Privacy Policy

Introduction

• This privacy policy is provided by TINIAKOU FIGEROA SOFIA ELENA, registered under VAT number 121372844. For any inquiries related to this policy or your data, please contact us using the details provided in the “Contact Us” section.At Windzone, we are committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with the General Data Protection Regulation (GDPR). This policy explains how we collect, use, and safeguard your information.

Legal Basis for Processing

• We process your personal data based on the following lawful bases:
  • Consent: When you sign up for newsletters or agree to receive promotional materials.
  • Contract: To fulfill bookings and provide services you have requested.
  • Legal Obligation: For compliance with applicable laws.
  • Legitimate Interests: For improving our services, marketing, and customer support.

Information Collection

• We collect personal information when you make a booking, sign up for newsletters, or contact us. This includes your name, email address, phone number, and payment details.

Use of Information

• Your information is used to:
  • Process bookings and manage your reservations.
  • Send booking confirmations and provide customer support.
  • Enhance and improve our services.
  • Inform you about promotions, offers, and updates.

Data Retention

• We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, or resolve disputes. Once no longer needed, your data will be securely deleted or anonymized.

Data Security

• We implement strict security measures to protect your data from unauthorized access, disclosure, or alteration. Payment details are processed securely and are not stored on our servers.

Sharing of Information

• We do not share your personal information with third parties except:
  • For payment processing through secure partners.
  • When required by law or in response to legal requests.
  • If transferring data outside the EU, we ensure appropriate safeguards (e.g., Standard Contractual Clauses).

Your GDPR Rights

• Under GDPR, you have the following rights:
  • Access: Request a copy of your data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion of your data (“right to be forgotten”).
  • Restriction: Limit processing of your data.
  • Portability: Obtain and reuse your data across different services.
  • Objection: Object to data processing for specific purposes.

Exercising Your Rights

• To exercise your GDPR rights, contact us at [insert contact information]. We may request verification of your identity before processing your request.

Cookies