INFORMATION ON THE PROCESSING OF PERSONAL DATA
(pursuant to Art. 13 of EU Regulation 2016/679 - GDPR)
This information is provided pursuant to Art. 13 of the Regulation (EU) 2016/679 (hereinafter “GDPR”) and describes how the personal data of users consulting the site and using the contact form.
1. DATA CONTROLLER
The data controller is:
Tenerife Surprise 2017 SL
CIF: B76760909
(hereinafter referred to as “Holder”)
The user may contact the Controller via the contact form on the site.
2. TYPE OF DATA PROCESSED
Only the contact form is collected and processed:
identification data (e.g. name)
contact details (e.g. email address, telephone if available)
content of the message sent by the user
No special data (Art. 9 GDPR) or judicial data are collected.
3. PURPOSE OF PROCESSING
Personal data provided by the user are processed exclusively for the following purposes:
respond to requests sent via the contact form;
re-contact the user in relation to the request made.
The data will not be used for marketing purposes, profiling or sending unsolicited promotional communications.
4. LEGAL BASIS OF PROCESSING
The legal basis for the processing is:
the execution of pre-contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR);
the consent of the person concerned, expressed by voluntarily sending the contact form (Art. 6(1)(a) GDPR).
5. METHODS OF PROCESSING
Personal data is processed:
by electronic and/or computerised means;
in compliance with the principles of lawfulness, fairness, transparency, minimisation and security provided for by the GDPR.
The data transmitted via the contact form are converted into an email message and may be stored in the Controller's email system.
6. PROVISION OF DATA
The provision of data is optional, but failure to provide it will make it impossible to answer the request sent via the contact form.
7. DATA RETENTION
Personal data will be stored for as long as strictly necessary to process the user's request and in any case no later than the time limits provided for in the applicable legislation, unless otherwise required by law.
8. COMMUNICATION AND DISSEMINATION OF DATA
Personal data:
will not be disseminated;
may be communicated to third parties exclusively for technical or operational needs (e.g. hosting providers or email services), duly appointed Data Processors pursuant to Art. 28 GDPR.
9. RIGHTS OF THE DATA SUBJECT
You, as a data subject, may at any time exercise your rights under Articles 15-22 of the GDPR, including:
right of access to one's personal data;
right to rectification or integration of data;
right to erasure (“right to be forgotten”);
right to restriction of processing;
right to object to processing;
right to data portability;
right to revoke consent at any time, without prejudice to the lawfulness of the processing based on the consent given before revocation.
Requests can be sent to the Controller via the contact form on the site.
10. RIGHT OF COMPLAINT
The data subject has the right to lodge a complaint with the’Data Protection Authority if they consider that their personal data are being processed in violation of the law.
11. UPDATES
This notice may be subject to change or update. Users are invited to consult it periodically.