DATA PROTECTION OF PERSONAL DATA
The General Data Protection Regulation (Regulation (EU) 2016/679) harmonizes data protection legislation throughout the European Union, increasing the protection of individuals and giving them greater control over their personal data.
At REAJ, ALBERGUES JUVENILES ESPAÑA SA (hereinafter referred to as "REAJ"), we have always been concerned about the protection of personal data. Therefore, we have updated our Privacy Policy to comply with the new regulations and inform you about the changes that affect your rights:
Who is responsible for processing your personal data?
REAJ, ALBERGUES JUVENILES ESPAÑA SA (hereinafter REAJ) with registered office at Calle Marqués de Riscal, 16, Madrid, with VAT number A-86661360.
For what purpose do we process your personal data?
The data that REAJ collects through various channels (website, email, electronic forms, and paper forms) within its activity are processed for the following purposes:
- Maintenance of the commercial and contractual relationship with clients and suppliers.
- Contact information to manage subscriptions to our magazines and newsletters.
- Contact information to send promotional offers for our services.
- Management of contests.
- Management and tracking of users on social networks.
How long do we keep your data?
In the case of providers, clients, collaborators, and personnel, we retain their data for the duration of the contractual relationship with us and subsequently for the period established by applicable current legislation.
Regarding personnel selection processes, data will be kept for the duration of the process, and in the case that the CV is of interest, it will be retained for a period not exceeding one year, after which it will be deleted or destroyed.
Regarding actions related to commercial prospecting, data will be kept until the interested party opposes the processing or withdraws their consent.
Regarding your participation in contests, in accordance with their legal bases, data will be kept until their completion and the awarding of prizes, as well as during the period established by the applicable current legislation.
Why do we use your personal data?
Your personal data is processed by REAJ based on the following legal grounds:
- Your consent or they have been voluntarily provided by you through any means. In this regard, the inclusion of personal data in files is absolutely voluntary, and its collection is duly announced.
- The maintenance, development, and execution of a contractual relationship we have with you, in the case of: (i) provision of services; (ii) employment, commercial, administrative relationships, among others.
- Legitimate interest, always respecting your right to the protection of personal data, honor, and privacy, for the development and promotion of our products and services.
To whom will we disclose your data?
Your data will be kept with strict security measures to guarantee their confidentiality and security. Similarly, they will only be transferred to entities and for the following purposes:
- Client or interested party data will not be transferred to third parties unless necessary for the provision of the service requested by the client.
- Entities and providers that provide services to REAJ for the proper execution of our activities and projects. These entities and providers are duly accredited and sign the corresponding data processing contract with us in compliance with current data protection regulations.
To give you examples of the services provided by our suppliers that may involve the processing of your personal data on behalf of REAJ, we can mention, by way of example and not limitation: multidisciplinary professional services, logistics, legal advice, technological services, computer services, messaging and delivery, maintenance, security and surveillance, advertising and marketing, call center, etc.
To Hostelling International, a company located at 2nd Floor, Gate House Fretherne Road Welwyn Garden City Herts AL8 6RD England, to process and manage your online purchase request for the Youth Hostel Card through the Hostelling International website.
Public authorities and courts and tribunals when there is a legal obligation to provide data.
What channels do we use to obtain your data?
REAJ obtains personal data through the following channels:
- Email.
- Directly from the interested party.
- Forms/Questionnaires (Web, electronic or paper format).
- Exchange of business cards.
- Service contracts.
- Fairs and events related to your business sector.
What categories of data do we process?
- Identification data (Name, Surnames, nationality, gender), including images.
- Contact information (Phone, email).
- Employment data.
- Academic and professional data.
- Email addresses.
- Commercial information.
- Economic and financial data.
What security measures do we apply to personal data?
REAJ informs you that it applies the necessary security measures to prevent theft, alteration, or unauthorized access to data, taking into account the state of the art, the costs of application, and the nature, scope, context, and purposes of the processing, as well as variable risks of probability and severity to the rights and freedoms of individuals.
In the case of service contracts, we require and ensure that the data processor applies appropriate technical and organizational measures to guarantee a level of security appropriate to the existing risks, as set out in Article 32 of the General Data Protection Regulation.
We also conduct Impact Assessments on those processing operations that we consider may pose a risk to the rights and freedoms of individuals, in order to implement the necessary and appropriate measures to prevent a breach of confidentiality.
What are your rights?
Everyone has the right to know if REAJ processes their personal data. They also have the right to:
- Access their personal data.
- Request the correction of inaccurate data.
- Request the deletion of their data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
- Object to the processing of their data, for reasons related to their particular situation, requesting that REAJ not process them.
- In certain circumstances, request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims.
- Withdraw, whenever you want, the consent given, without affecting the lawfulness of the processing carried out prior to such withdrawal.
When you exercise your rights of deletion, opposition, limitation, or withdraw your consent, REAJ will stop processing your data, except for compelling legitimate reasons or the exercise or defense of possible claims.
You can exercise all these rights by contacting us at the following addresses: REAJ Calle Marqués de Riscal, 16, Madrid, or the email address contacto@reaj.com.
Always remember that if you exercise any of the rights we have explained to you, you should accompany your request with a copy of your ID card or equivalent document that allows us to verify your identity.
Also, if you are not satisfied with how we have handled your rights, you can file a complaint with the Spanish Data Protection Agency through the website www.aepd.es.
What can you do if you do not want to receive commercial communications?
In accordance with the LSSI, you can unsubscribe from any of the subscription services, as well as express your opposition to receiving advertising information, by sending the word "BAJA" to the following addresses: REAJ, ALBERGUES JUVENILES ESPAÑA, Calle Marqués de Riscal, 16, Madrid, or the email address contacto@reaj.com.
