We are HOTEL PRINCESA YAIZA S.A., and we process your data as the Data Controller. This means we are responsible for how we use and protect your personal data.
WHAT DO WE USE YOUR DATA FOR?
We use the data you provide online or through any other means to respond to your queries and suggestions, provide the requested services or products, and manage your online reservation.
WHY DO WE HAVE YOUR DATA?
We are legally entitled to process your data for various reasons. When you fill out a form or send an email with a query or suggestion, we have a legitimate interest in addressing it. When you make a reservation, we must execute the contract you accept with us. Likewise, we have a legal obligation to issue an invoice that includes your personal data once the service or purchase is made.
WHO DO WE SHARE YOUR DATA WITH?
We only share your data with partner companies to manage requests and provide services or products, as well as with banks and legally mandated entities. We do not sell your data to third parties under any circumstances.
WHAT ARE YOUR RIGHTS?
You have the right to access, rectify, or delete your personal data. You may also object to data processing previously authorized, request data portability, and not be subject to automated individual decision-making.
In the processing of your personal data, we apply the following principles to ensure maximum protection for you:
LAWFULNESS, FAIRNESS AND TRANSPARENCY PRINCIPLE: We will always require your consent to process your personal data for one or more specific purposes, which we will inform you of in advance with full transparency.
DATA MINIMIZATION PRINCIPLE: We will only request the data strictly necessary for the purposes for which we require it — the minimum possible.
STORAGE LIMITATION PRINCIPLE: Data will be retained no longer than necessary for the purposes of processing. Depending on the purpose, we will inform you of the corresponding retention period. In the case of subscriptions, we will periodically review our lists and delete any records that have remained inactive for a considerable period.
INTEGRITY AND CONFIDENTIALITY PRINCIPLE: Your data will be processed in a way that ensures appropriate security and guarantees confidentiality. You should know that we take all necessary precautions to prevent unauthorized access or misuse of our users’ data by third parties.
This Privacy Policy provides more detailed information on how we use the personal data of our clients, suppliers and users, and, in general, of all individuals who are in contact with us, regardless of the communication method used (online form, telephone, email or in person).
We like to be transparent about what we do with your personal data, so that you understand the implications of our use and the rights you have in relation to your data. For this reason, we keep our Privacy Policy, Legal Notice, and Cookie Policy up to date. You can review this information on this same website.
If you have any questions or would like more information about the privacy policy, you may continue reading this document.
HOTEL PRINCESA YAIZA S.A. is committed to complying with current personal data protection laws. In accordance with the GDPR and the Spanish Data Protection Law (LOPDGDD), this Privacy Policy informs users and data subjects of the following:
1. WHO IS RESPONSIBLE FOR YOUR DATA?
The data controller is HOTEL PRINCESA YAIZA S.A.:
- Identity: HOTEL PRINCESA YAIZA – B76214170
- Address: Avenida Papagayo 22, Playa Blanca (Yaiza), 35580 Las Palmas, Spain
- Phone: +34 928 519 300
- Website: www.princesayaiza.com
- Email: lopd@rosahotels.com
We process your data through forms, website navigation, and emails. These processes are registered in our Processing Activities Log in accordance with the GDPR.
2. WHAT IS YOUR DATA USED FOR?
We process data from website users and any third parties in contact with us. Based on the type of relationship, we detail the data collected, its purpose, and legal basis.
WEBSITE USERS
WHAT DATA DO WE COLLECT FROM OUR WEBSITE USERS?
The personal data requested by HOTEL PRINCESA YAIZA S.A. includes:
- Identifying data: first and last name, phone number, postal and email address
- Financial data: credit card
- Data related to the request
Data from users who subscribe to the newsletter / wish to receive commercial communications and information:
- Identifying data: first and last name, email address
Data from users who browse our website: data provided by cookies and Google Analytics
FOR WHAT PURPOSES WILL WE PROCESS YOUR PERSONAL DATA?
When the user accepts our privacy policy, they authorize us to use the personal data provided for the following purposes:
-
To send you the requested information and provide the service through the various forms available on our website.
-
To organize, announce, and hold events or similar activities.
-
To conduct statistical studies to assess the success of campaigns or the channels through which the user learned about a service provided by HOTEL PRINCESA YAIZA S.A. These data are collected solely for statistical purposes and are for internal use by HOTEL PRINCESA YAIZA S.A.
-
To manage your comments on our blog.
-
To send you the newsletter, when subscribed, including events, activities, and promotions from HOTEL PRINCESA YAIZA S.A. and the sector that may be of interest to you.
-
To send you commercial communications about offers, activities, and promotions from HOTEL PRINCESA YAIZA S.A. and the sector that may be of interest to you, through conventional or electronic means, when you have checked the box indicating your desire to receive such information.
HOW DO WE OBTAIN YOUR DATA?
We obtain your data through:
-
The form completed by the website user for the specific purpose indicated therein. The form is subject to the acceptance of this privacy policy via the corresponding checkbox.
-
Browsing data obtained from the various cookies that the user accepts upon first accessing www.princesayaiza.com.
WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
The user’s express consent (Article 6.1.a of the GDPR), given by completing the various forms, checking the box to receive the newsletter and commercial communications/information about offers, activities, and promotions from HOTEL PRINCESA YAIZA S.A. and the sector that may be of interest to them, is what legitimizes the processing by HOTEL PRINCESA YAIZA S.A. The user may revoke the consent given at any time; however, revocation does not affect data processing carried out prior to the withdrawal.
Legitimate interest for the creation of browsing profiles and detecting preferences through the installation of cookies.
The execution of a contract or the adoption of pre-contractual measures when the client submits a request through the forms available on our website or requests information about services provided by HOTEL PRINCESA YAIZA S.A.
GUESTS
WHAT DATA DO WE COLLECT FROM OUR GUESTS?
Data from guests who complete any of the forms available on www.princesayaiza.com as well as at the physical location of HOTEL PRINCESA YAIZA S.A.:
- Identifying data: First and last name, telephone number, postal and email address
- Data related to the request.
Data from guests who register on our platform:
Data from guests who make a reservation or request in person at our establishment:
Data from our guests obtained through our contracts and estimates.
Data from guests who make an online or in-person reservation:
- Identifying data: Title, first name, last name, postal and email address, telephone number, billing address.
- Transaction data: Products purchased/services provided and method of payment, invoice or purchase receipt.
HOW DO WE OBTAIN YOUR DATA?
If you are an online guest, we obtain your data through:
- The form completed by the user to request information and/or a quote, place an order, or complete the online reservation on our e-commerce platform. This form is subject to the acceptance of this privacy policy via the indicated checkbox.
- Browsing data obtained from the cookies accepted by the client upon first accessing www.princesayaiza.com.
If you are a guest who made an in-person reservation, we obtain your data through:
- The guest registration form
- The acceptance of the provided quote
- The signed contract
FOR WHAT PURPOSES WILL WE PROCESS YOUR PERSONAL DATA?
- To generate and manage the documentation related to your requests and purchases.
- To provide you with information about offers, products, and services related to your purchase.
- To process your reservation through our platform.
WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
The execution of a pre-contract or contract in order to send you information and manage the service provided or the product supplied, as it would not be possible to do so otherwise.
The user’s consent for sending the newsletter and commercial communications regarding offers, activities, and promotions from HOTEL PRINCESA YAIZA S.A. and the sector that may be of interest, as well as for managing our blog. The user may revoke the consent at any time.
The legitimate interest in sending information about exclusive promotions, the latest news, and personalized content tailored to the user’s profile, as well as satisfaction surveys related to the products or services acquired.
JOB APPLICANTS AND CANDIDATES
WHAT DATA DO WE COLLECT FROM APPLICANTS?
Data from candidates collected through the “Work with Us” form by HOTEL PRINCESA YAIZA S.A. includes: full name, telephone number, postal and email address, academic and employment information, and any documents the candidate voluntarily attaches.
HOW DO WE OBTAIN YOUR DATA?
We obtain your data through the submission of a CV at our facilities or by completing the “Work with Us” form on our website.
FOR WHAT PURPOSES WILL WE PROCESS YOUR PERSONAL DATA?
The personal data provided by candidates is used solely for selection processes that are currently open or may be carried out in the future if the data was submitted for our employment pool.
WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
The user’s consent, given by submitting their data and CV on the HOTEL PRINCESA YAIZA S.A. website to participate in active selection processes as well as in future ones, as long as they do not object to the processing of their data.
SOCIAL MEDIA CONTACTS
WHAT DATA DO WE COLLECT?
Identifying data on the social network: HOTEL PRINCESA YAIZA S.A. will not request any data beyond what you have included in your user profile.
FOR WHAT PURPOSES WILL WE PROCESS YOUR PERSONAL DATA?
To respond to and manage your inquiries, requests, or questions.
To interact with you while you are part of our community of followers.
WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
The execution of a pre-contract or contract that binds you to the corresponding social network and in accordance with its privacy policies:
www.princesayaiza.com will always strive to establish appropriate mechanisms to obtain the User’s consent for the installation of cookies when required. When a user accesses our website, a pop-up appears informing them of the use of cookies and that, if they continue browsing, they are giving their consent to the installation of cookies. Acceptance of cookies implies acceptance of the storage of the IP address in the records of www.princesayaiza.com, along with the acceptance date, for a period of one year, in order to demonstrate the consent given. You can find more information in our “Cookie Policy.”
3. HOW LONG DO WE KEEP YOUR DATA?
WEBSITE USERS
Data processed based on the user’s consent will be retained as long as it remains relevant to the purpose for which it was collected and the consent is not revoked. Data processed on the basis of legitimate interest will be kept for as long as the reason for collecting it remains valid, always ensuring appropriate safeguards and respect for the rights and freedoms of the data subjects.
Data processed under the execution of a contract or pre-contractual measures will be retained for the duration of the contractual relationship, as well as the additional time required by legal obligations. The IP address obtained through cookies will be stored for one year, for the purpose of proving the user’s consent.
Regarding the retention period of cookies, you can find more information on our website in the “Cookie Policy” section.
SUPPLIERS
Data processed on the basis of legitimate interest will be kept for as long as the reason that justified its collection remains valid, while ensuring appropriate safeguards and respect for the rights and freedoms of the data subjects.
Data processed under a contract, or if part of the processing is legitimized by a legal obligation, will be retained for the duration of the contractual relationship. Once this relationship has ended, or if the processing is linked to a legal obligation, the retention period will be the one legally established, and the data subject may not revoke processing except in cases of legal data blocking provisions.
GUESTS
Data processed on the basis of the guest’s consent will be retained as long as it remains relevant to the purpose for which it was collected and the consent is not revoked. Data processed on the basis of legitimate interest will be kept for as long as the reason that justified its collection remains valid, always ensuring appropriate safeguards and respect for the rights and freedoms of the data subjects.
Data processed under a contract, or if part of the processing is legitimized by a legal obligation, will be retained for the duration of the contractual relationship. Once this relationship has ended, if the processing is linked to a legal obligation, the data will be retained for the legally established period, and the data subject may not revoke processing except in cases of legal data blocking provisions.
JOB APPLICANTS AND CANDIDATES
Data processed based on the consent of the job applicant or candidate will be retained while the selection process for which they applied remains open. If the application is not for a specific process but for future opportunities, the retention period will be a maximum of one year, after which their CV will be deleted and destroyed, unless the individual expresses their desire for it to be retained and updated.
SOCIAL MEDIA CONTACTS
Data collected from social media contacts will be retained as long as the user and HOTEL PRINCESA YAIZA S.A. remain connected on the social network. Since this data is not directly controlled by HOTEL PRINCESA YAIZA S.A., we can only view or delete such data in a limited way. We will retain your data for as long as you are connected with HOTEL PRINCESA YAIZA S.A. through ‘friends’, ‘likes’, ‘follow’ or similar buttons.
To rectify, restrict, or remove shared information or publications, HOTEL PRINCESA YAIZA S.A. is not responsible for performing these changes — it is the user’s responsibility to configure their social media profile settings according to the privacy policy of the platform. Regardless of the legal basis for the data collection, it may be used for scientific, historical, or statistical research purposes, always implementing adequate safeguards and respecting the rights and freedoms of the data subjects.
4. ADDITIONAL INFORMATION ON DATA PROCESSING
Only individuals over 18 years of age may provide data through our website or email. If you are under this age, you must have the consent of your parents or legal guardians. The user guarantees the authenticity and currency of all data provided to HOTEL PRINCESA YAIZA S.A. and declares to be over 18 years of age, being solely responsible for any false or inaccurate statements made. If a reservation is made, the individual must be at least 18 years old, the legal age of majority and legal capacity according to the Civil Code.
The personal data processed by HOTEL PRINCESA YAIZA S.A. may be mandatory or voluntary. The online forms do not request special category data to ensure your privacy. If such data is required to provide a service, it will be requested through another means.
The requested data in forms are:
- Identifying information: full name, phone number, mailing and email address.
- Data related to the request.
- Data from users who subscribe to the newsletter or wish to receive commercial communications and information.
Voluntary information is that which the user is not required to provide in order to contact us. Fields marked with an asterisk (*) or labeled as (required) must be completed; otherwise, we will be unable to provide the requested service or attend to your inquiry.
If you provide third-party data, you confirm having their consent and commit to informing them of this privacy policy, exempting HOTEL PRINCESA YAIZA S.A. from any liability. However, HOTEL PRINCESA YAIZA S.A. may carry out checks to verify that the third party has been informed and that data protection diligence has been observed.
5. TO WHOM WILL YOUR DATA BE DISCLOSED?
Data will not be transferred to third parties unless legally required or necessary to fulfill your request. Recipients may include:
– Group companies.
– Public Administrations and Authorities, when required by tax, labor, social security, or other applicable regulations.
– Data processors (e.g., fraud detection providers, tech services, customer support, advertising and marketing services, courier services, etc.) necessary to provide services offered by HOTEL PRINCESA YAIZA S.A.
6. ARE INTERNATIONAL DATA TRANSFERS MADE?
www.princesayaiza.com is hosted in Galicia, Spain, a country within the European Union and the European Economic Area, or a jurisdiction that complies with Articles 46 and 47 of the GDPR. Therefore, no international data transfers occur based on user activity on the website.
Our website only accesses user data via:
- Contact forms available on the site.
- Cookies accepted by the user when visiting the website.
- Newsletter subscriptions.
International data transfers may occur within the scope of the aforementioned communications. HOTEL PRINCESA YAIZA S.A. will use the tools provided in Articles 46 and 49 of the GDPR as safeguards for transfers to countries without an adequacy decision by the European Commission.
In any case, third parties with whom personal data is shared will have previously demonstrated the implementation of adequate technical and organizational measures to ensure proper protection and will only transfer data to third countries with a binding legal instrument in accordance with Articles 46 and onwards of the GDPR.
By accepting this privacy policy, you consent to the possibility of international data transfers under these guarantees. If GDPR requirements are not met, the data subject may provide explicit consent or a contract may be executed in their interest. Otherwise, authorization must be requested from the Supervisory Authority.
Additionally, we inform you that some services provided by and for HOTEL PRINCESA YAIZA S.A. may involve the transfer of personal data to non-EU countries via “cloud” services from major international providers (e.g., Google, Microsoft). In such cases, compliance with GDPR requirements is verified. HOTEL PRINCESA YAIZA S.A. does not sell user data to third parties under any circumstances.
7. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?
Users may exercise the following rights before HOTEL PRINCESA YAIZA S.A.:
- Access their personal data
- Rectify it when it is inaccurate or incomplete
- Request its deletion or cancellation when, among other reasons, it is no longer necessary for the purposes for which it was collected
- Object to its processing
- Request the limitation of data processing when any of the conditions established by law are met
- Request data portability in the cases provided by law
- Prevent being subject to automated individual decision-making
- Revoke previously granted consent
To exercise these rights, users must send a written request indicating the right they wish to exercise, along with proof of identity and a postal or email address for notification purposes. The request may be sent either by post to: HOTEL PRINCESA YAIZA S.A., Avenida Papagayo 22, Playa Blanca (Yaiza), 35580 Lanzarote (Las Palmas) or by email to: lopd@rosahotels.com
HOTEL PRINCESA YAIZA S.A. must respond to the request within one month from its receipt. This period may be extended by two additional months if necessary, depending on the complexity and number of requests. The user will be informed of any extension within one month of receiving the request, with an explanation of the delay.
Likewise, users have the right to file a complaint with the relevant Supervisory Authority (Spanish Data Protection Agency) if they believe that HOTEL PRINCESA YAIZA S.A. has violated their data protection rights:
www.aepd.es
8. ARE MY DATA SAFE?
HOTEL PRINCESA YAIZA S.A. has a current contract with the hosting company Ayoweb Design Studio SL for the hosting of its website. It is a European company that has the latest security systems in place. In any case, HOTEL PRINCESA YAIZA S.A. guarantees the implementation of appropriate measures to ensure the confidential processing of your data, taking into account its sensitive nature, and undertakes to keep such data secret, treating it with the utmost confidentiality. It also declares that its information system has implemented security policies in accordance with the type of data handled, in line with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (GDPR). All data provided through our platform are collected through a secure protocol. Our website uses an SSL certificate, which enables encrypted communication between the user and the website.
9. LINKS TO OTHER WEBSITES
If you choose to leave our website through links to other websites not owned by our company, HOTEL PRINCESA YAIZA S.A. is not responsible for the privacy policies of those websites or for the cookies they may store on the user’s device.
Date: 22 April 2024 — Version: V.1.0
