Legal Notices

PRIVACY POLICY “YOUR DATA SECURE”

In Europe and in Spain, there are data protection regulations designed to safeguard your personal information, which are mandatory for our organization. Therefore, it is very important to us that you fully understand what we are going to do with the personal data we request. We aim to be transparent and give you control over your data, using simple language and clear options that allow you to decide what we do with your personal information. If, after reading this information, you have any questions, please do not hesitate to ask us. Thank you very much for your cooperation.

Who are we?
Our company name: HANNA JOELA CLARÉN
Our CIF/NIF: X0963951K
Our main activity: Real estate service intermediation.
Our address: CAMINO REAL A VENTO, Nº17, 38640 - ARONA (Santa Cruz de Tenerife)
Our contact phone number: 616.63.79.72
Our contact email address: [email address removed]
Our website: http://www.yourapartmentintenerife.com

Our main activity is subject to a prior administrative authorization scheme. For your confidence and security, we provide the data related to said authorization and the identification of the competent oversight body:
Administrative authorization:
Supervisory body: (IF THE ACTIVITY IS SUBJECT TO AN ADMINISTRATIVE AUTHORIZATION SCHEME)

The person responsible for this website practices a regulated profession, for which we provide the following information:
Professional association:
Official academic or professional title:
EU country where the title was issued:
Professional regulations applicable to the practice of the profession: (IF THE WEBSITE OWNER PRACTICES A REGULATED PROFESSION)

We are at your service — please feel free to contact us.

What will we use your data for?
In general, your personal data will be used to relate to you and to provide our services. They may also be used for other activities, such as sending you advertising or promoting our activities.

Why do we need to use your data?
Your personal data is necessary for us to relate to you and provide our services. To this end, we will provide you with a series of checkboxes that allow you to make clear and simple decisions regarding the use of your personal information.

Who will know the information we ask for?
In general, only duly authorized personnel from our organization will have access to the information we request from you. Similarly, those entities that need access to your personal data so we can provide you with our services will also know your information. For example, our bank will know your data if payment for our services is made via card or bank transfer. Furthermore, public or private entities to whom we are legally obliged to provide your data may also have access — for example, Tax Law requires us to provide the Tax Agency with certain information about economic transactions that exceed a certain amount. In this context, if you make a reservation, we inform you that our business is required by the Citizen Security Law to keep a record of all guests staying in our facilities, which may be accessed by the State Security Forces.
If we need to share your personal information with other entities outside of these scenarios, we will always request your permission in advance using clear options so that you can make a decision. Additionally, we will transfer your personal data to the property owners of vacation rentals that you book.

How will we protect your data?
We will protect your data using effective security measures appropriate to the risks associated with its use. To this end, our organization has approved a Data Protection Policy, and annual audits and checks are carried out to ensure your data remains secure at all times.

Will we send your data to other countries?
There are countries in the world that are safe for your data and others that are not as safe. The European Union, for example, is a secure environment for your data. Our policy is not to send your personal data to any country that is not safe from a data protection perspective. If, as part of providing the service, it becomes necessary to send your data to a less safe country, we will always ask for your permission first and apply effective security measures to reduce the risks of such a transfer.

How long will we keep your data?
We will keep your data throughout our relationship and for as long as required by law. Once the applicable legal periods have expired, we will securely and environmentally-responsibly delete your data. Regarding the data included in the traveler registry, Royal Decree 933/2021 of October 26, which establishes documentary registration obligations for individuals or entities engaged in accommodation and vehicle rental activities, states in Article 5 that we must retain these records for three years, starting from the end of the contracted service.

What are your data protection rights?
At any time, you may contact us to find out what information we have about you, correct it if it is inaccurate, and delete it once our relationship ends, if legally possible. You also have the right to request that your data be transferred to another entity. This is known as the "portability" right and may be useful in some situations. To exercise any of these rights, you must send a written request to our address along with a copy of your ID so we can verify your identity. We have specific forms available in our offices to help you request these rights, and we are happy to help you complete them. For more information about your data protection rights, you can visit the website of the Spanish Data Protection Agency (www.agpd.es).

Can you withdraw your consent later?
Yes, you can withdraw your consent at any time if you change your mind about how your data is used. For example, if you were once interested in receiving information about our products or services but no longer wish to, you can notify us using the objection form available at our offices.

If you believe your rights have been violated, where can you file a complaint?
If you believe your rights have been violated by our organization, you may file a complaint with the Spanish Data Protection Agency through one of the following means:

Online: www.agpd.es

By mail: Agencia Española de Protección de Datos, C/ Jorge Juan, 6, 28001-Madrid

By phone: 901 100 099 or 91 266 35 17

Filing a complaint with the Spanish Data Protection Agency is free and does not require a lawyer.

Will we create profiles about you?
Our policy is not to create profiles of users of our services. However, there may be situations where, for service, commercial, or other purposes, we may need to create profiles based on your information. An example could be using your purchase or service history to offer you products or services that suit your preferences. In such cases, we will apply effective security measures to protect your information from unauthorized use.

Will we use your data for other purposes?
Our policy is not to use your data for purposes other than those explained. If, however, we need to use your data for other purposes, we will always request your permission in advance using clear options that allow you to decide.

OUR COMMITMENT TO PERSONAL DATA PROTECTION: “INFORMED PEOPLE AND PROTECTED DATA”

The Management / Governing Body of HANNA JOELA CLARÉN (hereinafter, the data controller), assumes the highest responsibility and commitment for the establishment, implementation and maintenance of this Data Protection Policy, ensuring the continuous improvement of the data controller with the objective of achieving excellence in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119/1, 04-05-2016), as well as the Spanish legislation on the protection of personal data (Organic Law, specific sectoral legislation and its implementing regulations).

The Data Protection Policy of HANNA JOELA CLARÉN is based on the principle of proactive responsibility, whereby the data controller is responsible for complying with the regulatory and jurisprudential framework governing this Policy and is able to demonstrate it to the competent supervisory authorities.

In this regard, the data controller will be governed by the following principles, which must serve all its personnel as a guide and reference framework in the processing of personal data:

1. Data protection by design: the data controller shall apply, both at the time of determining the means of processing and at the time of the processing itself, appropriate technical and organizational measures, such as pseudonymisation, designed to effectively implement data protection principles, such as data minimisation, and to integrate the necessary safeguards into the processing.

2. Data protection by default: the data controller shall apply appropriate technical and organizational measures to ensure that, by default, only personal data which are necessary for each specific purpose of the processing are processed.

3. Data protection throughout the information lifecycle: the measures ensuring the protection of personal data shall apply throughout the entire lifecycle of the information.
4. Lawfulness, fairness and transparency: personal data shall be processed lawfully, fairly and transparently in relation to the data subject.

5. Purpose limitation: personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes.

6. Data minimisation: personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

7. Accuracy: personal data shall be accurate and, where necessary, kept up to date; all reasonable steps shall be taken to ensure that personal data which are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.

8. Storage limitation: personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.

9. Integrity and confidentiality: personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

10. Information and training: one of the keys to ensuring the protection of personal data is the training and information provided to the personnel involved in their processing. Throughout the information lifecycle, all personnel with access to the data shall be properly trained and informed of their obligations regarding compliance with data protection regulations.

The Data Protection Policy of HANNA JOELA CLARÉN is communicated to all personnel of the data controller and made available to all interested parties.

As a result, this Data Protection Policy involves all personnel of the data controller, who must be familiar with it and adopt it, considering it as their own, with each member being responsible for applying it and for verifying the data protection rules applicable to their activity, as well as identifying and contributing improvement opportunities they consider appropriate in order to achieve excellence in compliance.

This Policy will be reviewed by the Management / Governing Body of HANNA JOELA CLARÉN as often as deemed necessary, in order to adapt it at all times to the current provisions on personal data protection.