Title 1

Privacy Policy and Data Protection.

Website Privacy Policy

Informative Clause
In compliance with the principles of lawfulness and transparency according to Article 13 of Regulation (EU) 2016/679 of the European Parliament and Council, dated April 27, 2016, regarding the protection of natural persons in relation to the processing of personal data (GDPR), HOTELANZA INVERSIONES, S.L., with NIF B76202951 and the website address https://www.flamingolanzarote.net/ informs you of the characteristics of the personal data processing carried out under its responsibility:

Processing:
(I) Web Requests.
(II) Invoicing, tax, accounting, and commercial management.
(III) Administrative management.
(IV) Customer registration.
(V) Management of rights regarding the privacy of interested parties.
(VI) Management of accommodation services.
(VII) Communication of data from the Guest Registry.
(VIII) Sending newsletters.
(IX) Customer loyalty.

Purpose:
(I) To address requests received through the contact forms on the company's website.
(II) To issue invoices to customers, prepare official accounting, calculate, present, and settle taxes, and prepare commercial documents such as balance sheets and reports.
(III) Administrative management related to business activities.
(IV) Managing customer registrations.
(V) To address requests for the exercise of rights related to personal data, as well as security breaches that may affect the rights and freedoms of the interested parties.
(VI) Provision of services to customers.
(VII) To communicate legally established data to State Security Forces and Corps for the prevention, investigation, detection, or prosecution of criminal offenses.
(VIII) To send commercial information.
(IX) To offer customers in the loyalty program vouchers, discounts, and exclusive offers.

Legitimization:
(I), (VIII), and (IX) Consent of the interested party.
(II) Legal obligation imposed by accounting and tax regulations.
(III), (IV), and (VI) Application of contractual and pre-contractual measures. Execution of service provision contract.
(V) Regulation (EU) 2016/679 of the European Parliament and Council, dated April 27, 2016, regarding the protection of natural persons in relation to the processing of personal data.
(VII) L.O 4/2015 of March 30, on Citizen Security and Order INT/1922/2003, dated July 4.

Retention Period:
(I) The necessary period to address the request, unless the user requests deletion.
(II) Six years for commercial purposes and 15 years if tax benefits need to be accredited.
(III), (IV), (V), (VI), (VII), (VIII), and (IX) While the service is provided and for the necessary time to address issues related to the services provided, usually two years after customer cancellation.
The necessary time to address any responsibilities that may arise from all the previous processing.

Recipients:
(II) AEAT, Banking Entities, Government of the Canary Islands, Mercantile Registry.
(V) Spanish Data Protection Agency.
(VII) State Security Forces and Corps.

Exercise of Rights:
You may exercise your rights of access, rectification, deletion, limitation, and opposition to processing, under the terms and conditions established by the GDPR, by sending a request via email to rgpd@hotelanza.es, indicating in all cases the Reference: “Data Protection” along with some means to verify your identity. You have the right to file a complaint with the Spanish Data Protection Agency, especially if your request has not been addressed.

ADDITIONAL INFORMATION

Disclosure to Third Parties
As in previous cases, the data we communicate to third parties is always limited to the minimum necessary.

What Security Measures Do We Apply to Personal Data?
HOTELANZA INVERSIONES, S.L. has appropriate policies and technical and organizational measures to safeguard and protect your personal data against illegal or unauthorized access, accidental loss or destruction, damage, and illegal or unauthorized use and disclosure.

We will also take all reasonable precautions to ensure that our personnel and employees who have access to your personal data have received appropriate training.

What Are Your Rights as a Data Subject?
You have the right to request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes for which it was collected. You have the right to obtain confirmation as to whether or not HOTELANZA INVERSIONES, S.L. is processing personal data concerning you. You have the right to access your personal data and obtain a copy of it, as well as to request the rectification of inaccurate data or, where applicable, to request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, you may request the limitation of the processing of your data, in which case we will only retain it for the exercise or defense of claims. In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. HOTELANZA INVERSIONES, S.L. will cease to process the data, except for compelling legitimate grounds or for the exercise or defense of possible claims. You may also exercise the right to data portability, as well as revoke any consents you have provided. You may exercise these rights by sending a request to the email rgpd@hotelanza.es, attaching a document that verifies your identity, and clearly indicating the right you wish to exercise. Finally, we inform you that you can file a complaint with the Spanish Data Protection Agency, especially when you have not obtained satisfaction in the exercise of your rights.