Legal information
Legal information - natural person
The website www.mastulsa.com is edited by: Daniel Jaramillo Lozano.
Address: Veïnat De La República, No. 2
Email: info@mastulsa.com.
English:Telephone: 659754858.
The publication director is Mrs./Mr. Daniel Jaramillo Lozano, Veïnat De La República, Num 2, email: info@mastulsa.com, telephone: 659754858. The site www.mastulsa.com is hosted by the company Amenitiz solutions SL, Cl Plaza Urquinaona Num.4 P.1 Pta.c 08010 - Barcelona, ​​+33 1 86 65 02 09.
Legal information - legal entity
The website www.mastulsa.com is edited by : Daniel Jaramillo Lozano ES47667905Z, with a capital of 0.0 euros and registered office at Veïnat de la República nº 2, registered with the Spain administration of Barcelona under the number ES47667905Z, intra-community VAT number: ES47667905Z The publication director is Mrs./Mr. Daniel Jaramillo Lozano, Veïnat De La República, No. 2, email: info@mastulsa.com, phone: 659754858.
The site www.mastulsa.com is hosted by the company SiteMinder Limited ACN 121 931 744 of Bond Store 3, 30 Windmill Street, Millers Point, NSW 2000, Australia.

Privacy Policy
&
COOKIE USE POLICY
The purpose of this privacy policy (hereinafter the "Policy") is to explain to you the rules governing the different processing operations that may be carried out when you use our website accessible from the URL: www.mastulsa.com (hereinafter the "Site").

The processing of personal data implemented from the Site is the responsibility of two joint controllers.

The persons responsible for the processing of your personal data are:

Daniel Jaramillo Lozano

This company is registered with the Barcelona Spain administration under number ES47667905Z (hereinafter, the "Establishment"). Its registered office is located at Veïnat de la República nº 2.

Email address of the institution's data protection officer: info@mastulsa.com

Mas Tulsà will hereinafter be jointly referred to as the "Data Controller". The terms "we", "us" and "our" in this Privacy Policy refer to the Data Controller.

As the controller of your Personal Data, we do our best to protect your privacy when you visit the Site.

This Policy allows you to better understand the origin and use of your Personal Data and the navigation information that it processes when you visit our Site.

For the purposes of this Policy, the term "Personal Data" refers to any data that relates solely to you and that allows you to be identified directly or indirectly, regardless of the Terminal you are using.

The term "Terminal" refers to the physical equipment (computer, tablet, smartphone, telephone, etc.) that you use to view and browse the Site.

The term "Regulation" refers to the Regulation on personal data and in particular Regulation No. 2016/679, known as the General Data Protection Regulation, the French Data Protection Act No. 78-17 of 6 January 1978 and the French Law No. 2018-493 on the protection of personal data.

By using our Site, you declare that you accept the terms of this Policy in their entirety.

If you do not agree with any of these terms, you are free to stop using our Site.

This Privacy Policy is updated regularly. In order for you to be properly informed of any significant changes in advance, we will notify you through notifications in the relevant services or by email, as appropriate.

The Site will always display the most up-to-date version of this Privacy Policy.

1. Protection of your personal data

In accordance with the Regulation, we list all processing operations carried out in a processing log that we make available to the competent authorities.

All the information you have provided to us during your visits to the Site is strictly confidential. This information is necessary for the purposes of its processing.

1.1. What personal data is collected and processed?

The information that may be collected and processed is the following:

- Identification and contact data: name, surname, gender, postal address, telephone number, email address, language and country from which you interact with us;
- Financial and payment data: your bank details (in this regard we inform you that all payment transactions are encrypted by the receiving bank or accredited storage center and that we do not store any credit card numbers), information about your reservations, etc...;
- Connection data, geolocation (only with your consent) and navigation; and
- Personal preferences: This includes your cookie preferences.

When we ask you to enter your personal data to access a feature, some data are mandatory fields as they are data that we need to allow you to access this feature (for example, to register your reservation we need your first and last name).

It is important that the personal information shared about you is correct and up to date.

We do not process any personal data that could be classified as "sensitive" (information relating to racial or ethnic origin, political, philosophical or religious opinions, trade union membership, health or sexual life) within the meaning of the Personal Data Regulation.

In this regard, it is specified that our Site is not intended for children and that, therefore, we do not process any data relating to them.

We undertake not to transfer your personal data to third parties unless otherwise specified in article 1.3.

1.2. For what purposes are your personal data collected and processed?

The Personal Data listed above may be collected and processed for the following purposes:

Booking management

The processing of your data is necessary to keep you informed of the status of your booking, the summary of your booking, accept your payment, etc.

Access to customer service

We process your personal data within the framework of our customer service in order to answer your questions, in particular via the contact form.

Improving our services

We process your browsing and booking data for analysis and statistics. Indeed, this data allows us to analyse how you use our Site and to improve its ergonomics and quality.

Marketing

As part of your subscription to our newsletter, we process your data to manage your subscription and send you specific information by email or SMS according to your preferences. We may also contact you via push notifications if you subscribe to this service.

Processing for marketing purposes requires your consent. You can therefore unsubscribe from our communications at any time.

In the event that you have given us your consent to receive our communications, either through our newsletter or through push notifications, we may use the information you have provided to us for the following purposes:

- Sharing information about our current events, products, services, offers;
- Recommendations about certain products or services that may be of interest to you; and
- Customer research to better understand your expectations regarding products

1.3. Who are the recipients of your personal data?

When using our Site, you may receive information from third parties with whom we collaborate to offer you certain services. This may be a matter of:

- Financial institutions and accredited storage centres;
- Fraud detection and prevention entities; and
- Providers of services related to marketing, communication and advertising.

The personal data collected on the Site are mainly processed by the internal services of the Data Controller.

However, we may share your information with the third parties mentioned above for the following reasons, among others:

- to make payment in the case of financial institutions and accredited storage centres;
- to verify your credit and identity with respect to fraud detection and prevention entities; and
- to optimize your experience on our Site and improve our services for providers of services related to marketing, communication and advertising.

We ask third parties who receive your personal data to commit to complying with the Regulation on personal data. The third parties mentioned above may only use your personal information in accordance with our instructions and not for their own use.

Your access and browsing data may also be transferred to Google Analytics.

We may also disclose your Personal Data to respond to a request from legal authorities.

1.4. How long is your personal data kept?

We will retain your data for a period of ten (10) years from your last reservation in order to respond to any questions, complaints or to maintain all data necessary to comply with legal, accounting or analytical requirements (Article L.123-22 of the French Commercial Code).

We may also keep your data for research or statistical analysis; they will then be anonymized.

As part of a subscription to our newsletter, we will not contact you if you have not opened our newsletters for more than twelve (12) months.

Any changes to this Policy will be made on this page and you will be notified by email in the event of a material change.

The data controller may also keep your data for research or statistical analysis. Since these are then anonymised, the Regulation does not impose any retention period as it is no longer possible to "re-identify" you later.

1.5. Data retention

We retain the personal information we collect about you where we have a legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).

When we no longer have any legitimate business need to process your personal information, we will either delete or anonymise it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

In any case, the Data Controller has taken appropriate technical measures to maintain the security of your Personal Data.

1.6. What are your rights?

1.6.1. Consent

Your consent must be given in a clear and unambiguous manner. This is why, when you access and fill out the contact form on the Site:

- you are informed of the use that will be made of your Personal Data;
- you must check a box to validate your consent; and
- children under 13 years of age cannot give their consent.

1.6.2. Other rights

In accordance with the Regulation, you have the following rights over your Personal Data:

- Right of access to data: this right allows you to receive a copy of the Personal Data we hold about you;
- Right to rectification: this right gives you the possibility to request the correction of inaccurate or incomplete Personal Data concerning you;
- Right to cancellation of your Personal Data: this right gives you the possibility to request the cancellation of your Personal Data if one of the legal conditions is met:

the Personal Data is no longer necessary for the purposes of the processing;
you have withdrawn the consent on which the processing is based;
you have objected to the processing operation by means of your right to object;
the processing of your Personal Data is unlawful; or
your Personal Data must be erased under a legal obligation.

- Right to limit the processing of your Personal Data; this limitation of processing can be carried out at any time:

you question the accuracy of your Personal Data;
you do not object to the deletion of your Personal Data in the context of unlawful processing, but you demand that it be limited;
your Personal Data is no longer used by our services, but its storage is only necessary for the establishment, exercise or defence of a legal claim; or
you object to our use of your Personal Data through your right to object.

- Right to portability of your Personal Data: you can contact us to have your Personal Data provided to you or directly to another data controller in a structured, commonly used and machine-readable format;

- Right to object: you can contact us when

the processing is carried out in the public interest or our legitimate interests; you can only object to this for reasons relating to your situation;
the processing is carried out for commercial prospecting purposes; you can object to this at any time and without giving us any explanation.

- Right to determine the fate of your personal data after your death (the e-Testament): one of the specific features of French legislation is that it allows you to send us your instructions on how we will process your personal data after your death. You can therefore choose whether it is erased or transmitted to one of your relatives.

Regardless of the purpose or legal basis under which we process your data, you may, at any time and free of charge, send us an email to exercise your rights at the following address: info@mastulsa.com

Or send us a letter to the following address:

Veïnat De La República, Num 2

Please note, however, that we cannot always respond positively to your request for legal reasons which we will inform you of, if necessary, after receiving your request.

In any case, we remind you that you have the right to lodge a complaint with the competent administrative authority.

1.7. What are the legal bases for processing?

For the processing of your data, we rely on legal grounds that depend on how you interact with our Site.

When you purchase products on our Site, we collect and process your personal data to carry out the contract between you and us. For example, we need your postal details to deliver your order or your bank details to process payment.

We also rely on other legal grounds, such as your legitimate interests. For example, we consider it in your interest that your identity cannot be used for fraudulent purposes, that our customer service staff have access to your order information to better serve you, or that we can better understand your use of our Site to improve its usability and the services we offer you.

Finally, when it comes to the processing of personal data for prospecting purposes, the legal basis for processing is your consent (see article 1.6.1.).

2. Internet browsing security

2.1. Integrity of your data on the Internet

The Site has appropriate security measures in place to prevent any loss, unauthorized use or access, modification or disclosure of your Personal Data.

All personal data collected is stored on secure servers. The Data Controller has also put in place procedures to manage any breach of personal data.

2.2. Malicious uses

It is recommended that you connect only to secure networks, preferably private networks. Be aware of the risks involved in public Wi-Fi networks.

Regardless of the Data Controller to whom you have voluntarily transmitted your personal data and taking into account the nature of the Internet network, other operators, without any link to the Data Controller, may collect your personal data without your consent, in particular during your Internet browsing. We therefore recommend that you install antivirus and antispyware software on your computer and update it regularly.

2.3. Theft/Phishing/Phishing

The Data Controller will never ask you by email to obtain personal information.

If you receive an email on behalf of the data controller asking you to provide sensitive personal information (bank details, data relating to your private life, etc.), please do not reply and forward this email to us so that we can take the necessary measures.

You should only provide your account information after logging into the Site directly through your browser.

3. Cookie Policy

A cookie is a cookie, i.e. a text file that can be stored in a dedicated space on the hard drive of your Terminal when you visit a website. A cookie allows its issuer to identify the Terminal on which it is stored, during the period of validity or registration of the cookie.

When you consult the Site, information relating to the navigation of your Terminal (computer, tablet, smartphone, etc.) may be recorded through the cookies installed on your Terminal, depending on the choices you have made regarding cookies and which you can modify at any time.

3.1 What are the cookies on our Site used for?

Only the issuer of a cookie can read or modify the information contained therein.

When you connect to the Site, the Data Controller may, at its discretion, install several cookies on your Terminal in order to recognise your Terminal's browser for the duration of the cookie in question. The cookies we issue are used for the purposes described below.

The cookies we issue allow us to:

carry out studies and establish statistics and volumes of visits and use of the various elements that make up our Site (sections and content visited, routes), allowing the Owner to improve the interest and ergonomics of its services;
adapt the presentation of the Site to the display preferences of your Terminal (language used, screen resolution, operating system used, etc.) when you visit the Site, depending on the screen or reading hardware and software contained in your Terminal; and
to implement security measures, for example when you are asked to reconnect to content or a service after a certain period of time.

3.2. Your choices regarding cookies

There are several ways to manage cookies. Any settings you make may affect your Internet browsing and your access to certain services that require the use of cookies.

You can choose at any time to express and modify your wishes regarding cookies by the means described below.

In particular, you can configure your browser so that cookies are stored on your Terminal or, on the contrary, so that they are rejected, either systematically or depending on their origin.

You can also configure your browser software so that you are offered the option of accepting or rejecting cookies from time to time, before a cookie can be stored on your Device. For more information, see "How to choose, depending on the browser you use" in article 4.2.3. below.

3.2.1. Cookies agreement

The recording of a cookie on a Terminal is essentially subject to the will of the Terminal user, who can express and modify it at any time and free of charge through the options offered by his browser program.

If you have accepted the recording of cookies on your Terminal in your browser, the cookies embedded in the pages and content you have viewed may be temporarily stored in a dedicated area of ​​your Terminal. They can only be read by their transmitter.

3.2.2. Refusal of cookies

If you refuse to accept cookies on your Terminal, or to delete those already stored on your Terminal, the quality of operation of the services offered by the Site will not be affected.

However, you will no longer be able to benefit from a number of functions that may be necessary to navigate certain areas of the Site. This would be the case if you tried to access content or services for which the installation of cookies is strictly necessary (for example, to book a stay). This would also be the case if the Data Controller - or its service providers - were unable, for reasons of technical compatibility, to recognise the type of browser used by your terminal, its language and display settings or the country from which your terminal appears to be connected to the Internet.

If necessary, the Data Controller declines all responsibility relating to the consequences related to the operation of its services resulting from the impossibility for it to record or consult the cookies necessary for their operation and which you have refused or deleted.

We would like to point out that some cookies cannot be deleted as they are strictly necessary for the technical operation of the Site.

3.2.3. How to make your choices, depending on the browser you use?

For the management of cookies and your choices, the settings for each browser are different. It is described in the help menu of your browser, which will let you know how to change your cookie preferences.

For Internet Explorer:
http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies

For Safari:
https://support.apple.com/en-gb/guide/safari/sfri11471/mac

For Google Chrome:
http://support.google.com/chrome/bin/answer.py?hl=frlrm=ennswer=95647

For Firefox:
http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies

3.2.4. Deleting your cookies

You can delete all your cookies or just the ones you want. Deleting cookies does not prevent browsing or reinstallation during browsing. This allows you to control your browser's cookie library at any time. Technical cookies, necessary for browsing, will be reinstalled if you visit the Site.

Below we explain the procedure to follow depending on your browser.

Google Chrome

In the Chrome menu, select "Settings".
Show advanced settings
Go to the "Privacy" section
Click on "Content settings".
In the "Cookies" paragraph (first paragraph), click on "Cookies and site data".
Find the cookies you want to delete and click on "OK". You can also choose to delete all your cookies.

Firefox

In the Firefox menu, go to "Tools" and then "Options".
On the "Privacy" tab, click on "Show cookies".
Find the cookies you want to delete and click on "Delete cookies".

Internet Explorer

Internet Explorer does not allow the management of cookies on a case-by-case basis. To delete all your cookies:

Click on "Tools" and then on "Internet Options".
On the "General" tab, under "Browsing history", click on "Delete".
Check the "Cookies" box and click on "Delete".

Safari

In the Safari menu, select "Preferences".
In the window that has opened, go to the "Security" tab.
Click on "Show Cookies".
In the window that opens, locate and select the cookies you want to delete, and click on "Delete".

3.2.5. Private Browsing

The "Private Browsing" mode, now offered by all browsers, primarily allows you to browse the Internet without having a history of the pages visited or downloaded. Regarding cookies, all cookies that were saved during your browsing will be deleted when you close your browser. It is therefore not a solution to refuse cookies; however, their lifespan is limited to the duration of your browsing.

3.2.6. Disabling third-party cookies

Disabling third-party cookies allows you to accept only the cookies placed by the Site, which you also have the option to disable, delete or limit. This is the procedure to follow, depending on your browser, if you want to reject third-party cookies:

Google Chrome

In the Chrome menu, select "Settings".
Display advanced settings
Go to the "Privacy" section
Click on "Content settings".
In the "Cookies" paragraph (first paragraph), check the "Block cookies and third-party site data" box.
Save the changes by clicking "OK".

Firefox

In the Firefox menu, go to "Tools" and then "Options".
In the "Privacy" tab, check the "Accept cookies" box.
For the "Accept third-party cookies" setting, select "Never".
Save the changes by clicking "OK".

Internet Explorer

In the Internet Explorer menu, go to "Internet Options".
In the "Privacy" tab, click on the "Advanced" button
Accept internal cookies, reject third-party cookies
Save the changes by clicking "OK".

Safari

In the Safari menu, select "Preferences".
In the window that has opened, go to the "Security" tab.
To choose, "Accept cookies", select "Only from the sites I visit".

3.2.7. Your choices expressed online directly with us

If you do not wish:

that we collect data about your browsing,
that in the context of a registration through a special operation we can identify the original special operation,

you can choose to disable all third-party cookies, which are not essential for browsing the Site.

We will then store a cookie on your terminal whose sole purpose is to disable the placement of these cookies on your computer. This cookie will be valid for twelve (12) months.

Please note that the consideration of your choice is based on a cookie. If you delete all the cookies stored on your Device (via your browser), the Data Controller - or its service providers - will no longer know that you have chosen this option.