Privacy policy

1. Data controller

2. Purpose of processing

At Kalixto Le Roy we process the information provided by interested parties for the following purposes:

3. Legal basis

The legal basis for processing is the performance of a contract or the application of pre-contractual measures (your request for information or your booking) and, for analytics and advertising cookies, your consent.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal, via the “Cookie preferences” link in the footer of this site.

4. Data retention

Your data will be kept for as long as necessary to fulfil the purpose for which it was collected and to determine any liabilities arising from that purpose, in addition to the retention periods required by applicable law.

5. Recipients of the data

Your data will not be disclosed to third parties except where required by law or necessary to provide the service. Specifically, the following recipients or processors are involved:

6. International transfers

This website is hosted on servers located in the European Union. However, the Google services mentioned above may involve the processing of data in the United States. Such transfers are covered by the EU-US Data Privacy Framework, to which Google adheres, together with the additional safeguards provided for under European law.

These transfers only take place if you give your consent to analytics or advertising cookies.

7. Data security

We adopt reasonable technical and organisational measures, in line with industry good practice, to prevent the loss, misuse, unauthorised access, disclosure, alteration or destruction of your information.

8. Your rights

You have the right to obtain confirmation as to whether we are processing your personal data and, in particular, to:

To exercise these rights, please write to info@kalixtoleroy.com, providing proof of identity.

You also have the right to lodge a complaint with the competent supervisory authority — either in your country of residence or, for the controller, the Spanish Data Protection Agency (www.aepd.es).

← Home