Privacy policy

Who is responsible

Data controller: SERVICIOS PEPILLO'S S.L., tax ID (NIF) B76732668 (the same owner as in our legal notice).

Calle Grande, 26 · 38670 Adeje · Santa Cruz de Tenerife · Spain. Phone +34 649 08 89 15. Email fondacentral@gmail.com.

What data we handle

This website has no forms that ask for personal data, and it does not ask you to register: the date search only passes your dates and number of guests to the booking page. We only handle the data you give us when you choose to get in touch:

• By phone: your name, your number and whatever you tell us during the call.
• On WhatsApp: your name or profile name, your number and the messages you send us.
• By email: your name, your email address and whatever you write to us.

Usually that means dates, number of guests and questions about your stay. Giving us this data is voluntary, but without it we cannot reply to you. Please do not send us more data through these channels than we need.

What we use it for

To answer your enquiry and, if you ask us for a booking, to manage it.

We do not send you advertising, we do not build profiles from your data and we do not make automated decisions about you. If we ever wanted to send you news or offers, we would ask for your consent first, and you could withdraw it at any time.

Legal basis

Depending on what we use your data for, the legal basis (Article 6(1) of the General Data Protection Regulation, GDPR) is:

• Your enquiry or booking: taking steps at your request before entering into a contract and, afterwards, performing it (point (b)).
• The hotel’s legal obligations, if you stay with us, such as traveller registration or invoicing (point (c)). Traveller registration data is required by law: you must provide it in order to stay with us.
• Other enquiries and website security: the hotel’s legitimate interest in replying to people who contact it and in keeping the website secure (point (f)).

If we ever ask for your consent to something, such as sending you news, the basis will be that consent (point (a)), and you can withdraw it at any time.

Who else sees it

We do not sell your data or pass it on to anyone unless the law requires us to: for example, if you stay with us, the traveller registration that Spanish law requires us to send to the Ministry of the Interior.

To provide our service we use these providers, and only for that purpose:

• Hostinger, which hosts this website and the email of its domain.
• Google (Gmail), which we use for the hotel’s email.
• WhatsApp (WhatsApp Ireland Limited, Meta group), only if you choose to message us there. WhatsApp also processes your own account data under its privacy policy.
• The technical providers of the hotel’s management and booking software, where bookings and stays are recorded, including those you request by phone, WhatsApp or email.

Some of these providers belong to groups based outside the European Economic Area, mainly in the United States, and may process data there. Such transfers are covered by the EU-US Data Privacy Framework, for companies certified under it, or by standard contractual clauses approved by the European Commission. If you would like more information about these safeguards, or a copy, ask us at fondacentral@gmail.com.

If you would rather not use WhatsApp, call us or send us an email.

How long we keep it

Data from an enquiry: for as long as we need to deal with it. If it leads to a booking or a stay: for as long as the relationship with the hotel lasts.

After that, we keep it blocked (not used, and available only to courts and public authorities) for the periods set by law:

• three years for traveller registration data (Royal Decree 933/2021);
• six years for commercial and accounting records, such as invoices (Article 30 of the Spanish Commercial Code);
• the limitation periods for tax obligations (four years under the Spanish General Tax Act).

After those periods, it is deleted.

Technical data from visits

When you visit this website, Hostinger’s server, like any web server, receives technical data about your connection (IP address, page requested, date and time, browser type) in order to show you the page.

Hostinger keeps these logs for a limited time, for security and to detect faults or abuse, and then deletes them. The hotel does not use them to identify you or to compile statistics.

This website has no analytics tools or advertising pixels, and it loads nothing from other websites when it opens.

The booking page

When you click “Book”, you go to the hotel’s booking page (estancia.hotelfondacentral.com). There, before sending your request, you see the data protection notice for bookings and accept it.

That notice is from the same controller (the same company, tax ID B76732668) and has the same retention periods and rights as this policy. To exercise them over your booking data, you can write to the address given in that notice or to the hotel’s email, fondacentral@gmail.com. It also explains that booking data is used to manage your stay, to carry out the traveller registration required by Spanish law (Royal Decree 933/2021) and, after check-out, to ask for your feedback.

This policy covers this website and our contact channels; bookings are covered by that notice.

Your rights

You can exercise at any time the rights given to you by the GDPR (Articles 15 to 22) and by Spain’s data protection act (Organic Law 3/2018, LOPDGDD):

• to access your data and find out how we use it;
• to have it corrected if it is inaccurate;
• to have it erased;
• to restrict its use or to object to it;
• to receive it in a format you can take elsewhere (portability);
• not to be subject to decisions based solely on automated processing (we make none).

If you have given us your consent to something, you can withdraw it at any time.

Email us at fondacentral@gmail.com or write to Calle Grande, 26, 38670 Adeje, Spain, telling us which right you wish to exercise. It is free of charge. We may ask you to prove your identity. We will reply within the one-month period set by the GDPR.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the data protection authority in the country where you live.