Privacy Policy
Playitas Resort's Privacy Policy
PRIVACY POLICY
This privacy policy has been created by Sotavento S.A.U. (hereinafter referred to as PLAYITAS) in accordance with the principle of transparency and the right to information, established in the UE 979/2016 General Data Protection Regulation (hereinafter referred to as RGPD).
Under this active compliance policy of the RGPD and for the purpose of ensuring your right to data protection, PLAYITAS wishes to inform the following information:
1. Data controller
The data controller responsible of collecting all the information by the means of contact available on this website, is Sotavento S.A.U., with VAT nº A35017706 whose business is located at Urb. Las Playitas, S/n, 35629 – Tuineje, Fuerteventura.
For further information about this privacy policy, please contact with us: by telephone; nº 928 860 400 or by e-mail; lopd@playitas.net.
2. Data protection office
The data protection officer is: Dataseg consultores y auditores, S.L., whose business is located at C/ Rafael Hardisson Spou 16, mezzanine, off. 7. 38005, Santa Cruz de Tenerife. Contact information: Telephone nº 922215406. E-mail: dpoplayitas@dataseg.es.
3. Purpose, data processing legal basis and data retention
Any personal information you provide to PLAYITAS through our website or any other means of contact may be treated according to its purpose.
Personal data processed by PLAYITAS shall be processed fairly, lawfully and in a transparent manner; which restricts the processing of traffic data for purposes strictly necessary, and will be stored for no longer than is necessary for the purpose for which the data were collected, associated to your legitimate interest, and at least for a period of time stipulated by the Spanish and European regulations.
To comply with the requirements of the principles of transparency “data will be provided in a transparent manner, concise, clear and intelligible form and easy to access” referred to in Art. 12 of the RGPD, we have compiled the information by the persons concerned, in order you can find at a glance the purposes and the legal basis of data processing, as well as the retention data periods:
Website users and visitors.
Purpose. Personal data may be processed in order to manage requests for information as well as to answer to customer inquiries.
Legal basis.
Consent of the individual concerned, set out in Article 6.1 of the RGPD. Result from the individual's express manifestation when checking the "Accept" Boxes for submitting information or any other.
Period of retention. Personal data associated with general inquiries will be stored for as long as its necessary in order to manage the inquiries and the customer service statistics of playitas.net.
Newsletter registered users.
Purpose. Personal data may be processed in order to send you information about offers and promotions, events and activities and/or other advertising information from PLAYITAS, by e-mail.
Legal basis.
Consent of the individual concerned, set out in Article 6.1 of the RGPD. Result from the individual's express manifestation when checking the "Accept" Boxes for sending advertising.
Period of retention. The service will remain active until the user expressly cancels the newsletter subscription or email information delivery service.
Clients and guests.
Purpose. Personal data may be processed in order to manage the booking requests and procurement, and all related activities (verification of the identity of the cardholder, the validity of the credit card or means of payment; request a pre-authorised bank payment; manage the payment of requested services according to the terms and conditions of PLAYITAS’ booking reservation, etc).
Legal basis.
The performance of a contract or the application of pre-contractual measures, set out in Article 6.1 of the RGPD. Result from the costumer’s procurement of our services, as well as from the request of a quote or economic valuation.
The PLAYITAS compliance of the legal obligations, set out in Article 6.1 of the RGPD. In relation to the applicable legislation in the area of banking, commercial, taxation, financial and accounting, as well as the activities connected to PLAYITAS.
Period of retention. Data will be stored indefinitely in case of a legal person. The individuals concerned personal data, either because they are a legal person or their representatives, will be stored for a period of time stipulated by law in terms of civil liability and public administration, and at least for a period of time stipulated by applicable legislation to PLAYITAS in the area of banking, commercial, taxation, financial and accounting.
Respondents
Purpose. Personal data of clients or guests that complete the satisfaction surveys of PLAYITAS, may be processed for quality management, customer service and statistics connected to them.
Legal basis.
Consent of the individual concerned, set out in Article 6.1 of the RGPD. Result from the individual's express manifestation when completing a survey for PLAYITAS.
The performance of a contract set out in Article 6.1 of the RGPD. Related to the obligations of PLAYITAS to clients and guests.
Period of retention. Personal data of clients or guests that complete the aforesaid surveys, will be stored at least for a period of time stipulated by applicable legislation to PLAYITAS in terms of civil liability and public administration.
Job applicants
Purpose. Personal data may be processed in order to include you in the staff selection process undertaken by PLAYITAS.
Legal basis.
Consent of the individual concerned, set out in Article 6.1 of the RGPD. Result from the individual's express manifestation when sending a CV or signing up for a selection process for PLAYITAS.
Period of retention. Personal data will be stored for a maximum period of 2 years.
Participants in contests and sweepstakes
Purpose. Personal data may be processed in order to manage participation in events, activities and contests made by PLAYITAS. Los datos podrán ser tratados con la finalidad de gestionar la participación en eventos, actividades y concursos realizados por PLAYITAS. In any case, if the activity has its own participation conditions, the data process of participants shall be subject to its specific content.
Legal basis.
Consent of the individual concerned, set out in Article 6.1 of the RGPD. Result from the individual's express manifestation when signing up.
The performance of a contract or the application of pre-contractual measures, set out in Article 6.1 of the RGPD. Result from the fulfilment in relation to the performance of the activity, and the delivery of the prize.
The PLAYITAS compliance of the legal obligations, set out in Article 6.1 of the RGPD. In the area of banking, commercial, taxation, financial and accounting in relation to the prizes awarded.
Period of retention. In the case of the winners, data will be published on the website and social networks, where they will be stored indefinitely, and can be deleted by express request of the interested party. The data of all contestants or participants can be stored, at least during the periods of demand for civil or commercial responsibilities of PLAYITAS.
Applicants for the exercise of data protection rights
Purpose. Attention by PLAYITAS of the requests for the exercise of rights of data protection, made by the interested parties.
Legal basis.
The performance of a contract or the application of pre-contractual measures, set out in Article 6.1 of the RGPD.
Legitimate Interest of the Responsible pursuant to Article 6.1.f RGPD as a consequence of the need of the PLAYITAS to demonstrate, in the spirit of defence before the competent authorities, their active compliance in the response of requests made by the interested parties.
Period of retention. Data will be stored as a minimum period during the legal terms established in the General Data Protection Regulations, as well as in the regulations regarding civil and commercial liabilities that may affect to PLAYITAS.
Receptors of forms or documents that redirect to this website
1.-Purpose.
Personal data collected in the different documents that redirect the extended information present in this website, may be treated for the purpose of (depending on the document)
Invoices, manage the contractual or pre-contractual relationship between you and PLAYITAS, as well as for administrative, fiscal and accounting management.
Budgets, elaborate, deliver/submit the budget, as well as to carry out follow-up and commercial prospecting actions, by telephone, telematic or face-to-face.
Authorization to capture and publish images, capture images of the signatory or of his / her representative, as well as their publication on social networks, web pages, and other means of communication, in order to disseminate the activities of PLAYITAS, as well as their products or services.
Registration to events or activities, manage the application for registration, as well as the administrative and communication tasks related to it. Management of participation in the course or event, assistance, and delivery of certificates and other associated documents.
Request for information and newsletter registration, answer the main requests for information, via email or telephone; sign up in the PLAYITAS newsletter (if the applicant so marks it in the corresponding box)
Satisfaction surveys. Manage the answers, complaints and suggestions, as well as for statistics purposes.
Application for a job. Management of the application for a job, and registration in the applicants’ database of PLAYITAS.
Video surveillance, data captured by the video surveillance systems will be used for the purpose of security and video surveillance of the facilities.
E-mail, answer the main requests for information, by email or telephone; manage the contact agenda; execution of contracts or pre-contractual measures.
2.-Legal basis.
Consent of the interested party, set out in Article 6.1 of the RGPD. Result from the individual's express manifestation when checking the "Accept" Boxes for receiving advertising, information or others; when the individual expressly authorizes the capture and publication of his/her image; when you send your CV or you sign up for a PLAYITAS personnel selection process.
The execution of a contract or the application of pre-contractual measures, included in Article 6.1.b. RGPD. That derives from the purchase, contracting or reservation by the client of one of our products or services, as well as the request of a quote or economic valuation. Also of the management of the contractual and pre / post contractual relationship.
The PLAYITAS compliance of the legal obligations, set out in Article 6.1 of the RGPD. In relation to the applicable legislation in the area of banking, commercial, taxation, financial and accounting, as well as the activities connected to PLAYITAS.
Legitimate Interest of PLAYITAS pursuant to Article 6.1. of the RGPD, regarding to the security of the facilities, staff, users and visitors.
3.-Period of retention.
Data will be stored during the periods mentioned in the previous sections or, during the conservation periods established by the current regulations on banking, civil, commercial, economic and fiscal matters, or other obligations of the responsible party.
4. Data of third party
When booking, it may be the case that a single person makes the reservation for a group of guests, whether family, friends or have a working relationship or another, we inform you that:
You can only provide data of third parties, if you have the express consent of the same
When you send us information about third parties, you expressly state that you have the aforementioned consent, or that you have the legal capacity to express such consent.
All the people from whom you send us data must know the content of this section. You state that you have informed them and made known their content.
PLAYITAS is not responsible in case the user who completes the forms or reservation requests does not comply with the previous points.
5. Optional nature of the completion of forms and accuracy of the data submitted
i. The different forms put at your disposal have identified those data that are mandatory, and therefore essential requirement to manage your query, request or registration. If you do not answer said sections, we will not be able to respond correctly to your request.
ii. Please, on the forms avoid including confidential or sensitive information, not necessary for the provision of our services. In case we need any additional information, we will get in touch with you.
iii. The accuracy of the data submitted by the user is presumed, who must inform PLAYITAS of any change that may arise in them.
6. Communication and transfer of data to third parties.
To State Security Forces and Corps. PLAYITAS, must comply with the provisions of the Organic Law of 5/2014 of April 4 on Private Security, Order INT / 1922/2003 on registration books and entry parts of travelers in catering establishments, for this reason, the data of the guests will be transferred to the competent authorities.
To shipping and courier companies. Your data may be communicated to companies in the courier, shipping and parcel industry, for the purpose of handling the shipment of luggage, documents or other objects that the guest requests.
To tour operators, travel agencies and the like. The data relating to the stay, incidents and other information of interest, relating to customers or guests who come through tour operators, travel agencies, and other third parties may be communicated to them, in order to comply with legal obligations and contractual between these entities.
To third parties indispensable for the management of the contractual relationship. Banks and savings banks, insurance, intermediaries of the service, as well as others related to the services that you request, and for which it is mandatory in the middle of said provision, to provide your data.
To the competent authorities, whether national or autonomous. In compliance with the legal obligations applicable to PLAYITAS.
7. International data transfers
PLAYITAS uses services that due to the location of the servers in which they keep the information away, or for that of their headquarters, the EU considers that when using them an international data transfer is made to countries outside the European Union.
It sounds complex, but actually it is an action carried out on a day-to-day basis by any company or person that uses social networks, or applications in the cloud, e-mails from large technology companies, etc. In the context of this clarification, we inform you that PLAYITAS makes the following international data transfers, when you make use of:
Social networks
By giving consent to publish your personal data in the social network profiles in which PLAYITAS has corporate profiles, you authorize the realization of the international transfer of data to the US. We recommend you visit the privacy sections of the different social networks mentioned in the consents:
Facebook: https://www.facebook.com/privacy/explanation
Twitter: http://www.twitterenespanol.net/privacy_policy.php
Instagram: https://www.facebook.com/help/instagram/155833707900388
YouTube: https://www.youtube.com/yt/policyandsafety/es/policy.html
Linkedin: http://es.linkedin.com/legal/cookie-policy
G+ y Youtube: http://www.google.com/policies/privacy/
Your consent may be revoked at any time, without affecting the data processed prior to the withdrawal of consent.
Shariff-Sharingfunctions
We use the privacy-protected "Shariff" buttons. "Shariff" is designed to allow more privacy on the network and to replace the usual "share" buttons on social networks. In this case, not the user's browser but the server on which this online offer is located establishes a connection to the server of the respective social media platforms and asks, for example, the number of likes, etc. The user remains anonymous. More information about the Shariff project can be found at the developers of c't magazine: www.ct.de.
GOOGLE ANALYTICS
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) Google Analytics, a web analysis service of Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by users is generally transferred to a Google server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. Pseudonymous user profiles can be created from the processed data.
We use Google Analytics only with IP anonymization enabled. This means that Google will reduce the IP address of users within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en
Further information on data use by Google, possible settings and objections can be found on Google's websites: https://www.google.com/intl/de/policies/privacy/partners ("Data use by Google when using our partners' websites or apps"), http://www.google.com/policies/technologies/ads ("Data use for advertising purposes"), http://www.google.de/settings/ads ("Manage information that Google uses to show you advertising").
GOOGLE TAG MANAGER
This website uses the Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tool Tag Manager itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
YOUTUBE
We integrate the videos of the platform "YouTube" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Within our online offer, functions and contents of the Twitter service, offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, can be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can express their appreciation of the content, subscribe to the authors of the content or our contributions. If the users are members of the Twitter platform, Twitter can assign calling up the above content and functions to the users' profiles there. Privacy policy of Twitter: https://twitter.com/de/privacy. Twitter is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active). Privacy Policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization.
Storage and mail management
PLAYITAS uses the Google Suite, a service for managing email and storage in the cloud, for its daily management. This tool, although it stores data in servers hosted in the EU, has its headquarters in the US, so an international data transfer is made to it.
Privacy policy https://policies.google.com/privacy?hl=es
The previous international data transfers are made under the authorization of the US-European Union Privacy Shield agreement. More information: https://www.privacyshield.gov/welcome
Advertising and informative communications.
To manage e-mail marketing and mass communications, use MailChimp. Privacy policy Mailchimp
https://mailchimp.com/legal/privacy/
This international data transfer is being undertaken as part of the Decision of the Commission of 26 July of 2000 under Directive 95/46/CE of the European Parliament and the Council related to the adequate level of protection for personal data in Switzerland. For further information: https://www.agpd.es/portalwebAGPD/internacional/adecuacion/suiza/index-ides-idphp.php
8. Data security
PLAYITAS, has established a privacy and security policy for personal data, which guarantees the implementation of all the security, technical and organizational measures necessary to maintain the security of the personal data processed through this website, and in general in your organization.
This data protection policy, and active compliance with the regulations, allows to keep the security measures and controls applied updated, favoring the security of information, the clarity in the processes and the knowledge of them by all the staff of PLAYITAS.
In this sense, we have formalized with all our service providers the corresponding contract for data processing on behalf of third parties, with all the guarantees required by the General Data Protection Regulation.
Exercise of data protection rights
a. Consent and revocation. The user may revoke the given consents, at any time, without affecting the legality of the data processing during the effective period, prior, of said authorization.
b. Rights of access, rectification, deletion, limitation, opposition and portability.
The user or visitor, may request the exercise of his/her rights of access to data, rectification or deletion or limitation of their treatment, or oppose the processing as well as their right to the portability of data in accordance with the provisions of the data protection regulations mentioned above.
You can exercise the aforementioned rights, sending your request in writing, along with a copy of an identity document, legally valid. The request must be sent to PLAYITAS at lopd@playitas.net, or to the contact address indicated at the beginning of this document. You can also exercise your rights before our Data Controller, by contacting him, through the contact information at the beginning of this document. You can ask us for the exercise forms of rights, or for added convenience, you can use the forms available in the Spanish Agency for Data Protection, or request a copy of them via email.
c. Claims before the supervisory authority
If you consider that the exercise of your rights, has not been properly addressed by our Data Controller, or by our company in general, you can file a claim with the Spanish Data Protection Agency, or with the Control Authority of your state.
Changes and updates
The PLAYITAS is committed to respecting the right to protection of personal data, its users, visitors and guests. For this reason, in case of making any change that affects your rights, we will inform you before the entry into force.
