PRIVACY POLICY

DATA CONTROLLER

Club La Santa SAU (Resort Lanzarote), Club La Santa A/S (Danish Sales Office), Club La Santa GmbH (German Sales office) are all part of the Group: A/S of June 3, 1986. Club La Santa SAU, therefore, has a legitimate interest in sharing data with Club La Santa A/S and Club La Santa GmbH for administrative purposes as well as analyzing customer personal data.

Thus, Club La Santa SAU has a shared data responsibility for the processing of personal data on this website, but your primary contact is Club La Santa SAU.

Club La Santa SAU (Lanzarote), Club La Santa A/S (Denmark), Club La Santa GmbH are using a common reservation system, which allows authorized employees to have access to reservation and customer data for all companies.

YOUR PERSONAL INFORMATION

Club La Santa S.A.U., Club La Santa A / S, and Club La Santa Reisen GmbH respect the privacy of our customers and visitors to our websites and our goal of this policy is in a clear and transparent way to describe to you how we collect, view, transfer, and save your information to make sure that your personal information is securely stored. Club La Santa carries out all the handling of personal data in accordance with the Personal Data Act of the EU rules for processing personal data GDPR (General Data Protection Regulation)

CONTACT INFORMATION

You can contact us by email at dpo@clublasanta.com or you can send a letter to Club La Santa SAU, Avenida Krogager, 35560 Tinajo, Lanzarote, Spain.

COLLECTION OF PERSONAL INFORMATION

What is personal information?

Personal information is any information that may be directly or indirectly related to a living person. The following are examples of personal information: name, social security number, address, email address and telephone number, ticket numbers, encrypted data and various types of electronic identities such as IP address if they can be linked to natural persons.

How we collect personal information and what information we collect

Club La Santa collects personal information in several ways, but first, directly from you.

Information collected for a hotel booking

When you make a room reservation at clublasanta.com, or through our Club La Santa, Reservations Department, Lanzarote, we collect personal information from you to complete your order. It is information about the name, date of birth, age and gender for all travellers visiting Club La Santa, as well as the address and contact details of the lead booker. When you book, we also collect payment information from the person responsible for the payment. If your booking includes children, we collect the same information as above for each child.

When you make an event week or race booking with us, we also collect information about the event week or the race you are participating in. This booking also contains your personal data.

Information collected by personal contact

We collect personal information from you when you contact us, for example, via our Reservations Department in Lanzarote by email, telephone or other means. Primarily, we collect the personal information needed to answer your question or process your case. It is information about the name and reservations number. Depending on how you choose to contact us, we may also collect contact information such as email address or phone number.

By personal contact, we will also collect other personal information that you choose to provide to us, for example, information about allergies, medical conditions or other information about you or anyone else that is covered by your booking.

Video surveillance

Club La Santa makes use of Video surveillance on its interior and exterior areas. Video cameras are placed at resort entrances and at the receptions, safe rooms and luggage areas. The majority of the video cameras surveillance is placed to provide surveillance of the exterior of the resort.

Cameras are never used in areas where you would have an expectation of privacy, such as restrooms or locker rooms.

The purpose of the camera surveillance is to allow the after-the-fact investigation of crimes committed against Club La Santa or our guests. The surveillance may also be used to assist in the investigation of certain types of occupational health and safety violations.

Club La Santa has legitimate interests in interior surveillance of safety areas as well as use surveillance of employees and guests for the above-listed purposes.

Photo shooting

Club La Santa has its own photographer who regularly takes photos of our facilities and activities.

Club La Santa take pictures of guests to use for the website, Social Media, digital campaigns and printed material. Any guests that may appear in these photographs will always be asked for consent beforehand.

In addition, we sometimes have external photographers or videographers in the resort taking pictures of specific athletes or models for their own production purposes. When we do grant permission for such activities, we always emphasise that our own guests should not be included in any of this material.

Information collected when you subscribe to our newsletter

If you choose to subscribe to our Club La Santa newsletter or Club La Santa Races' newsletter, we will collect your name and email address to send the newsletter. If you choose to, we also collect data about date of birth.

Information collected by using our digital services

When you use one of our websites, our sports booking app or other digital services from us, we collect information about your use of the service. Some of this information may be personal information, such as IP address. We also collect information about how you navigate in the service, what searches you are making and which pages you are interested in.

Information collected when you book sports activities

When you book sports activities at Club La Santa, using our sports booking app or directly in the Sports Booking department, we collect your activity data for your service and for internal planning purposes.

Information collected when you book wellness services

When you book massages or treatments from the wellness centre, we collect your given booking data.

Information collected from someone other than you

When ordering and contacting us in different contexts, a person may provide personal information about one or more fellow travellers. Our assumption is, that the person who gives us such information, has obtained all the consent of fellow travellers to provide such personal information to us. If you have not made an order yourself and someone else has made an order on your behalf, we collect personal information about you from that person. The same happens if someone else has been in contact with us on your behalf.

Cookies

At www.clublasanta.com and our other websites, we use cookies to enhance your experience, to gather information for our marketing and to develop the websites. Please find our cookie policy here.

HOW WE USE YOUR PERSONAL INFORMATION

A legal basis for Club La Santa to process your personal information

Club La Santa is processing your personal information under the law. It may happen that the same personal information is processed both in connection with the performance of the booking agreement, specifically due to consent and because the information is required to fulfil other legal obligations. This means that even if you withdraw your consent and the treatment based on the consent expires, personal information may still be available to us for other purposes. Mainly, we process your information to fulfil an agreement with which you are a part of, such as booking terms and conditions.

Club La Santa may also process information necessary for Club La Santa to pursue a legitimate interest unless the registrant's interests precede this. The legitimate interests which Club La Santa pursues are “Forward travel information” and “Marketing before departure”.

Administration of sports activities

In order to provide service to you when you have booked sports activities, we use your data for your service and for internal planning purposes.

We store your data for 2 months after collecting it, and hereafter we anonymize your data to be used for overall statistical purposes.

Administration of your booking

In order to provide the travel services, you have booked with us, we use your personal information in different ways. The information is used to issue reservation documents as well as to make actual hotel booking and to pay for the services you have ordered.

Administration of your trip also includes the use of your information for posting, settlement, review, credit or other payment card verification.

We store your booking information in our customer database. In the customer database, personal data and booking history are stored for six (6) years, if you have not given your consent that we can store your data for a long time.

Your credit card information will be stored for 3 months and hereafter deleted from our systems. Your Passport information will be stored for 3 years, and hereafter deleted from our systems.

If you agree specifically, we will store your personal information for up to 10 years. If you file a complaint within two years of your last booking, we will keep all your information for 10 years.

Provide service during your stay with us

Your name and room number will be included in various lists provided to the internal service providers at Club La Santa, e.g. cleaning department and restaurants. These lists are destroyed after use.

Forward travel information

Once you have made your booking with us, we use your personal information to forward booking confirmation, important information about your upcoming trip and deals related to your visit. We forward this information by the email address which was provided when you made the booking.

After your stay with us, you are invited by e-mail to evaluate your stay and you can participate in an online guest satisfaction survey. This data is used to evaluate and improve our guest services and facilities. The data collected in the survey is personalized to the name and e-mail of the lead booker, the dates and room number for the booking. In this regard, we transfer the name and email address of the leadbooker to our analysis software. After answering the survey, you can choose to share your review on a review site such as. If you choose to do so, Club La Santa can choose to publish your review in clublasanta.com.

We send information about deviations such as time changes and other changes in relation to your trip. This information is sent either by email, letter, text or telephone, depending on the change and contact information we have. We send you payment reminders via e-mail.

Marketing and personalization

Customer information can be used by Club La Santa in a marketing context in connection with your booking.

We make use of personalization in our digital communication via social media and web advertising on websites other than Club La Santa.com. For personalization, we use cookies. Read more about our use of cookies further down in the document.

If you subscribe to one or more of our newsletters, we keep your data until you unsubscribe.

Development of services

We use the information we collect about our customers to develop and improve our products and services. This applies to our digital services, where we analyze user behaviour to develop how we present information and campaigns as well as design features. This also applies to the development of our products according to customers' needs and behaviours, and for example. to overcome deficiencies or increase security.

Mainly, we use anonymous or anonymized data at an aggregated level to perform this kind of analysis.

Security

We use your information for your security during your stay. Your name and room number are included in a daily list produced for the security guards at the entrances to Club La Santa. The lists are destroyed daily.

Regulatory Purposes

Your personal information may also be processed to enable us to comply with the laws and regulations, such as regarding safety and reporting.

Data storage

Club La Santa follows good practice within the travel industry. We store your personal information if it is necessary for processing. We store your data on local servers and secure Cloud Servers in EU, controlled by Microsoft Azure or other data processors we engage with.

My Ticket stores the information you have registered there for as long as your account is active. If you are subscribed to our newsletter, we will store your contact details for as long as you choose to continue receiving the newsletter.

The same personal data can be stored in different locations for different purposes. Information that is removed from a system because it is no longer needed can possibly still be found in another system where it is stored under an agreement or for another purpose where there is still a need for personal information.

Club La Santa 'technical and organizational measures for the safe processing of your personal data

We continuously take steps to comply with the principles of "Integrated Data Protection and Data Protection by default." We evaluate ongoing risks in the personal information processing that takes place and take the necessary precautions to reduce the risk.

We continuously train our employees on data protection issues, and we have our own data protection officer in the Group. If you have any direct questions about how we work with the Personal Data Act (PDL) or the new EU Data Protection Rules (GDPR), you can send an email to DPO@clublasanta.com.

STORAGE AND TRANSFER OF PERSONAL INFORMATION

Data storage

Microsoft Azure

We use hosting solutions, Microsoft Office products and system services for our internal work provided by Microsoft Azure. This means that your personal information will be stored on a secure cloud server, placed within EU and controlled by Microsoft Azure. In this case, Microsoft Azure is our data processor and handles the information on our behalf and according to our instructions.

Agreement partners and IT providers

We use a wide range of IT services and IT systems in our company. In some of these, personal information is stored and administered. We respect your privacy and security for your data in all handling. Some systems are installed locally at Club La Santa SAU, and it is only our staff who have access to this information. In these cases, there is no transfer to third parties. However, some systems are cloud solutions or installed by the vendor, which means we pass on personal information to the vendor. In these cases, the supplier is our data processor and handles the information on our behalf and according to our instructions.

Internal IT systems

Internally we handle personal information in our customer database, in our order and sales systems, our customer service system and in a data management and data recovery system. These systems are designed to provide the services you have ordered from us and to handle questions and customer care in connection with the performance of these services. These systems can handle all the personal information we collect.

Payment Solutions

We use external vendors to handle payments. These providers have access to personal information such as names, addresses and payment information. This handling is necessary for us to be able to provide the services you have ordered from us.

Marketing

We use external suppliers and contract partners for several online marketing services. It will often be necessary for us to provide certain aspects of personal information for these services to be performed.

Suppliers of travel-related services

To offer some of the services you have ordered from us, we use suppliers and contractors. It will often be necessary for us to provide personal information to them for the service to be performed.

Extradition to third countries

We use Revinate for sending newsletters and storing subscriber information on the Newsletters. This data is stored on a secure server at Revinate in the United States.

YOUR RIGHTS

Necessary handling of personal data and handling based on consent

Personal data processing necessary to fulfil an agreement with you or to fulfil a legal obligation is permitted without consent. However, if we collect and handle your personal information for another purpose, you are required to accept the terms and conditions. You agree to the processing of your personal information when using our services at www.clublasanta.com, in our sports booking app, or in contact with our reservations department.

Withdrawal of consent

You may at any time choose to withdraw your consent by contacting us via the contact information found above in the "Contact Information" section. If you revoke your consent, we will delete your personal information and discontinue the processing that was covered by your consent.

It may happen that the same personal data is processed both based on the consent and because the information is required or due to other lawful grounds. This means that even if you withdraw your consent and the treatment based on the consent ends, personal information may still be stored with us for other purposes.

Right to get information about the personal information we have stored about you

If you want information about what information we have registered about you, please contact dpo@clublasanta.com or send at letter to Club La Santa SAU, Att.: Irene Rojas, Avenida Krogager, Tinajo 35560, Las Palmas, Spain.

Right to control your personal information

You are entitled to request that the information about you be deleted, supplemented or corrected. You also have the right to request that the processing of your personal information is limited to specific purposes and cannot be used for direct advertising or so-called profiling.

IF YOU WANT TO COMPLAIN

Anyone who believes that a company violates GDPR or any other privacy act may contact the Data Inspectorate. Read more on the Data Inspectorate's website.

You can contact us by email at info@clublasanta.com or dpo@clublasanta.com or you can send a letter to Club La Santa SAU, Avenida Krogager, 35560 Tinajo, Lanzarote, Spain.