Privacy Policy

In compliance with the principles of lawfulness and transparency and to provide the information required by Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons concerning the processing of personal data (hereinafter GDPR), we inform you of the characteristics of the personal data processing carried out under the responsibility of Ernercor Inmobiliaria S.L., with CIF B-84997766:

Data Processing Activities:

  1. Accommodation Service Management
  2. Guest Registration
  3. Administrative Management
  4. Billing, Accounting, and Tax Management
  5. Privacy Rights Management for Data Subjects
  6. Human Resources Management
  7. Video Surveillance
  8. Commercial Management
  9. Newsletter Subscription

Purpose of Data Processing:

  1. To provide the requested accommodation service.
  2. To communicate legally required data to Law Enforcement Authorities.
  3. To conduct comprehensive administrative management.
  4. To issue client invoices, prepare official accounting records, calculate, submit, and settle taxes, and draft business documents such as balance sheets and reports.
  5. To handle requests for the exercise of rights related to personal data and address security breaches that may affect the rights and freedoms of data subjects.
  6. To handle personnel selection, training, and other necessary actions for employment relationships.
  7. To monitor facilities using a video surveillance system.
  8. To send commercial communications, subject to user authorization.
  9. To send electronic newsletters with updates and promotions.

Legal Basis for Processing:

  • (1) & (3): Execution of contractual and pre-contractual measures.
  • (2): Organic Law 4/2015, of March 30, on Citizen Security and Order INT/1922/2003, of July 4.
  • (4): Law 58/2003, of December 17, General Tax Law.
  • (5): Regulation (EU) 2016/679 of April 27, 2016, regarding personal data protection.
  • (6): Execution of a contract or pre-contract.
  • (7): Public interest.
  • (8) & (9): Consent of the data subject.

Data Retention Periods:

  1. For the duration of the service and as long as necessary to address any related responsibilities.
  2. Three years for communication purposes with Law Enforcement Authorities.
  3. & 4. Six years for commercial purposes and as long as necessary to address tax-related responsibilities.
  4. As long as necessary to fulfill the purpose and address potential liabilities arising from it.
  5. For the duration of the employment contract and as long as necessary to address responsibilities from the employment relationship.
  6. A maximum of one month.
  7. & 9. Until the data subject unsubscribes or for the duration necessary to meet related responsibilities.

Data Recipients:

  • (2): Law Enforcement Authorities.
  • (5): Spanish Data Protection Agency.

Exercise of Rights:

You may exercise your rights of access, rectification, erasure, restriction, and objection to the processing of your personal data under GDPR.

To do so, send a request by email to: celavella@hcluxuryvillaslanzarote.com, including the subject line “Data Protection”, along with a document proving your identity, and clearly specifying the right you wish to exercise.

If you are not satisfied with the response to your request, you may file a complaint with the Spanish Data Protection Agency.