Privacy and data protection

This privacy policy defines and informs you about how the Iberimo website uses and protects the information you provide to us, if any, when you use this site accessible from the following URL: https://www.iberimo.com (hereinafter the "Site"). Please note that this privacy policy may be modified or supplemented at any time by Iberimo, especially to comply with any legislative, regulatory, jurisprudential, or technological developments. In such a case, the update date will be clearly identified at the top of this policy. These changes engage the User as soon as they are posted. Therefore, it is advisable for the User to regularly consult this privacy and cookie usage policy to be aware of any modifications.

1. PERSONAL DATA

In general, you can visit the Iberimo site without providing any personal information about yourself. In any case, you are in no way obligated to transmit this information to Iberimo. However, in case of refusal, you may not be able to benefit from certain information or services that you have requested. In this respect, Iberimo may, in certain cases, such as for an information request or a reservation, ask you to provide your name, first name, email address, phone number (hereinafter your "Personal Information"). By providing this information, you expressly agree that it will be processed by Iberimo for the purposes indicated in point 2 below.
In accordance with the General Data Protection Regulation adopted by the European Parliament on April 14, 2016, and the Data Protection Act of January 6, 1978, as amended, Iberimo informs you of the following:

1.1. Identity of the data controller

The data controller is the company Iberimo, with its registered office at ZA de Putillenea, 6 rue Poutillenea 64122, Urrugne - France. Tel.: 04-77-29-46-80

1.2. Purposes of processing

Iberimo may process your Personal Information for the following purposes:

• A. To provide you with the information or services you have requested. The information collected on the reservation form, such as names, addresses, phone numbers, dates of birth, and email addresses, is recorded in a computer file by IBERIMO for reservation management. They are intended for marketing, commercial, and accounting services (our database is not sold to any telemarketing site). This data is transmitted to local landlords to organize your welcome and contact you if necessary.
  All these recipients of personal data guarantee the protection of your data. The transfer of data to third parties is prohibited.


• B. To collect information to improve our website, products, and services (including through cookies); and/or


• C. To provide the service or information requested (including alerts on a specific search, saving the results of your searches (Favorites), creating a personal account).


• D. To offer commercial offers in compliance with GDPR, i.e., based on your expressly given consent to receive informative or commercial emails.


• E. The information collected during credit card payment on the PAYZEN website https://www.lyra.com/fr/guides/rgpd/ This information is neither stored, transmitted, edited, nor printed in any format. It undergoes a single transaction by entry.

1.3. Recipients

Only Iberimo is the recipient of your Personal Information. This information, whether in individual or aggregated form, is never transmitted to a third party, notwithstanding subcontractors that Iberimo may call upon (further information about them can be found in point 1.8 below). Neither Iberimo nor any of its partners market the personal data of visitors and users of its site.

1.4. Storage period

We retain your personal data only for as long as necessary for the purposes for which we collected it, including satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, as well as the applicable legal requirements. All data related to a reservation is kept for 3 years, after which it is anonymized. However, at the end of this period, your Personal Data may be archived on a separate medium to comply with our legal, accounting, and tax obligations. For data collected during information requests, email addresses, and phone numbers, if not followed by a reservation, are kept for this purpose for 1 year before being anonymized.

1.5. Data Rights

You have the following rights regarding your Personal Information, in accordance with the "computer and freedoms" law: you can exercise your right to access your data and have it rectified by contacting: IBERIMO reservation@iberimo.com or 04-77-29-46-80 or by mail to IBERIMO ZA de Putillenea, 6 rue Poutillenea 64122, Urrugne.

1.6. Data Security

Iberimo collects and processes data with the utmost confidentiality and security, in compliance with applicable laws, including using a secure data transfer protocol symbolized in most browsers by the small green padlock near the web page's URL but also through its data security policy (hosting, outsourcing, VPN, firewall, authorizations, etc.)

o Right of access and communication of data

You have the right to access the Personal Information concerning you. To assist you in this process, you can make the request directly from your personal space or by sending us a letter to our postal address mentioned above.

o Right to rectify data

Under this right, the law allows you to request the rectification, updating, locking, or deletion of data concerning you that may be inaccurate, incorrect, incomplete, or obsolete. You can also establish general and specific directives regarding the fate of personal data after your death. If necessary, the heirs of a deceased person can require taking into account the death of their relative and/or making the necessary updates. To assist you in this process, especially if you wish to exercise, on your own behalf or on behalf of a deceased relative, your right to rectify by means of a written request to the postal address mentioned in point 1.

o Right to object

The exercise of this right is possible only in either of the following two situations:

• 1. When the exercise of this right is based on legitimate grounds; or
• 2. When the exercise of this right aims to prevent the data collected from being used for commercial prospecting purposes.

If you wish to exercise your right to object by means of a written request addressed to the postal address indicated in point 1.

o Right to data portability

Under this right, the law allows you to request the portability of your personal data under the conditions of the current Regulation, which provides, in particular, that individuals subject to the processing of personal data have the right to receive the personal data concerning them that they have provided to a data controller in a structured, commonly used, and machine-readable format, and have the right to transmit this data to another data controller without hindrance from the data controller to whom the personal data has been communicated.

o The right to define directives regarding the fate of my personal data after my death.

In the absence of directives or contrary indications in these directives, the heirs of the person concerned can, after their death, exercise rights over the deceased person's personal data.

o The right to limit processing

This is the right to suspend processing until verification can take place (check the accuracy of personal data, check whether the legitimate reasons given by the person prevail over those of the data controller in the case of an objection request, etc.)

1.7. Response times

Iberimo undertakes to respond to your request for access, rectification, or objection or any other additional information request within a reasonable period not exceeding 1 month from the receipt of your request.

1.8. Authorized service providers and transfer to a third country outside the European Union

Iberimo has computer resources intended to: Collect the identities of occupants of vacation rentals. The recorded information is reserved for the use of the concerned service(s) and can only be communicated to the following recipients: Real estate agency in charge of the accommodation
Some of these recipients are located outside the European Union, particularly in: Spain These recipients will have access to the following data: Name, first name, nationality, identity card or passport number. The transmission of this data to recipients outside the European Union is an obligation to declare the occupants to the Spanish authorities. The following guarantees have been taken to ensure an adequate level of protection of personal data: The country offers an adequate level of protection. They are retained for 3 years, and in accordance with the Data Protection Act of January 6, 1978, as amended, you have the right to access and rectify the information concerning you. You can access information about yourself by contacting: Iberimo -info@iberimo.com

1.9. Complaint to the competent authority

If you believe that Iberimo is not fulfilling its obligations regarding your Personal Information, you can file a complaint or request with the competent authority. In France, the competent authority is the CNIL, to which you can submit a request electronically by clicking on the following link: https://www.cnil.fr/fr/plaintes/internet.