StartPrivate Policy
Privacy Policy
 

“DUNAS RESORTS, S.L.”, hereinafter the CONTROLLER, is responsible for processing the user’s personal data and informs the user that such data shall be processed according to the provisions laid down in current legislation regarding personal data protection, the European Regulation EU 2016/679 of 27 April 2016. (GDPR). Organic Law 3/2018, of 5 December, on Protection of Personal Data and Assurance of Digital Rights and the Internet Law, LSSICE, Law of Information Society Services and Electronic Commerce. Law 34/2002 of 11 July, therefore, provides the following information regarding the processing of your data:

Purpose of the processing:
to maintain a business relationship with the user. The intended processing operations are:

To send commercial marketing communications by email, WhatsApp, SMS, MMS, social communities or any other electronic or physical medium, whether present or future, that enables commercial communications. Such communications shall be carried out by the CONTROLLER and be related to its products and services, or the products and services of its partners or suppliers with whom they have a promotion agreement. In this case, third-parties shall never have access to personal data. To conduct statistical studies. To process orders, price quotes, applications or any type of request made by the user through any form of contact that is made available. To send the website newsletter.

Legal Basis:
GDPR: 6.1.a) The interested party gives their consent to have their personal data processed for one or several specific purposes.

Data storage criteria:
The data will be kept for the necessary time and no more, to maintain the purpose of the processing and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the pseudonymization of the data or its total destruction.

Data transfer:
Data shall not be transferred to third parties, unless there is a legal obligation. There is no international transfer of data.

User’s rights:

  • You have the right to withdraw your consent at any time.
  • You have the right to access, modify, transfer and delete your data and to limit and oppose to its processing.
  • You have the right to file a claim with the supervisory authority (www.agpd.es ) if you consider that the processing does not comply with current legislation.

See your rights and contact details for the exercise of your rights in Section 7.

The homepage allows visitors, among other things, to book rooms in the different hotels of the company. On our website, there are different tabs which provide access to book different services offered by “DUNAS RESORTS, S.L.”, with the possibility of booking accommodation, cars or transfers.

Purpose of the processing:
it has been designed as a customer service mailbox and its purpose is to enable and speed the booking process for our customers and to make comments and/or requests through any multichannel medium.

Legal basis:
GDPR: 6.1.a) The interested party gives their consent to have their personal data processed for one or several specifiv purposes. 

Data storage criteria:
The data will be kept for the necessary time and no more, to maintain the purpose of the processing and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the pseudonymization of the data or their total destruction.

Data transfer:
​Data shall not be transferred to third parties, unless there is a legal obligation. There is no international transfer of data.

See your rights and contact details for the exercise of your rights in Section 7

Purpose of the processing:
to answer any queries, information requests, requests, questions, suggestions or similar matters made by data subjects regarding our products or services.

Legal basis:
GDPR: 6.1.a) The interested party gives their consent to have their personal data processed for one or several specific purposes.

Data storage criteria:
The data will be kept for the necessary time and no more, to maintain the purpose of the processing and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the pseudonymization of the data or its total destruction.

Data transfer:
Data shall not be transferred to third parties, unless there is a legal obligation. There is no international transfer of data.

See your rights and contact details for the exercise of your rights in Section 7

Purpose of the processing:
to subscribe to the Newsletter. To be able to send you our newsletter.

Legal basis:
consent.

Data storage criteria:
data shall be kept for as long as there is a mutual interest to keep the newsletter subscription. You shall always be given the possibility to withdraw your consent or unsubscribe.

Data transfer:
​Data shall not be transferred to third parties, unless there is a legal obligation. There is no international transfer of data.

See your rights and contact details for the exercise of your rights in Section 7

The tab “Work with us” has been designed as a recruitment pool mailbox and its purpose is to collect your personal and professional data for future selection processes. The user may find the option “attach a file” to send or submit your Curriculum Vitae to the website in a document or file format. Answers can be sent through any multichannel medium.

Purpose of the processing:
Receiving CVs to be included in the different recruitment processes run by the different franchises and the actual entit "DUNAS RESORTS, S.L.".

Legal Basis:
GDPR: 6.1.a) The interested party gives their consent to have their personal data processed for one or several specific purposes.

CV registration:
we inform you that this is the only formal procedure to accept your CV; therefore, CVs submitted in any other way shall not be accepted.

Data storage criteria:
The data will be kept for the necessary time and no more, to maintain the purpose of the processing and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the pseudonymization of the data or its total destruction. In this regard, once the aforementioned period has elapsed, and if you wish to continue to participate in the selection processes of the Data Controller, please send us your CV again.

Data update:
​if your information changes in any way, please let us know in writing as soon as possible in order to keep your data duly updated. Data transfer: Data shall not be transferred to third parties, unless there is a legal obligation. There is no international transfer of data.

See your rights and contact details for the exercise of your rights in Section 7

The Dunas Club tab has been designed to offer visitors the possibility of belonging to our customer loyalty club.

Purpose of the processing:
On behalf of the company, we process the information provided with the purpose of providing the service requested, belonging to our customer loyalty club and performing its comprehensive administrative management, and, also carrying out customer satisfaction surveys. 

Profiling:
In order to offer you products and services according to your interests, as well as to improve our services, we will create a business profile from the information provided and using statistical procedures. As a result of this statistical research, a profile analysis is carried out and more personalised marketing communications can be sent to you according to your preferences. The following data may be added to the profiles created for each customer, regardless of whether they have been provided personally or generated while using the products or services offered by “DUNAS RESORTS, S.L.”: contact information (such as their name, address, Personal ID Card no., email, mobile telephone no.); additional information (such as their preferred hotel, or the one that they use more frequently, or their hobbies); user identification information (such as customer number or contract number); customer history (such as the reception of offers, information about their accommodation, preferences); data from apps, prize draws, contests, webs, landing page or social networks. No automated decisions shall be taken based on said profile.

Business communications:
The consent is for business communications regarding the sale of products and services offered by “DUNAS RESORTS, S.L.”, always through multichannel means of communication (telephone, e-mail, postal mail, sms, mms, WhatsApp, etc.): newsletters, greetings on dates of general interest and celebrations: Christmas, Saint Valentine's Day, etc., events, contests and promotions. You may always withdraw your consent in every communication.

Birthday Greetings:
You agree that we can congratulate you on your birthday, in order to have a better deal of trust and closeness. To be able to give you a gift, product, service, discount or similar from "DUNAS RESORTS, S.L.". As well as sending a greeting card.

Legal basis:
GDPR: 6.1.a) The interested party gives their consent to have their personal data pocessed for one or several specific purposes.

Data storage criteria:
The data will be kept for the necessary time and no more, to maintain the purpose of the processing and when it is no longer necessary for this purpose, it will be deleted with appropriate security measures to guarantee the pseudonymization of the data or its total destruction.

Recipients:
Data shall not be transferred to third parties unless there is a legal obligation to do so. There is no international transfer of data.

See your rights and contact details for the exercise of your rights in Section 7

User’s rights:

  • You have the right to withdraw your consent at any time.
  • You have the right to access, modify, transfer and delete your data and to limit and oppose to its processing.
  • You have the right to file a claim with the supervisory authority (agpd.es ) if you consider that the processing does not comply with current legislation.


Contact information: 
“DUNAS RESORTS, S.L.” - Tax ID No.: B76235951 Address: C/ Einstein s/n, 35100 Maspalomas, Gran Canaria, Spain. Email of our Data Protection Officer: lopd@hotelesdunas.com or call telephone no.: +34 (0034) 928 721 243.

The links which redirect the website to the different social network accounts such as Facebook, Twitter, etc… which belong to the CONTROLLER are designed so that users can access those pages directly and thus be able to interact, express opinions, ideas and make other comments related to the company, its services or products. The company “DUNAS RESORTS, S.L.”, is not responsible for any comments made, photos or videos published by the user community, although it may veto, delete or remove comments, photos or videos that are unseemly or inappropriate. To learn more about any responsibility regarding the different social network platforms, please check their own Privacy Policy.

By ticking the corresponding boxes and entering their data in the respective fields marked with an asterisk (*) in the contact form, or submitting their data through the downloadable forms, users expressly, explicitly and freely accept that their data is necessary for their requests to be answered by the provider. Filing out the rest of the fields is voluntary. The user guarantees that the personal data provided to the CONTROLLER is accurate and shall be responsible for informing the CONTROLLER of any changes in said data. The CONTROLLER expressly informs and guarantees users that under no circumstances their personal data shall be transferred to third parties and that in case of carrying out any transfer, the user’s previous express, informed and unambiguous authorization shall always be asked. All the information requested through our website is compulsory, as it is necessary to provide the best possible service to the user. If all requested data is not provided, we cannot guarantee that the information and services provided are completely tailored to your needs.

According to the provisions of the current legislation regarding personal data protection, the CONTROLLER fully complies with all the provisions laid down in the GDPR and LOPD (Spanish Organic Law on Data Protection) regulations related to the processing of the personal data for which it is responsible, and manifestly so with the principles outlined in article 5 of the GDPR and article 4 of the LOPD, by which data is to be processed fairly and lawfully and in a transparent manner in relation to the data subject and must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. The CONTROLLER guarantees the implementation of the appropriate technical and organisational measures required by the GDPR and the LOPD regulations in order to safeguard the rights and freedoms of data subjects and that they have been adequately informed of how such rights and freedoms can be exercised.

This privacy policy is only applicable to the http://www.hotelesdunas.com website, and it is not guaranteed when accessing this site through external links, nor in the case of accessing other websites using links on this site.

The full or partial reproduction of this website, including dumping the content on any medium, without the express authorisation of THE CONTROLLER is strictly prohibited.

General Regulation of Data Protection (RGPD)

We collect personal data with your consent in the following situations:

  • When you show interest in a product or service.
  • When a price quote is made.
  • During the booking process.
  • When you contact us using data from apps, prize draws, contests, websites, landing page or social networks.
  • When you participate in prize draws, awards, events, promotions and marketing, promotional or informative events using data from apps, prize draws, contests, websites, landing page or social networks.
  • When you visit any of our hotels.
  • In our customer loyalty club.

Contact information:
Name, Surname(s), Postal Address, Sex, Email, Landline/Mobile Telephone Number. Date of Birth.

Personal information:
Family situation, family members. Date of birth. Place of birth. Occupation. Bank details. Requests made regarding information about products and services. The most frequently booked hotel, hobbies. Method of payment chosen. Account number.

Identification data:
Customer number or contract number

Customer history:
Customer satisfaction rates. Offers received or sent. Details of the booking holder, price, booking date, check-in date, check-out date. Information regarding additional purchases or reservations. Campaign history and responses to those campaigns. Event participation (place, company). All complaints and claims made by the customer.

Information regarding the use of the room:
About personal preferences, capacity, use.

Data from the app, the website or social networks:
​All data entered by the customer/data subject when registering in any app, website, landing page or social network belonging to “DUNAS RESORTS, S.L.” or to other companies that are part of the business group. You may access the uses of the visited website of “DUNAS RESORTS, S.L.” Data from cookies (depending on the approval of cookie policies). The use of social networks made by “DUNAS RESORTS, S.L.” (for instance, visits, messages, photos or videos posted), and by the different companies that belong to the business group.

General and satisfaction surveys
On behalf of the company, we process the information provided with the purpose of providing the service requested, performing its comprehensive administrative management and booking rooms. Also, to identify our customers, to make checking in at the hotel easier when staying at any of the hotels of the company, as well as profiling customers, sending business communications and birthday wishes.

All provided data shall be stored as long as there is a mutual interest to maintain the purposes for the processing or for as many years as necessary to comply with the legal obligations. When said data is no longer necessary for those purposes, data shall be deleted using appropriate security measures to guarantee data pseudonymisation or its total destruction. We remind you that in all business communications carried out by “DUNAS RESORTS, S.L.”, you are always given the possibility of unsubscribing.

Quality and satisfaction surveys
To send quality and satisfaction surveys in order to offer a personalized treatment and to continue improving the relationship between the company and the customer. Data storage criteria: the data shall be stored as long as there is a mutual interest to maintain the purpose of the processing and when it is no longer necessary for such purpose, it shall be deleted using appropriate security measures to guarantee data pseudonymisation or its total destruction. Data communication: data shall not be disclosed to third parties unless there is a legal obligation. We remind you that in all business communications carried out by “DUNAS RESORTS, S.L.”, you are always given the possibility of unsubscribing. We also remind you that your consent can be revoked.

Commercial communications
The consent is for business communications regarding the sale of products and services offered by “DUNAS RESORTS, S.L.”, always through multichannel means of communication (telephone, e-mail, postal mail, sms, mms, WhatsApp, etc.): newsletters, greetings on dates of general interest and celebrations: Christmas, Saint Valentine's Day, etc., events, contests and promotions. You may always withdraw your consent in every communication.

Birthday wishes:
You give your consent so that we can wish you a happy birthday with the aim of having a closer and more trustful relationship. Also, so that “DUNAS RESORTS, S.L.” can offer you a present, product, service, discount or anything similar, as well as send you a birthday card; always by using multichannel means of communication (telephone, email, postal mail, sms, mms, WhatsApp, etc.).

Transferring data to other companies
Data shall not be transferred to third parties unless there is a legal obligation to do so.

Quality control, R&D&i of new products and services
“DUNAS RESORTS, S.L.”, may use any of the data received by our company during the provision of the services, with the purpose of developing future products and services and of controlling the quality of the existing ones. Before using such data for any of these purposes, your data shall be immediately anonymized so that it cannot be directly linked to you. The legal basis for this processing is based on the legitimate interest of “DUNAS RESORTS, S.L.” thus, enabling a more personalized and tailored manner of meeting the present and future needs of our customers and the usual investment in research, development and innovation made by “DUNAS RESORTS, S.L.”.

The legal basis is the execution of a contract, in this case, the contract for accommodation in our hotel, for the rental of hotel accommodation, as well as the consent given by the data subject and legitimate interest.

If you have ticked the corresponding box, the legal basis for the sending of commercial communications, customer profiling and birthday wishes, regarding other products and services, is your consent, which you can withdraw for such purpose at any time, without it conditioning the execution of the accommodation contract in the hotel.

  • Consent. You have expressly given you consent, which you can withdraw at any time.
  • Contractual relationship. To manage and maintain a contract that has been signed, the hotel room reservation and/or additional services.
  • Vital interests of the data subject or of other persons. In case of sickness or anything similar.
  • A legal obligation to which the controller is subject.
  • Public interest or the exercise of public administrations.
  • Prevailing legitimate interests of the Controller or of third-parties to which the data is transferred.

You have the right to obtain confirmation on whether we are processing your personal data at "DUNAS RESORTS S.L.", therefore, you have the right to access your personal data, rectify inaccurate data, request deletion when the data is no longer necessary, its portability, and limit its processing. You also have the right to withdraw your consent at any time and present a complaint before the Control Authority (www.agpd.es), if you consider that the processing does not follow the standard in force.
In certain circumstances given in article 18 of the GDPR, interested parties can request that processing of their data is limited, in which case we will only keep it to make or defend complaints.
The interested parties can object to the processing of their data for marketing purposes, including making profiles. "DUNAS RESORTS S.L." will cease processing the data, except for overriding legitimate reasons or to make or defend possible complaints.
By virtue of the right to portability, interested parties have the right to obtain personal data concerning them in a structured format for common use and mechanical reading and to transfer it to another manager. Whenever possible.

The GRDP requires controllers to facilitate the exercise of the data subjects’ rights. This requirement establishes that procedures and methods to do so must be visible, accessible and simple. This obligation requires to set up procedures enabling data subjects to easily prove that they have exercised their rights by electronic means, which is not always viable at present.

The exercise of rights shall be free of charge for the data subject, unless:

  • Where requests are manifestly unfounded or excessive, in particular because of their repetitive character, the controller may charge a reasonable fee taking into account the administrative costs of taking the action requested; or refuse to act on the request (such fee cannot represent additional income for the controller but should effectively correspond to the true cost of the processing of the request).
  • The controller shall provide information on the actions taken on a request to the data subject within one month (that period may be extended by two further months if requests are especially complex and the controller shall inform the data subject of any such extension within one month). If the controller decides not to take action on the request, the controller shall inform the data subject of the reasons for not taking action within one month of receipt of the request.
  • In accordance with the GDPR, controllers must use all reasonable measures to verify the identity of a data subject who requests access, and, in general, of data subjects that exercise the remaining ARCO rights.
  • When the controller processes a large quantity of information concerning a data subject, the controller may request that the data subject specify the information to which the request relates.
  • The controller may be assisted by processors to respond to requests made by data subjects exercising their rights, and such assistance may be included in the processing agreement.

By writing to the following address and attaching a copy of your passport or Personal ID Card: “Dunas Resorts, S.L.” - Address: Calle Francisco Gourié 107, 5th Floor. Postal Code: 35002. Las Palmas de Gran Canaria.

Done