PRIVACY POLICY

PRIVACY POLICY - ADDITIONAL INFORMATION

Our privacy policy forms part of the general conditions governing this website.

Who is responsible for processing your data?

CORDIAL CANARIAS HOTELS y RESORT, S.L. CIF (Tax ID): B35761626

Address: Calle Cartago, 22, 1ª Planta, El Tablero, 35109, San Bartolomé de Tirajana.

Tel.: 928721147

Email: lopd@becordial.com

You can use any of the above ways to contact us.

We reserve the right to change or adapt this privacy policy at any time. We recommend you read it and if you have registered and access your account or profile, you will be informed of any changes.

If you are any of the following collectives, please consult the dropdown information:

+ BOOKINGS / GUESTS

Why do we process your personal data?

We process your data to manage your booking, your stay at the hotel and to ensure payment of the costs arising from your stay.

We will give your data to law enforcement agencies to comply with current legislation and to any agencies or travel operators involved.

We will keep your data for a minimum of six years to comply with tax, commercial, consumer and traveller registration regulations.

What is the lawful basis for processing your data?

The lawful basis is your consent.

+ CONTACTS VIA THE WEBSITE OR EMAIL

Which data do we collect through the website?

We may process your IP address, the operating system or browser you use and even anonymously how long your visit lasts.

If you provide us with data in the contact form, you will be identified to contact you if necessary.

Why do we process your personal data?

• To respond to your enquiries, requests or questions.
• To manage the service you request, to respond to your request or to process your enquiries.
• To send you information concerning your request electronically.
• To send you marketing or event information electronically provided we have your express authorisation.
• To conduct online analyses and improvements of our products and services. To improve our marketing strategy.

What is the lawful basis for processing your data?

The data subject’s acceptance and consent: when you have to fill in a form and click on the send button to make a request, this will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to that form or have accepted our privacy policy.

All our forms have the * symbol next to compulsory data. If you do not fill in these fields or you do not tick the checkbox accepting our privacy policy, you will not be able to send the information. The checkbox text is usually as follows: ‘□ I am over 14 and I have read and accepted the privacy policy.’

+ CORDIAL CLUB MEMBERS

Why do we process your personal data?

• To offer you discounts and other benefits at our establishments.
• With your consent, to send you information on our offers and benefits.
• To manage the loyalty programme.

What is the lawful basis for processing your data?

The lawful basis for the above-mentioned processing is the data subject’s consent.

How long do we keep your personal data?

We will keep your data indefinitely provided you do not withdraw your consent or ask us to erase your data or object to us processing it.

+ CONTACTS VIA SOCIAL MEDIA

Why do we process your personal data?

• To respond to your enquiries, requests or questions.
• To manage the service you request, to respond to your request or to process your enquiries.
• To communicate with you and to create a community of followers.

What is the lawful basis for processing your data?

Your acceptance of a contractual relationship in the social media environments based on their privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://help.instagram.com/155833707900388

Twitter http://twitter.com/privacy

LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Pinterest https://policy.pinterest.com/en-gb/privacy-policy

Google* https://policies.google.com/privacy

*(Google+ and YouTube)

How long do we keep your personal data?

We can only consult or delete your data in a restricted manner as you have a specific profile. We will process your data for as long as you follow us, are friends with us or click ‘like’, ‘follow’ or similar buttons.

If you wish to rectify your data or restrict information or publications, go to your profile or user settings on the appropriate social network.

+ JOB OFFERS

Why do we process your personal data?

• To organise selection processes to hire employees.

• To call you for job interviews and to assess your application.
• If you have given us your consent, we may transfer your data to collaborating or similar companies with the sole aim of helping you find employment.
• By ticking the checkbox to accept our privacy policy, you give us your consent to transfer your job application to the establishments forming the group of companies so you can be included in their personnel selection processes.

We will securely destroy your curriculum vitae one year after receiving it.

What is the lawful basis for processing your data?

The lawful basis is your unequivocal consent when you send us your CV.

+ PROMOTIONS AND ADVERTISING

What data do we collect to send you marketing information?

CORDIAL CANARIAS HOTELS y RESORT, S.L. may use your contact details to send you notifications of our products or services that you might find especially interesting. We will ask you for your consent to process your personal data for this purpose in the appropriate form. At any time you may ask us to stop sending you these notifications and click on unsubscribe in any email we send you.

Why do we process your personal data?

• To inform you of products or services you may be interested in and also promotions and benefits of CORDIAL CANARY ISLANDS HOTELS y RESORT, S.L.
• To send you marketing or event information electronically provided we have your express authorisation.
• To analyse and improve our mailings to streamline our marketing strategy.

What is the lawful basis for processing your data?

The lawful basis for processing your data is your consent, which we ask for in the appropriate form.

How long will we keep this data to send you promotions and advertising?

Once you have given your consent, we will keep your personal data for this purpose until you inform us that you no longer want to receive notifications from us.

Do we include third-party personal data?

No, we generally only process data that data subjects provide us with. If you provide us with third-party data, you must first inform these people and ask for their consent, otherwise we are exempt from any liability for failure to comply with this requirement.

And the personal data of minors?

We do not process the personal data of children under 14. Therefore, please do not provide us with this data if you are not 14 or over and do not provide us with third-party data of children under 14. CORDIAL CANARIAS HOTELS y RESORT, S.L. is exempt from any liability for failure to comply with this provision.

Will we contact you electronically?

• We will only contact you electronically to manage your request if this is one of the contact methods you have provided us with.
• If we send you any advertising, it will only be with your prior express authorisation.

What security measures have we put in place?

You do not need to worry. We have adopted an optimal level of protection of the personal data we handle and we have installed all the state-of-the-art resources and technical measures available to us to prevent the loss, incorrect use, alteration, unauthorised access and theft of your personal data.

Who will we transfer your data to?

We will not transfer your data to third parties unless it is a legal obligation. Specifically, we will notify the tax authorities and banks and financial institutions for the payment of the service we provide or the product you acquire. We will also notify the people responsible for the necessary processing to implement the agreement.

If you choose an application, website, platform, bank card or any other online service for your purchase or payment, your data will be transferred to this platform or it will be processed in its environment completely securely at all times.

The website development and maintenance company and the hosting company will access our website when we ask them to do so. They have signed a service provision contract that obliges them to maintain the same level of privacy as we do.

Any international data transfer while using US applications will adhere to the Privacy Shield Framework that ensures US software companies comply with European data protection policies concerning privacy.

What rights do you have?

• To know whether we are processing your data or not.
• To access your personal data.
• To ask us to rectify your data if it is not correct.
• To ask us to erase your data if it is no longer necessary for the purposes for which we collected it or if you withdraw your consent.
• To ask us to restrict the processing of your data in some circumstances. In this case, we will only keep your data in accordance with current regulations.
• To receive your data in a structured or commonly used and machine-readable format for data portability. If you prefer, we can send your data to the new data controller you notify us of. This is only valid in certain cases.
• To lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) or relevant supervisory authority if you believe we have acted inappropriately.
• To withdraw your consent at any time for any processing you previously consented to.

If your data changes, we would be grateful if you could notify us so that we can update our records.

Do you want a form to exercise your rights?

• We have forms so you can exercise your rights. Ask for one by email or, if you prefer, you can use the forms produced by the Agencia Española de Protección de Datos or by third parties.
• These forms must be signed electronically or be accompanied by a photocopy of your ID.
• If another person represents you, they must attach a copy of their ID, or use their electronic signature.
• Forms can be submitted in person, sent by post or email to the address of the data controller mentioned at the beginning of this text.

How long will we take to respond when you exercise your rights?

That depends on the right, but at most one month from your request, and two months if the subject matter is highly complex and we notify you that we need more time.

Do we process cookies?

If we use a cookie type that is not necessary, you can consult our cookie policy by following the link from the homepage.

How long do we keep your personal data?

• We will keep your personal data for as long as you remain linked to us.
• When you no longer wish to be linked to us, we will keep your personal data processed for each purpose for the legally established periods, including the period a judge or court may require your data in line with the statute of limitations for legal action.
• Therefore, we will keep your personal data provided the above-mentioned legal periods have not expired, if there is a legal obligation to keep your data, or, if there is no legal period, until the data subject asks us to erase their data or withdraws their consent.
• We will keep all the information and communication concerning your purchase or the provision of our service while the warranties for these products or services are in force to address any possible claims.