Privacy Policy

This Privacy Policy regulates the use of the Internet portal service with https://www.villmor.com/ whose responsible party for identification purposes is:
  • Responsible party: Villemora, S.L.
  • NIF: B22182539
  • Address: Avda. De Francia nº10, Benasque, 22440, Huesca.
  • Telephone: 974551733
  • Mail: info@villmor.com
  • Data from the Mercantile Registry of Huesca, volume 286, folio 99, page HU-3.231.
The Controller guarantees compliance with current regulations on the protection of personal data, as reflected in Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons (RGPD) and in Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD). It also complies with Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE). Principles, which ones do we apply in data processing? In the processing of your personal data, the Controller will apply the following principles that comply with the requirements of the GDPR:
  • Principle of legality, loyalty and transparency: The Controller will always require consent for the processing of personal data, which may be for one or more specific purposes about which the Controller will inform the User in advance with absolute transparency.
  • Principle of data minimization: The Controller will request only the data strictly necessary for the purpose or purposes for which it is requested.
  • Principle of limitation of the conservation period: The Controller will keep the personal data collected for the time strictly necessary for the purpose or purposes of the processing.
  • Principle of integrity and confidentiality: The personal data collected will be processed in such a way that its security, confidentiality and integrity are guaranteed.
  • The Controller takes the necessary precautions to prevent unauthorized access or improper use of its users’ data by third parties.
Purpose, why do we process your data? The personal data and the purpose of processing by the Controller are different depending on the information capture system:
  • Contact forms: The Controller requests personal data which may include: name and surname, email address, telephone number and website address in order to respond to user queries.
  • Newsletter form: By registering, you authorize the Controller to send you commercial communications about products and services related to the activity of the website managed by the Controller.
  • Reservation form: To make a purchase, the Controller requests personal data which may include: name and surname, email address, telephone number, address, financial data in order to process your order.
  • Completing the registration form will be mandatory to access and enjoy certain services offered on the website. Failure to provide the requested personal data or failure to accept this data privacy policy means that it is impossible to register, subscribe or participate in any of the promotions in which personal data is requested.
Data source Where do we obtain your data from? The personal data collected comes directly from the information provided by the interested parties through the Controller’s website. To browse the website, it is not necessary for you to provide any personal data. The Controller obtains your data:
  • When you contact us through the contact forms, reservation form or send an email.
  • When you sign up for a subscription form or newsletter.
Legitimation, What is the legitimacy for the processing of your data? The legal basis for the processing of your data will be based on:
  • The consent of the interested party, for the processing of their data, in accordance with article 6. 1. a) of the European General Data Protection Regulation. In this case, the processing will be carried out to respond to the user who contacts the Controller via instant messaging systems, as well as through the forms on the Controller’s website, with the user enabling the box “I have read and accept the privacy policy”.
  • The necessary execution of a contract in which the interested party is a party or for the application at the request of the latter of pre-contractual measures, in accordance with article 6. 1. b) of the European General Data Protection Regulation.
Recipients To whom do we communicate your data? Personal data will not be transferred except in compliance with legally established obligations or to support the services linked to this processing. Conservation, How long do we keep your data? We will retain your personal data for at least 5 years if you are a client and for strict compliance with the legal obligations established in the regulations. If you are not a client, we will retain your data for the minimum time necessary to manage our relationship. Cookies policy For this website to function correctly, it needs to use cookies, which is information stored in your web browser. You can consult all the information regarding the cookie collection and processing policy on the Privacy Policy page. Rights, what are your rights when you provide us with your data? As a consequence of the processing of your personal data by the Controller, current legislation grants you a series of rights. Below, we offer a summary explanation of each right, to facilitate your exercise:
  • Right of access: you will have the right to know the personal data that we process about you and the purposes for which we process it.
  • Right to rectification: Your data will always be yours, and as such, you can ask us to rectify it at any time if the data in our records is incorrect.
  • Right to erasure: You may request, at any time, that your personal data be deleted from our files. However, and as we indicated in the data retention section above, please note that, in certain circumstances, compliance with current legislation may prevent the effective exercise of this right.
  • Right to object: You may object to the processing of your data in relation to any of the purposes for which we process your data, in accordance with the privacy policies applicable in each case.
  • Right to limitation of processing: You may request limitation of processing in the following cases:
    • If you consider that the data we hold about you is not correct or accurate;
    • If, in the event that you consider that we are not processing your data legitimately, but you prefer that we limit the processing of the same to its elimination;
    • If the data we hold is no longer necessary for the purposes for which we collect it, but you need us to keep it to make legal claims;
    • If, having exercised the right to object to any processing, you are awaiting a response from us.
  • Right to data portability: you will have the right, whenever technically possible and reasonable, to request that the personal data you have provided us directly be communicated to another data controller. If it is possible for us, we will provide your data directly to said other data controller, but if it is not possible, we will provide it to you in a standard format.
Whenever we process your data based on consent, you may revoke it at any time, without any consequences for you other than, depending on the right exercised, not being able to provide you with certain services. You may exercise your rights by contacting the Controller through any of the following means:
  1. By email to the corresponding Data Controller (referred to in the heading of the document).
  2. By post to the corresponding Data Controller (referred to in the heading of the document).
If you do not wish to exercise a specific right, but need to make a query or suggestion regarding the processing of your personal data, you may also contact the corresponding Data Controller (referred to in the heading of the document). Please note that you may always, in any case, file a claim with the Competent Authority in matters of data protection if you consider that we have not processed your data lawfully or that we have not attended to your requests or rights. In Spain, this Competent Authority is the Spanish Data Protection Agency. Minors’ consents, what happens if you are a minor? In the event that some of our services are specifically aimed at minors under fourteen years of age, we will request the consent of parents or guardians for the collection of personal data or, where appropriate, for the automated processing of data in accordance with article 7 of the LOPDGDD. Accuracy, truthfulness and security of data, How do we process your data? The User is solely responsible for the truthfulness and correctness of the data included, exonerating us from any liability in this regard. Users guarantee and respond, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information in the registration or subscription forms. We will not be responsible for the truthfulness of information that is not of our own creation and for which another source is indicated, and therefore we do not assume any liability for hypothetical damages that may arise from the use of said information. We also reserve the right to update, modify or delete the information contained on the website, and may even limit or deny access to said information. We will not be liable for any damage or harm that the User may suffer as a result of errors, defects or omissions in the information provided by the controller, provided that it comes from external sources. The data will be treated confidentially and subject to appropriate technical and organisational security measures to prevent its alteration, loss, processing or unauthorised access. You may file a claim with the Spanish Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights, at the postal and/or electronic address indicated on the website www.aepd.es.