privacy policy
Last update: november 24th, 2021.

1. Which company will process the personal data?
Identification of the Data Controller:

CASTILLO DE CUZCURRITA, S.L. (CASTILLO DE CUZCURRITA)
Paseo de la Castellana, 64
28046 Madrid
NIF B-81554669
Email: info@castillodecuzcurrita.com
Tel. +34 941 328 022 / Fax +34 941 301 620
Data Protection Delegate: privacidad@bergeycia.es.

2. Purpose of the processing
The data collected through the contact form are required to manage the User’s request.

Also, if users expressly request so, the data may be used to send commercial information about the products and services of CASTILLO DE CUZCURRITA, and for future promotions.

3. Data categories
The personal data that may be subject to processing are identification data, including name, surname and email address.

4. Data source
The data are those provided by Users through the different forms.

5. Legitimation
The data provided by Users in the Contact section are processed based on the consent given by the data subjects.

6. To which recipients will your data be disclosed?
The data will not be disclosed to third parties, except when legally mandatory. In any case, CASTILLO DE CUZCURRITA relies on the collaboration of third party service providers who have access to your personal data and who process the aforementioned data for and on behalf of CASTILLO DE CUZCURRITA as a result of their provision of services. Specifically, CASTILLO DE CUZCURRITA will contract the provision of services by third party suppliers who carry out their activity, by way of example and not limited to, in the following sectors: computer maintenance companies and technology services, transport companies, advertising agencies.

7. User Rights
Users may exercise the following rights at any time and free of charge:

i) Right of access to the data subject’s personal data: the data subject may obtain confirmation as to whether the company processes personal data concerning him or her.
ii) Right of rectification: the data subject has the right to request a rectification of inaccurate or incomplete data.
iii) Right of deletion: the data subject may request that his or her data no longer be processed without undue delay, inter alia, because the data is no longer required, consent has been withdrawn, etc.
iv) Right to restrict the processing of data: the data subject may request that his or her personal data stops being used for certain processing operations, as appropriate in each case, in which case we will only keep them for exercising or defending claims.
v) Right to the portability of the data: The data subject may receive his or her data in a structured, commonly used and machine-readable format; the data subject may also request that his or her data be transferred to another Data Controller, provided that this is technically possible.
vi) Right of opposition, the data subject may oppose to the processing, in which case the company shall stop processing his or her data, except for compelling mandatory reasons or to exercise or defend possible claims.

Users may exercise these rights by sending a duly signed written letter, together with a photocopy of their ID card to CASTILLO DE CUZCURRITA, S.L. – CASTILLO DE CUZCURRITA – Paseo de la Castellana, 64. 28046 Madrid or by email to info@castillodecuzcurrita.com indicating «Data Protection” as reference or subject. Users may also contact the Data Protection Officer through the email address privacidad@bergeycia.es.

8. How long will we keep Users’ data?
The data will be kept until the User’s request have been managed completely.

The data required for sending commercial information will be kept until Users exercise their rights.

9. Security measures
CASTILLO DE CUZCURRITA shall establish the technical and organisational measures required to guarantee the security that must be met for the automated processing of the data of the data subjects, the processing centres, premises, equipment, systems, programs and persons involved in the automated processing of personal data in the manner legally and regulatory provided.

10. Right to lodge a complaint with the Supervisory Authorities
Furthermore, data subjects may contact the Spanish Data Protection Agency in case of having any doubt concerning the exercise of their rights, to solve any incident in the processing of their data or to file a complaint. The Spanish Data Protection Agency is responsible for ensuring compliance with the legislation and monitoring its application.

Data subjects may complain to the Spanish Data Protection Agency, especially when they are not satisfied with the exercise of their rights, at Calle de Jorge Juan, 6, 28001 Madrid, https://www.aepd.es/es and through the contact telephone number: 912 66 35 17.