Privacy Policy

PRIVACY POLICY

The Privacy Policy is part of the General Conditions that govern this Website.

Who is the controller of your data?
LOS ZOCOS, S.L.
CIF: B78058526
Address: Avda. Islas Canarias, nº 15, Costa Teguise, 35508, Lanzarote.
Phone: 928592122
Email: info.lz@impressiveresorts.com

You may contact us in any way to communicate with us.
We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it, and if you have registered and access your account or profile, you will be informed of the changes.

If you belong to any of the following groups, please consult the drop-down information:

GUESTS

For what purposes will we process your personal data?
We inform you that your data will be processed for the purpose of managing your reservation, your stay at the hotel, and guaranteeing payment for the expenses derived from said stay. Likewise, we will process your personal data for the purpose of carrying out the registration and communication of traveler data. If you have given us your consent, we will also process your data to send you commercial communications.

To whom will your data be communicated?
Your data will be communicated to the State Security Forces and Corps (FFCCSE) in compliance with the provisions of current legislation, as well as to the travel agencies or operators involved.

How long will your data be kept?
The data will be kept for at least 6 years in compliance with tax, commercial, and consumer regulations. For their part, the data related to communications to the FFCCSE regarding traveler registration will be kept for a minimum period of 3 years from the end of the stay. Finally, data for which you have provided consent will be kept until you withdraw the consent provided or have exercised your right to objection or deletion.

What is the legitimacy for processing your data?
The legal basis varies depending on the purpose of the processing. The main legal basis is compliance with the lodging contract; for communications regarding traveler registration, it will be compliance with the legal obligations established by Royal Decree 933/2021, of October 26, which establishes the obligations for document registration and information for individuals or legal entities that carry out lodging and motor vehicle rental activities, and Organic Law 4/2015, of March 30, on the protection of citizen security. Finally, those processes for which consent has been requested, such as the sending of commercial communications, will be based on consent.

WEB OR EMAIL CONTACTS

What data do we collect through the Website?
We may process your IP, which operating system or browser you use, and even the duration of your visit, anonymously.
If you provide us with data in the contact form, you will identify yourself so that we can contact you if necessary.

For what purposes will we process your personal data?
• To answer your queries, requests, or petitions.
• To manage the requested service, answer your request, or process your petition.
• Information by electronic means regarding your request.
• Commercial or event information by electronic means, provided there is express authorization.
• To conduct analysis and improvements on the Website regarding our products and services. To improve our commercial strategy.

What is the legitimacy for processing your data?
The acceptance and consent of the interested party, granted through a voluntary action, such as in cases where it is necessary to fill out a form and "click" on the send button to make a request; doing so will necessarily imply that you have been informed and have expressly given your consent to the content of the clause attached to said form or acceptance of the privacy policy.
All our forms have the * symbol on mandatory data. If you do not provide these fields, or do not check the privacy policy acceptance checkbox, the information will not be allowed to be sent.

How long will we keep your personal data?
Until the revocation of the consent provided.

NEWSLETTER CONTACTS

What data do we collect through the newsletter?
The Website allows you to subscribe to the Newsletter if you provide us with an email address to which it will be sent.
We will only store your email in our database, and we will proceed to send you emails periodically until you request to unsubscribe or we stop sending emails.
You will always have the option to unsubscribe in any communication.

For what purposes will we process your personal data?
• To manage the requested service.
• Information by electronic means regarding your request.
• Commercial or event information by electronic means, provided there is express authorization.
• To conduct analysis and improvements in mailing, to improve our commercial strategy.

What is the legitimacy for processing your data?
The acceptance and consent of the interested party. In those cases where you subscribe, it will be necessary to accept a checkbox and click the send button. This will necessarily imply that you have been informed and have expressly given your consent to receive the newsletter.

How long will we keep your personal data?
Until the revocation of the consent provided.

SUPPLIERS

For what purposes will we process your personal data?
• Information by electronic means regarding your request.
• Commercial or event information by electronic means, provided there is express authorization.
• To manage administrative, communication, and logistics services performed by the Controller.
• Billing.
• To carry out the corresponding transactions.
• Billing and declaration of the appropriate taxes.
• Control and collection management.

What is the legitimacy for processing your data?
The legal basis is the acceptance of a contractual relationship, or failing that, your consent when contacting us or offering us your products via any means.

How long will we keep your personal data?
During the validity of the relationships between the parties and for the limitation periods derived from them.

SOCIAL MEDIA CONTACTS

For what purposes will we process your personal data?
• To answer your queries, requests, or petitions.
• To manage the requested service, answer your request, or process your petition.
• To interact with you and create a community of followers.

What is the legitimacy for processing your data?
The bases that legitimize the processing are the voluntary consent of the interested party to get in touch and, where appropriate, the acceptance of a contractual relationship within the corresponding social network environment. The processing of data within the Social Network will be carried out in accordance with its Privacy policies.

How long will we keep your personal data?
We can only consult or delete your data in a restricted manner because we have a specific profile. We will process them as long as you let us by following us, being friends, or clicking "like," "follow," or similar buttons.
Any rectification of your data or restriction of information or posts must be done through the settings of your profile or user on the social network itself.

JOB APPLICANTS

For what purposes will we process your personal data?
• Organization of selection processes for hiring employees.
• To call you for job interviews and evaluate your candidacy.
• If you have given us your consent, we may transfer it to collaborating or related companies, with the sole objective of helping you find employment.
• If you accept the privacy policy, you give us your consent to transfer your job application to the entities that make up the group of companies with the objective of including you in their staff selection processes.
Likewise, we inform you that one year after receiving your curriculum vitae, we will proceed to its secure destruction.

What is the legitimacy for processing your data?
The legal basis, if you submit your CV as a spontaneous application, is your unequivocal consent upon sending us your CV. If you are in a selection process launched by this entity to which you are applying, the legal basis is the execution of pre-contractual actions.

How long will we keep your personal data?
If you provide a CV for a published vacancy, your data will be processed within the framework of the selection process for said vacancy and we will delete it at the end of the process if you have not been chosen.
If you provide a CV in a mailbox for spontaneous applications or our "work with us" section, we will keep your data for a period of one year based on the consent of the interested party.

Will we carry out communications by electronic means?
They will only be carried out to manage your request, if it is one of the contact means you have provided us. If we carry out commercial communications, they will have been previously and expressly authorized by you.

ETHICAL CHANNEL

What data do we collect through the Ethical Channel?
In case of identification, we may collect: name, surname, email, phone, and the personal data of third parties that you provide us in the communication.

For what purposes will we process your personal data?
• To manage communications.
• To adopt corresponding corrective measures and,
• In case it is necessary, to inform you about the result of the procedure.

What is the legitimacy for processing your data?
The legal basis is the legal obligation or, failing that, the public interest.

How long will we keep your personal data?
The data will be kept for the strictly necessary period to clarify the communicated facts. In any case, after six (6) months, the provided data will be anonymized unless they are being investigated in a different legal environment.

Do we include personal data of third parties?
No, as a general rule we only process the data provided to us by the owners. If you provide us with third-party data, you must inform and request the consent of said persons beforehand, otherwise you exempt us from any liability for failure to comply with this requirement.

What security measures do we apply?
We have adopted an optimal level of protection for the Personal Data we handle, and we have installed all the technical means and measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorized access, and theft of Personal Data.
Your data will not be transferred to third parties, except by legal obligation. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial institutions for the collection of the service provided or product purchased, as well as to the data processors necessary for the execution of the agreement.
In case of purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed in its environment, always with maximum security. During the card payment process, data will be collected by the Banking Entity that owns the Virtual POS.
When we order them to, the web development and maintenance company, or the hosting company, will have access to our website. They will have a signed service provision agreement that obliges them to maintain the same level of privacy as us.
International data transfers may take place when using American applications; however, such transfers will be carried out to entities that have demonstrated that they comply with the level of protection and guarantees in accordance with the parameters and requirements provided for in current data protection regulations, such as the European Regulation, or when there is legal authorization to carry out the international transfer.

What Rights do you have?
• To know whether we are processing your data or not.
• To access your personal data.
• To request the rectification of your data if they are inaccurate.
• To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw the consent provided.
• To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with current regulations.
• To port your data, which will be provided to you in a structured, commonly used, or machine-readable format. If you prefer, we can send them to the new controller you designate. It is only valid in certain cases.
• To file a complaint with the Spanish Data Protection Agency or the competent supervisory authority if you believe we have not served you correctly.
• To revoke consent for any processing for which you have consented, at any time.
If you modify any data, we thank you for communicating it to us to keep them updated.

Do you want a form for exercising your Rights?
• We have forms for exercising your rights; ask us for them by email or, if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
• The requests must be electronically signed or provide reliable identification of the person exercising them.
• The forms can be presented in person, sent by letter, or by email to the Controller's address at the beginning of this text.

How long does it take us to answer your Exercise of Rights?
It depends on the right, but at most within one month from your request, and two months if the matter is very complex and we notify you that we need more time.

Do we process cookies?
If we use other types of cookies that are not the necessary ones, you can consult the cookie policy in the corresponding link from the beginning of our website.