WEBSITE PRIVACY POLICY

https://yourspot.es/

I. PRIVACY AND DATA PROTECTION POLICY

Respecting the provisions of the applicable legislation, YourSpot (hereinafter, also the Website) undertakes to adopt the necessary technical and organizational measures, according to the appropriate security level for the risk of the data collected.

Laws incorporated in this privacy policy

This privacy policy is adapted to current Spanish and European regulations on the protection of personal data online. Specifically, it complies with the following laws:
  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
  • Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
  • Royal Decree 1720/2007 of December 21 approving the Regulation implementing Organic Law 15/1999 of December 13 on the Protection of Personal Data (RDLOPD).
  • Law 34/2002 of July 11 on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the data controller

The controller of the personal data collected on YourSpot is: 700 MILES S.L., with Tax ID: B66763780 (hereinafter, Data Controller). Contact details:

The controller of the personal data collected on YourSpot is: , with Tax ID: registered in: , whose representative is: (hereinafter, Data Controller). Contact details:

Address: Balmes 188, 6º1ª, 08006 Barcelona Contact telephone: 619632812

Fax:

Contact email: hello@yourspot.es

Registration of Personal Data

In compliance with the GDPR and LOPD-GDD, we inform you that the personal data collected by YourSpot through the forms on its pages will be incorporated and processed in our system for the purpose of facilitating, streamlining, and fulfilling the commitments established between YourSpot and the User or maintaining the relationship established in the forms they complete, or to respond to a request or inquiry. Furthermore, in accordance with GDPR and LOPD-GDD, unless exempted under Article 30.5 of GDPR, a record of processing activities is maintained.

Principles applicable to personal data processing

The processing of the User’s personal data will be subject to the following principles, established in Article 5 of the GDPR and Article 4 and subsequent articles of Organic Law 3/2018:
  • Principle of lawfulness, fairness, and transparency: User consent will always be required, with fully transparent information regarding the purposes of data collection.
  • Principle of purpose limitation: Data will be collected for specific, explicit, and legitimate purposes.
  • Principle of data minimization: Only the data strictly necessary for processing purposes will be collected.
  • Principle of accuracy: Personal data must be accurate and kept up to date.
  • Principle of storage limitation: Data will be maintained only for the necessary time for processing purposes.
  • Principle of integrity and confidentiality: Data will be processed in a way that ensures its security and confidentiality.
  • Principle of accountability: The Data Controller is responsible for ensuring compliance with these principles.

Categories of personal data

The categories of data processed on YourSpot are solely identifying data. No special categories of personal data are processed within the meaning of Article 9 GDPR.

Legal basis for processing personal data

The legal basis for processing personal data is consent. YourSpot undertakes to obtain explicit and verifiable consent from the User for one or more specific purposes. The User may withdraw consent at any time, and withdrawal will be as easy as giving consent. As a general rule, withdrawal will not condition the use of the website. When the User needs to provide personal data via forms to make inquiries, request information, or for matters related to website content, they will be informed if any fields are mandatory.

Purposes of personal data processing

Personal data is collected and managed by YourSpot to facilitate, streamline, and fulfill commitments between the Website and the User, maintain relationships established through forms, or respond to inquiries or requests. Data may also be used for commercial, personalization, operational, and statistical purposes, as well as for marketing studies to adapt content and improve the Website.

Personal data retention periods

Personal data will be retained only for the minimum time required for processing or until the User requests deletion. When data is obtained, the User will be informed about the retention period or the criteria used to determine it.

Recipients of personal data

The User’s personal data will not be shared with third parties.

In any case, when personal data is collected, the User will be informed about the recipients or categories of recipients.

Personal data of minors

Only individuals over the age of 14 may give valid consent. For minors under 14, parental or guardian consent is required.

Confidentiality and security of personal data

YourSpot commits to implementing the technical and organizational measures necessary to ensure data security and prevent destruction, loss, alteration, or unauthorized access.

The website has an SSL certificate ensuring encrypted transmission of data between server and User.

In the event of a security breach posing a high risk to personal rights, the User will be notified without undue delay.

Rights of the User

The User may exercise the following rights under GDPR and Organic Law 3/2018:
  • Right of access: Obtain confirmation of whether YourSpot processes personal data and access that data.
  • Right to rectification: Request correction of inaccurate or incomplete personal data.
  • Right to erasure (“right to be forgotten”): Request deletion of data when legally permissible.
  • Right to restriction of processing: Limit data processing under certain circumstances.
  • Right to data portability: Receive data in a structured, commonly used format and transmit it to another controller.
  • Right to object: Object to data processing.
  • Right not to be subject to automated decision-making, including profiling.
Requests must include:
  • Name, surname(s), and copy of ID (or other legally valid proof of identity).
  • Specific reasons for the request.
  • Address for notifications.
  • Date and signature.
  • Supporting documents if applicable.
Requests may be sent to: Postal address: Balmes 188, 6º1ª, 08006 Barcelona Email: hello@yourspot.es

Links to third-party websites

The Website may include links to third-party websites not operated by YourSpot. These sites have their own privacy policies, and they are responsible for their data processing.

Complaints before the supervisory authority

Users may lodge a complaint with a supervisory authority, particularly in their habitual residence, workplace, or place of alleged infringement. In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD).

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY

The User must have read and agree with this Privacy Policy to allow the Data Controller to process their personal data as described. Website use implies acceptance of the Privacy Policy. YourSpot reserves the right to modify this Privacy Policy due to legislative, jurisprudential, or internal criteria changes. Users are encouraged to review this page periodically. This Privacy Policy was updated to comply with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on Personal Data Protection and Digital Rights.