our website users?

2. Data of users who browse our website: data provided by cookies and by Google Analytics. 

For what purposes will we process your personal data?

When the user accepts our privacy policy, they authorise us to process their personal data for the following purposes:    

• To manage and respond to queries, requests or communications made through the various contact channels.

• To provide the services offered on the website or to manage the contractual relationship, where applicable.

• To comply with applicable legal obligations.

• To analyse the use of the website for statistical purposes and to improve the user experience, by means of cookies or other similar technologies, provided that the user has given their consent.

How do we obtain your data?

We obtain your personal data through the following means:

• Technical data collected automatically while browsing the website, such as the IP address, browser type, device used or pages visited.

• Cookies and analytics tools, provided that the user has accepted their use in accordance with the cookie policy.

• Data that the user voluntarily provides when contacting us by e-mail, telephone, social media or other communication channels.

• Data provided in the event of registration, subscription, contracting of services or purchase of products, where applicable.

What is the legal basis for processing your data?

The user's express consent (Article 6.1.a GDPR), given by completing the various forms and ticking the relevant box, is what makes the processing by CASAS HEDDY, S.A. lawful. The user may withdraw the consent given at any time, although withdrawal of consent does not affect processing carried out prior to that withdrawal.

The legitimate interest in creating browsing profiles and detecting preferences through the installation of cookies.

The performance of a contract or the taking of pre-contractual steps when the customer submits a request through the various forms available to the user on our website or requests information about the services provided by CASAS HEDDY, S.A.

3. HOW LONG DO WE KEEP YOUR DATA?

• WEBSITE USERS

Data processed on the basis of the website user's consent will be kept for as long as it remains relevant for the purpose for which it was collected and consent has not been withdrawn.

For data processed on the basis of legitimate interest, the retention period will be that linked to the reason for which the data was collected, always ensuring appropriate safeguards and respect for the rights and freedoms of data subjects.

For data processed on the basis of the performance of a contract or the taking of pre-contractual steps, the retention period will be that during which the contractual relationship remains in force, plus any subsequent period for which the data must be kept by legal obligation.

As regards the retention period for cookies, you can obtain more information on our website in the “Cookie policy” section

4. ADDITIONAL INFORMATION ON DATA PROCESSING

Only those over 14 years of age may e-mail us. If you are under this age, you must have the consent of your parents or legal guardians.

The User guarantees the authenticity and accuracy of all data communicated to CASAS HEDDY, S.A., declares that they are over 14 years of age, and shall be solely responsible for any false or inaccurate statements made.

If you provide us with third-party data, you state that you have their consent and undertake to pass on to them the information we provide in this clause, releasing CASAS HEDDY, S.A. from any obligation. Nevertheless, CASAS HEDDY, S.A. may carry out checks to verify that the third party has been informed, applying the due diligence measures laid down in data protection legislation.

5. WHO WILL YOUR DATA BE DISCLOSED TO?

Data will not be disclosed to third parties except where required by law or where necessary to deal with your request.

The recipients to whom your data may be disclosed include:

• Public authorities and bodies where required by tax, employment, Social Security or any other applicable legislation. Companies acting as data processors (fraud detection and prevention providers, technology services, customer support services, advertising and marketing services and, in general, third-party suppliers necessary for the provision of the services offered by CASAS HEDDY, S.A., such as courier and transport service providers, etc.)

6. ARE THERE INTERNATIONAL DATA TRANSFERS?

www.casasheddy.com is hosted in the Netherlands, a country within the European Union and the territory of the European Economic Area, or which complies with the guidelines laid down in Articles 46 and 47 of the GDPR; therefore, there will be no international transfers of the data provided by users on the website.

Our website only accesses users' data by the following means:

International data transfers may also occur in connection with the above disclosures/communications, for which CASAS HEDDY, S.A. will use the tools provided in Articles 46 and 49 of the GDPR as a safeguard for transfers made to countries that do not have an adequacy decision from the European Commission.

In any event, third parties with whom certain personal data is shared will have previously demonstrated the adoption of appropriate technical and organisational measures for its proper protection, and transfers will only be made to third countries where there is a legally binding instrument in accordance with Articles 46 et seq. of the GDPR. By accepting this privacy policy, you accept that an international data transfer may take place in accordance with the safeguards indicated.

If the requirements laid down in the GDPR are not met, the data subject may give their consent to the international transfer, or a contract may be performed in the data subject's interest. Otherwise, authorisation must be requested from the Supervisory Authority.

CASAS HEDDY, S.A. does not under any circumstances sell its users' data to third parties.

 7. RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

The user may exercise the following rights before CASAS HEDDY, S.A.:

1. Access their personal data

2. Rectify it when it is inaccurate or incomplete

3. Request the erasure or cancellation of the data when, among other reasons, it is no longer necessary for the purposes for which it was collected

4. Object to its processing

5. Request the restriction of the processing of their data where any of the conditions provided for in the legislation apply

6. Request the portability of their data in the cases provided for in the legislation

7. Prevent being subject to automated decision-making

8. Withdraw the consent given

To exercise their rights, the user must send a written request stating the right they wish to exercise, together with a document proving their identity and a postal or electronic address for notification purposes. This request may be made either by postal mail to: CASAS HEDDY, S.A. TRASPIES, 1 35510 - PUERTO DEL CARMEN, TIAS, LANZAROTE, or to the following e-mail address: recepcion@casasheddy.com.

CASAS HEDDY, S.A. must respond to a request to exercise rights within a period of one month from receipt of the request. That period may be extended by a further two months where necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month of receipt of the request, stating the reasons for the delay.

Data subjects also have the right to lodge a complaint with the competent Supervisory Authority (the Spanish Data Protection Agency) where they consider that CASAS HEDDY, S.A. has infringed the rights granted to them by data protection legislation, at www.aepd.es 

8. IS MY DATA SECURE?

CASAS HEDDY, S.A. has a current contract with the hosting company Framer BV (Amazon.com, Inc.) for the hosting of its website. It is a European company and has the latest security measures in place.

In any event, CASAS HEDDY, S.A. guarantees the adoption of the appropriate measures to ensure the confidential processing of your data, given its confidential nature, and undertakes to keep that data secret, processing it with the utmost discretion. It declares that it has implemented in its information system the security policies corresponding to the type of data handled, in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected by means of a secure protocol. Our website has an SSL certificate, which means that when a user visits our website and exchanges information with us, an encrypted connection is established.

9. LINKS TO OTHER WEBSITES

If you choose to leave our website via links to other websites not belonging to our entity, CASAS HEDDY, S.A. shall not be responsible for the privacy policies of those websites or for the cookies they may store on the user's computer.