PRIVACY POLICY

1. Responsible for processing

The Data Controller corresponds to the owner of the website, whose full details are given in the legal notice.

2. Data processed, purposes and conservation period

2.1 Data processed: For the purposes of requesting information or contacting the Owner, subscribing to our bulletins or newsletters, or purchasing from our e-commerce shop, data must be provided by filling in the forms provided, which will indicate which of these are mandatory.

While browsing, data such as the IP address assigned by your provider or certain social profiles associated with the user may be provided.

2.2 Purposes: The purposes will be the following

1. Contact: The e-mail or telephone number provided for contact will be used for an effective response to the questions raised.
2. Bulletins or newsletters: The e-mail, which must be verified by the user, or other similar ones, such as the telephone, will be used to send the bulletins or newsletters, according to your interests.
3. Online shop: The data will be processed to register as a user of the shop and subsequent processing and management of purchases made. The e-mail address will be used to send offers and promotions for products similar to those that were the object of the purchase. The user may decide to save the means of payment used, in order to use it by default in future purchases in the shop.

2.3 Conservation.

The period of conservation will be the following

1. Contact: The data provided will be destroyed once the questions posed by the user have been answered.
2. Bulletins or newsletters: The data will be processed, from the moment the user gives his consent until the withdrawal of the same, which may be granted as many times as he wishes. In each communication, the user will find a free and accessible procedure to manage it.
3. Online shop: The data will be processed until the user cancels the contract. In that case, in compliance with Spanish accounting and tax regulations, the information must be stored for at least four years. The means of payment will be stored until the user changes it or until the expiry date foreseen for them, in case they correspond to credit or debit cards.

3. Exercise of rights

Any person has the right to obtain confirmation as to whether or not personal data concerning them is being processed. Data subjects have the right to access their personal data, as well as the right to request the rectification of inaccurate data or, where appropriate, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the limitation of the processing of their data or object to the processing thereof, in which case we will only keep them for the exercise or defence of claims.

To do so, users may contact us (i) by e-mail at rgpd@palaciodeoriente.net ; or (ii) by letter to Carretera de Vigo-Bayona 127. 36213 de Vigo. Pontevedra, Spain, including in both cases a photocopy of the national identity card or equivalent supporting documentation.

In the event that the user wishes to exercise the right of portability, this information will be provided to the new person in charge.

4. Legitimation of the processing

The legal basis for the processing of the data provided is the consent given by the user to the processing of his or her personal data for one or more specific purposes, as well as for the execution of a contract to which the user is a party, or for the application of pre-contractual measures. Consent may always be revoked and may be exercised at any time.

5. Addressees and assignments

The data will not be assigned or transferred internationally.