{"id":46825,"date":"2020-05-12T07:33:56","date_gmt":"2020-05-12T07:33:56","guid":{"rendered":"https:\/\/www.irrisarriland.com\/privacy-policy\/"},"modified":"2025-09-24T10:44:54","modified_gmt":"2025-09-24T10:44:54","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.irrisarriland.com\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div class=\"fusion-fullwidth fullwidth-box fusion-builder-row-1 fusion-flex-container nonhundred-percent-fullwidth non-hundred-percent-height-scrolling\" style=\"--awb-border-radius-top-left:0px;--awb-border-radius-top-right:0px;--awb-border-radius-bottom-right:0px;--awb-border-radius-bottom-left:0px;--awb-flex-wrap:wrap;\" ><div class=\"fusion-builder-row fusion-row fusion-flex-align-items-flex-start fusion-flex-content-wrap\" style=\"max-width:1560px;margin-left: calc(-4% \/ 2 );margin-right: calc(-4% \/ 2 );\"><div class=\"fusion-layout-column fusion_builder_column fusion-builder-column-0 fusion_builder_column_1_1 1_1 fusion-flex-column\" style=\"--awb-bg-size:cover;--awb-width-large:100%;--awb-margin-top-large:0px;--awb-spacing-right-large:1.92%;--awb-margin-bottom-large:0px;--awb-spacing-left-large:1.92%;--awb-width-medium:100%;--awb-spacing-right-medium:1.92%;--awb-spacing-left-medium:1.92%;--awb-width-small:100%;--awb-spacing-right-small:1.92%;--awb-spacing-left-small:1.92%;\"><div class=\"fusion-column-wrapper fusion-flex-justify-content-flex-start fusion-content-layout-column\"><div class=\"fusion-text fusion-text-1\"><p><b> PERSONAL DATA PROTECTION POLICY<\/b><b><br \/>\n<\/b> <b>May 25, 2018<\/b><\/p>\n<p><span style=\"font-weight: 400;\">CENTRO VACACIONAL IRRISARRI DE IGANTZI S.L. is an organization involved in the processing of personal data, which assigns it a significant responsibility in designing and organizing procedures to ensure compliance with legal regulations in this area.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In exercising these responsibilities and with the aim of establishing the general principles that must govern the processing of personal data within the Company, it approves this Personal Data Protection Policy, which is communicated to its Employees and made available to all its Stakeholders.<\/span><\/p>\n<p><b>1. Purpose<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Personal Data Protection Policy is a proactive accountability measure intended to ensure compliance with the applicable legislation in this area and, in relation to it, the respect for the right to honor and privacy in the processing of personal data of all individuals who interact with the Company.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">In accordance with this Personal Data Protection Policy, the principles governing data processing within the organization are established, along with the procedures, and the organizational and security measures that the individuals subject to this Policy commit to implementing within their scope of responsibility. To this end, CENTRO VACACIONAL IRRISARRI DE IGANTZI S.L., located at Barrio Irisarri, 1 CP 31790 IGANTZI (NAVARRA), shall assign responsibilities to personnel involved in data processing operations.<\/span><\/p>\n<p><b>2. Scope of Application<\/b><\/p>\n<p><span style=\"font-weight: 400;\">This Personal Data Protection Policy applies to the Company, its administrators, executives, and employees, as well as to all individuals associated with it, explicitly including service providers with access to data (&#8220;Data Processors&#8221;).<\/span><\/p>\n<p><b>3. Principles of Personal Data Processing<\/b><\/p>\n<p><span style=\"font-weight: 400;\">As a general principle, the Company shall strictly comply with personal data protection legislation and must be able to demonstrate such compliance (Principle of &#8220;proactive accountability&#8221;), paying special attention to data processing operations that may pose a higher risk to the rights of data subjects (Principle of &#8220;risk-based approach&#8221;).<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In line with the above, CENTRO VACACIONAL IRRISARRI DE IGANTZI S.L. shall ensure compliance with the following Principles:<\/span><\/p>\n<p><span style=\"font-weight: 400;\">\u2794 <\/span><b>Lawfulness, fairness, transparency, and purpose limitation.<\/b><span style=\"font-weight: 400;\"> Data processing must always be communicated to the data subject through clauses and other procedures; and shall only be considered lawful if there is consent for the data processing (with particular attention to minors), or another valid legal basis, and the purpose is aligned with regulations.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"> \u2794 <\/span><b>Data minimization.<\/b><span style=\"font-weight: 400;\"> The data processed must be adequate, relevant, and limited to what is necessary for the purposes for which they are processed.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"> \u2794 <\/span><b>Accuracy.<\/b><span style=\"font-weight: 400;\"> Data must be accurate and, where necessary, kept up to date. Necessary measures shall be taken to ensure that inaccurate data are deleted or rectified without delay.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"> \u2794 <\/span><b>Storage limitation.<\/b><span style=\"font-weight: 400;\"> Data shall be kept in a way that allows identification of data subjects for no longer than is necessary for the purposes of the processing.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"> \u2794 <\/span><b>Integrity and confidentiality.<\/b><span style=\"font-weight: 400;\"> Data shall be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing, and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"> \u2794 <\/span><b>Data transfers.<\/b><span style=\"font-weight: 400;\"> The purchase or acquisition of personal data from illegitimate sources, or in cases where data have been collected or disclosed in violation of the law or without proper legal origin, is prohibited.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"> \u2794 <\/span><b>Hiring of service providers with data access.<\/b><span style=\"font-weight: 400;\"> Only providers that offer sufficient guarantees to implement appropriate technical and security measures in data processing shall be contracted. Proper agreements with these third parties shall be documented.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"> \u2794 <\/span><b>International data transfers.<\/b><span style=\"font-weight: 400;\"> Any personal data processing subject to EU regulations involving transfers outside the European Economic Area must be carried out in strict compliance with applicable legal requirements.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"> \u2794 <\/span><b>Rights of data subjects.<\/b><span style=\"font-weight: 400;\"> The Company shall facilitate the exercise of the rights of access, rectification, erasure, restriction of processing, objection, and data portability. To this end, it shall establish internal procedures and, in particular, appropriate and necessary templates to enable their exercise, which must meet at least the legal requirements applicable in each case.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\"> The Company shall promote the integration of the principles outlined in this Personal Data Protection Policy into (i) the design and implementation of all work procedures, (ii) the products and services offered, (iii) all contracts and obligations entered into or assumed, and (iv) the implementation of all systems and platforms that enable employee or third-party access and\/or the collection or processing of personal data.<\/span><\/p>\n<p><b>4. Employee Commitment<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Employees are informed of this Policy and acknowledge that personal data is a Company asset. In this regard, they adhere to it and commit to the following:<\/span><\/p>\n<ul>\n<li><span style=\"font-weight: 400;\">Complete the data protection awareness training provided by the Company.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><\/li>\n<li><span style=\"font-weight: 400;\">Apply the user-level security measures applicable to their job, without prejudice to their responsibilities in the design and implementation based on their role. within CENTRO VACACIONAL IRRISARRI DE IGANTZI S.L.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><\/li>\n<li><span style=\"font-weight: 400;\">Use the established formats for the exercise of data subjects&#8217; rights and promptly inform the Company to enable a timely response.<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><\/li>\n<li><span style=\"font-weight: 400;\">Report to the Company, as soon as they become aware, any deviations from this Policy, particularly any \u201cpersonal data security breaches,\u201d using the format established for this purpose.<\/span><span style=\"font-weight: 400;\"><br \/>\n<b><\/b><\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\"><b>5. Monitoring and Evaluation<\/b><\/span><\/p>\n<p><span style=\"font-weight: 400;\">An annual verification, evaluation, and assessment shall be conducted\u2014or whenever there are significant changes in data processing\u2014regarding the effectiveness of the technical and organizational measures in place to ensure data security.<\/span><\/p>\n<p><b>CENTRO VACACIONAL IRRISARRI DE IGANTZI S.L.<\/b><\/p>\n<\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-46825","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.irrisarriland.com\/en\/wp-json\/wp\/v2\/pages\/46825","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.irrisarriland.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.irrisarriland.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.irrisarriland.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.irrisarriland.com\/en\/wp-json\/wp\/v2\/comments?post=46825"}],"version-history":[{"count":0,"href":"https:\/\/www.irrisarriland.com\/en\/wp-json\/wp\/v2\/pages\/46825\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.irrisarriland.com\/en\/wp-json\/wp\/v2\/media?parent=46825"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}