1. Data Controller
The entity responsible for processing the personal data collected through this website is:
Mountain Suites and Chalets Group, SL (MSCG, SL)
Registered office: 51A Pleta Sant Pere del Tarter, El Tarter, AD100, Andorra
NRT: 710982-Z
Email address for data protection matters: book@fontdelferro.com
2. Applicable regulations
The processing of personal data will be carried out in accordance with the current regulations of the Principality of Andorra on the protection of personal data and, in particular, with Law 29/2021, of October 28, qualified on the protection of personal data, its implementing regulations and any applicable modifications.
3. Personal data that we may process
Depending on the user's relationship with Font del Ferro Apartments and the services used through the website, data such as the following may be processed:
- name and surname;
- contact information;
- data required to manage a reservation;
- information provided through contact forms;
- data provided for subscription to commercial communications;
- information provided in selection processes or applications;
- technical data derived from the use of the website where applicable.
Only the data necessary for each purpose will be requested.
4. Purposes of the processing
The personal data provided may be processed for the following purposes:
- Booking and stay management
- Manage availability requests, reservations, payments, modifications, cancellations and other procedures related to the stay.
- Inquiry support
- Respond to information requests made through forms, email, or other enabled contact channels.
- User and online service management
- Facilitate access to and operation of the areas or services available to users and clients.
- Sending commercial communications
- Once the user has given their consent, send information about offers, news, promotions and services related to Font del Ferro Apartments.
- Candidate management
- To process information provided by people interested in participating in selection processes or submitting a spontaneous application.
- Compliance with legal obligations
- To fulfil tax, administrative, accounting, security and other obligations required by current regulations.
5. Legal basis for the processing
The processing of data may be based, depending on the case, on:
- the execution of a contractual relationship or the application of pre-contractual measures requested by the user;
- compliance with legal obligations applicable to MSCG, SL;
- the consent given by the user, especially for certain commercial communications;
- the legitimate interest of the controller when applicable and the rights and freedoms of the data subject do not prevail.
When the processing is based on consent, the user may withdraw it at any time, without affecting the lawfulness of the processing carried out previously.
6. Data retention
Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected.
Subsequently, they may be duly blocked for the periods required by legal obligations or for the time necessary to address possible liabilities arising from the processing.
Data processed for commercial purposes will be kept until the user withdraws their consent or requests to stop receiving such communications.
7. Data recipients
Personal data may be disclosed when necessary to:
- suppliers that provide services necessary for the operation of the website or the management of reservations;
- technology and systems hosting providers;
- providers related to services contracted by the user;
- financial entities and payment service providers where applicable;
- public administrations, authorities and competent bodies when there is a legal obligation.
Suppliers acting on behalf of MSCG, SL must process the information in accordance with the instructions of the data controller and applicable regulations.
8. International data transfers
When any of the providers used involves the processing of data outside of Andorra, the guarantees required by the applicable regulations for international data transfers will be adopted.
Andorran legislation requires that international transfers have the corresponding appropriate safeguards.
9. Rights of interested parties
The user may exercise, where applicable, the following rights:
- access to your personal data;
- rectification of inaccurate or incomplete data;
- deletion of your data;
- opposition to certain treatments;
- limitation of treatment;
- portability of your data;
- withdrawal of consent when the treatment is based on it.
The APDA recognizes these rights within the current framework of Law 29/2021.
To exercise these rights, the data subject may contact: book@fontdelferro.com
The application must allow the data subject to be identified and specify the right they wish to exercise.
10. Complaints to the supervisory authority
If a user believes that the processing of their personal data does not comply with applicable regulations, they may file a complaint with the Andorran Data Protection Agency (APDA) . The APDA is the independent authority responsible for protecting and guaranteeing rights related to the processing of personal data in Andorra.
11. Data Security
MSCG, SL will implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure or accidental or unlawful destruction.
These measures will be reviewed and adapted taking into account the nature of the data processed, the existing risks and the evolution of technology.
12. Data provided by third parties
If the user provides personal data of other people, they declare that they have sufficient authorisation to do so and undertake to inform them about the processing of their data when necessary.
13. Minors
When the services involve the processing of data of minors, the guarantees and requirements established by current regulations will be applied and, when necessary, the intervention of their legal representatives will be requested.
14. Commercial communications
Commercial communications will only be sent when there is a legal basis for doing so and, where necessary, the user has previously given their consent.
The user may unsubscribe from these communications at any time using the mechanisms enabled in each communication or by requesting it through the contact channel indicated in this policy.
15. Cookies
This website may use cookies and similar technologies. Specific information about their operation, purposes, and configuration is available in the Cookie Policy.
16. Changes to the Privacy Policy
MSCG, SL may modify this Privacy Policy to adapt it to regulatory, technical or service-related changes.
It is recommended to check this page periodically for the current version.