Privacy Policy

ESBLAU CDQ S.L., with registered office at Calle Vigilant, 12, 17488 Cadaqués (Girona), with CIF B70879259, undertakes to protect the privacy of natural persons during browsing and use of the website https://esblaucdq.com.

This Privacy Policy describes how users’ personal data is collected, used, stored and protected in accordance with Regulation (EU) 2016/679 (GDPR), based on principles of lawfulness, transparency, minimization and security.

1. Data Controller

The data controller for personal data is ESBLAU CDQ S.L. You can contact them via email at hola@esblaucdq.com.

2. Categories of personal data processed

Browsing and usage data: IP addresses, history, browser language, access dates and times, interactions with the site.

Data provided voluntarily: name, surname, email address, telephone, address, and others provided in contact or reservation forms.

Business data: information for billing, payments, transaction history.

Profiling data: collected through cookies and tracking technologies to analyze preferences.

Location data: approximate location for statistical or service improvement purposes.

3. Purposes of the processing

The data can be used for:

  • Manage information requests and reservations.
  • To provide the services offered on the website.
  • Manage payments and billing.
  • Ensure security and prevent fraud.
  • Perform statistical analysis and optimize services.
  • Send commercial communications with consent.
  • Fulfill legal obligations.
  • To exercise or defend legal rights.

4. Legal basis

The treatment is based on:

  • Contract execution or pre-contractual measures.
  • Consent of the interested party.
  • Compliance with legal obligations.
  • Legitimate interest of the responsible party.

5. Treatment modality

The processing is carried out manually and automatically, with the necessary technical and organizational measures for the security and integrity of the data.

6. International Transfers

No data transfers outside the European Economic Area are foreseen. If necessary, appropriate legal safeguards will be applied.

7. Storage periods

  • Service provision data: up to 10 years.
  • Billing information: up to 10 years.
  • Commercial data: until withdrawal of consent.

8. Data recipients

The data may be communicated to:

  • Authorized personnel of the Responsible Party.
  • Providers acting as data processors (hosting, payments, support).
  • Public authorities when required by law.

9. Rights of the interested party

Users can exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability, as well as object to automated decisions.
Requests can be sent to hola@esblaucdq.com. They can also file a complaint with the Spanish Data Protection Agency.

10. Contact

For more information about this policy or data processing, please contact: hola@esblaucdq.com