Commitment to Personal Data Protection
OUR COMMITMENT TO THE PROTECTION OF PERSONAL DATA: "INFORMED PEOPLE AND PROTECTED DATA"
The Management of LIGHTBOOKING, S.L. (from now on, the data controller) assumes maximum responsibility and commitment to the establishment, implementation and maintenance of this Data Protection Policy, guaranteeing the continuous improvement of the data controller to achieve excellence in compliance with Regulation (E.U.) 2016/679 of the European Parliament and the Council, of April 27, 2016, regarding the protection of natural persons about the processing of personal data and the free circulation of these data and therefore which repeals Directive 95/46/E.C. (General data protection regulation) (OJEU L 119/1, 05-04-2016), and the Spanish regulations on the protection of personal data (Organic Law, legislation specific sector and its development standards).
The LIGHTBOOKING, S.L.'s Data Protection Policy rests on the principle of proactive responsibility. According to this principle, the data controller is responsible for compliance with the regulatory and jurisprudential framework that governs said Policy and is capable of demonstrating this to the competent control authorities.
In this sense, the data controller will be governed by the following principles that must serve all of his staff as a guide and frame of reference in the processing of personal data:
Data protection by design: The data controller will apply appropriate technical and organizational measures, such as pseudonymization, both when determining the means of processing and when performing the processing itself, designed to effectively apply the principles of data protection, such as data minimization, and integrate the necessary guarantees in the processing.
Data protection by default: The controller will apply appropriate technical and organizational measures to ensure that only the personal data necessary for each of the specific purposes of the processing are processed by default.
Data protection in the information life cycle: Measures that guarantee personal data protection will be applicable throughout the information life cycle.
Lawfulness, loyalty, and transparency: Personal data will be processed lawfully, fairly, and transparently regarding the interested party.
Limitation of purpose: personal data will be collected for specific, explicit and legitimate purposes and will not be further processed in a manner incompatible with said purposes.
Data minimization: Personal data will be adequate, relevant, and limited to what is necessary for their processing purposes.
Accuracy: personal data will be accurate and, if necessary, updated. All reasonable measures will be taken to promptly delete or rectify inaccurate personal data with respect to the purposes for which it is processed.
Limitation of the conservation period: Personal data will be maintained in a way that allows the identification of the interested parties for no longer than necessary for the purposes of processing personal data.
Integrity and confidentiality: Personal data will be treated to ensure adequate security, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, through the application of technical measures or appropriate organizational structures.
Information and training: One key to guaranteeing the protection of personal data is the training and information provided to the personnel involved in their processing. During the information's life cycle, all personnel with access to the data will be appropriately trained and informed about their obligations regarding compliance with data protection regulations.
The Data Protection Policy of LIGHTBOOKING, S.L. is communicated to all the controller staff and made available to all interested parties.
Consequently, this Data Protection Policy involves all the staff of the data controller, who must know it and assume it, considering it their own. Each member is responsible for applying it and verifying the data protection regulations applicable to their activity. The Policy also identifies and provides opportunities for improvement that it considers appropriate to achieve excellence in its compliance.
LIGHTBOOKING, S.L.'s management will review this Policy as many times as necessary to adapt it to the current provisions regarding the protection of personal.