PRIVACY POLICY
Introduction
This Privacy Policy has been drawn up in accordance with the provisions of the current Spanish Constitutional Law on Personal Data Protection and Regulation 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of individuals regarding the processing of personal data and the free circulation of said data, hereinafter the GDPR.
This Privacy Policy seeks to inform the personal data subjects from whom information is collected about specific issues related to the processing of their data, including the purpose for processing, the contact details for exercising the rights to which they are entitled, the periods for which the information will be kept and security measures, among other things.
Data Controller
For data protection issues, Residence Canarias Property Development S.L shall be considered as the Data Controller for data files/processes identified in this policy, specifically in the section on data processing.
This website is owned by:
Data Controller: Residence Canarias Property Development S.L
Postal address: Avenida del Oasis 27, 35100 Maspalomas
Email address: info@tensuites.com
Data Processing
Any personal data that may be requested shall only consist of that strictly essential for identifying and responding to a request made by the data subject, hereinafter the interested party. Said information will be processed faithfully, lawfully and transparently vis-a-vis the interested party. Furthermore, the personal data shall be collected for certain explicit and legitimate purposes, and shall not be processed for purposes unrelated to said purposes.
The data collected from each interested party shall be suitable, pertinent and not excessive vis-a-vis the corresponding purposes in each case, and shall always be updated when necessary.
Before their data are collected, the data subject shall be informed about the general situations governed by this policy in order to be able to provide express, precise and unequivocal consent for the processing of their data in accordance with the following:
Processing Purpose
The explicit purposes for which each data processing process is carried out are contained in the informative clauses included in each one of the data capture channels (website form, paper forms, conversations or posters and informative notes).
Nonetheless, the personal data of the interested party shall be processed for the sole purpose of providing them with an effective response and responding to requests made by the user, specified alongside the data capture option, service, form or system used by the data subject.
Legal Grounds
Generally speaking, before processing the personal data, Residence Canarias Property Development S.L obtains express and unequivocal consent from the data subjects by including informed consent clauses in the various information collection systems.
Nonetheless, in the event that no consent is required from the interested party, the legal grounds for processing entitling Residence Canarias Property Development S.L to act lie in the existence of a specific law or regulation authorising or demanding the processing of the data of the interested party.
Recipients
Generally speaking, Residence Canarias Property Development S.L does not share or communicate the data to third parties unless legally required to do so. Nonetheless, in the event it is required to do so, the sharing or communication of data shall be notified to the interested party through the informed consent clauses contained in the various personal data collection channels.
Source
Generally speaking, the personal data are always collected directly from the interested party. Nonetheless, in certain exceptional situations, the data may be collected through third parties, entities or services other than the interested party. Such situations shall be notified to the interested party through the informed consent clauses contained in the various information collection channels and within a reasonable period of time following collection of the data and no more than one month.
How long the personal data are kept
The information collected from the interested party shall be kept for as long as necessary to fulfil the purpose for which the personal data were collected and shall be deleted once said purpose has been fulfilled. This deletion process shall take place by blocking the data and keeping the same solely available to the public authorities, judges and courts for responding to possible liabilities stemming from the processing thereof. The data shall be so kept for the duration of the corresponding limitation period, following which the information shall be destroyed.
For your information, the legal periods for which information must be kept is shown below:
- DOCUMENT
- PERIOD
- LEGAL REF.
Documentation related to employment or the Social Security system 4 years Article 21 of Spanish Royal Legislative Decree 5/2000, of 4 August, approving the consolidated text of the Spanish Law on Breaches and Penalties in the Social Order
Accounting and tax documentation for mercantile purposes 6 years 30 of the Code of Commerce
Accounting and tax documentation for tax purposes 4 years Articles 66 to 70 of the Spanish General Tax Act
Building access control 1 month Instruction 1/1996 of the Spanish Data Protection Agency
Video surveillance footage 1 month Instruction 1/2006 of the Spanish Data Protection Agency
Spanish Constitutional Law 4/1997
Browsing data
As regards any browsing data that may be processed via the website, we recommend consulting the Cookies Policy published on our website in the event that data subject to this regulation are collected.
Rights of the interested parties
The data protection regulations grant a series of rights to the interested parties or data subjects, users of the website or users of the Residence Canarias Property Development S.L profiles on social media networks.
Interested parties are entitled to the following rights:
- Right of access: the right to obtain information about whether your data are being processed, the processing purpose if so, the data categories being processed, the recipients or recipient categories, the length of time for which they will be kept and the source of said data.
- Right of rectification: the right to have inaccurate or incomplete personal data rectified.
- Right of elimination: the right to have your data deleted in the following situations:
- When the data are no longer needed for the purpose for which they were collected
- When the data subject withdraws their consent
- When the interested party opposes the processing thereof
- When they must be eliminated to comply with a legal obligation
- When the data were obtained under a service of the information society and based on the provisions of Article 8.1 of the European Data Protection Regulation
- Right of opposition: the right to oppose certain processing based on consent from the interested party.
- Right of limitation on processing: the right to limit the processing of your data in any of the following situations:
- When the interested party challenges the accuracy of the personal data, for a period allowing the company to verify the accuracy thereof
- When the processing is unlawful and the interested party opposes the elimination of the data
- When the company no longer needs the data for the purposes for which they were collected, but the interested party needs them to lodge, perform or defend against grievances.
- When the interested party has opposed the processing thereof, while checks are performed to verify that the legal grounds of the company take precedence over those of the interested party
- Right to portability: the right to obtain your data in a structured, common-use and mechanically readable format and share the same with another data controller when:
- The processing is based on consent
- The processing takes place via automated means
- Right to lodge a complaint with the competent watchdog
The interested parties may exercise the aforementioned rights by writing to Residence Canarias Property Development S.L at info@tensuites.com, indicating the right they wish to exercise in the subject line.
In this regard, Residence Canarias Property Development S.L will respond to your request as soon as possible and in consideration of the deadlines provided for in current data protection regulations.
Security
The security measures adopted by Residence Canarias Property Development S.L are those required by the provisions of Article 32 of the GDPR. Based on the state of the art, the application costs and nature, scope, content and processing purposes, as well as the variable likelihood and severity risks to the rights and freedoms of individuals, Residence Canarias Property Development S.L has established the appropriate technical and organisational measures for guaranteeing the proper level of security against the existing risks.
At any event, Residence Canarias Property Development S.L has implemented sufficient mechanisms to:
- a) Guarantee the ongoing confidentiality, integrity, availability and resilience of processing systems and services
- b) Restore availability and access to the personal data swiftly in the event of a physical or technical incident
- c) Regularly verify, assess and evaluate the efficacy of the technical and organisational measures implemented to guarantee processing security
- d) Pseudonymise and encrypt the personal data, as appropriate
Applicable legislation and jurisdiction
Furthermore, Residence Canarias Property Development S.L reserves the right to bring any civil or criminal action that it deems appropriate for the undue use of its website and the content thereof or for failing to comply with these terms and conditions.
The relationship between user and service provider shall be governed by current and applicable legislation in Spain. In the event of a dispute, the parties agree to submit their conflicts to arbitration or ordinary jurisdiction in compliance with the rules on jurisdiction and power in this regard. Residence Canarias Property Development S.L has its registered address in Gran Canaria, Spain