Data protection declaration

We take the protection and security of your personal data very seriously. We have therefore updated our privacy policy to meet the high requirements. Our updated privacy policy explains your rights under this new law. By continuing to use our site, you agree to these updated terms. We take technical and organizational security precautions to protect your personal data against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons and to ensure the protection of your rights and compliance with the applicable data protection regulations of the EU and the Federal Republic of Germany. 1. name and address of the controller Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is: Carlotta Heinzelmann
Ecovilla Spain
E – 29790 Benajarafe / Malaga
Spain Mobile: +0049 170 5824741 www.ecovillaspain.com E-mail: info@ecovillaspain.com 2. Collection and storage of personal data and the nature and purpose of their use a) When you visit the website When you visit our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted: – IP address of the requesting computer, – date and time of access, – name and URL of the file accessed, – website from which access is made (referrer URL), – browser used and, if applicable, the operating system of your computer and the name of your access provider. The aforementioned data is processed by us for the following purposes: – ensuring a smooth connection to the website, – ensuring convenient use of our website, – evaluating system security and stability and – for other administrative purposes. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person. b) When using our contact form For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid e-mail address so that we know who sent the request and can answer it. Further information can be provided voluntarily. In this case, the user’s personal data transmitted will be stored. The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily granted consent. Duration of storage of personal data The duration of storage of personal data is determined by the respective statutory retention period (e.g. retention periods under commercial and tax law). After expiry of the period, the corresponding data is routinely deleted, provided that it is no longer required for contract fulfillment or contract initiation and/or we have no legitimate interest in further storage. 3. transfer of data Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if: – you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, – the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data, – in the event that the disclosure in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, and – this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. 4. cookies We use cookies to operate the website. These are files that your browser stores on your end device when you visit our website. They are used to store data from your visit and to recognize you, as well as to statistically record, improve and guarantee the operation of our website. The legal basis for this is Section 6(1)(f) GDPR. Temporary cookies are deleted after you leave the website. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website. 5. analysis tools On our website, we use the website analysis service for websites from Google Analytics, a web analysis service from Google Inc (HTTPS://WWW.GOOGLE.DE/INTL/DE/ABOUT/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). In this context, pseudonymized user profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website, such as – browser type/version, – operating system used, – referrer URL (the previously visited page), – host name of the accessing computer (IP address), – time of the server request, is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking). You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (HTTPS://TOOLS.GOOGLE.COM/DLPAGE/GAOPTOUT?HL=EN). Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (HTTPS://SUPPORT.GOOGLE.COM/ANALYTICS/ANSWER/6004245?HL=EN) When using the Google Adwords Conversion Tracking service, a cookie is placed on your device if you have reached this page via an advertisement on Google. This is used to analyze and statistically evaluate the use of the website. The cookie is valid for 30 days. The person is not identified, but it is used to monitor whether the user has reached the site via a Google ad. You can prevent this use by rejecting the setting of corresponding cookies in your browser settings. 6. rights of data subjects You have the right: – to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details; – in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us; – in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; – in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR to object to the processing; – in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller; – in accordance with Art. 7 para. 3 GDPR, to withdraw your consent to us at any time. This means that we may no longer continue the data processing based on this consent in the future and – to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose – in accordance with Art. 21 GDPR, to object to the processing of your personal data if there are reasons for doing so that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. You have the option of informing us informally of your objection by telephone, e-mail, fax or to our postal address listed at the beginning of this privacy policy. 7. data security To ensure data security, the transmission of the contents of our website is encrypted using the SSL procedure in accordance with the state of the art. To secure the data, we and the commissioned service providers with whom corresponding contractual agreements have been made use suitable state-of-the-art measures, in particular to restrict access to the data, to protect it against changes and loss, and to ensure confidentiality in accordance with the state of the art. 8. status and updating of this data protection declaration This data protection declaration is dated 31.08.2023. We reserve the right to update the data protection declaration in due course in order to improve and/or adapt data protection.