Purpose of the processing:
to maintain a business relationship with the user. The intended processing operations are:

To send commercial marketing communications by email, WhatsApp, SMS, MMS, social communities or any other electronic or physical medium, whether present or future, that enables commercial communications. Such communications shall be carried out by the CONTROLLER and be related to its products and services, or the products and services of its partners or suppliers with whom they have a promotion agreement. In this case, third-parties shall never have access to personal data. To conduct statistical studies. To process orders, price quotes, applications or any type of request made by the user through any form of contact that is made available. To send the website newsletter.

Legal Basis:
GDPR: 6.1.a) The interested party gives their consent to have their personal data processed for one or several specific purposes.

Data storage criteria:
The data will be kept for the necessary time and no more, to maintain the purpose of the processing and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the pseudonymization of the data or its total destruction.

Data transfer:
Data shall not be transferred to third parties, unless there is a legal obligation. There is no international transfer of data.

User’s rights:

• You have the right to withdraw your consent at any time.
• You have the right to access, modify, transfer and delete your data and to limit and oppose to its processing.
• You have the right to file a claim with the supervisory authority (www.agpd.es ) if you consider that the processing does not comply with current legislation.

See your rights and contact details for the exercise of your rights in Section 7.

The homepage allows visitors, among other things, to book rooms in the different hotels of the company. On our website, there are different tabs which provide access to book different services offered by “DUNAS RESORTS, S.L.”, with the possibility of booking accommodation, cars or transfers.

Purpose of the processing:
it has been designed as a customer service mailbox and its purpose is to enable and speed the booking process for our customers and to make comments and/or requests through any multichannel medium.

Legal basis:
GDPR: 6.1.a) The interested party gives their consent to have their personal data processed for one or several specifiv purposes. 

Data storage criteria:
The data will be kept for the necessary time and no more, to maintain the purpose of the processing and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the pseudonymization of the data or their total destruction.

Data transfer:
​Data shall not be transferred to third parties, unless there is a legal obligation. There is no international transfer of data.

See your rights and contact details for the exercise of your rights in Section 7

Purpose of the processing:
to answer any queries, information requests, requests, questions, suggestions or similar matters made by data subjects regarding our products or services.

Legal basis:
GDPR: 6.1.a) The interested party gives their consent to have their personal data processed for one or several specific purposes.

Data storage criteria:
The data will be kept for the necessary time and no more, to maintain the purpose of the processing and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the pseudonymization of the data or its total destruction.

Data transfer:
Data shall not be transferred to third parties, unless there is a legal obligation. There is no international transfer of data.

See your rights and contact details for the exercise of your rights in Section 7

Purpose of the processing:
to subscribe to the Newsletter. To be able to send you our newsletter.

Legal basis:
consent.

Data storage criteria:
data shall be kept for as long as there is a mutual interest to keep the newsletter subscription. You shall always be given the possibility to withdraw your consent or unsubscribe.

Data transfer:
​Data shall not be transferred to third parties, unless there is a legal obligation. There is no international transfer of data.

See your rights and contact details for the exercise of your rights in Section 7

The tab “Work with us” has been designed as a recruitment pool mailbox and its purpose is to collect your personal and professional data for future selection processes. The user may find the option “attach a file” to send or submit your Curriculum Vitae to the website in a document or file format. Answers can be sent through any multichannel medium.

Purpose of the processing:
Receiving CVs to be included in the different recruitment processes run by the different franchises and the actual entit "DUNAS RESORTS, S.L.".

Legal Basis:
GDPR: 6.1.a) The interested party gives their consent to have their personal data processed for one or several specific purposes.

CV registration:
we inform you that this is the only formal procedure to accept your CV; therefore, CVs submitted in any other way shall not be accepted.

Data storage criteria:
The data will be kept for the necessary time and no more, to maintain the purpose of the processing and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the pseudonymization of the data or its total destruction. In this regard, once the aforementioned period has elapsed, and if you wish to continue to participate in the selection processes of the Data Controller, please send us your CV again.

Data update:
​if your information changes in any way, please let us know in writing as soon as possible in order to keep your data duly updated. Data transfer: Data shall not be transferred to third parties, unless there is a legal obligation. There is no international transfer of data.

See your rights and contact details for the exercise of your rights in Section 7

The Dunas Club tab has been designed to offer visitors the possibility of belonging to our customer loyalty club.

Purpose of the processing:
On behalf of the company, we process the information provided with the purpose of providing the service requested, belonging to our customer loyalty club and performing its comprehensive administrative management, and, also carrying out customer satisfaction surveys. 

Profiling:
In order to offer you products and services according to your interests, as well as to improve our services, we will create a business profile from the information provided and using statistical procedures. As a result of this statistical research, a profile analysis is carried out and more personalised marketing communications can be sent to you according to your preferences. The following data may be added to the profiles created for each customer, regardless of whether they have been provided personally or generated while using the products or services offered by “DUNAS RESORTS, S.L.”: contact information (such as their name, address, Personal ID Card no., email, mobile telephone no.); additional information (such as their preferred hotel, or the one that they use more frequently, or their hobbies); user identification information (such as customer number or contract number); customer history (such as the reception of offers, information about their accommodation, preferences); data from apps, prize draws, contests, webs, landing page or social networks. No automated decisions shall be taken based on said profile.

Business communications:
The consent is for business communications regarding the sale of products and services offered by “DUNAS RESORTS, S.L.”, always through multichannel means of communication (telephone, e-mail, postal mail, sms, mms, WhatsApp, etc.): newsletters, greetings on dates of general interest and celebrations: Christmas, Saint Valentine's Day, etc., events, contests and promotions. You may always withdraw your consent in every communication.

Birthday Greetings:
You agree that we can congratulate you on your birthday, in order to have a better deal of trust and closeness. To be able to give you a gift, product, service, discount or similar from "DUNAS RESORTS, S.L.". As well as sending a greeting card.

Legal basis:
GDPR: 6.1.a) The interested party gives their consent to have their personal data pocessed for one or several specific purposes.

Data storage criteria:
The data will be kept for the necessary time and no more, to maintain the purpose of the processing and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the pseudonymization of the data or its total destruction.

Recipients:
Data shall not be transferred to third parties unless there is a legal obligation to do so. There is no international transfer of data.

See your rights and contact details for the exercise of your rights in Section 7

User’s rights:

• You have the right to withdraw your consent at any time.
• You have the right to access, modify, transfer and delete your data and to limit and oppose to its processing.
• You have the right to file a claim with the supervisory authority (agpd.es ) if you consider that the processing does not comply with current legislation.

Contact information: 
“DUNAS RESORTS, S.L.” - Tax ID No.: B76235951 Address: C/ Einstein s/n, 35100 Maspalomas, Gran Canaria, Spain. Email of our Data Protection Officer: lopd@hotelesdunas.com or call telephone no.: +34 (0034) 928 721 243.

We collect personal data with your consent in the following situations:

• When you show interest in a product or service.
• When a price quote is made.
• During the booking process.
• When you contact us using data from apps, prize draws, contests, websites, landing page or social networks.
• When you participate in prize draws, awards, events, promotions and marketing, promotional or informative events using data from apps, prize draws, contests, websites, landing page or social networks.
• When you visit any of our hotels.
• In our customer loyalty club.

Contact information:
Name, Surname(s), Postal Address, Sex, Email, Landline/Mobile Telephone Number. Date of Birth.

Personal information:
Family situation, family members. Date of birth. Place of birth. Occupation. Bank details. Requests made regarding information about products and services. The most frequently booked hotel, hobbies. Method of payment chosen. Account number.

Identification data:
Customer number or contract number

Customer history:
Customer satisfaction rates. Offers received or sent. Details of the booking holder, price, booking date, check-in date, check-out date. Information regarding additional purchases or reservations. Campaign history and responses to those campaigns. Event participation (place, company). All complaints and claims made by the customer.

Information regarding the use of the room:
About personal preferences, capacity, use.

Data from the app, the website or social networks:
​All data entered by the customer/data subject when registering in any app, website, landing page or social network belonging to “DUNAS RESORTS, S.L.” or to other companies that are part of the business group. You may access the uses of the visited website of “DUNAS RESORTS, S.L.” Data from cookies (depending on the approval of cookie policies). The use of social networks made by “DUNAS RESORTS, S.L.” (for instance, visits, messages, photos or videos posted), and by the different companies that belong to the business group.

General and satisfaction surveys
On behalf of the company, we process the information provided with the purpose of providing the service requested, performing its comprehensive administrative management and booking rooms. Also, to identify our customers, to make checking in at the hotel easier when staying at any of the hotels of the company, as well as profiling customers, sending business communications and birthday wishes.

All provided data shall be stored as long as there is a mutual interest to maintain the purposes for the processing or for as many years as necessary to comply with the legal obligations. When said data is no longer necessary for those purposes, data shall be deleted using appropriate security measures to guarantee data pseudonymisation or its total destruction. We remind you that in all business communications carried out by “DUNAS RESORTS, S.L.”, you are always given the possibility of unsubscribing.

Quality and satisfaction surveys
To send quality and satisfaction surveys in order to offer a personalized treatment and to continue improving the relationship between the company and the customer. Data storage criteria: the data shall be stored as long as there is a mutual interest to maintain the purpose of the processing and when it is no longer necessary for such purpose, it shall be deleted using appropriate security measures to guarantee data pseudonymisation or its total destruction. Data communication: data shall not be disclosed to third parties unless there is a legal obligation. We remind you that in all business communications carried out by “DUNAS RESORTS, S.L.”, you are always given the possibility of unsubscribing. We also remind you that your consent can be revoked.

Commercial communications
The consent is for business communications regarding the sale of products and services offered by “DUNAS RESORTS, S.L.”, always through multichannel means of communication (telephone, e-mail, postal mail, sms, mms, WhatsApp, etc.): newsletters, greetings on dates of general interest and celebrations: Christmas, Saint Valentine's Day, etc., events, contests and promotions. You may always withdraw your consent in every communication.

Birthday wishes:
You give your consent so that we can wish you a happy birthday with the aim of having a closer and more trustful relationship. Also, so that “DUNAS RESORTS, S.L.” can offer you a present, product, service, discount or anything similar, as well as send you a birthday card; always by using multichannel means of communication (telephone, email, postal mail, sms, mms, WhatsApp, etc.).

Transferring data to other companies
Data shall not be transferred to third parties unless there is a legal obligation to do so.

Quality control, R&D&i of new products and services
“DUNAS RESORTS, S.L.”, may use any of the data received by our company during the provision of the services, with the purpose of developing future products and services and of controlling the quality of the existing ones. Before using such data for any of these purposes, your data shall be immediately anonymized so that it cannot be directly linked to you. The legal basis for this processing is based on the legitimate interest of “DUNAS RESORTS, S.L.” thus, enabling a more personalized and tailored manner of meeting the present and future needs of our customers and the usual investment in research, development and innovation made by “DUNAS RESORTS, S.L.”.

The legal basis is the execution of a contract, in this case, the contract for accommodation in our hotel, for the rental of hotel accommodation, as well as the consent given by the data subject and legitimate interest.

If you have ticked the corresponding box, the legal basis for the sending of commercial communications, customer profiling and birthday wishes, regarding other products and services, is your consent, which you can withdraw for such purpose at any time, without it conditioning the execution of the accommodation contract in the hotel.

• Consent. You have expressly given you consent, which you can withdraw at any time.
• Contractual relationship. To manage and maintain a contract that has been signed, the hotel room reservation and/or additional services.
• Vital interests of the data subject or of other persons. In case of sickness or anything similar.
• A legal obligation to which the controller is subject.
• Public interest or the exercise of public administrations.
• Prevailing legitimate interests of the Controller or of third-parties to which the data is transferred.

The GRDP requires controllers to facilitate the exercise of the data subjects’ rights. This requirement establishes that procedures and methods to do so must be visible, accessible and simple. This obligation requires to set up procedures enabling data subjects to easily prove that they have exercised their rights by electronic means, which is not always viable at present.

The exercise of rights shall be free of charge for the data subject, unless:

• Where requests are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may charge a reasonable fee taking into account the administrative costs of taking the action requested; or refuse to act on the request (such fee cannot represent additional income for the controller but should effectively correspond to the true cost of the processing of the request).
• The controller shall provide information on the actions taken on a request to the data subject within one month (that period may be extended by two further months if requests are especially complex and the controller shall inform the data subject of any such extension within one month). If the controller decides not to take action on the request, the controller shall inform the data subject of the reasons for not taking action within one month of receipt of the request.
• In accordance with the GDPR, controllers must use all reasonable measures to verify the identity of a data subject who requests access, and, in general, of data subjects that exercise the remaining ARCO rights.
• When the controller processes a large quantity of information concerning a data subject, the controller may request that the data subject specify the information to which the request relates.
• The controller may be assisted by processors to respond to requests made by data subjects exercising their rights, and such assistance may be included in the processing agreement.