Who is Responsible for Processing Your Data?

Company Name: Sociedad Regional Cántabra de Promoción Turística, S.A (CANTUR)
NIF (Tax Identification Number): A39008073
Address: Calle Albert Einstein, 4, 39011, Santander
Contact Email: lopd@cantur.com
Data Protection Officer Details): lopd@cantur.com

Your personal data will be processed to manage the services or products contracted, if applicable, as well as to send you personalized information about our offers, promotions, and services, provided that you unequivocally authorize us to do so, by checking the corresponding box or by other verifiable means that may be given in each case.

What is the legal basis or legitimacy for processing your personal data?

The legal basis for processing your data is the maintenance of the contractual or commercial relationship with CANTUR; the consent of the data subject in the case of sending commercial or advertising information; as well as the legitimate interest of CANTUR, in cases where it is necessary for the correct management of services or to offer information of interest to the data subject, provided that these interests are not overridden by the rights of the data subjects or interested parties.

Who Do We Share Your Data With?

We do not transfer your personal data to anyone. We will only disclose it when legally obligated to do so or when you have previously given us your express authorization.

In order to provide our services, we need to work with companies that process your data on our behalf (hosting providers, email providers, etc.), as part of the provision of a service we have contracted from them. With these companies, we sign the corresponding data processor agreements and require them to comply with personal data regulations.

How Long Will We Keep Your Data?

Regarding each type of data processing, we will store your data for the time necessary to ensure the provision of the service and to comply with our legal and contractual obligations.

Your personal data will be stored as long as you maintain a relationship with us; that is, until you request their cancellation and deletion. You can request the deletion of your data whenever you deem it appropriate. Once deleted, we will block your data and will only retain it if required by applicable regulations.

How Can You Exercise Your Rights Regarding Data Management?

You can exercise your rights of access, rectification, deletion (suppression), and opposition, as well as the rights to restriction of processing and data portability. To do so, simply contact us at any of the addresses provided at the beginning of this policy, or directly via email at lopd@cantur.com. Please ensure you attach a photocopy of your identification document and clearly state what action you are requesting from us.

The exercise of all these rights (access, rectification, deletion, opposition, limitation of processing, and portability) is completely free of charge. For greater transparency and to provide you with more information on these rights, here’s a brief overview:

Right of access, rectification, and deletion: You can consult your personal data by requesting a copy of it at any of the provided addresses; as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

Right to object: In certain circumstances, and for reasons related to your particular situation, you have the right to object to the processing of your data. If you exercise this right, CANTUR will stop processing your data unless there are compelling legitimate grounds for the processing, or for the establishment, exercise, or defense of legal claims.

Right to restriction of processing: In certain circumstances, you can request the restriction of processing. If you do this, CANTUR will only reserve and use your data in cases authorized by law. This means your data will be stored but not actively processed, except for specific, legally permitted purposes.

Right to data portability: This right allows you to ask CANTUR to directly transmit your data to other data controllers, or to receive your data in an electronic format so you can store it on your own devices, without needing to transmit it to other controllers. This applies when your data is collected in a structured format.

If you, as a data subject, believe that the data processing carried out by CANTUR does not comply with legal requirements, you can file a complaint with the Supervisory Authority (Agencia Española de Protección de Datos – AEPD).

What are the Requirements for Minors?

In the case of services offered by CANTUR that may be directed at minors, where personal data of the minor is collected through the website, CANTUR will always require that the minor be at least 16 years old, in accordance with the GDPR.

If the minor is under 16 years old, parental consent will be required for them to access services and for their personal data to be processed as outlined in this data protection policy.

How do we safeguard your data?

In fulfillment of our obligation to maintain the confidentiality of the personal data collected, as well as our duty to safeguard it, we commit to adopting the necessary security measures to prevent its modification, alteration, loss, unauthorized processing, or access, in accordance with the provisions of the GDPR (General Data Protection Regulation).

Legal Notice: WhatsApp

To improve communication between CANTUR and its customers, employees, and the general public, CANTUR is now offering a new communication channel: WhatsApp Business.

In accordance with Regulation (EU) 2016/679 of April 27 (GDPR) and Organic Law 3/2018 of December 5 (LOPDGDD), all users subscribed to its broadcast lists (who have given their consent by adding CANTUR’s corporate phone number to their contacts and sending the message “I want to receive notifications from Cabárceno Nature Park”), are provided with the following processing information:

DATA RETENTION CRITERIA: Your data will be kept for no longer than necessary to maintain communication. When it’s no longer needed for that purpose, it will be deleted using appropriate security measures to ensure either the pseudonymization of the data or its complete destruction.

DATA COMMUNICATION (Sharing): We won’t share your data with third parties, except when legally obligated to do so.

USER RIGHTS: You can withdraw this consent at any time by sending a message with the word “BAJA” (UNSUBSCRIBE). You can also exercise your rights of access, rectification, portability, deletion, limitation, and opposition as provided by the Regulation, by notifying the data controller with a message through the same medium you receive communications. In any case, if you believe that the data processing does not comply with current regulations, you can always file a complaint with the supervisory authority at www.aepd.es.
While you are part of the broadcast list, the history of conversations necessary for the described purpose may be saved. When a member is no longer part of the broadcast list, all their conversations must be immediately deleted, unless their retention is required by a legal obligation or for the user’s legitimate defense, in which case all information must be blocked and its processing limited as long as legal responsibilities could arise.