Privacy Policy

DATA CONTROLLER

• • COMPANY NAME: Lardana Expeditions SL (hereinafter, the “COMPANY” or the “DATA CONTROLLER”).
  • TAX ID: B75980201.
  • ADDRESS: C/ El Mon, 6, – 22366 Serveto (Huesca) ESPAÑA.
  • PHONE: 613 546 925.
  • EMAIL for communications regarding Data Protection: info@lardanaexpeditions.com

APPLICABLE LEGISLATION

Our Privacy Policy has been designed in accordance with the European Union General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data, Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, and Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE).

Lardana Expeditions SL may modify this Privacy Policy to adapt it to legislative, jurisprudential, or interpretative changes by the Spanish Data Protection Agency. These privacy conditions may be complemented by the Legal Notice, Cookies Policy and, if applicable, the General Conditions established for certain products or services, when such access involves special provisions regarding the protection of personal data.

PURPOSES AND LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA

At Lardana Expeditions SL we collect and process your personal information generally to manage the relationship we have with you. The main purposes are as follows:

• • A. To respond to inquiries, requests for information, suggestions, professional contacts, process orders, appointments, reservations, demonstrations, requests, or any type of petition made by the data subject through any of the contact methods the Controller provides on this website or other means. – To manage our commercial relationship. – To send you communications related to products similar to those you have previously acquired, as well as news about our products or services that may be of interest to you. – To conduct market studies, statistical analyses, surveys, or satisfaction assessments. The legal basis is the legitimate interest of the Controller.

• • B. To send you news about our entity, promotions, advertising, newsletters, updates to our product and service catalog by any electronic or physical means, present or future, enabling such commercial communications. – To moderate and publish user experiences, opinions, comments, and suggestions on the website. To create and manage your user account to provide you with personalized access and manage the data you provide. The legal basis is the data subject’s consent.

• • C. To manage your online purchase or order, process payment, and proceed with its delivery under the general terms and conditions of contracting, as well as to manage, maintain, improve, or develop our contractual or pre-contractual relationship with our customers, users, suppliers, and other stakeholders. The legal basis is the execution of a contract or pre-contract to which the data subject is a party, as well as compliance with legal obligations applicable to the data controller.

• • D. For invoicing and accounting of the products or services provided. The legal basis is compliance with legal obligations.

• • E. To manage the data subject’s application in recruitment processes of the Controller aligned with their professional profile that may arise within the Controller’s activities. The legal basis is the express consent given by a positive and affirmative act at the time of providing the data.

• • F. Regarding the use of cookies for various purposes (technical, analytical, etc.) by this website, as specified in the cookies section that we invite you to consult. The legal basis will be the consent granted for cookies that require it.

DATA RETENTION PERIOD

The personal data processed for purposes (A) , (B) ,(C) and (D) will be kept no longer than necessary to fulfill the purpose of the processing or as long as legal retention periods require their custody. Once no longer necessary, they will be deleted using appropriate security measures to ensure data anonymization or total destruction.

Personal data obtained for purpose (E) will be retained for the time necessary to achieve the processing purpose or for a maximum of 12 months. After this period, the data will be blocked or destroyed.

Regarding the cookies used (F), please refer to the cookies cookies section of this website for specific retention information.

In any case, as a general rule, we will maintain your personal information as long as there is a commercial, pre-contractual, or contractual relationship binding us, to comply with legal obligations, or until you exercise your right to deletion and/or restriction of processing. In such cases, the information may be blocked and not used beyond its retention while it may be necessary for the exercise or defense of claims or to address any liability that may arise.

CATEGORIES OF DATA

We collect your personal information through different means, and in general, the personal information we process refers to the categories of identification, contact, and financial data, such as: full name, ID number (NIF), phone number, postal address, email address, contracted products or services, payment and billing data, as well as the IP address from which you access the data collection form.

The data processed within the framework of a contractual, pre-contractual, commercial, or business relationship may also include, in addition to the above: transaction data of goods and services, social circumstances, personal characteristics, commercial information, economic, financial, and insurance data, legal representative, bank details, manual or electronic signature, professional, academic data, or other categories necessary due to the nature of the products and services provided by the Data Controller.

Lardana Expeditions SL uses social networks as another way to reach you. Information collected through messages and communications you publish may contain personal information that is available online and accessible to the public. These social networks have their own privacy policies explaining how they use and share your information, so Lardana Expeditions SL recommends that you review them before using these platforms to confirm that you agree with how your information is collected, processed, and shared.

The data collected for purpose (E) will be professional and contact information: name, surname, phone number, email, CV, cover letter, and any other personal data associated with the resume or professional profile.

OBLIGATION TO PROVIDE DATA

The minimum data requested to admit communication from an interested party will be their first and last name, email address or, depending on the communication method used, postal address, username and/or phone number. Refusal by the interested party to provide this information may result in the rejection or return of the communication sent and/or the non-attendance or resolution of the request, suggestion, complaint, or any other petition made by the interested party.

As a general rule, the data provided upon request by the DATA CONTROLLER will be the minimum necessary for the intended purpose, so providing it is mandatory as it constitutes a contractual requirement for the provision of services or sale of products and/or a legal obligation. Refusal to provide the data marked as mandatory will make it impossible to properly provide the services or sell the products, so the order cannot be formalized or, if already formalized, may lead to termination of the corresponding service or sales contract due to a cause attributable to the interested party. If additional data not indispensable for providing the services are requested, the DATA CONTROLLER will indicate this circumstance at the time of the request.

USERS, by ticking the corresponding boxes and entering data in fields marked with an asterisk (*) in contact forms or forms for downloads or similar, expressly and freely consent that their data are necessary to process their request by the service provider, while inclusion of data in other fields is voluntary. The USER guarantees that the personal data provided to the DATA CONTROLLER is truthful and is responsible for communicating any modifications to it.

The data collected for the purpose of managing the interested party's application in the DATA CONTROLLER’s selection processes will be necessary for evaluating their professional profile. If the data are incomplete, the DATA CONTROLLER may exclude the candidate from current or future selection processes, making the provision of this data mandatory.

DATA SHARING

Generally, no data transfers or international data disclosures are planned, except those authorized by tax, commercial, and telecommunications legislation, as well as cases where a judicial authority, law enforcement agencies, or public administrations with relevant jurisdiction request it. Identification and financial data may be shared with banking entities or payment platform managers, as well as insurance companies, transport companies, lodging providers, professional guides, restaurants, or intermediaries, if necessary to achieve the purposes of data processing based on contracted services.

Interested parties are informed that for proper business management, sales, or service provision, Lardana Expeditions SL contracts external service providers such as specialized external advisors, auditors, legal advisors, hosting services, marketing, web development and email, IT support and maintenance companies, document management, security companies, or similar when necessary for the processing purposes or Lardana Expeditions SLoccasional or recurring needs. Contracts legally required are signed with these providers, guaranteeing their obligations as Data Processors.

If data are to be shared with third parties for any other purpose, the Data Controller will inform and obtain prior consent from the interested party.

Regarding the use of third-party cookies, these are described in the section dedicated to “cookies” information on this website.

USER RIGHTS

Every individual whose personal data is processed has the following rights:

• • Right of access: Allows the data subject to know whether their personal data is being processed, to obtain information regarding the characteristics and scope of the processing carried out, and to receive a copy of the processed data.

• • Right to rectification: Allows correcting errors and modifying data that is inaccurate or incomplete.

• • Right to erasure (right to be forgotten): Allows data to be deleted, among other cases, when it is inadequate or excessive for the purpose of processing, when consent has been withdrawn, or when there is unlawful processing, provided that none of the legal exceptions to the right of erasure apply.

• • Right to object: Allows the data subject, under certain circumstances and for reasons related to their particular situation, to prevent the processing of their personal data. This right includes the possibility to object at any time to the processing of their data for direct marketing purposes, including profiling.

• • Right to restriction of processing: Allows the data subject to request, in certain cases, the limitation of processing to the operations of data conservation and to processing consented by the data subject or necessary for the formulation, exercise, or defense of claims, protection of the interests of other individuals or legal entities, or in cases of certain public interest reasons.

• • Right to data portability: Allows the data subject to request that their data, processed automatically based on their consent, be delivered to them in a digital format or directly transmitted to another data controller.

• • Right not to be subject to automated individual decisions (including profiling): Allows the data subject not to be subject to decisions based solely on automated processing of their data that produce legal effects or similarly significantly affect them, unless such automated decisions are necessary for entering into or executing a contract between the data subject and the controller, are authorized by applicable law, or the data subject has given explicit consent.

• • Right to withdraw consent:The data subject may withdraw consent for the processing of their data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Furthermore, if you consider that your rights have not been fully respected, you may file a complaint with the national supervisory authority: Spanish Data Protection Agency, C/ Jorge Juan, 6 – 28001 Madrid. (www.aepd.es).

Please clearly indicate in the letter or email subject line the phrase: “EXERCISE OF PERSONAL DATA RIGHTS.”

The data controller provides standardized forms for exercising these rights, available upon request through any of the contact methods provided or by phone, specifying a postal address or email for sending the forms. Use of these forms is not mandatory.

Additionally, data subjects may voluntarily use the official forms published by the Spanish Data Protection Agency, downloadable at:

https://www.aepd.es/reglamento/derechos/index.html

Contact information to exercise your rights: Lardana Expeditions SL B75980201 | C/ El Mon, 6, – 22366 Serveto (Huesca) SPAIN | 613 546 925 | info@lardanaexpeditions.com |

HOW DO WE PROTECT YOUR INFORMATION?

At Lardana Expeditions SL we are committed to protecting your personal information. We use reasonably reliable and effective physical, organizational, and technological measures, controls, and procedures aimed at preserving the integrity and security of your data and ensuring your privacy. Furthermore, all personnel with access to personal data have been trained and are aware of their obligations regarding the processing of your personal data.

In contracts with our providers, we include clauses requiring them to maintain confidentiality of personal data accessed during their engagement and to implement the necessary technical and organizational security measures to guarantee the confidentiality, integrity, availability, and resilience of the personal data processing systems and services.

All these security measures are periodically reviewed to ensure their adequacy and effectiveness. However, absolute security cannot be guaranteed, and no security system is impenetrable. In the event that any information under our control is compromised due to a security breach, we will take appropriate measures to investigate the incident, notify the supervisory authority, and, if applicable, notify affected users so they can take suitable actions.

USER RESPONSIBILITY

By providing your data, the user guarantees they are over 14 years old and that the data provided to the controller is truthful, accurate, complete, and up to date. The user confirms the veracity of the data communicated and commits to keeping this information updated to reflect their actual situation. The user will be responsible for any false or inaccurate data provided, as well as for any direct or indirect damages that may arise.