Privacy Policy

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we provide the following information:

Data Controller

Pagos Altos de Acered S.L. Tax Identification Number (NIF): B99138372 C/ Fontana de Trevi, 30
50410 Cuarte de Huerva (Zaragoza)
Email: manuel@castrolaborda.com

Purposes of Data Processing

To manage enquiries submitted through the contact form.
To manage bookings, visits and, where applicable, online store orders and invoicing.
To send marketing communications by electronic means if you have given your consent.
To comply with legal obligations (tax, accounting and consumer protection requirements).

Legal Basis for Processing

Consent of the data subject (Article 6(1)(a) GDPR) for contact and marketing purposes.
Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR) for bookings and purchases.
Compliance with a legal obligation (Article 6(1)(c) GDPR) and legitimate interest (Article 6(1)(f) GDPR) for security and service improvement.

Recipients of Personal Data

We do not disclose personal data to third parties unless required by law. Data processors (web hosting providers, payment gateways, email platforms and logistics providers) may access personal data under agreements established in accordance with Article 28 of the GDPR.

International Data Transfers

No international data transfers are currently envisaged. Should any such transfers take place, appropriate safeguards will be ensured through Standard Contractual Clauses or other legally recognised adequacy mechanisms.

Data Retention Periods

Personal data will be retained for the duration of the business relationship and for the period necessary to comply with legal obligations and liabilities: up to 6 years for commercial records and 4 years for tax purposes, or until you withdraw your consent for marketing purposes.

Your Rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw your consent, by sending an email to manuel@lajas.es, providing proof of your identity. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

Data Security

We implement appropriate technical and organisational measures to protect your personal data. Last updated: 16 January 2026