Elrondaguel S.L. wants to inform you about our privacy policy and how we process personal data.
We will process your data in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679, and Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights.
Here you will find information about what data we process, how we obtain it, what we use it for, how long we keep it, and what measures we take to protect your personal data, as well as other information you should know about the processing of your data. For this reason, we ask that you carefully read our privacy policy.
This Policy explains how, why, and for what purpose we process your personal data when you use the website's services, whether you are:

• Visitor without a registered account
• Registered user
• Client interested in rentals
• Landlord/property provider

1. Responsible for the processing of your personal data
The entity responsible for processing the personal data collected through this website is:

• ELRONDAGUEL SL; CIF B-38480885
• Telephone: 636 25 27 39
• Email address: [email protected]
• Postal mail: Avenida José Miguel Galván Bello S/N, Oficina 1, Casa Club, Golf del Sur, 38639, San Miguel de Abona, Santa Cruz de Tenerife, España

2. Applicable regulations
Personal data processing is carried out in accordance with:

• Regulation (EU) 2016/679 General Data Protection Regulation (GDPR)
• Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD)
• Law 34/2002 on Information Society Services and Electronic Commerce (LSSI)

3. How do we obtain personal data? And its purpose:

3.1. Navigation data

Technical data about your device and behavior is collected (IP, browser type, pages visited, usage time).

Purpose: security, anonymous statistics and site improvement.
Legal basis: legitimate interest.

3.2. Data provided directly
When you use forms or register as a user:

We can collect:

• Name and surname
• Phone
• Email address
• Postal address
• Tax identification details
• Identity documents (if necessary for verification)

Purposes:

• Create user account
• Reservation and rental management
• Communications required for services
• Billing and tax compliance

Legal basis: performance of a contract and consent.

3.3. Lease and payment details
To manage reservations, the following can be processed:

• Check-in/Check-out Dates
• Number of occupants
• Payment details
• Banking information (only through secure payment gateways)

Purpose: to execute lease agreements and collections.
Legal basis: contractual performance and legal obligations.

3.4. Sensitive Data
We do not request sensitive data (health, religion, sexual orientation, etc.). If such data is accidentally sent, it will not be processed or stored by the data controller.

3.5. Relevant information about minors.
For the processing of personal data of individuals under 14 years of age, which requires the consent of the data subject, this consent must be given by their parents or legal guardians. Their consent will not be necessary for the processing of data that is legitimately based on compliance with a law, or where parental involvement is not required (except for interaction with the website's search engine), as indicated in Article 7 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights.
In the case of forms provided on this website to request a service, these must be signed by adults. Otherwise, parents or guardians will be responsible for all actions taken through the website by their dependents, including completing forms with the minors' personal data and, where applicable, checking the corresponding boxes.
Elrondaguel S.L. will not be held responsible for any omission of this warning by the user. However, the user may exercise their rights of rectification, modification, or deletion at any time, once they become aware of such a circumstance.

3.6. Legitimation
In accordance with Article 6 GDPR , the processing of data on this website is based on:

a) Contract execution (art. 6.1.b)
When the user requests information, makes a reservation, or formalizes a lease.

b) Consent of the interested party (art. 6.1.a)
For:

• Sending commercial communications.
• Use of non-technical cookies.
• Voluntary newsletter sign-up .

Consent must be: Free, Specific, Informed, and Unambiguous (Art. 4.11 and 7 GDPR).

c) Compliance with legal obligation (art. 6.1.c)
In short-term rentals:

• Mandatory communication of travelers to Security Forces and Corps.
• Tax obligations (General Tax Law).
• Regional tourism regulations.

d) Legitimate interest (art. 6.1.f)
For: Website security; Fraud prevention; Internal administrative management.

3.7. Specific application to tourist rental

1. Short-term rental
For tourist rentals (less than 60 days):

• We collect ID/NIE for mandatory communications to authorities in accordance with tourism regulations (no copy required)
• Traveler registration requirements and communications to security forces will be met.

2. Long-term rental
For rentals of more than 60 days:

• Treatment in accordance with civil contracts.
• Recurring payment management.
• Data will only be communicated to collection agencies if there is a breach of contract and with prior notice.

3. Data used:
a. Identifying data

• Name and surname
• ID/NIE/Passport
• Phone
• E-mail
• Address

Legal basis: art. 6.1.b and 6.1.c GDPR.

b. Economic data

• Payment information
• Bank account (where applicable)
• Booking history

Legal basis: contractual performance.

c. Navigation data

• IP
• Cookies
• Device and browser

Legal basis: legitimate interest (art. 6.1.f) and consent (non-technical cookies).

d. Information for tourist rentals
During short stays, the following may be treated:

• Complete identification document
• Birthdate
• Nationality
• Sex (if required by traveler registration regulations)

Legal basis: legal obligation (art. 6.1.c GDPR).

4. Use of Cookies
This website uses cookies and similar technologies. You can manage your preferences at any time.

Types used:

• Technical and functional
• Analytics
• Other

A cookie notice is provided with the option to accept or reject. You can view it in the cookie policy: xxx

5. Data recipients
Data will not be transferred to third parties except in the following cases:

• Service providers: web hosting, payment gateways, internal management systems.
• Competent authorities: when there is a legal obligation.
• Landlords/owners: only the data necessary to manage the booking.

Data will not be transferred to third parties for advertising purposes without explicit consent.

6. International Transfers
Data will not be transferred outside the European Economic Area unless there is an adequate level of protection (e.g., EU standard contractual clauses).

7. Data retention
We will retain the data relating to the provision of our services for as long as necessary, provided you have not exercised your right to erasure (explained below), or for as long as necessary to comply with our legal obligations that apply in each specific case, the type of data and the purpose of the processing.
If you request the erasure or restriction of the processing of your personal data before the aforementioned deadlines, or if the purpose for which the data was collected has ended, in accordance with Article 32 of Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we will block the data, provided that we retain the right or obligation to do so. Blocking the data involves identifying and reserving it, adopting the necessary technical and organizational measures to prevent its processing, in order to comply with any potential liability arising from the processing, and only for the applicable statute of limitations. Once this period has expired, we will destroy the data.
Data is stored according to these criteria:

Data type	Storage time
Active user account	Until the user deletes it
Reservation details	Up to 6 years for tax obligations
Browsing data and cookies	According to consent and current regulations
Data with advertising consent	Until revocation of consent

8. Rights of interested parties
In Articles 12 et seq. of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights, and Articles 15 et seq. of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, you can find legal protection for the exercise of your rights relating to the protection of personal data:

You have the right to:

or ACCESS to verify if Elrondaguel S.L. processes your personal data, and if so, what data we process.
or CORRECTION of incorrect or incomplete data.
or CANCELLATION due to excessive or inadequate rates.
or DELETION: we recommend consulting with us if there could be alterations in the provision of our services as a result of exercising this right.
or REQUEST PORTABILITY: if you want another entity to provide our services and for us to provide your data.
or OPPOSITION to the processing of data: in cases where: it is not a necessary processing, it is a matter of commercial prospecting, it is a matter of automated data processing.
or LIMITATION to uses for which consent has not been given.

These rights may be exercised with respect to data protected by your consent.
To exercise these rights, please contact us at [email protected] or [email protected].
In both cases, you must prove your identity by sending a copy of both sides of your National Identity Document (DNI), Foreigner's Identity Number (NIE), Passport, or equivalent document. Elrondaguel S.L. will provide you with the requested information within one month of receiving your request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests.
Please note that if you are not satisfied with the exercise of your rights, you may file a complaint with the Spanish Data Protection Agency (the competent supervisory authority in this matter) by writing to them at C/ Jorge Juan number 6, 28001 Madrid, or through their website: https://www.agpd.es . However, you may initially file a complaint with Elrondaguel S.L., who will resolve the complaint within a maximum of two months.

9. Security
Elrondaguel S.L. has implemented the necessary technical and organizational measures to guarantee the security of your personal data. Only authorized personnel or those required to do so by law (competent authorities) will have access to your data. For information on the technical and organizational measures adopted, please contact Elrondaguel S.L.
Appropriate technical and organizational measures are adopted to protect the data:

• SSL encryption
• Access control
• Backup management
• Anti-intrusion protocols

10. Automated processing and profiling
No automated decisions are made without human intervention that produce legal effects on users without their consent.

11. Advertising and marketing
Advertising will only be sent if there is express consent, which can be revoked at any time via an unsubscribe link or direct request.

12. Changes in policy
This policy may be updated due to regulatory or service changes. The current version will always be available on the website with the update date.

You can use it as a professional basis and adapt it with the owner's actual tax data.

Article 13 of the GDPR establishes the duty to inform when data is obtained directly from the data subject. The identity of the controller is a mandatory element of the principle of transparency (Art. 5.1.a GDPR).