1. User Information

Tío Bicicleta S.L. is responsible for the processing of the User’s personal data and informs you that this data will be processed in accordance with the provisions of Regulation (EU) 2016/679 of April 27, 2016 (GDPR), regarding the protection of individuals with respect to the processing of personal data and the free movement of such data, for which the following processing information is provided:

• Purpose of processing: to maintain a commercial relationship with the user in relation to the products or services offered. Additionally, the operations planned for carrying out the processing include:

• Responding to inquiries and suggestions that users may submit.
• Process orders, requests, or any type of petition made by the user through any of the contact methods available to them.
• Manage your requests and/or reservations and their payments.
• Sending advertising communications via email, mobile apps, social networks, or any other electronic or physical medium, either current or future, that enables commercial communications. These communications will be carried out by the responsible party and will relate to their products and services, or those of their partners or suppliers with whom they have reached a promotional agreement.
• If you submit or leave a resume, it may be used in the staff selection processes. Resumes will be kept for a maximum period of one year, after which they will be deleted, ensuring total confidentiality both in the processing and subsequent destruction. In this regard, after the mentioned period has passed, and if you wish to continue participating in the selection processes, please send us your resume again.
• Data Retention Criteria: Data will be retained as long as there is a mutual interest to maintain the purpose of the processing. When it is no longer necessary for this purpose, it will be deleted using adequate security measures to ensure the pseudonymization of the data.
• Data Disclosure: Access to the data will be granted to web developers and the company that hosts our servers. All of them have regulated access to this data with us for the sole purpose described here. The data will not be provided to any other third party for processing, except under legal obligations.

• Legitimation: It is based on the consent requested through the corresponding acceptance checkbox.
• Rights of the User:
• Right to withdraw consent at any time. Right to object and to the portability of personal data. This is established as the right of the data subject to receive all personal data concerning him or her that he or she has provided to a controller, provided that the processing is based on consent or is necessary for the performance of a contract and is carried out by automated means.

• Right to withdraw consent at any time. Right to object and to the portability of personal data. This is established as the right of the data subject to receive all personal data concerning him or her that he or she has provided to a controller, provided that the processing is based on consent or is necessary for the performance of a contract and is carried out by automated means.
• Right to rectification and erasure: The data controller must enforce the right to rectification or erasure of the data subject within ten days. Personal data that is processed non-compliantly with the law, and in particular, when such data is inaccurate or incomplete, must be rectified or erased as appropriate. The data subject shall have the right to have inaccurate personal data rectified without undue delay. The data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
• Right to restriction of processing: The data subject shall have the right to obtain from the data controller the restriction of processing of their data. When the processing of personal data has been restricted, such data shall only be processed for storage purposes, with the consent of the data subject, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest. Any data subject who has obtained a restriction on processing shall be informed by the controller before the lifting of such restriction.
• Right to object: The data subject shall have the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, which is based on public interest or legitimate interest, including profiling based on these provisions. The controller must cease processing the personal data unless they demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
• Right to lodge a complaint with a supervisory authority: If you are not satisfied with the exercise of your rights, you have the right to lodge a complaint with the relevant supervisory authority, in this case, the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at http://www.agpd.es.
• Contact information to exercise your rights:

• Postal Address: C/ Las Escuelas 2. Bajo. 42300 El Burgo de Osma (Soria)
• E-mail:  recepcion@hospederiamonasteriodelavid.org

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USE

Users, by checking the corresponding boxes and entering data in the fields of the contact form or presented in download forms, expressly, freely, and unequivocally accept that their data are necessary to address their request by the provider, while the inclusion of data in the remaining fields is voluntary.

The User guarantees that the personal data provided to the responsible party are truthful and is responsible for communicating any changes to them

 The responsible party expressly informs and guarantees users that their personal data will not be transferred to third parties under any circumstances, and that whenever any type of transfer of personal data is made, the express, informed, and unequivocal consent of the Users will be requested beforehand.

All data requested through the website are mandatory, as they are necessary for providing optimal service to the User.

If not all data are provided, it is not guaranteed that the information and services provided will be completely tailored to your needs.