0%

Privacy Policy

1. User Information

Who is responsible for processing your personal data?

In compliance with Regulation (EU) 2016/679 of April 27 (General Data Protection Regulation - GDPR), Organic Law 3/2018 of December 5 (LOPDGDD), and other applicable regulations, it is informed that the data controller of the personal data collected through this website is:

Data Controller: PACUS GORDUS, S.L.

CIF: B64004229

Registered address:

Ctra. La Geria, Km. 3

35570 Yaiza

Lanzarote (Las Palmas)

Spain

Email:

reservations@casamontelongo.com

Trade name: Casa Montelongo

2. What do we use your personal data for?

  • The personal data provided by users will be processed for the following purposes:

    Manage inquiries received through contact forms, email, phone, or any other means enabled on the website.

  • Manage accommodation bookings and properly provide the contracted services.

  • Send confirmations, reservation-related communications, pre-arrival information, and assistance during the stay.

  • Address inquiries, incidents, complaints, or requests made by users.

  • Comply with legal obligations arising from the tourism accommodation activity, including, when required, reporting data to competent authorities.

  • Send commercial communications about news, promotions, or services of Casa Montelongo, only when the user has given explicit consent.

  • Create internal statistics and usage analysis of the website for service improvement purposes.

3. What is the legal basis for processing?

The processing of personal data is based on one of the following legal grounds provided in Article 6 of Regulation (EU) 2016/679:

  • Performance of a contract or implementation of pre-contractual measures requested by the user, to manage reservations and provide the contracted services.

  • Compliance with legal obligations, especially those derived from applicable tax, accounting, and tourism regulations.

  • Consent of the data subject, for sending commercial communications or subscribing to newsletters.

  • Legitimate interest of the data controller to improve service quality, address inquiries, prevent fraud, and ensure website security.

4. How long do we keep your data?

Personal data will only be kept for as long as necessary to fulfill the purpose for which it was collected.

Subsequently, they will remain blocked for the periods required by applicable legislation to address potential legal responsibilities, and once these periods expire, they will be securely deleted.

When processing is based on consent, data will be retained until the user withdraws that consent.

5. Who do we share your data with?

Generally, personal data will not be transferred to third parties.

However, they may be communicated when necessary to:

  • Fulfill legal obligations.

  • Manage reservations and contracted services.

They may also be shared with:

  • Technological providers acting as data processors.
  • Reservation platform.
  • Payment gateway responsible for processing payments securely.
  • Web hosting and email providers.
  • IT support companies.
  • Hotel management service providers.

All of them act in accordance with the relevant data processing agreements as per Article 28 of the GDPR.

In case of international data transfers, these will only be carried out with providers offering adequate safeguards in accordance with the General Data Protection Regulation.

6. What are your rights?

The user may exercise the following rights at any time:

  • Right of access.

  • Right to rectification.

  • Right to erasure.

  • Right to object.

  • Right to restrict processing.

  • Right to data portability.

  • Right to withdraw consent when processing is based on it.

  • Right not to be subject to automated decisions, where applicable.

These rights can be exercised by submitting a request to:

PACUS GORDUS, S.L.

Ctra. La Geria, Km. 3

35570 Yaiza

Lanzarote (Las Palmas)

Spain

Email:

reservations@casamontelongo.com

You may also file a complaint with the Spanish Agency for Data Protection (AEPD) if you believe your personal data processing does not comply with current regulations.

7. Mandatory data

The data marked as mandatory in the forms must be provided necessarily to process your request or properly deliver the contracted services.

Refusal to provide such data may prevent proper management of the request or reservation.

The user guarantees that the data provided are accurate, complete, and up-to-date, and commits to communicating any modifications.

8. Minors

This website is not aimed at minors under fourteen (14) years old.

Minors should not provide personal data without prior authorization from their parents or guardians.

If the RESPONSIBLE detects that a minor has provided personal data without proper authorization, it will proceed to its immediate deletion.

9. Security measures

PACUS GORDUS, S.L. applies appropriate technical and organizational measures to ensure an adequate level of security according to the risk, in accordance with Regulation (EU) 2016/679 and Organic Law 3/2018.

Personal data will be processed in a:

  • Lawful.

  • Fair.

  • Transparent.

  • Appropriate.

  • Relevant.

  • Limited to the purposes for which they were collected.

Additionally, measures are taken to prevent loss, alteration, unauthorized access, or unlawful processing of information.

10. Social networks

Casa Montelongo has official profiles on various social networks.

User interaction with these profiles will be governed by this Privacy Policy and the specific policies of each platform.

Users are advised to review the privacy conditions and policies of social networks before interacting with them.

11. Changes to the privacy policy

PACUS GORDUS, S.L. may modify this Privacy Policy when necessary to adapt it to legislative updates, guidelines from the Spanish Data Protection Agency, or changes in the activity carried out.

The current version will always be the one published on this website.