Additional information on data protection

You will find information about what is and is not done with your personal data on this website here.

This policy sets out how the personal information of all persons who interact with Spirit of Grand Route through this website will be treated and protected. Please read all sections of the Legal Notice, the Cookie Policy, and this Privacy Policy before using this website.

In accordance with the provisions of EU Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and Organic Law 3/2018 of December 5, on the Protection of Personal Data and the Guarantee of Digital Rights, Spirit of Grand Route informs you that, by accepting this Privacy Policy, you give your express, informed, free, and unequivocal consent for the data you provide, to be processed by Spirit of Grand Route, as the data controller, and to which the technical and organizational security measures provided for in current regulations are applied.

Who is responsible for this website?

• Trade name: Spirit Of Grand Route
• Website manager: Spirit Of Grand Route
• Email: info[@]spiritofgrandroute.com

What personal data is collected on this website?

For the purposes set forth in this Privacy Policy, Spirit Of Grand Route collects and processes the Personal Data detailed below, which will depend on the different products or services you request on this Website:

• Identification data: Name.
• Contact information: Email, mobile phone number.
• Browsing data: IP address, device type and ID, browser type, domain through which you access the Website, browsing data, activity on the Website Website.

On what legal basis are these data processed?

We process your personal data on the following legal bases:

• The execution of a contract with Spirit of Grand Route, for the contracting of services, publishing advertisements, and managing the requested services.
• The user’s consent regarding contact, subscription to content, and the sending of commercial communications via email, cookies, or messaging systems.
• The legitimate interest of the data controller to protect users of the Spirit of Grand Route website from abuse and fraud in the use of our services.

For what purposes will we process your data?

On this website, there are different forms. In each of them, the information collected will be used as follows:

• Contact form: There is also a contact form for Questions, suggestions, or professional contact. In this case, the email address or phone number will be used to respond to them and send the information the user requests through the website.
• Comment form: The personal data entered in the form to insert these comments will be used exclusively to moderate and publish them.

Personal data retention period

The retention period for personal data will vary depending on the service contracted by the Client. In any case, it will be the minimum necessary, and may be kept for up to:

• 4 years: Law on Infractions and Sanctions in the Social Order (obligations regarding affiliation, registration, deregistration, contributions, payment of salaries, etc.); Arts. 66 et seq. General Tax Law (accounting books, etc.).
• 5 years: Art. 1964 of the Civil Code (personal actions without a special period).
• 6 years: Art. 30 of the Commercial Code (accounting books, invoices, etc.).
• 10 years: Art. 25 of the Law on the Prevention of Money Laundering and Terrorism Financing.

Data of potential clients: Data will be retained in all cases for the duration of the established business relationship and, once it has concluded, for two years, unless the user requests its deletion earlier.

What are your rights regarding the use of your data?

Anyone has the right to obtain confirmation as to whether or not Spirit of Grand Route is processing personal data that concerns them.

Interested parties have the right to:

• Request access to personal data relating to the data subject.
• Request its rectification or deletion.
• Request its cancellation.
• Request restriction of its processing.
• Object to its processing.
• Request data portability. Data security.

If you have given your consent for a specific purpose, you have the right to withdraw the consent given at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

If you feel your rights regarding the protection of your personal data have been violated, especially if you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority through its website: https://www.aepd.es/es

To exercise these rights, you can write to info[@]spiritofgrandroute.com

There is a form for exercising your rights; you can request it by email, or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.

These forms must be signed electronically or accompanied by a photocopy of your ID.

If someone represents you, they must attach a copy of their ID, or they must be signed electronically.

The forms can be submitted in person, sent by letter, or by email to the address listed at the beginning of this text.

Google Ads Remarketing Actions

Ads is a Google platform for advertisers who want to advertise on Google. spiritofgrandroute.com uses Google Ads, the Google advertising platform that allows you to create campaigns and ads to display on other websites. When creating an ad, you can segment your audience by:

• Location
• Demographics (age, gender, etc.)
• Interests (activities, hobbies, etc.)
• What they buy online and through other channels
• Etc.

Data obtained through Google Ads is subject to this privacy policy from the moment the user enters their details in the form on this website to subscribe to the newsletter subscription. Under no circumstances will information from Google be used for any other purpose.

Notification and Declaration of Breach

At Spirit of Grand Route, we take security measures appropriate to the level of risk to protect personal information against loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in processing and the nature of the personal information; However, if Spirit Of Grand Route determines that your service data has been misappropriated (including by a Spirit Of Grand Route employee), exposed through a security breach, or improperly acquired by a third party, Spirit Of Grand Route will immediately inform you of such breach, misappropriation, or acquisition.

To which recipients will your data be disclosed?

Many tools used on this website to manage data are contracted by third parties. To provide services strictly necessary for the development of its activities, Spirit Of Grand Route shares data with the following providers under their corresponding privacy conditions:

Third-party service providers (for example, payment processing, order processing, analytics, marketing campaign management, website management, and email distribution, and other similar service providers) so that they can perform business functions on behalf of Spirit Of Grand Route.

This website may be accessed occasionally by the web development and maintenance company, or the hosting company. They have signed a service provision agreement. of services that requires them to maintain the same level of privacy that applies to the processing carried out on this website.

Any international data transfer resulting from the use of tools or service providers will adhere to the Privacy Shield Framework, which guarantees that American software companies comply with European data protection policies regarding privacy, confidentiality, and data security.

Segmentation and Profiling

The recording of personal data provided at the time of contact, interaction with the website, and any other data provided during browsing, including information provided by cookies regarding browsing habits, will be used to segment or categorize the data for the purpose of applying it to the activity related to (general administration, information management, marketing of advertising space, analysis of proposals requested by users/customers, statistical study of the services and content used, tastes and preferences, and surveys or forms).

Profiling, through the analysis of your automated individual decisions, consists of using your Personal Data to evaluate certain personal aspects, such as the analysis and prediction of your financial situation, personal preferences, interests, behavior, location, movements, and attitudes. The logic applied to obtain these profiles is the use of statistical procedures, and the consequences of this processing of your data through profiling are the sending of personalized communications of interest to you with content related to the website’s theme.

The legal basis for processing your data for the purposes indicated and for the creation of automated individual decisions through profiling is the consent granted by checking the box indicated above.

The data we use in profiling and that we display to advertisers is not data that allows us to identify users; it only shows in a graph the type of audience we have, their age, country, gender, etc.

Data Confidentiality and Security

spiritofgrandroute.com is committed to using and processing the user’s personal data, respecting its confidentiality, in accordance with its purpose. It also fulfills its obligation to store it and adopt all measures to prevent unauthorized alteration, loss, processing, or access, in accordance with current data protection regulations.

This website includes an SSL certificate. This is a security protocol that ensures your data travels securely and in full. This means that the transmission of data between a server and the web user is fully encrypted.

spiritofgrandroute.com cannot guarantee the absolute invulnerability of the Internet, nor, therefore, the violation of data through fraudulent access by third parties.

Regarding the confidentiality of processing, Spirit Of Grand Route will ensure that any person authorized by Spirit Of Grand Route to process the Client’s data (including its staff, collaborators, and service providers) is under an appropriate obligation of confidentiality (whether a contractual or legal duty).

When a security incident occurs, upon becoming aware of it, Spirit Of Grand Route must notify the Client without undue delay and must provide timely information related to the Security Incident as it becomes known, or when the Client reasonably requests it.

Accuracy and truthfulness of data

As a user, you are solely responsible for the truthfulness and correctness of the data you submit to spiritofgrandroute.com, exonerating Spirit Of Grand Route from any liability in this regard. Users guarantee and are responsible, in all cases, for the accuracy, validity, and authenticity of the personal data provided, and undertake to keep it duly updated. The user agrees to provide complete and correct information on the contact or subscription form.

Revocability

Consent given, both for the processing and transfer of data subjects’ data, may be revoked at any time by notifying Spirit of Grand Route in the terms established in this Policy for the exercise of ARCO rights. This revocation will under no circumstances be retroactive.

Changes to the Privacy Policy

Spirit of Grand Route reserves the right to modify this policy to adapt it to new legislation or jurisprudence, as well as industry practices. In such cases, the changes will be announced on this page with reasonable notice before their implementation.