Grupo La Costa, located at Carril del Siroco 8, Local 1-2, and with NIF/CIF [insert NIF/CIF number], is the owner of the domain www.grupo-costadelsol.com, where its WEBSITE is hosted.

Grupo La Costa IS COMMITTED TO PROTECTING THE PRIVACY AND PERSONAL DATA OF ITS CLIENTS AND WEBSITE USERS, AND HAS DEVELOPED AND ADOPTED THIS POLICY AND THE PRACTICES DESCRIBED HERE.

THIS PRIVACY POLICY EXPLAINS HOW YOUR PERSONAL DATA IS COLLECTED AND PROCESSED, SO WE RECOMMEND THAT YOU READ IT TO UNDERSTAND THE CONDITIONS UNDER WHICH YOUR PERSONAL DATA IS COLLECTED AND USED.

Our privacy policy complies with Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights, and under the General Data Protection Regulation of the European Union, 2016/679, of April 27 ("GDPR"). Data protection legislation is subject to revision, so we recommend that users regularly check our privacy statement.

1. WHAT IS THIS POLICY ABOUT?

1.1. This Privacy Policy explains how we collect and process personal data that is necessary for the provision of services available through the WEBSITE.

1.2. Examples of such services include subscribing to newsletters or the possibility of contacting us and sending us your request.

1.3. The aim is to provide these services quickly and smoothly, describing the practices adopted for this purpose.

2. WHAT IS PERSONAL DATA?

2.1. Personal data is any information related to a person that identifies or makes them identifiable, regardless of the nature and medium of the information, including the sound and image of the person.

2.2. Examples of personal data we collect include name, surname, email, and phone or mobile number.

2.3. An identifiable person is understood to be someone who can be identified, directly or indirectly, particularly by an identification number or other specific elements of their physical, physiological, mental, economic, cultural, or social identity.

3. HOW WILL WE USE YOUR PERSONAL DATA?

3.1. Grupo La Costa will use the personal data you provide to us for the following purposes:

(a) Analyze and respond to your messages, customer service inquiries, and information requests.

(b) Analizar y dar seguimiento a su solicitud de empleo con Grupo La Costa.

(c) Send you newsletters or other publications you have requested or that may be of interest to you.

(d) Perform management operations of the WEBSITE.

(e) Maintain a record of your contact details.

(f) For business purposes, such as data analysis and audits.

(g) Prevent fraud and ensure the security of information systems.

(h) Adapt, improve, and modify services, particularly by identifying usage trends or determining the effectiveness of promotional campaigns.

3.2. These personal data processing operations are an essential tool for your satisfaction and for the activity of Grupo La Costa, and they are carried out in accordance with applicable legislation and best practices.

3.3. Your personal data will not be used for purposes other than those previously identified or unrelated to the purposes for which they were initially collected.

4. WHAT ARE THE LEGAL GROUNDS FOR PROCESSING THE PERSONAL DATA WE COLLECT?

4.1. The personal data processed by Grupo La Costa has specific legal grounds based on the purposes for which they are intended.

4.2. In the following table, you can see the legal grounds based on the previously identified purposes:

5. HOW DO WE COLLECT YOUR PERSONAL DATA?

5.1. We will collect your personal data through the forms present on the WEBSITE, as well as through the WEBSITE and the communication it establishes with your device, and the emails you send us.

5.2. Your personal data is collected through your device in the following ways:

(a) By your contact request;

(b) By submitting a job application;

(c) By subscribing to the newsletter;

(d) Through your browser;

(e) Through cookies;

(f) IP address.

5.3. Grupo La Costa is committed to treating your data in accordance with the law and in a legitimate manner.

5.4. Grupo La Costa will not sell, rent, or share your personal data with third parties, except in cases clearly identified in this Privacy Policy (see Point 9 for more information on this).

5.5. Grupo La Costa services are not directed at minors, and personal data from minors is not intentionally collected.

6. WHAT ARE COOKIES?

6.1. Cookies are small information files that help identify your browser and can store information, such as user settings and preferences.

6.2. Grupo La Costa almacenará cookies en su dispositivo para personalizar y facilitar la navegación al máximo, así como para solucionar problemas, realizar estadísticas, garantizar la calidad y monitorear la seguridad del sistema.

6.3. Except for strictly necessary cookies for the operation of the website, the storage of other cookies will always depend on the user's acceptance and consent, and this consent can be withdrawn at any time through specific browser tools.

6.4. For more information about the cookies we use, please refer to our Cookie Policy.

7. HOW DO WE PROTECT YOUR PERSONAL DATA?

7.1. Your personal data is kept secure through the adoption of various security measures, both technical and organizational, ensuring that only employees who need access to the data have access to it, following the established rules for this purpose.

7.2. To protect your personal data, we only rely on data center providers that offer appropriate and documented security measures, including guarantees that your personal data is stored on servers maintained in controlled environments with limited access.

7.3. Personal data is stored on secure servers alongside PORTUGAL TELECOM DATA CENTER, S.A with VAT number 510.030.785 and headquarters at Rua Data Center 6200-065 Covilhã, Portugal, which provides us with adequate security guarantees to protect personal data against disclosure, loss, misuse, alteration, processing, or unauthorized access, as well as against any other form of unlawful processing.

7.4. Likewise, when you browse the WEBSITE, we protect your data with encryption, such as Hyper Text Transfer Protocol Secure (HTTPS), which is an Internet protocol designed to enable secure communication between devices and servers worldwide. The HTTPS protocol emerged as an evolution of the previous HTTP protocol, and the difference between them is that HTTPS encrypts communication between devices.

7.5. Although we take appropriate precautions to protect the personal data you provide and collect, you should be aware that no security system is entirely infallible.

8. HOW CAN YOU EXERCISE YOUR RIGHTS?

8.1. Before explaining how you can exercise your rights, it is important to know what they are. The legislation grants you the right to request the exercise of the following rights:

(a) Access: the right to obtain confirmation of whether personal data concerning you is being processed and, if so, the right to access your personal data;

(b) Rectification: the right to obtain the rectification of inaccurate personal data concerning you and the right to have incomplete personal data completed;

(c) Deletion: the right to obtain the deletion of your personal data when one of the reasons listed in the legislation is fulfilled;

(d) Restriction of processing: the right to obtain the restriction of processing when one of the situations listed in the legislation is fulfilled;

(e) Objection: the right to object at any time to the processing of personal data concerning you;

(f) Portability: the right to receive your personal data concerning you in a structured, commonly used, and machine-readable format.

8.2. You also have the right to lodge a complaint with the competent supervisory authority (Spanish Data Protection Agency, located at Calle Jorge Juan, 6, 28001-Madrid) www.aepd.es.

8.3. To exercise the rights mentioned above, you must contact Grupo La Costa through the following email: hola@lacostapropiedades.com.

8.4. If you request the deletion of some or all of your personal data, we may not be able to provide you with some of the requested services, and Grupo La Costa will only retain the personal data necessary to comply with the corresponding legal obligations.

9. WHEN DO WE SHARE DATA WITH THIRD PARTIES?

9.1. Grupo La Costa may engage third parties for the provision of certain services, such as maintenance, technical support, marketing, billing, or payment management, and these third parties may have access to some personal data, particularly the data necessary for the purposes agreed upon contractually.

9.2. Grupo La Costa ensures that the entities with access to the data are reliable and provide high guarantees of protection, and that data will not be transmitted beyond what is necessary for the provision of the contracted service, and Grupo Costa del Sol will remain responsible for the provided personal data.

9.3. Grupo La Costa may also transfer data to third parties in the context of investigations, inquiries, and judicial and/or administrative proceedings or of a similar nature, provided that a court order properly requires it.

10. THIRD-PARTY WEBSITES.

10.1. The WEBSITE may contain links to other websites that may collect and process your personal data, and such processing is the sole responsibility of the owners of those websites, and Grupo La Costa assumes no responsibility for their policies and/or practices.

10.2. Some examples of third parties include Facebook, Instagram, YouTube, WhatsApp, and LinkedIn through the buttons present on the WEBSITE.

11. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION.

11.1. In the event of data transfers to third countries that do not belong to the European Union, Grupo La Costa will comply with legal standards, particularly regarding the adequacy of the destination country concerning the protection of personal data and the applicable requirements for such transfers, without transferring personal data to jurisdictions that do not offer adequate guarantees of security and protection.

12. MINORS.

12.1. The WEBSITE is not intended for individuals under 16 years of age; therefore, we request that minors do not provide us with personal data through the WEBSITE, the application, social networks, or email.

13. SENSITIVE PERSONAL DATA.

13.1. Grupo La Costa appreciates that you do not send or provide us with sensitive personal data, i.e., information that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health data, or data about a person's sex life or sexual orientation.

13.2. In the event that you send or provide such categories of personal data, they will be immediately deleted.

14. CHANGES TO THE PRIVACY POLICY.

14.1. Grupo La Costa reserves the right to adjust or change this Privacy Policy at any time, and such changes will be published.

15. OUR CONTACT DETAILS.

15.1. If you have any questions or inquiries related to this Privacy Policy, please contact us in writing via email at hola@lacostapropiedades.com. Grupo La Costa