This website only collects personal data with the knowledge and information of the users. In this document we explain in detail who will process your data, what it will be used for and what rights you can exercise, among other things. I

Property

Rent2ndhometenerife S.L.U.

Registered Office

Calle Roques de Salmor, 5 Costa Adeje
38679 Adeje, Santa Cruz de Tenerife

CIF: B38986626

Telephone

1. +34 822 070 030

 

1. DATA CONTROLLERS. WHO WILL PROCESS YOUR DATA?

Identity Rent2ndhometenerife S.L.U. Address Calle Roques de Salmor, 5 Costa Adeje 38679 Adeje, Santa Cruz de Tenerife.

2. WHAT PERSONAL DATA DO WE PROCESS AND WHERE DO THEY COME FROM?

In relation to your interaction with us, we may process different categories of personal data depending on the service or product contracted. These data may be collected through any of the means Rent2ndhometenerife S.L.U. provides, both online and in person. The categories of data processed may include: Contact details. Identifying information of individuals: name and surname, ID document, telephone number, email address, postal address, signature, image. Special category data. Bank details. If you have booked your stay through a travel agency or online travel agency, they will provide your data to Rent2ndhometenerife S.L.U. for the management of your booking and/or contract. Travel agencies or online travel agencies may use your personal data for their own purposes, in which case they act as a separate Data Controller. You may obtain information about the processing of your data by these entities by consulting the Privacy Policy section on the agency’s website. In any case, if a third party has provided us with your data, we will process it within the purposes outlined in this Privacy Policy.

 

3. PURPOSE. WHAT AND WHY ARE YOUR PERSONAL DATA USED FOR?

Rent2ndhometenerife S.L.U. informs you that it may process personal data for the purposes outlined below, insofar as there is a legal basis for each processing. The GDPR and the Spanish Data Protection Act establish that personal information may only be processed if one of the legal bases expressly provided by these regulations exists. Specifically, Article 6 of the GDPR sets out a closed list of legal bases that may justify and legitimise the processing of personal data: Consent. Contractual relationship. Vital interests of the data subject or another person. Compliance with a legal obligation by the controller. Public interest or exercise of public authority. Legitimate interest of the controller or third parties to whom the data are disclosed. Rent2ndhometenerife S.L.U. may process your data, in some cases, based on the legitimate interest under Article 6(1)(f) of the GDPR, as it considers that such processing does not harm the clients’ rights to personal data protection. This provision allows processing necessary for the pursuit of legitimate interests by the controller or a third party, provided that such interests are not overridden by the interests, rights, and fundamental freedoms of the data subject requiring data protection, particularly when the data subject is a child.–. Main purposes and legal bases for processing your data include: Reservation and service management Purpose: Managing your booking and/or purchase, sending booking confirmation, processing payment and pre-authorisations if applicable. If you voluntarily provide health data to manage specific services (e.g., adapted rooms), Rent2ndhometenerife S.L.U. understands this data as expressly provided by you and will only process it to manage your request. Managing modification or cancellation requests, check-in, accommodation, and other services such as SPA, bars, restaurants, or childcare. Legal basis: Pre-contractual and/or contractual execution, your consent for special category data. Check-in Purpose: To formalise and manage your booking, charge according to booking and cancellation conditions, and manage possible services related to your stay. Legal basis: Contractual execution and your consent. Video surveillance Purpose: Monitoring the premises to comply with security procedures, prevent risks to people, premises, and property, report incidents to authorities, and respond to their requests. Legal basis: Public interest, under Spanish Private Security Law 5/2014. Compliance with legal obligations Purpose: Compliance with accounting, legal, fiscal, and administrative obligations. Recording guests and reporting to law enforcement under public safety regulations. Legal basis: Contractual execution and legal obligation (various national laws and regulations). Quality surveys Purpose: Evaluate user satisfaction with services and products to continuously improve our services. Legal basis: Legitimate interest of Rent2ndhometenerife S.L.U. Commercial communications (unsolicited) Purpose: Sending offers on products and services related to previous bookings. You may object to receiving these communications. Legal basis: Legitimate interest of Rent2ndhometenerife S.L.U. Commercial communications (solicited) Purpose: Sending offers not related to contracted services, promotional offers, or tourism/leisure activities. Legal basis: Your consent. Queries, requests, or suggestions Purpose: Managing your queries, requests, or suggestions. Legal basis: Consent and legitimate interest for non-registered users; contract execution for registered users; legal obligation for rights requests. Job applications Purpose: Include applications in current or future recruitment processes. Legal basis: Pre-contractual measures. Whistleblowing channel Purpose: Managing reported irregularities, detecting potential offences, and preventing conduct contrary to internal or external regulations. The identity of whistleblowers will always remain confidential. Verbal reports will be documented by recording or transcription. Legal basis: Legal obligation under various Spanish laws. By providing your data, you guarantee its accuracy and commit to informing us of any changes. Mandatory fields are required to access certain services; without them, you may not be able to use the services.

4. HOW LONG WILL WE KEEP YOUR DATA. HOW LONG WILL WE KEEP IT?

Personal data provided will be processed and retained for as long as necessary to fulfil the purpose for which it was collected. Once this period has expired, we will securely store your data for access by the competent public authorities, judges and courts, or the Public Prosecutor during the statute of limitations for any claims arising from the relationship with the user and/or for legally required retention periods. Once any potential actions have expired, Rent2ndhometenerife S.L.U. will delete the personal data. If the legal basis for processing your data is your consent, Rent2ndhometenerife S.L.U. will retain your information as long as you do not withdraw your initially granted consent. Some of the legal retention periods we must comply with are: Entry forms and registers: 3 years Accounting and tax records for commercial purposes: 6 years Accounting and tax records for fiscal purposes: 4 years Building access logs: 1 month Video surveillance: 1 month Sending commercial communications: Until consent is withdrawn or objection to processing is exercised

5. WHO DO WE PROVIDE YOUR DATA TO?

To fulfil the purposes stated in this Privacy Policy, it is necessary to grant access to your personal data to entities that support us in providing our services, namely: Financial institutions, business advisory, transport, etc.: companies necessary to manage your booking and stay. Debt recovery agencies and insurers to handle claims against tour operators or clients, as part of Rent2ndhometenerife S.L.U.’s legitimate interest in recovering payments and securing outstanding amounts. External service providers, such as cloud services, technological services, payment processors, marketing services, or services for conducting customer surveys on our behalf. Search engines. Aside from the above, Rent2ndhometenerife S.L.U. will not transfer personal data to third parties except where required by law. If data are shared with a third party, users will be informed in advance, and explicit consent will be requested. The data controller, as well as those involved in any phase of processing and/or the entities to whom data are communicated (always with the user’s authorisation), are required to maintain professional confidentiality and implement technical and organisational measures to ensure the security of personal data, preventing, as far as possible, unauthorised access, unlawful modifications, theft, and/or loss of data, in order to guarantee an appropriate level of security according to the nature and sensitivity of the data provided. In compliance with Organic Law 4/2015 of 30 March on the Protection of Citizen Security, Article 25.1, Royal Decree 933/2021 of 26 October establishing documentation and reporting obligations for individuals or legal entities operating in accommodation and motor vehicle rental, and Order INT/1922/2003 of 3 July regarding entry registers in hospitality establishments, guest data will be communicated to law enforcement authorities.

6. YOUR RIGHTS

You may exercise any of the following rights by informing us of the reason for your request and the right you wish to exercise. Where necessary to identify you, we may request a copy of an identity document. In general, you have the right to: Access your personal data to see what information we hold about you. Request the rectification of your data; please note that by actively providing your personal data through any means, you confirm its accuracy and agree to notify us of any changes. Request deletion of your data where it is no longer necessary for the purposes for which it was collected or where we no longer have a legal basis for processing it. Request restriction of processing, which may allow you to ask us to temporarily suspend processing or retain data beyond the necessary period. Request data portability, i.e., to receive your personal data in a structured, commonly used, machine-readable format to transfer to another entity, where technically feasible. Object to processing based on our legitimate interests. Request not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you. You may exercise your rights via: Postal mail: Calle Roques de Salmor, 5 Costa Adeje 38679 Adeje, Santa Cruz de Tenerife

Email: [email protected]

We will respond within one month of receiving your request. This period may be extended by a further two months if necessary, considering the complexity and number of requests. You may withdraw consent at any time by emailing [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. If you believe your personal data protection rights have been violated, you may file a complaint with the Spanish Data Protection Agency: www.aepd.es .

7. WHAT HAPPENS IF YOU PROVIDE US WITH THIRD PARTY DATA OR IF A THIRD PARTY HAS PROVIDED US WITH YOUR DATA?

There may be occasions when you provide third-party data, for example, contact persons. By providing personal data of third parties, you confirm that they have been informed of the purposes and manner in which we need to process their personal data. If you have booked your stay through a travel agency or online travel agency, they will provide your data to Rent2ndhometenerife S.L.U. for managing your booking and/or contract. Travel agencies or online travel agencies may use your personal data for their own purposes, acting as separate Data Controllers. You can obtain information about how these entities process your data from the Privacy Policy section of their website. In any case, if a third party has provided us with your data, we will process it within the purposes outlined in this Privacy Policy.

8.- ARE MY DATA SECURE?

Rent2ndhometenerife S.L.U. guarantees the implementation of appropriate measures to ensure the confidential processing of your data, given their sensitive nature, and undertakes to keep such data secret and treat them with the utmost confidentiality. The company declares that it has implemented security policies in its information systems appropriate to the types of data processed in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND COUNCIL of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data (GDPR).

9. CHANGES TO THE PRIVACY POLICY

We may modify the information contained in this Privacy Policy when deemed necessary, for example, to comply with legislative or judicial changes. If changes are made, we will notify you through the website or, in cases of significant changes affecting your privacy, via email, so you can review, evaluate, and, if necessary, object or unsubscribe from any service or functionality.