Privacy Policy

PRIVACY POLICY

This Privacy Policy forms part of the General Terms and Conditions that govern this website.
The data controller is:
INGRID Y MARÍA, S.C.
Address: C/ Poris, nº10, Corralejo, 35660, La Oliva, Fuerteventura, Spain.
Tax ID: J42949982
Telephone: +34 628 181 884
Email: info@helenefuerteventura.com
You can contact us in any way you prefer.
We reserve the right to modify or adapt this Privacy Policy at any time.
We recommend that you review it periodically, and if you are registered and access your account or profile,
you will be notified of any changes.
If you belong to any of the following groups, please consult the dropdown information:

+ GUESTS

For what purposes will we process your personal data?

We inform you that your data will be processed for the purpose of managing your reservation, your stay at
the hotel, and guaranteeing payment of the expenses arising from said stay.
Your data will be communicated to the Security Forces and Corps in compliance with current legislation, as
well as to the travel agencies or operators involved.
The data will be kept for a minimum of 6 years in compliance with tax, commercial, consumer, and traveler
registration regulations.

What is the legal basis for processing your data?

The legal basis is your consent and compliance with the legal obligations established by Royal Decree
393/1974, of August 18, and Order INT/1922/2003 of July 3.

+ WEBSITE OR EMAIL CONTACTS

What data do we collect through the website?

We can process your IP address, the operating system and browser you use, and even the duration of your
visit, anonymously.
If you provide us with data in the contact form, you will be identified so that we can contact you, if
necessary.

For what purposes will we process your personal data?

• To answer your questions, requests, or inquiries.
• To manage the requested service, respond to your request, or process your inquiry.
• To provide information electronically regarding your request.
• To send commercial or event information electronically, provided you have given your express authorization.
• To conduct website analyses and improvements related to our products and services. To improve our business strategy.

What is the legal basis for processing your data?

The acceptance and consent of the data subject, given through a voluntary action, such as when completing
a form and clicking the “submit” button to make a request, necessarily implies that you have been informed
and have expressly consented to the content of the clause attached to said form or the privacy policy.
All our forms include an asterisk (*) next to required fields. If you do not provide this information,
or do not check the box to accept the privacy policy, the information will not be sent.

How long will we keep your personal data?

Until you revoke your consent.

+ NEWSLETTER CONTACTS

What data do we collect through the Newsletter?

On the website, you can subscribe to the Newsletter by providing us with an email address, to which it will
be sent.
We will only store your email address in our database and will send you emails periodically until you
unsubscribe or we stop sending emails.
You will always have the option to unsubscribe in any communication.

For what purposes will we process your personal data?

• To manage the requested service.
• To provide information electronically regarding your request.
• Commercial or event information via electronic means, provided there is express authorization.
• To analyze and improve our email marketing strategy.

What is the legal basis for processing your data?

The acceptance and consent of the data subject. In cases where you subscribe, acceptance will be required.

How long will we keep your personal data?

Until you revoke your consent.

+SUPPLIERS

For what purposes will we process your personal data?

• Information via electronic means regarding your request.
• Commercial or event information via electronic means, provided you have given your express
  authorization.
• Managing the administrative, communication, and logistics services provided by the Data Controller.
• Billing.
• Carrying out the corresponding transactions.
• Billing and filing the appropriate taxes.
• Control and collection procedures.

What is the legal basis for processing your data?

The legal basis is the acceptance of a contractual relationship, or, failing that, your consent when you
contact us or offer us your products through any channel.

How long will we keep your personal data?

During the term of the relationship between the parties and for the applicable statutes of limitations.

+ WHATSAPP WEB.

What data do we collect through WhatsApp Web?

We may process your IP address, the operating system and browser you use, and even the duration of your
visit, anonymously.
If you provide us with data, you will be identified so that we can contact you and respond to your request.

For what purposes will we process personal data?

To answer your questions, requests, or inquiries.

What is the legal basis for processing your data?

When you contact us through WhatsApp Web requesting information about our products and/or services,
we are authorized to process your data based on the performance of a contract or pre-contractual
measures.

+SOCIAL MEDIA CONTACTS

For what purposes will we process your personal data?

• To answer your questions, requests, or inquiries.
• To manage the requested service, respond to your request, or process your inquiry.
• To connect with you and build a community of followers.

What is the legal basis for processing your data?

The legal basis for processing your data is your voluntary consent to contact us and, where applicable, your
acceptance of a contractual relationship within the relevant social network. Data processing within the
social network will be carried out in accordance with its privacy policies.

+VIDEO SURVEILLANCE

For what purpose will we collect images?

The company uses video surveillance systems solely to guarantee the safety of people and property within
its facilities, as well as to prevent criminal acts or risky situations.

What is the legal basis?

The legal basis for processing the images is the legitimate interest of the data controller in ensuring the
safety of people and property (Art. 6.1.f GDPR), without affecting the fundamental rights and freedoms of
the data subjects.

To whom will your images be disclosed?

The recordings are kept in the company’s custody and may only be provided to the competent authorities
in the event of a legal requirement. They will not be disclosed to third parties for commercial purposes.

How long will we keep your personal data?

The recordings will be kept for a maximum of 30 days, unless their retention is required for incident
investigations or due to a legal obligation.

How long will we keep your personal data?

We can only access or delete your data in a limited way, as it is tied to your specific profile. We will process
it for as long as you continue to follow us, are friends, or click “like,” “follow,” or similar buttons.
Any corrections to your data or restrictions on information or publications must be made through your
profile or user settings on the social network itself.

Do we include personal data of third parties?

No, as a general rule, we only process the data provided to us by the data subjects. If you provide us with
data of third parties, you must first inform them and obtain their consent, or you release us from any
liability for failure to comply with this requirement.

What about data of minors?

We do not process data of children under 14 years of age. Therefore, please refrain from providing such
data if you are under 14 or, if applicable, from providing data of third parties who are under 14. INGRID Y
MARÍA, S.C. disclaims any liability for failure to comply with this provision.

Will we communicate with you electronically?

We will only do so to manage your request, if it is one of the contact methods you have provided.
If we send you marketing communications, they will have been previously and expressly authorized by you.

What security measures do we apply?

You can rest assured: We have adopted an optimal level of protection for the Personal Data we handle, and
we have implemented all available technical means and measures, in accordance with current technology,
to prevent the loss, misuse, alteration, unauthorized access, and theft of Personal Data.

To whom will your data be disclosed?

Your data will not be transferred to third parties, except where legally required. Specifically, it will be
disclosed to the Spanish Tax Agency (Agencia Estatal de la Administración Tributaria) and to banks and
financial institutions for the collection of payment for the service provided or product purchased, as well as
to the data processors necessary for the execution of the agreement.

In the case of a purchase or payment, if you choose an application, website, platform, bank card, or any
other online service, your data will be transferred to that platform or processed within its environment,
always with the highest security.When instructed by us, the web development and maintenance company
and the web hosting provider will have access to our website. They will have signed a service agreement
that obliges them to maintain the same level of privacy as we do.
Your data will not be shared with third parties, except where legally required. Specifically, it will be shared
with the State Tax Administration Agency and with banks and financial institutions for the collection of
payment for the service provided or product purchased, as well as with the individuals or entities
responsible for processing necessary for the execution of the agreement.
In the case of a purchase or payment, if you choose an application, website, platform, bank card, or any
other online service, your data will be shared with that platform or processed within its environment,
always with the highest level of security. During the card payment process, data will be collected by the
Banking Entity that owns the Virtual POS Terminal.
When instructed by us, the web development and maintenance company, or the hosting company, will
have access to our website. These companies will have signed a service agreement that obligates them to
maintain the same level of privacy as we do. International data transfers may occur when using American
applications; however, such transfers will be made to entities that have demonstrated compliance with the
level of protection and guarantees in accordance with the parameters and requirements established in
current data protection regulations, such as the European Regulation, or when there is a legal basis for
carrying out the international transfer.

What are your rights?

• To know whether or not we are processing your data.
  • To access your personal data.
• To request the rectification of your data if it is inaccurate.
• To request the erasure of your data if it is no longer necessary for the purposes for which it was
  collected or if you withdraw your consent.
• To request the restriction of the processing of your data in certain circumstances, in which case we will
  only retain it in accordance with current regulations. • To data portability, which will be provided to you in
  a structured, commonly used, and machine-readable format. If you prefer, we can send it to the new data
  controller you designate. This right is only valid in certain circumstances.
• To lodge a complaint with the Spanish Data Protection Agency or other competent supervisory authority
  if you believe we have not handled your request correctly.
• To withdraw your consent for any processing for which you have previously given consent, at any time.
  If you change any of your data, please let us know so we can keep our records up to date.
• Do you need a form to exercise your rights?
• We have forms available for exercising your rights. Request them by email, or if you prefer,
• you can use the forms provided by the Spanish Data Protection Agency or other third parties.
• These forms must be signed electronically or accompanied by a photocopy of your ID.
• If you are represented by someone, you must attach a copy of their ID, or have them sign the form with their electronic signature.
• The forms can be submitted in person, sent by mail, or emailed to the address of the Data Controller at the beginning of this document.
• How long will it take us to respond to your request to exercise your rights?
• It depends on the right, but at most one month from your request, and two months if the matter is very complex and we notify you that we need more time.
• Do we use cookies?
• If we use cookies other than those strictly necessary, you can consult our cookie policy via the link at the bottom of our website.
• How long will we keep your personal data?
• Personal data will be kept while you remain a customer.
• Once you leave our service, the personal data processed for each purpose will be kept for the legally required periods, including the period in which a judge or court may require them, taking into account the statute of limitations for legal actions.
• The processed data will be kept until the aforementioned legal periods expire, if there is a legal obligation to retain it, or, if no such legal period exists, until the data subject requests its deletion or revokes the consent granted.
• We will keep all information and communications related to your purchase or the provision of our service for the duration