1. USER INFORMATION

REMATE EQUITY, S.L., as Data Controller, informs you that, in accordance with the provisions of Regulation (EU) 2016/679, of 27 April, (RGPD) and the L.O. 3/2018, of 5 December, on data protection and guarantee of digital rights (LOPDGDD), we will treat your data as we reflect in this Privacy Policy.

In this Privacy Policy we describe how we collect your personal data and why we collect it, what we do with it, who we share it with, how we protect it and your choices regarding the processing of your personal data.

This Policy applies to the processing of your personal data collected by the company for the provision of its services. If you agree to the measures in this Policy, you consent to our processing of your personal data as defined in this Policy.

2. CONTACT

Company name: REMATE EQUITY, S.L.

Commercial name: Puente Romano Beach Suites

CIF: B-76.710.375

Address: Fernando el Santo, 25, 4th left, 28010, Madrid, Spain

Volume 3452, Journal: 69, Entry 4434, Folio 218, Mercantile Register of Tenerife

e-mail: info@puenteromanobeachsuites.es

3. KEY PRINCIPLES

We have always been committed to providing our services with the highest degree of quality, which includes treating your data with security and transparency. Our principles are:

- Lawfulness: we will only collect your personal data for specific, explicit and legitimate purposes: We will only collect your personal data for specific, explicit and legitimate purposes.

- Data minimization: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it was collected: We limit the collection of personal data to what is strictly relevant and necessary for the purposes for which it was collected.

- Purpose Limitation: We will only collect your personal data for the stated purposes and only according to your wishes: We will only collect your personal data for the stated purposes and only in accordance with your wishes.

- Accuracy: We will keep your personal data accurate and up to date.: We will keep your personal information accurate and up to date.

- Data Security: We implement appropriate technical and organizational measures commensurate with the risks to ensure that your data is not harmed, such as unauthorized disclosure or access, accidental or unlawful destruction or accidental loss or alteration and any other form of unlawful processing: We apply appropriate technical and organizational measures proportional to the risks to ensure that your data is not damaged, such as unauthorized disclosure or access, accidental or unlawful destruction or accidental loss or alteration, and any other form of unlawful processing.

- Access and Rectification: We have the means for you to access or rectify your data whenever you consider it appropriate: We have the means for you to access or rectify your data when you consider it appropriate.

- Retention: We retain your personal data in a lawful and appropriate manner and only as long as it is necessary for the purposes for which it was collected: We retain your personal data lawfully and appropriately and only for as long as it is necessary for the purposes for which it was collected.

- International transfers: Where your data is to be transferred outside the EU/EEA it will be adequately protected: When it is the case that your data is going to be transferred outside the EU/EEA, they will be adequately protected.

- Third parties: access and transfer of personal data to third parties are carried out in accordance with applicable laws and regulations and with appropriate contractual safeguards: The access and transfer of personal data to third parties are carried out in accordance with the applicable laws and regulations and with the appropriate contractual guarantees.

- Direct Marketing and Cookies: We comply with applicable advertising and cookie legislation: We comply with the applicable legislation regarding advertising and cookies.

4. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA

The types of data that may be requested and processed are: Identifying information. We also automatically collect data about your visit to our website as described in the cookie policy.

Whenever we request your personal data, we will clearly inform you of what personal data we collect and for what purpose.

In general, we collect and process your personal data for the following purposes: To provide information, services, products, relevant information, and industry news. Sending communications.

5. LEGAL BASIS

The processing of your personal data is carried out on the following legal bases established in Regulation (EU) 2016/679 (GDPR):

- Performance of a contract or implementation of pre-contractual measures: The processing of your data is necessary for managing tourist accommodation reservations, responding to requests for information, and providing the contracted services.

- Compliance with legal obligations: Processing is necessary to comply with legal obligations applicable to the accommodation business, including the disclosure of data to the competent authorities in accordance with Royal Decree 933/2021, of October 26.

- Consent of the data subject: Where applicable, to send commercial or informational communications related to our services, provided that the user has given their express consent.

- Legitimate interest of the data controller: To improve our services, manage website security, and prevent fraud, provided that the fundamental rights and freedoms of the data subject do not take precedence.

6. COMMUNICATION OF PERSONAL DATA

The data may be disclosed to companies affiliated with REMATE EQUITY S.L. for the provision of various services in their capacity as Data Processors.

Such data will also be disclosed to legal authorities to comply with Royal Decree 933/2021 of October 26, which establishes the record-keeping and reporting obligations for natural or legal persons engaged in the business of providing lodging and renting motor vehicles.

The company will not disclose any data, except where required by law.

7. DATA RETENTION PERIODS

Reservation data: 5 years (tax/accounting purposes).

Guest registry: as per Royal Decree 933/2021.

Marketing: until consent is withdrawn.

8. YOUR RIGHTS

You may exercise your rights of access, rectification, erasure, objection, restriction, and data portability by sending a request to:

📩 info@puenteromanobeachsuites.es

You may also file a complaint with the AEPD: www.aepd.es

9. LEGAL INFORMATION

The requirements of this policy supplement, and do not replace, any other existing requirements under applicable data protection law, which shall prevail in all cases. This Policy is subject to periodic review, and the company may modify it at any time. When this occurs, we will notify you of any changes and ask you to review the most recent version of our Policy and confirm your acceptance.