1. Data controller
The controller responsible for the processing of personal data through this website is:
- Company name
- HOMEINCALPE INVEST S.L.
- Tax identification number (CIF)
- B54987680
- Registered office
- Calle José María Ruiz Pérez-Águila nº 2 bajo, 03710 Calpe, Alicante, Spain
- Commercial Register
- Commercial Register of Alicante, Volume 4017, Folio 102, Sheet A-154013, Entry 1
Coll de Rates Cycling Holidays is a commercial brand operated by HOMEINCALPE INVEST S.L.
2. Scope of this policy
This Privacy Policy explains how personal data is processed when users visit this website, contact the company through its contact form or communicate with the company using the contact details provided on the website.
External bicycle and accommodation bookings are completed on third-party websites. Personal data entered directly on those websites is processed in accordance with the privacy information provided by the relevant destination service.
3. Personal data processed
Depending on how the user interacts with the website, the following data may be processed:
- Identification and contact details, such as name, email address and telephone number.
- Information included in the subject and message fields of the contact form.
- Information voluntarily provided in subsequent communications.
- Technical and security data, such as IP address, date and time of access, browser information and server or anti-spam logs, where necessary for the secure operation of the website.
- Consent preferences relating to cookies and analytics.
Users should not submit unnecessary sensitive personal data through the contact form.
4. Purposes and legal bases
Responding to enquiries
To receive, assess and respond to questions, requests for information and messages submitted through the contact form, by email, by telephone or through other contact channels.
The legal basis is taking steps at the user's request before entering into a contract, where the enquiry relates to a possible service, and the legitimate interest of the controller in responding to other genuine enquiries.
Providing and managing services
To manage a requested service, reservation-related assistance, customer support or a contractual relationship where HOMEINCALPE INVEST S.L. is directly involved.
The legal basis is the performance of a contract or taking steps at the user's request before entering into a contract.
Legal and administrative obligations
To comply with accounting, tax, consumer protection, public authority and other applicable legal requirements.
The legal basis is compliance with a legal obligation.
Website security and abuse prevention
To protect the website, prevent spam, manage technical incidents, enforce rate limits and detect unlawful or abusive activity.
The legal basis is the legitimate interest of the controller in maintaining the security and availability of the website and its communication channels.
Analytics
To obtain aggregated statistics about how the website is used and improve its content and services through Google Analytics 4, once the analytics and consent system has been activated.
Where consent is required, the legal basis is the user's consent, which may be granted, refused or withdrawn through the cookie consent platform. Further information is available in the Cookie Policy.
Commercial communications
Contact details submitted for an enquiry will not be used for unrelated marketing communications unless the user has separately and expressly consented or another lawful basis applies.
5. Data retention
Personal data will be kept only for as long as necessary for the purpose for which it was collected.
- Enquiry data will be retained while the request is being handled and afterwards only for the period reasonably necessary to follow up the enquiry or address possible liabilities.
- Data relating to a contractual relationship will be retained for the duration of that relationship and for the applicable statutory limitation and legal retention periods.
- Technical and security data will be retained for the minimum period necessary to investigate incidents, prevent abuse and maintain website security.
- Consent records will be retained for as long as necessary to demonstrate the user's choice and comply with legal obligations.
- Analytics data will be retained according to the settings finally approved for the Google Analytics property and described, where applicable, in the Cookie Policy.
Data may be securely restricted rather than actively used where it must be retained to comply with a legal obligation or to establish, exercise or defend legal claims.
6. Recipients and service providers
Personal data will not be sold.
Data may be accessed by service providers that support the operation of the website and company communications, such as hosting, email, website maintenance, security, analytics or consent management providers. These providers must process the data under the corresponding contractual and data protection safeguards.
Data may also be disclosed to public authorities, courts or other competent bodies where required by law.
When a user follows a link to an external booking or accommodation platform, any data entered on that destination website is subject to the destination service's own privacy information and the roles established by the parties involved.
7. International data transfers
Some technology providers, including providers connected with analytics or consent management, may process data outside the European Economic Area.
Where an international transfer takes place, HOMEINCALPE INVEST S.L. will require an applicable legal transfer mechanism and appropriate safeguards, such as an adequacy decision or approved contractual clauses. The final providers and relevant information will be reflected in the Cookie Policy or the corresponding service information before activation.
8. User rights
Users may exercise the following rights, where applicable:
- Access their personal data.
- Rectify inaccurate or incomplete data.
- Request erasure of their data.
- Request restriction of processing.
- Object to processing based on legitimate interests.
- Request data portability.
- Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Not be subject to a decision based solely on automated processing where the legal requirements for that right apply.
Requests may be sent to info@collderatescycling.com or to the registered office stated above. The request should identify the person making it and specify the right being exercised. Proof of identity may be requested only where reasonably necessary to verify the applicant.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos): www.aepd.es.
9. Accuracy of information
Users are responsible for ensuring that the information they provide is accurate, current and not misleading. They should inform the company of any relevant changes.
10. Security
HOMEINCALPE INVEST S.L. applies reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
No internet transmission or storage system can guarantee absolute security. Users should avoid sending confidential or sensitive information that is not necessary for their request.
11. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes in legislation, website functionality, forms, service providers or processing activities. The current version will be published on this page together with its latest update date.