Privacy Policy

Your privacy is important to us. This privacy statement explains which personal data we collect from our users and how we use them. We are encouraging you to read these terms carefully before providing your personal data on this website. The persons over 14 years of age can register in www.theoceanspell.com as users without previous consent from their parents or tutors.

In the case of the persons under 14 years, consent from their parents or tutors is required for processing of their personal data.

Under no circumstance the minor will be required data on the professional, economic situation or the intimacy of the other family members without their consent.

If you are under 14 years and have accessed this website without telling your parents, you should not register as a user.

This web respects and cares for the personal data on users. As a user, you should know that your rights are guaranteed.

We have striven to create a safe and reliable space and therefore we want to share our principles regarding your privacy:
  • We never request personal information unless it is really necessary to render the services you require from us.
  • We never share personal information on our users with anybody, except to comply with the law or if we have your express authorisation.
  • We will never use your personal data for a purpose other than the one stated in this privacy policy.
It is necessary to warn that this Privacy Policy may vary pursuant to legislative exigencies or self-regulation, so users are advised to visit it periodically. It will be applicable if the users choose to fill in any of its contacting forms where personal data are required.

The Ocean Spell has adapted this web to the exigencies of the Regulations (EU) of the European Parliament and the Council as of April 27, 2016 on protection of natural persons (GDPR) and Organic Law 3/2018 as of December 5 on Personal Data Protection and guarantee for the digital rights (LOPDGDD), as well as Act 34/2002 as of July 11 on Information Society Services and Electronic Commerce.

Person responsible for processing your personal data

  • Identity of Responsible Person: Silvia De San Laureano
  • Trade name: The Ocean Spell
  • Fiscal identification number/Tax ID: 25734804N
  • Address: The Ocean Spell C/ Francisco Rueda Perez n2-4A . 29631 Málaga (Málaga, ESPAÑA)
  • Email: info@theoceanspell.com
  • Activity: Surf Travel Agency with license C.I.AN-297089-2
For the purposes of what has been stated in the General Data Protection Regulations mentioned above, the personal data you send us via the web forms will receive the following data processing: “Users of the web and subscribers”.

For processing the data on our users, we implemented all technical and organisational security measures established in the ruling legislation.

Principles we will apply to your personal information

In processing your personal data, we will apply the following principles that are in line with the exigencies of the new European data protection regulation:
  • Principle of legality, loyalty and transparency: We will always request your consent to process your personal data for one or several specific purposes about which we will inform you previously with absolute transparency.
  • Principle of data minimisation: We will request only strictly necessary data in relation to the purposes for which we will request them. As few data as possible.
  • Principle of limitation of the period to keep data: Data shall be kept for no longer than the time needed for processing, according to the purpose, we will inform you of the respective period to keep data, in the case of subscriptions, we will periodically look through our lists and remove those records that have been inactive for a considerable period of time.
  • Principle of integrity and confidentiality: Your data will be processed in such a way that adequate security of personal data and confidentiality are guaranteed. You should know that we take all precautions needed to avoid unauthorised or undue access to the data on our users by third parties.

How have we got your data?

The personal data we process in The Ocean Spell come from:
  • Contact Form
  • Subscription form
  • Service request form
  • Download form

Which are your rights when providing us with your data?

Any person has the right to obtain confirmation about whether or not in The Ocean Spell we are processing personal data of their concern.

The interested persons have the right to:
  • Request access to personal data on the interested person
  • Request their rectification or removal
  • Request the limitation of their processing
  • Oppose processing
  • Request data portability
The interested persons can access to their personal data and request the rectification of inaccurate data or request their removal when, among other reasons, the data are no longer needed for the purposes they were collected. In certain cases, the interested persons can request the limitation of the processing of their data, in which case we will keep them only for the exercise of or the defence against claims.

In certain cases and for reasons related to their particular situation, the interested persons can oppose the processing of their data. The Ocean Spell will stop processing the data, except for urgent legitimate reasons or the exercise of or the defence against possible claims. As an interested person, you have the right to receive those personal data of your concern that you have provided us with and in a structured, commonly used and mechanically read format and to transmit them to another person responsible for processing when:
  • Processing is based on consent
  • The data has been provided by the interested person.
  • Processing is carried out via automated means.
When exercising your right to data portability, you have the right that personal data be transmitted directly from responsible person to responsible person when it is technically possible.

The interested persons have also the right to effective protection of the law and to file a claim before the control authority, in this case, the Spanish Agency for Data Protection, if they consider that the processing of personal data of their concern infringes the Regulations.

To what end do we process your personal data?

When a user logs on this web, for instance to comment on a post, email the holder, subscribe or contract, the user is providing personal information The Ocean Spell. is responsible for. This information may include personal data such as your IP address, name, home address, email address, telephone number and other information. When providing this information, users give their consent for their information to be collected, used, managed and stored by www.theoceanspell.com, only as explained in the Legal Notice and in this Privacy Policy.

In The Ocean Spell there are different personal information capturing systems and we process the information provided by interested persons for the following purpose via each capturing system (forms):

  • Contact form: We request the following personal data: Name and email. To answer the requests from the users of www.theoceanspell.com. For instance, we can use these data to answer your request and answer any doubts, complains, comments or concerns you may have regarding the information included on the web, the services rendered through the web, the processing of your personal data, matters concerning the legal texts included on the web, as well as any other consultations you may have that are not subject to the terms of contracting. We inform you that the data you provide us with will be located on the servers of:
    • Raiola (supplier to The Ocean Spell), is located within the EU.
    • Active campaign (supplier to The Ocean Spell), is located outside the EU in the US. Active campaign is covered by the EU-US Privacy Shield agreement, the information of which is available here, approved by the European Data Protection Committee.
  • Content subscription form: In this case, we request the following personal information: Name, Email, to manage the list of subscriptions, send newsletters, promotions and special offers, provided by the user when subscribing. Within the web there are several forms to activate the subscription. We inform you that the data you provide us with will be located on the servers of:
    • Raiola (supplier to The Ocean Spell), is located within the EU.
    • Active campaign (supplier to The Ocean Spell), is located outside the EU in the US. Active campaign is covered by the EU-US Privacy Shield agreement, the information of which is available herer, approved by the European Data Protection Committee.
  • Service request form: We request the following personal information: Name, email and telephone. To request any of the services www.theoceanspell.com makes available to its users. The gathered information will make it possible to request the respective service in order to possibly carry it out offline. Requests will be answered by email. The website does not allow you to manage payments directly. I inform you that the data you provide us will be located on the servers of:
    • Raiola (supplier to The Ocean Spell), is located within the EU.
    • Active campaign (supplier to The Ocean Spell), is located outside the EU in the US. Active campaign is covered by the EU-US Privacy Shield agreement, the information of which is available here, approved by the European Data Protection Committee.
  • Download form: On this website you can download different content that is incorporated periodically. In this case, we request the following personal information: Name and email, to activate the subscription form. Your information is used for the purposes indicated for subscribers. I inform you that the data you provide us will be located on the servers of:
    • Raiola (supplier to The Ocean Spell), is located within the EU.
    • Active campaign (supplier to The Ocean Spell), is located outside the EU in the US. Active campaign is covered by the EU-US Privacy Shield agreement, the information of which is available here, approved by the European Data Protection Committee.
There are other purposes we process your personal data for:
  • To guarantee compliance with the terms of use and the applicable law. This can include the development of tools and algorithms helping this web to guarantee confidentiality of the personal data it collects;
  • To support and improve the services offered on this web;
  • Other non-identifying data are also collected, said data are obtained through some cookies downloaded in the computer of the user when the user browses this web that we detail in the cookies policy.
  • To manage social networks. The Ocean Spell can have a presence on social networks. Processing of the data on those persons who become followers on the social networks of the official pages of The Ocean Spell shall abide by this section. As well as by those terms of use, privacy policies and access regulations belonging to the social network that are appropriate in each case and previously accepted by the user of www.theoceanspell.com. Your data will be processed for the purpose of correctly administering your presence on the social network, informing about activities, products or services of www.theoceanspell.com. As well as for any other purpose allowed by the regulations of the social networks. Under no circumstances we will use the profiles of followers on social networks to send advertising individually.
Pursuant to what is established in the European General Data Protection Regulation (GDPR) 2016/679 and Organic Law 3/2018 as of December 5, on Personal Data Protection and guarantee for the digital rights (LOPDGDD), Silvia De San Laureano (The Ocean Spell) with legal residence on C/ Francisco Rueda Perez n2-4A. 29631 Málaga (España) will be responsible for processing the data corresponding to users on the web and subscribers.

The Ocean Spell does not sell, rent or cede personal data that may identify the user, neither will it do it in the future to third parties without previous consent. However, in some cases, collaboration with other professionals may occur, in these cases, consent from users will be requested, the identity of the collaborator and the purpose of the collaboration being informed. The aforementioned will always be done according to the strictest security standards.

We may post customer reviews on our websites or services, which may contain information such as your name and / or the city, state, or country in which you live. By submitting your review you are giving us permission to post your review on our Sites or Services. If you post such content, it will be available for other users of the Sites or Services. Your posting may also be made public and we cannot prevent such information from being used in a way that may violate this Policy or the law. If you would like us to remove your name or review from our Sites or Services, you can contact www.theoceanspell.com on our contact form, or with an email info@theoceanspell.com.

What is the legal foundation to process your data?

The legal foundation to process your data is the implementation of the subscription to the blog requested by the user. The prospective offer of products and services is based on the consent requested to the user, under no circumstance the withdrawal of this consent will condition the implementation of the subscription unless the user requires the cancellation of this service.

Also contracting products and services, pursuant to the terms and conditions stated in the business policy.

Data Category

The categories of data that are processed are identifying data.
Specially protected data categories are not treated.

How long will we retain your data?

The personal data we receive will be retained according to the following criterion:
  • As long as the commercial relationship is maintained.
  • Until the interested person requests its deletion

What recipients will your data be communicated to?

Many tools we use to manage your data are contracted by third parties.

In order to render services strictly needed for the development of the activity, www.theoceanspell.com shares data with the following service renderers under the respective terms of privacy.

All utilities offered by third parties are strictly needed for the development of our services and have been chosen in compliance with the rights we preserve on this web.

The following companies will have access to the personal information needed to carry out their functions as entities in charge of processing, but they cannot use it for other purposes. Besides, they must process the personal information in compliance with this Privacy Policy and the applicable legislation on data protection.

Google Analytics: A web analytics service provided by Google, Inc., a Delaware company whose main office is at 1600 Amphitheater Parkway, Mountain View (California), CA 94043, United States (“Google”). Google Analytics uses "cookies", which are text files located on your computer, to help www.theoceanspell.com analyze how users use the website. The information generated by the cookie about your use of www.theoceanspell.com (including your IP address) will be directly transmitted and filed by Google on servers in the United States.

Hosting: Raiola Networks, S.L., domiciled in Spain. More information at: https://raiolanetworks.es (Raiola Networks, S.L.). Raiola Networks, S.L. treats the data in order to perform its hosting services to The Ocean Spell.

Web platform: The WordPress Foundation, domiciled in the USA. More information at: https://wordpress.org (The WordPress Foundation). The WordPress Foundation treats the data in order to perform its web platform services to The Ocean Spell.

Email marketing: ActiveCampaign, Inc., domiciled in the USA. More information at: https://www.activecampaign.com/ (ActiveCampaign, Inc.). ActiveCampaign, Inc. treats the data in order to carry out its email marketing services to The Ocean Spell.

Chat communication: We have several chat communication service providers:
  • Zoom Video Communications, Inc., domiciled in the USA. More information at: https://zoom.us/ (Zoom Video Communications, Inc.). Zoom Video Communications, Inc. treats the data in order to perform its chat communication services to The Ocean Spell.
  • Skype, with address at. More information at: www.skype.com (Skype). Skype processes the data in order to carry out its chat communication services to The Ocean Spell.
Management: We have several management service providers:
  • Heyspace, with address at. More information at: www.hey.space (Heyspace). Heyspace treats the data in order to perform its management services to The Ocean Spell.
  • You can book me, with an address in the United Kingdom. More information at: https://youcanbook.me/ (You can book me). You can book me, treat the data in order to carry out your management services to The Ocean Spell.

Browsing

When browsing www.theoceanspell.com unidentifiable data may be gathered, said data may include IP addresses, geographic location (approximately), a record of how our services and websites are used, and other data that cannot be used to identify the user. Among non-identifying data are also those related to your browsing habits through services provided by third parties. This web uses the following analysis services from third parties:
  • Google analytics
  • Facebook inside
  • Semrush
  • Pixel from Facebook

We use this information to analyse trends, administer the website, track the movements of users through the website and collect demographic information on our user database as a whole.

Data secrecy and security

www.theoceanspell.com agrees to use and process the personal data on its users by respecting their confidentiality and to use them according to its purpose and to fulfil its obligation of saving them and taking all measures to avoid any unauthorised alteration, loss, processing or access, in compliance with what is established in the ruling data protection regulations.

This web includes a SSL certificate. It is a security protocol making your data travel integrally and safely, that is, the transmission of your data between a server and a web user and, in feedback, is completely encoded or encrypted.]

www.theoceanspell.com cannot guarantee absolute impregnability of the Internet network and therefore it cannot absolutely safeguard against any violation of data by third parties fraudulently accessing them.

Regarding the confidentiality of processing, Silvia De San Laureano (The Ocean Spell) will make sure that any person authorised by Silvia De San Laureano to process data on the client (including his/her personnel, collaborators and service renderers) is under the appropriate obligation of confidentiality (whether it is a contractual or legal duty).

Whenever there is a security-related incident, when realising this, Silvia De San Laureano (The Ocean Spell), must notify the Client without unduly delays and must provide timely information on the security-related incident as it is known or when the Client requests it reasonably.

Data accuracy and truthfulness

As a user, you are the only one responsible for the truthfulness and correctness of the data you send to www.theoceanspell.com, Silvia De San Laureano (The Ocean Spell) being exonerated from any responsibility in this regard.

Users guarantee and are responsible, in all cases, for the accuracy, validity and authenticity of those personal data they provide and agree to keep them duly updated. The user accepts to provide full and correct information in the contacting or subscription form.

Acceptance and consent

The user declares he/she has been informed of the terms on personal data protection, accepting and consenting to their being processed by Silvia De San Laureano (The Ocean Spell) in the way and for the purposes stated in this privacy policy.

Revocability

The consent given both for processing and for ceding the data on the interested persons is revocable at any moment by communicating it to Silvia De San Laureano (The Ocean Spell) in the terms established herein for the exercise of rights. Under no circumstances this revocation will be retroactive.

Changes in the privacy policy

Silvia De San Laureano (The Ocean Spell) reserves the right to modify this policy to adapt it to legislative or jurisprudential innovations or practices by the industry. In said assumptions, the changes it made will be announced on this webpage sufficiently in advance to their implementation.

Commercial mails

In compliance with the Information Society Services and Electronic Commerce Act, www.theoceanspell.com does not carry out any SPAM practices, so it does not send any commercial mails electronically that have not previously been requested by the user. Consequently, in each of the forms available on the web, the user has the possibility to give his/her express consent to receive the bulletin, regardless of the promptly requested commercial information.

Pursuant to what is established in Information Society Services and Electronic Commerce Act 34/2002, www.theoceanspell.com agrees not to send any communications of a commercial nature without due identification of them.

Doubts or consultations about this policy or your rights

If you have any question or comment about this policy or if you are concerned about the way in which any personal information you have provided to us may have been managed, you can contact us via postal mail or email to: info@theoceanspell.com



Document reviewed on 27-10-2020.