Privacy policy
1. Information to the user
Who is responsible for the processing of your personal data?
Martell Lozano, S. L., which operates under the commercial name Gran Canaria Stay (hereinafter, responsible), with CIF B35869254 and address at Calle Rafael Martell Rodríguez, 1, 35240, Carrizal de Ingenio, Las Palmas, is responsible for the processing of your personal data. You can contact by email hola@gran-canaria-stay.com.
This policy informs about the treatments carried out through the website, the contact forms, the reservation system and the application or guest area used for the registration, check-in and the management of the stay.
The data will be treated in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
Why do we process your personal data?
We process your data for the following purposes, depending on the relationship you maintain with us:
- Contact and inquiries: Attend information requests received through the contact form, email or other service channels, including inquiries about availability, accommodation and reservation conditions.
- Reservations and contracting: Manage reservation requests and confirmations, their modifications or cancellations, payments, billing and communications related to the contracted accommodation.
- Application of guests and check-in: Manage the check-in and check-in, identify the people staying, provide instructions and means of access to the accommodation, attend to requests and incidents and provide the services associated with the stay.
- Documentary record and communication of travelers: Collect, register, keep and communicate to the competent authorities the data required by the lodging regulations, in particular by Royal Decree 933/2021.
- Legal obligations and claims: Comply with tax, accounting and other applicable obligations, and manage claims and the defense of our rights.
- Subscriptions and commercial communications: When you subscribe or expressly authorize it, send you news, offers and information about our accommodations and services.
- Security of digital services: Prevent and detect unauthorized access, misuse and technical incidents that may affect the website, the reservation system or the guest area.
The treatments associated with cookies and similar technologies are detailed in the Cookies Policy.
Why can we process your personal data?
The legal bases depend on the purpose of the treatment:
- Pre-contractual measures and execution of the contract —Article 6.1.b) of the GDPR—: Attend requests prior to hiring, manage reservations, payments and cancellations and provide accommodation service, including check-in, access and care during the stay, when you are part of the contract.
- Compliance with legal obligations —Article 6.1.c) of the GDPR—: Carry out the documentary registration and communication of data of passengers provided for in Royal Decree 933/2021 and comply with tax, accounting and other obligations obligations legally enforceable.
- Legitimate interest —Article 6.1.f) of the GDPR—: Address general consultations not related to a hiring request; Manage the strictly necessary data of the companions to organize and lend the reserved accommodation; protect the security of our digital services; and formulate, exercise or defend claims. These interests will be weighted with the rights and freedoms of the affected persons.
- Consent —Article 6.1.a) of the GDPR—: Manage subscriptions and send the commercial communications you have authorized, as well as use the cookies or technologies that require it. You can withdraw the consent at any time without affecting the legality of the treatment prior to its withdrawal.
The registration of travelers and treatments necessary to manage the accommodation are not based on the acceptance of this policy or require additional consent. Reading confirmation proves that data protection information has been provided.
What data do we process and how do we get it?
Depending on the service used, we can try:
- Identification and contact data, such as name, surnames, email, telephone and address.
- Data of the reservation and stay, such as accommodation, dates, number of guests, companions, requests, communications and incidents.
- Billing, payment and transaction data necessary to manage the service and comply with legal obligations.
- Data required for the registration of travelers, including the identification data, of the identity document, of residence and contact, of the stay and the transaction that are legally applicable. Regarding minors, the data will be processed and, where appropriate, the relationship of kinship required by said regulations.
- Technical data necessary for the operation and security of digital services, such as IP address and access logs.
The data can be provided directly by you through the contact form, the reservation system, the check-in or the communications maintained with us. We may also receive them from the person making the reservation for the other guests or from the platform or agency through which the accommodation has been contracted.
If you provide data from other people, you must limit yourself to those necessary to manage the reservation and stay and transfer this privacy policy to them. The data of minors will be provided by the corresponding persons in accordance with the applicable regulations.
How long will we save your personal data?
Conservation periods depend on the purpose:
- Contact and inquiries: During the time necessary to attend the request and manage its follow-up. If it gives rise to a reservation, the necessary data will be incorporated into its management.
- Reservations, check-in and stay: During the time necessary to manage the service and, later, during the legally required or necessary periods to meet possible responsibilities.
- Documentary record of travelers: for three years from the end of the contracted service or provision, in accordance with Royal Decree 933/2021.
- Tax and accounting documentation: During the deadlines required by the applicable regulations; In general, four years for tax obligations and six years for commercial documentation, without prejudice to the assumptions that require higher conservation.
- Subscriptions and commercial communications: until you withdraw consent or request the unsubscribe. The minimum data necessary to respect your request not to receive further communications and prove the fulfillment of our obligations may be preserved.
- Security: for the time needed and provided to detect and manage incidents. If an incident or claim occurs, the related data may be retained during processing and the applicable deadlines.
Once the purpose has been fulfilled, the data will be deleted, keeping it blocked when legally appropriate. Once the applicable deadlines are over, they will be safely destroyed or anonymized irreversibly.
Who do we provide your personal data to?
The data may be communicated to:
- The competent authorities, through the systems enabled by the Ministry of the Interior, to fulfill the obligations of communicating data of passengers.
- tax administrations, courts and courts and other public bodies when there is a legal obligation.
- Financial entities and payment service providers, to the extent necessary to process collections, returns and other operations related to the reserve.
- Platforms or agencies through which you have booked, when necessary to manage the reservation, its modifications, cancellations or incidents.
Likewise, the providers who provide services on behalf of the person in charge, such as those of reservation management and check-in —including the HotelGest platform—, technological accommodation, computer maintenance and administrative, accounting or tax advice, will be able to access your data. When they act as processors, such access will be subject to the contracts and guarantees required by the data protection regulations.
Martell Lozano, S. L. provides accommodation services on your own behalf. The use of technological platforms does not change its status as responsible for the treatments described in this policy.
Are international data transfers made?
To manage the reservations, the registration and the check-in of guests, we use HotelGest, a service provided by CloudSoft PMS, S. L., established in the Principality of Andorra, which treats personal data on our own as a processor.
The transfer of data to Andorra is covered by Decision 2010/625/EU of the European Commission, which recognizes that this country offers an adequate level of protection of personal data, in accordance with article 45 of the GDPR.
You can request more information about these transfers and the conditions of treatment by writing to hola@gran-canaria-stay.com.
What are your rights?
You can request access to your data, its rectification or deletion, limitation of treatment and portability, as well as opposing the treatment, in the terms established by the regulations.
When the treatment is based on consent, you can withdraw it at any time, without affecting the legality of the treatment carried out previously. To stop receiving commercial communications you can also use the low mechanism included in each shipment.
When the treatment is based on legitimate interest, you can object for reasons related to your particular situation.
You can exercise your rights by addressing Martell Lozano, S. L., at Calle Rafael Martell Rodríguez, 1, 35240, Carrizal de Ingenio, Las Palmas, or by email to Hola@gran-canaria-stay.com, indicating the right you want to exercise. If there are reasonable doubts about your identity, we may request the additional information necessary to verify it.
The exercise of these rights does not necessarily imply the deletion of the data that we must keep to comply with legal obligations or meet claims.
If you consider that the treatment does not conform to the regulations, you can file a claim with the Spanish Data Protection Agency: www.aepd.es.
Contact details to exercise your rights
Martell Lozano, S. L.
Calle Rafael Martell Rodríguez, 1. 35240 – Carrizal de Ingenio
2. Mandatory or optional nature of the information provided by the user
The fields identified as mandatory in the contact, reservation or check-in forms are necessary to attend to the request, manage the service or comply with a legal obligation. The other fields are voluntary.
If you do not provide the necessary data to attend to a query, we may not be able to answer it properly. The lack of the essential data to formalize the reservation or comply with the obligations of identification and registration of travelers can prevent completing the registration and lending the accommodation.
The subscription to commercial communications is voluntary and does not condition the reservation or the stay.
The user must provide accurate and up-to-date data and communicate the necessary modifications. Confirmation of reading data protection information does not constitute consent for additional purposes.
3. Security measures
The manager applies risk-appropriate technical and organizational measures to protect personal data from unauthorized loss, alteration, access or communication. These measures include the control of access to information, the duty of confidentiality, and retention and recovery procedures, and are reviewed to maintain an adequate level of safety for the treatments carried out.
For more information on privacy guarantees, you can contact the person in charge.