Privacy policy
“eslanzarote.com” is deeply committed to compliance with Spanish and European regulations on the protection of personal data, and guarantees full compliance with the obligations set forth, as well as the implementation of the security measures provided in the General Regulation Data Protection (RGPD) (EU) 2016/679, of April 27, and in Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD and GDD, in forward LOPD).
In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through registration or contact forms, or by sending emails, and that these will be processed by "eslanzarote.com" , Responsible for the treatment, whose data are:
Company Name: Alberto Martin Tabares
NIF: 45552249J
Registered Office: Los Reyes 89 - 35550, San Bartolomé De Lanzarote, Las Palmas, Spain
Telephone: 658 759 103
eMail: [email protected]
Collection and Processing of Personal Data
A personal data is any information related to a person: name, email, address, telephone, NIF/NIE... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.
“eslanzarote.com”, as Responsible for the Treatment, has the duty to inform the Users of its website about the collection of personal data that can be carried out, either by sending an email or by completing the forms included in the website.
Only the precise data will be obtained to be able to perform the contracted service, or to be able to adequately respond to the request for information made by the User. The data collected is identifying and corresponds to a reasonable minimum to be able to carry out the activity carried out. In particular, specially protected data is not collected at any time. In no case will a different use of the data be made than the purpose for which they have been collected.
Contact/email forms
Purpose: Respond to your request for information made through our contact form(s).
Legitimation: The legal basis that legitimizes this treatment is the User's consent, which may be revoked at any time.
Transfer of data: Personal data will be processed through servers managed by Web Empresa, which will be considered the Data Processor.
Mailing list registration forms (newsletter)
Purpose: Sending communications, some of them commercial, of interest to the Users according to the theme of the blog. As established by the LSSICE, "eslanzarote.com" undertakes not to send commercial communications without identifying them as such. For these purposes, the information sent to customers for the maintenance of the existing contractual relationship, if any, will not be considered as commercial communication.
Legitimation: The legal basis that legitimizes this treatment is the User's consent, which may be revoked at any time.
Transfer of data: Personal data will be processed through servers managed by Mailchimp, which will be considered the Data Processor.
Registration forms/client registration/contracting
Purposes:
Manage your User registration on our website.
Manage the reservations made.
Provide information about the processing and status of reservations.
Sending communications via email and/or telephone, in order to inform the User of possible incidents, errors, problems and/or status of reservations or contracts.
Legitimation: The legal basis that legitimizes this treatment is the execution of a contract.
Transfer of data: "eslanzarote.com" will not transfer or communicate your data to any third party, except in the cases provided by law or when it is strictly necessary for the provision of a service. Specifically, the data may be transferred to:
Technology service providers.
Payment service providers.
Courier and parcel companies.
Third parties or intermediaries, as service providers, operating on our own behalf (management, consultancy...).
Data transfers will occur respecting the strictest confidentiality, using the necessary measures, such as the signing of confidentiality contracts, or adherence to their privacy policies established on their respective web pages. The User may refuse to transfer their data to the Treatment Managers, by written request, by any of the aforementioned means.
In addition, in those cases where it is necessary, Customer data may be transferred to certain bodies, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspection, etc.
Minors
Only people over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians will be a mandatory condition for us to process their personal data.
On the other hand, only people over 18 years of age can contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.
User Registration - Passwords
In order to contract the services offered on this website, registration as a User is necessary. To do this, the User must fill out the corresponding form, in which we initially collect the following information:
Name and surname
Email and/or phone
Shipping addresses, if applicable
IP
Username Password
In addition, the User must accept the Contract Conditions, set out in another section of the website.
The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter their email to continue with the process and be able to modify it, by clicking on the link that will be sent to the email address entered. The User is responsible for keeping the confidentiality of his password, as well as for all the uses he makes of it. You must notify “eslanzarote.com” of any unauthorized use of your account or password as soon as possible.
The User, once registered, has access to a private panel, in which he can see certain contents, record of reservations made, reservation status, etc. He can also manage his account options, such as the password or User data.
The User may receive the following notifications:
When registering on the platform (account validation email).
Those necessary to manage reservations or contracts, such as supporting documents, incidents, renewals, etc.
newsletter of the website if they have registered on it (the User may unsubscribe in their private area and in the corresponding links included at the bottom of each newsletter).
For password recovery.
By unsubscribing or deleting the account.
Security measures
Users of this website are informed that "eslanzarote.com" has adopted the security, technical and organizational measures within our reach to prevent the loss, misuse, alteration, unauthorized access and theft of data, and thus guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current regulations on data protection. The personal data collected in the forms are subject to treatment, only, by the staff of "eslanzarote.com" or the designated Treatment Managers.
The “eslanzarote.com” Website also has SSL encryption, which allows the User to securely send their personal data through the website's contact or registration forms.
Data accuracy
The User declares that all the information provided by him is true and correct and undertakes to keep it updated. The User will be responsible for the veracity of their data and will be solely responsible for any conflicts or litigation that may result from the falsity of the same. It is important that, so that we can keep the personal data updated, the User informs “eslanzarote.com” whenever there has been any change in them.
Exercise of User Rights
The LOPD and GDD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do this, the User must go, providing documentation that proves his identity (DNI or passport), by email to [email protected], or by written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: name and surname of the User, the object of the request, the address and the supporting data.
The exercise of rights must be carried out by the User himself. However, they may be executed by a person authorized as the legal representative of the User, providing the documentation that proves said representation.
The User may request the exercise of the following rights:
Right to request access to personal data, which is the right to obtain information on whether your own personal data is being processed, the purpose of the treatment that, if any, is being carried out, as well as the information available about the origin of said data and the communications made or planned of the same.
Right to request its rectification, in case the personal data is incorrect or inaccurate, or deletion of the data that turns out to be inadequate or excessive.
Right to request the limitation of your treatment, in which case only the data strictly necessary for the exercise or defense of claims will be kept by "eslanzarote.com".
Right to oppose the treatment: refers to the right of the interested party not to carry out the processing of their personal data or to cease it in the cases in which their consent is not necessary for the treatment, in the case of files of commercial prospecting or that have the purpose of adopting decisions referring to the interested party and based solely on the automated processing of their data, unless for legitimate reasons or the exercise or defense of possible claims they have to continue processing.
Right to data portability: in case you want your data to be processed by another company, "eslanzarote.com" will facilitate the portability of your data in an exportable format.
In the event that consent has been granted for a specific purpose, the User has the right to withdraw the consent at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.
We promise to execute all these rights within the maximum legal term (1 month).
If a User considers that there is a problem with the way in which "eslanzarote.com" is handling their data, they can direct their claims to the Security Manager or to the corresponding data protection authority, with the Spanish Data Protection Agency being the indicated in the case of Spain.
Data retention
The personal data of the Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to attend to the request for information, or until the consent granted is revoked.
The Client's personal data will be processed until the contractual relationship ends. The period of conservation of personal data will be the minimum necessary, and may be kept until:
4 years: Law on Infractions and Sanctions in the Social Order (obligations in terms of affiliation, registrations, cancellations, contributions, payment of salaries...); Arts. 66 and following General Tax Law (accounting books…)
5 years: Art. 1964 Civil Code (personal actions without special term)
6 years: Art. 30 Commercial Code (accounting books, invoices...)
10 years: Art. 25 Law on Prevention of Money Laundering and Financing of Terrorism.
No deadline: disaggregated and anonymized data.
For its part, the data of Users who register in the bulletin or newsletter will be kept indefinitely, until the consent granted is revoked.
Social media
"eslanzarote.com" has a profile on some of the main social networks on the Internet (Facebook, Twitter), recognizing itself in all cases as Responsible for processing the data of its followers, fans, subscribers, commenters and other User profiles (in hereafter, followers) published by “eslanzarote.com”.
The purpose of data processing by "eslanzarote.com", when the law does not prohibit it, will be to inform its followers about its activities and offers, by any means that the social network allows, as well as to provide personalized service of User Support. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.
In no case "eslanzarote.com" will extract data from social networks, unless the User's consent is specifically and expressly obtained for it (for example, to hold a contest).
International Data Transfers
“eslanzarote.com” uses the services of sending electronic communications from the company Mailchimp, which is located in the United States. Standard contractual clauses approved by the European Commission have been signed with this entity, in order to ensure the appropriate level of protection in the processing of your personal data, in accordance with the criteria established by RGPD.
With the acceptance of this privacy policy, the User expressly and unequivocally grants their consent for the international transfer of their data to this service provider company/ies.
Confidentiality
The information provided by the User will, in any case, be considered confidential, and may not be used for purposes other than those described here. “eslanzarote.com” undertakes not to divulge or disclose information about the User's claims, the reasons for the information requested or the duration of their relationship with the User.
Validity
This privacy and data protection policy has been drafted by ExpertosLOPD®, an adaptation company RGPD – LOPD (data protection), on February 22, 2022, and may vary depending on the changes in regulations and jurisprudence that are are produced, being the responsibility of the owner of the data to read the updated document, in order to know their rights and obligations in this regard at all times.
In accordance with these regulations, we inform you that the use of our website may require the provision of certain personal data through registration or contact forms, or by sending emails, and that these will be processed by "eslanzarote.com" , Responsible for the treatment, whose data are:
Company Name: Alberto Martin Tabares
NIF: 45552249J
Registered Office: Los Reyes 89 - 35550, San Bartolomé De Lanzarote, Las Palmas, Spain
Telephone: 658 759 103
eMail: [email protected]
Collection and Processing of Personal Data
A personal data is any information related to a person: name, email, address, telephone, NIF/NIE... Additionally, when a User visits our website, certain information is automatically stored for technical reasons, such as the IP address assigned by your Internet access provider.
“eslanzarote.com”, as Responsible for the Treatment, has the duty to inform the Users of its website about the collection of personal data that can be carried out, either by sending an email or by completing the forms included in the website.
Only the precise data will be obtained to be able to perform the contracted service, or to be able to adequately respond to the request for information made by the User. The data collected is identifying and corresponds to a reasonable minimum to be able to carry out the activity carried out. In particular, specially protected data is not collected at any time. In no case will a different use of the data be made than the purpose for which they have been collected.
Contact/email forms
Purpose: Respond to your request for information made through our contact form(s).
Legitimation: The legal basis that legitimizes this treatment is the User's consent, which may be revoked at any time.
Transfer of data: Personal data will be processed through servers managed by Web Empresa, which will be considered the Data Processor.
Mailing list registration forms (newsletter)
Purpose: Sending communications, some of them commercial, of interest to the Users according to the theme of the blog. As established by the LSSICE, "eslanzarote.com" undertakes not to send commercial communications without identifying them as such. For these purposes, the information sent to customers for the maintenance of the existing contractual relationship, if any, will not be considered as commercial communication.
Legitimation: The legal basis that legitimizes this treatment is the User's consent, which may be revoked at any time.
Transfer of data: Personal data will be processed through servers managed by Mailchimp, which will be considered the Data Processor.
Registration forms/client registration/contracting
Purposes:
Manage your User registration on our website.
Manage the reservations made.
Provide information about the processing and status of reservations.
Sending communications via email and/or telephone, in order to inform the User of possible incidents, errors, problems and/or status of reservations or contracts.
Legitimation: The legal basis that legitimizes this treatment is the execution of a contract.
Transfer of data: "eslanzarote.com" will not transfer or communicate your data to any third party, except in the cases provided by law or when it is strictly necessary for the provision of a service. Specifically, the data may be transferred to:
Technology service providers.
Payment service providers.
Courier and parcel companies.
Third parties or intermediaries, as service providers, operating on our own behalf (management, consultancy...).
Data transfers will occur respecting the strictest confidentiality, using the necessary measures, such as the signing of confidentiality contracts, or adherence to their privacy policies established on their respective web pages. The User may refuse to transfer their data to the Treatment Managers, by written request, by any of the aforementioned means.
In addition, in those cases where it is necessary, Customer data may be transferred to certain bodies, in compliance with a legal obligation: Spanish Tax Agency, banking entities, Labor Inspection, etc.
Minors
Only people over 14 years of age may provide personal data on this website. As required by the LOPD and GDD, in the case of minors under 14 years of age, the consent of their parents or guardians will be a mandatory condition for us to process their personal data.
On the other hand, only people over 18 years of age can contract our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.
User Registration - Passwords
In order to contract the services offered on this website, registration as a User is necessary. To do this, the User must fill out the corresponding form, in which we initially collect the following information:
Name and surname
Email and/or phone
Shipping addresses, if applicable
IP
Username Password
In addition, the User must accept the Contract Conditions, set out in another section of the website.
The User must also provide a password, which must meet certain security requirements. They do not expire. To recover the password, the User must go to the specific recovery form and enter their email to continue with the process and be able to modify it, by clicking on the link that will be sent to the email address entered. The User is responsible for keeping the confidentiality of his password, as well as for all the uses he makes of it. You must notify “eslanzarote.com” of any unauthorized use of your account or password as soon as possible.
The User, once registered, has access to a private panel, in which he can see certain contents, record of reservations made, reservation status, etc. He can also manage his account options, such as the password or User data.
The User may receive the following notifications:
When registering on the platform (account validation email).
Those necessary to manage reservations or contracts, such as supporting documents, incidents, renewals, etc.
newsletter of the website if they have registered on it (the User may unsubscribe in their private area and in the corresponding links included at the bottom of each newsletter).
For password recovery.
By unsubscribing or deleting the account.
Security measures
Users of this website are informed that "eslanzarote.com" has adopted the security, technical and organizational measures within our reach to prevent the loss, misuse, alteration, unauthorized access and theft of data, and thus guarantee the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current regulations on data protection. The personal data collected in the forms are subject to treatment, only, by the staff of "eslanzarote.com" or the designated Treatment Managers.
The “eslanzarote.com” Website also has SSL encryption, which allows the User to securely send their personal data through the website's contact or registration forms.
Data accuracy
The User declares that all the information provided by him is true and correct and undertakes to keep it updated. The User will be responsible for the veracity of their data and will be solely responsible for any conflicts or litigation that may result from the falsity of the same. It is important that, so that we can keep the personal data updated, the User informs “eslanzarote.com” whenever there has been any change in them.
Exercise of User Rights
The LOPD and GDD and the RGPD grant interested parties the possibility of exercising a series of rights related to the processing of their personal data. To do this, the User must go, providing documentation that proves his identity (DNI or passport), by email to [email protected], or by written communication to the address that appears in our Legal Notice. Said communication must reflect the following information: name and surname of the User, the object of the request, the address and the supporting data.
The exercise of rights must be carried out by the User himself. However, they may be executed by a person authorized as the legal representative of the User, providing the documentation that proves said representation.
The User may request the exercise of the following rights:
Right to request access to personal data, which is the right to obtain information on whether your own personal data is being processed, the purpose of the treatment that, if any, is being carried out, as well as the information available about the origin of said data and the communications made or planned of the same.
Right to request its rectification, in case the personal data is incorrect or inaccurate, or deletion of the data that turns out to be inadequate or excessive.
Right to request the limitation of your treatment, in which case only the data strictly necessary for the exercise or defense of claims will be kept by "eslanzarote.com".
Right to oppose the treatment: refers to the right of the interested party not to carry out the processing of their personal data or to cease it in the cases in which their consent is not necessary for the treatment, in the case of files of commercial prospecting or that have the purpose of adopting decisions referring to the interested party and based solely on the automated processing of their data, unless for legitimate reasons or the exercise or defense of possible claims they have to continue processing.
Right to data portability: in case you want your data to be processed by another company, "eslanzarote.com" will facilitate the portability of your data in an exportable format.
In the event that consent has been granted for a specific purpose, the User has the right to withdraw the consent at any time, without affecting the legality of the treatment based on the consent prior to its withdrawal.
We promise to execute all these rights within the maximum legal term (1 month).
If a User considers that there is a problem with the way in which "eslanzarote.com" is handling their data, they can direct their claims to the Security Manager or to the corresponding data protection authority, with the Spanish Data Protection Agency being the indicated in the case of Spain.
Data retention
The personal data of the Users who use the contact form or who send us an email requesting information will be processed for the time strictly necessary to attend to the request for information, or until the consent granted is revoked.
The Client's personal data will be processed until the contractual relationship ends. The period of conservation of personal data will be the minimum necessary, and may be kept until:
4 years: Law on Infractions and Sanctions in the Social Order (obligations in terms of affiliation, registrations, cancellations, contributions, payment of salaries...); Arts. 66 and following General Tax Law (accounting books…)
5 years: Art. 1964 Civil Code (personal actions without special term)
6 years: Art. 30 Commercial Code (accounting books, invoices...)
10 years: Art. 25 Law on Prevention of Money Laundering and Financing of Terrorism.
No deadline: disaggregated and anonymized data.
For its part, the data of Users who register in the bulletin or newsletter will be kept indefinitely, until the consent granted is revoked.
Social media
"eslanzarote.com" has a profile on some of the main social networks on the Internet (Facebook, Twitter), recognizing itself in all cases as Responsible for processing the data of its followers, fans, subscribers, commenters and other User profiles (in hereafter, followers) published by “eslanzarote.com”.
The purpose of data processing by "eslanzarote.com", when the law does not prohibit it, will be to inform its followers about its activities and offers, by any means that the social network allows, as well as to provide personalized service of User Support. The legal basis that legitimizes this treatment will be the consent of the interested party, which may be revoked at any time.
In no case "eslanzarote.com" will extract data from social networks, unless the User's consent is specifically and expressly obtained for it (for example, to hold a contest).
International Data Transfers
“eslanzarote.com” uses the services of sending electronic communications from the company Mailchimp, which is located in the United States. Standard contractual clauses approved by the European Commission have been signed with this entity, in order to ensure the appropriate level of protection in the processing of your personal data, in accordance with the criteria established by RGPD.
With the acceptance of this privacy policy, the User expressly and unequivocally grants their consent for the international transfer of their data to this service provider company/ies.
Confidentiality
The information provided by the User will, in any case, be considered confidential, and may not be used for purposes other than those described here. “eslanzarote.com” undertakes not to divulge or disclose information about the User's claims, the reasons for the information requested or the duration of their relationship with the User.
Validity
This privacy and data protection policy has been drafted by ExpertosLOPD®, an adaptation company RGPD – LOPD (data protection), on February 22, 2022, and may vary depending on the changes in regulations and jurisprudence that are are produced, being the responsibility of the owner of the data to read the updated document, in order to know their rights and obligations in this regard at all times.