Ce site utilise des cookies afin que nous puissions vous offrir la meilleure expérience utilisateur possible. Les informations sur les cookies sont stockées dans votre navigateur et remplissent des fonctions telles que vous reconnaître lorsque vous revenez sur notre site Web et aider notre équipe à comprendre quelles sections du site Web vous trouvez les plus intéressantes et utiles.
Privacy, HotelLasCostas.com
Don´t hesitate to contact us for any further information.
The privacy policy is part of the General Conditions that rule this website.
Who is responsible for processing your data?
- HIBISCUS LANZAROTE S.L.. CIF: B35754969
- Address: Avda. De las Playas 88, 35510 Puerto del Carmen, LANZAROTE.
- Tel: 928 514 346
- Email: rgpd@hibiscus-hotels.com
You can contact us in any way.
We reserve the right to modify or adapt this Privacy Policy at any time. We recommend you check it, and if you are registered you will be informed of any changes when you log in to your account or profile.
If you belong to one of the following groups, consult the drop-down menu:
Guests
For what purposes are we going to process your personal data?
We inform you that your data will be processed to manage your reservation, your stay in the hotel and guarantee the payment of the expenses derived from this stay.
Your data will be communicated to the Security Forces and Bodies in compliance with the current legislation, as well as to the involved travel agencies or tour operators.
The data will be kept for at least 6 years in compliance with the regulations concerning tax, trading, consumption and traveller registration.
What is the legitimacy for processing your data?
The legal foundation is your consent.
Web or Email Contacts
What data do we collect through the website?
We can treat your IP address, what operating system or browser you use, and even the duration of your visit, all in an anonymous way. If you provide us with information in the contact form, you will identify yourself so that we can contact you if necessary.
For what purposes are we going to process your personal data?
- To answer your queries, requests or demands.
- To manage the requested service, answer your request, or process your enquiry.
- To send information concerning your request by electronic means.
- To send commercial or event information by electronic means, subject to express authorization.
To perform analysis and improvements on the website, about our products and services. Improve our business strategy.
What is the legitimacy for processing your data?
The acceptance and consent of the interested party: In those cases where in order to make a request it is necessary to fill in a form and click on the send button, the completion of this form will necessarily imply that the interested party has been informed and has expressly given his or her consent to the content of the clause attached to this form or acceptance of the Privacy Policy.
All our forms have the symbol * in the mandatory fields. If you do not fill in these fields, or if you do not tick the checkbox to accept the Privacy Policy, you will not be allowed to send the information. It is usually worded as follows:”I am over 14 years old and have read and accept the Privacy Policy.”
Newsletter Contacts
What data do we collect through the newsletter?
On the website, you can subscribe to the Newsletter, if you provide us with an email address, to which it will be sent.
We will only store your email address in our database and will send you emails periodically until you unsubscribe or, until we stop sending emails.
You will always have the option to unsubscribe at any time and in any manner.
For what purposes are we going to process your personal data?
- To manage the requested service.
- To send information concerning your request by electronic means.
- To send commercial or event information by electronic means, subject to express authorization.
- To perform analysis and improvements in our mailing system to improve our commercial strategy.
What is the legitimacy for processing your data?
The acceptance and consent of the interested party: When you subscribe, it will be necessary to accept a checkbox and click on the send button. This necessarily implies that you have been informed and have expressly given your consent to receive the newsletter.
If you do not tick the checkbox to accept the Privacy Policy, the information will not be allowed to be sent. It is usually worded as follows: “I am over 14 years old and have read and accept the Privacy Policy.
Social Network Contacts
For what purposes are we going to process your personal data?
- To answer to your queries, requests or demands.
- To manage the requested service, answer your request, or process your enquiry.
- To relate to you and create a community of followers.
What is the legitimacy for processing your data?
*(Google+ and Youtube)
How long will we keep your personal data?
We can only access or delete your data in a restricted way as we have a specific profile. We will treat them as long as you keep following us, being friends with us or clicking buttons like “follow” and “like” or other similar buttons.
Any correction of your data or restriction of information or posts must be made through the configuration of your profile or user in the social network itself.
+ Job Applicants
For what purposes are we going to process your personal data?
- Organization of employee recruitment processes.
- Appointment for job interviews and evaluation of your application.
- If you have given us your consent, we may pass it on to collaborating or related companies for the sole purpose of helping you to find employment.
- If you tick the checkbox of acceptance of the Privacy Policy, you give us your consent to transfer your job application to the entities that compose the affiliated companies with the aim of including you in their employee recruitment processes.
- We also inform you that one year after receiving your CV, we will proceed to its safe destruction.
What is the legitimacy for processing your data?
The legal foundation is your clear consent by sending us your CV.
Do we include personal data of third parties?
No, we generally only process the data provided by the owners. If you provide us with third-party data, you must first inform them and request their consent, otherwise you release us from any liability for the non-fulfilment of this requirement.
And what about data on minors?
We do not process data from children under the age of 14. Therefore, please refrain from providing them if you are not of that age or, where applicable, from providing data from third parties who are not of that age. HIBISCUS LANZAROTE S.L. disclaims any liability for failure to comply with this requirement.
Will we communicate electronically?
- We will only do so to process your request and if you provided us with an electronic means of communication.
- If we carry out commercial communications, they will have been previously and expressly authorized by you.
Which security measures do we apply?
You can be reassured: We have adopted an optimal level of protection for the personal data we handle, and we have installed all the technical means and measures at our disposal according to the state of the art to prevent loss, misuse, alteration, unauthorized access and theft of personal data.
To whom will your data be communicated?
Your data will not be passed on to third parties, unless required by law. They will be communicated to the State Agency of the Tax Administration and to banks and financial institutions for the payment of the service provided or product purchased, as well as to those in charge of the treatment necessary for the execution of the agreement. In case of purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed in its environment, always with maximum security. Upon our request, our web development and maintenance company or hosting company will have access to our website. They will have signed a contract of service agreement that obliges them to maintain the same level of privacy as we do. Any international transfer of data, using American applications, will be subject to the Privacy Shield agreement, which ensures that American software companies comply with European privacy and data protection policies.
What rights do you have?
- To know if we are processing your data or not.
- To access your personal data.
- To request the correction of your data if they are inaccurate.
- To request the deletion of your data if they are no longer necessary for the purposes for which they were obtained or in case you withdraw your consent.
- To request the limitation of the processing of your data, under certain circumstances, in which case we will only keep them in accordance with current legislation.
- To transmit your data, which will be provided to you in a structured format, of common use or machine reading. If you prefer, we can send them to the new responsible person that you appoint. This is only valid under certain circumstances.
- To submit a complaint to the Spanish Data Protection Agency or a competent supervisory authority, if you believe that we have not attended to you correctly.
- To withdraw consent at any time to any treatment for which you have consented.
If any of your data change, please let us know so we can keep them up to date.
Would you like a form to exercise your rights?
- We provide forms for exercising your rights, which you can request by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
- These forms must be signed electronically or be accompanied by a photocopy of your National Identity Card.
- If you are represented by someone, you must attach a copy of his or her National Identity Card or have him or her sign it electronically.
- The forms can be presented in person or sent by letter or by e-mail to the address of the person in charge on the top of this text.
How long will it take us to get back to you on the exercise of rights?
It depends on the right, but not later than one month from your request, and two months if the subject is very complex and we notify you that we need more time.
Do we process cookies?
If we use other types of cookies than the necessary ones, you can consult the Cookie Policy by clicking on the corresponding link on the beginning of our website.
How long are we going to keep your personal data?
- Personal data will be kept as long as you are linked to us.
- Once you disassociate yourself, the personal data processed for each purpose will be kept for the legally established periods, including the period within which a judge or court may request them in accordance with the limitation period for legal actions.
- The processed data will be kept as long as the legal periods mentioned above do not expire, if there was a legal obligation to maintain them, or in the absence of such a legal period, until the concerned person requests their elimination or withdraws the given consent.
- We will keep all the information and communications related to your purchase or to the service we provide, as long as the guarantees of the products or services are valid, in order to attend to possible complaints.