1. Data Controller
Controller: Rosa Delia Perdomo Medina
Tax ID (NIF): 42824659Q
Address: Lugar Horno de la Teja 8, 35140, Mogán, Las Palmas, Spain
Email: sunset.mogan@hotmail.com
Phone: +34 650 249 234
Activity: Tourist accommodation rental
Status: Self-employed
There is no Data Protection Officer (DPO), as it is not legally required for this activity.
2. Applicable Legislation
This Privacy Policy is governed by Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the applicable tourism regulations of the Autonomous Community of the Canary Islands, and the regulations concerning the registration of travelers with the State Security Forces and Bodies.
3. Purpose of Data Processing
The personal data provided by users is processed for the following purposes:
Managing accommodation reservation and availability requests.
Formalizing and executing tourist accommodation contracts.
Managing payments, deposits, and cancellations.
Complying with legal obligations in tax, accounting, and tourism matters.
Communicating travelers’ data to the competent authorities in accordance with current regulations.
Sending communications exclusively related to the reservation, such as confirmations or necessary information for the stay.
Under no circumstances will the data be used for commercial or advertising purposes.
4. Personal Data Processed
The following data may be requested and processed:
Full name.
Identity document (ID card, passport, or other official document).
Postal address.
Telephone number.
Date of birth.
Data of all guests staying at the property.
Basic technical data such as IP address and browser information.
No specially protected (sensitive) data is collected.
5. Legal Basis for Processing
The legal basis for processing personal data is the execution of an accommodation contract, compliance with legal obligations applicable to the controller, and the data subject’s consent when necessary.
6. Payments and Transaction Security
Payments are processed through the external payment gateway Stripe.
The controller does not store or have access to full bank card details.
Stripe may process personal data as a data processor, applying appropriate safeguards in accordance with the GDPR.
7. Communications
There is no contact form on the website.
Only emails related to reservation management are sent.
No newsletters or commercial communications are sent.
No email marketing is carried out.
8. Disclosure and Communication of Data to Third Parties
Personal data may only be disclosed to SES HOSPEDAJES for compliance with the legal obligation to register travelers, to the State Security Forces and Bodies in accordance with current regulations, and to Public Administrations when legally required.
No other data transfers to third parties are carried out.
9. International Data Transfers
When using technological providers such as Stripe, some data may be processed outside the European Economic Area. These transfers are carried out with appropriate safeguards, through Standard Contractual Clauses approved by the European Commission.
10. Data Retention Period
Personal data will be retained for the following periods:
Reservation and guest data: 6 years, in accordance with tax, commercial, and tourism obligations.
Tax and accounting data: 6 years.
Data communicated to SES HOSPEDAJES: according to the retention periods required by security regulations.
Contact data for inquiries: until the request is resolved and for a maximum of 1 year.
Marketing data: not retained, as no commercial actions are carried out.
11. Minors
Reservations made by minors are not permitted. The controller reserves the right to request the necessary documentation to verify the age of guests.
12. Users’ Rights
Users may exercise their rights of access, rectification, erasure, restriction of processing, objection, and data portability by sending a request, together with a copy of their identification document, to the email address sunset.mogan@hotmail.com.
13. Security Measures
The website has an SSL certificate (HTTPS) and applies the necessary technical and organizational measures to ensure the security and integrity of personal data, preventing its loss, alteration, or unauthorized access.
14. Acceptance of the Privacy Policy
Use of the website implies acceptance of this Privacy Policy. The controller reserves the right to modify it to adapt to legislative developments or changes in the activity.