Our Privacy Policy: Your Rights

Privacy notice
Your privacy is of the utmost importance to us and we want to make sure you fully understand the terms surrounding the capture and use of your information.

This webpage sets out when and how we use your Personal Data that you or others provide to us through this website (“Website”) or by contacting us by telephone, email or otherwise.

This Privacy Notice describes what information we collect about you directly or via third parties, how we use it, and the rights you have in relation to that collection and usage.

Whenever you provide Personal Data, we are legally obliged to use it in accordance with the laws concerning the protection of Personal Data.

Who we are
CIARASUN HOLIDAY RENTALS is a company registered in Spain, and with a registered address at Calle Ballester No4, La Marquesa Campo de Golf, Rojales, Alicante 03170.

For the purposes of the Data Protection Act 1998, the General Data Protection Regulations and any other applicable data protection and privacy laws and regulations (“Data Protection Legislation”), CiaraSun will be the ‘data controller’ for all Personal Data we determine the means and purpose of processing.

By “Personal Data” we refer to information collected or held by CiaraSun that identifies and relates to you as an individual.

Information we may collect
We may collect Personal Data about you in the following circumstances.

When you request our services as a potential property owner or for services within the holiday industry, we may retain information regarding the services you request and supplementary information you provide us about yourself, such as your email address, personal details, flight information where appropriate, and your telephone numbers (including mobile).

We may also collect technical information about you when you visit our Website.

This information may include the Internet protocol (IP) address used to connect your computer to the Internet, your browser type and version, time zone setting, operating system and platform, browser plug-in types and version, the full URL clickstream to, through and from the website, page response times, length of visits to certain pages, page interaction (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page.

The collected information is used for analytical purposes to provide an overview of how people are accessing and using our website. It is not used for any additional purpose, such as to profile those who access our website.

What do we do with the information we collect?
We will use your Personal Data for a number of purposes including record keeping, performing any other contractual duty we owe to you or you to us, to carry out any obligations owed to you through the use of our website, to give you information that you request from us and to improve our services, to notify you about changes to our services, to allow us to operate our website efficiently, to ensure that the content from our website is presented in the most effective manner for you and your device, any relevant troubleshooting, testing or statistical analysis as appropriate, and to keep our website secure.

Where we have your permission to do so, we may also use the information collected to provide you with information about our services that we offer via promotional communications, and to keep you up to date with features on the Website.

However, you can opt-out of any of these data uses at any time by emailing info@ciarasun.com. We will only keep your information for as long as is reasonably required or as stated in the contract you have with us.

If you fail to provide personal data
When we need to collect Personal Data by law, or under the terms of a contract we have with you, and if you fail to provide that data when requested, we may not be able to perform to the terms of the contract we have or are trying to enter into with you (for example, to provide you with our holiday property rental services). In this case, we may have to cancel a service you have with us but we will notify you if this is the case at the time.

Data retention
We will only retain your Personal Data for as long as is necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, taxation, accounting, or reporting requirements.

To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

We retain the details of those who have engaged with our services for as long as we are permitted under your consent until we receive a request for deletion. You may withdraw your permission for us to retain your information at any time by emailing info@ciarasun.com.

Legal basis of processing
We will only process your information for as long as we have a relevant legal basis to do so. This is usually in order to provide you with the contractual services you have requested from CiaraSun, unless you have provided us with adequate consent to process your information for other purposes.

If we choose to process your information under the legal basis of legitimate interests, we will always inform you of our legitimate business interest and your right to object.

We will only use your Personal Data for the purposes for which we collected it unless we reasonably consider that we need to use it for another reason, and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at info@ciarasun.com.

Protecting your information
We are committed to ensuring that your information is secure and we have put procedures in place to try to prevent any unauthorised access or information disclosure, and to keep secure the information that we collect both offline and online.

All the Personal Data collected by us and stored electronically is held on a secure server. Where required, this information is encrypted for additional security. We use computer safeguards such as firewalls and data encryption, we enforce physical access controls to our buildings and files, and we authorise access to Personal Data only for those persons who require it to fulfil their legal and contractual responsibilities.

However, you should be aware that providing information over the internet can never be guaranteed as being completely safe and if you choose to send such information to us via the internet, you do so at your own risk.

Transfer of data outside of the EU
We shall not transfer any Personal Data to any country outside of the European Economic Area unless we ensure that such Personal Data is subject to an adequate level of protection and appropriate legal safeguards in accordance with Data Protection Legislation.

Sharing your information with others
We will not share your information for any other reason unless we are required by law or permitted to do so under this Privacy Notice. The main circumstances in which we will be permitted or required to disclose this is by law will be by court order, to government bodies, and law enforcement agencies in the European Union.

Your right to object under data protection laws
You have the right to object to us handling your Personal Data when we are handling your Personal Data based on our legitimate interests. If you ask us to stop handling your Personal Data in this way, we will stop unless we can show you that we have compelling grounds as to why our use of your Personal Data should continue.

Our use of legitimate interests will always be balanced against your right to privacy under Data Protection Legislation and we will conduct a data protection impact assessment wherever necessary. If you ask us to stop handling your Personal Data on this basis we will stop.

Your rights under data protection laws
You can exercise the following rights to your data by contacting us by email. We will only take instructions from you or your legal representative and we will protect your privacy when you contact us by asking you specific and relevant questions to make sure we are speaking to you or your legal representative, and not to an unauthorised person.

Right of access
You are entitled to receive confirmation as to whether your Personal Data is being processed by us, as well as various other information relating to our use of your Personal Data. You also have the right to a copy of the Personal Data which we hold about you.

Right to rectification
You have the right to require us to rectify any inaccurate Personal Data we hold about you. You also have the right to have incomplete Personal Data we hold about you completed, by providing a supplementary statement to us.

Right to restriction
You can restrict our processing of your Personal Data where you think we hold inaccurate Personal Data about you, or where we no longer need to process your Personal Data, but you want us to keep it for legal reasons, or where we are handling your Personal Data because we have a legitimate interest (as described in the “How we use your Data” section above), and are in the process of objecting to this use of your Personal Data, or if you exercise your right to restrict us from using your Personal Data, we will then only process your Personal Data when you agree, except for storage purposes and to handle legal claims.

Right to data portability
You have the right to receive the Personal Data we hold about you in a structured, standard machine-readable format and to send this to another company controlling your Personal Data.

Right to erasure
You have the right to require us to permanently delete your Personal Data which we hold in the following circumstances: we no longer need to use your Personal Data for the reasons we told you we collected it for, or where we needed your consent to use your Personal Data and you have withdrawn your consent, or you object to our use of your Personal Data and we have no compelling reason to carry on handling your Personal Data, or in circumstances where we must erase your Personal Data to comply with the law.

Right to complain
You have the right to issue a complaint directly with the European Data Protection Supervisor, the data protection supervisory authority for the European Union.

Changes to this privacy notice
We may change this Privacy Notice at any time to ensure it always accurately reflects the way we collect, use, and safeguard your Personal Data.

Please check this notice from time to time to ensure you are aware of any updates we may have made to our Personal Data handling practices. The date of the changes will be listed in the “Last updated” section below. We will endeavour to notify all of our current clients of any updates to this notice via email and we will post the relevant announcement on our website homepage.

Our Website uses cookies to help us recognise different users of the Website and to provide users of the Website with a good experience when using it.

How can you make a complaint?
Please note that if you are not satisfied with the processing of your Personal Data as set out in this Privacy Notice, please contact us.

Contacting us
If you have any questions regarding this Privacy Notice please contact us at info@ciarasun.com.

Last Updated
GDPR Compliant Privacy Policy, Sunday 07th July 2019.