Florium Sotogrande, S.L. (“Florium”, “we”) respects your privacy. This policy explains how we process the personal data we receive through floriumsotogrande.com (the “Website”) and in our communications with enquirers and clients. It follows Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

Florium Sotogrande, S.L.
Tax ID (CIF): B27619014
Registered office: Av. Los Canos, 34-36, 11311 Pueblo Nuevo de Guadiaro, San Roque (Cádiz), Spain
Email: info@floriumsotogrande.com
Telephone: +34 956 79 69 50

For any question about how we handle your data, write to info@floriumsotogrande.com.

2. The data we collect

• Data you give us. When you send an enquiry through the form, or write to us or call us, we collect your name, your email address and, if you provide them, your telephone number, the type of enquiry and the content of your message. Please do not include sensitive information that we do not need to answer you.
• Data generated by your visit. Our hosting provider records technical data, such as your IP address, browser and the pages requested, to keep the Website secure. The cookies used on the Website are described in our Cookie policy.
• If you become a client. The data needed to provide and invoice the service, such as billing details and the address of the property or venue where we deliver.

3. Why we use your data and on what legal basis

• To answer your enquiry and, if you ask us, to prepare a proposal. Legal basis: your consent, given when you send the form, and the steps you request before entering into a contract (Article 6(1)(a) and (b) GDPR).
• To provide the services you commission and to manage invoicing. Legal basis: the performance of the contract and our tax and accounting obligations (Article 6(1)(b) and (c) GDPR).
• To keep the Website secure and working properly. Legal basis: our legitimate interest in protecting the Website and its users (Article 6(1)(f) GDPR).

We do not make automated decisions or build profiles with your data.

4. How long we keep your data

• Enquiries: for as long as we need to answer you and follow up on our proposal, and for no longer than one year if the enquiry does not lead to a contract.
• Clients: for as long as the business relationship lasts and, afterwards, for the periods required by commercial and tax law.
• Security records: for the limited period needed to detect and resolve incidents.

When these periods end, we delete your data or anonymise it.

5. Who receives your data

We do not sell your data or share it with third parties for their own purposes. Some providers that help us run the Website and our business, such as hosting, email and accounting services, may access it on our behalf. They do so under a data processing agreement and only to provide their service to us.

We will also disclose data when the law requires it, for example to the tax authorities, courts or other public bodies.

6. International transfers

Some of these providers may be located outside the European Economic Area. In that case, we only work with providers that offer adequate safeguards, such as a European Commission adequacy decision (including the EU–US Data Privacy Framework) or the standard contractual clauses approved by the Commission.

7. Your rights

You can ask us at any time to:

• access the personal data we hold about you;
• correct inaccurate data or complete incomplete data;
• erase your data when it is no longer needed or you withdraw your consent;
• object to the processing of your data or ask us to restrict it;
• receive your data in a structured, commonly used format, or have it sent to another controller (portability);
• withdraw your consent, without affecting the lawfulness of the processing carried out before.

To exercise these rights, write to info@floriumsotogrande.com or to our registered office, stating which right you wish to exercise. We may ask for information to confirm your identity, and we will reply within one month.

If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es.

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. The Website uses an encrypted connection (HTTPS).

9. Minors

The Website is not intended for children under 14, and we do not knowingly collect their data. If you are under 14, please do not send us your data without the consent of your parents or guardians.

10. Changes to this policy

We may update this policy to reflect changes in the law or in the way we work. The date at the top of the page shows the current version. This policy is complemented by our Legal notice and Cookie policy.