Privacy Policy
Last updated: 3 June 20261. Data controller
2. Purposes and legal basis
- Booking management: processing and follow-up of accommodation requests (legal basis: contract performance).
- Customer service: responding to enquiries and incidents (legal basis: legitimate interest).
- Legal obligations: compliance with Canary Islands tourism regulations and guest identification (legal basis: legal obligation).
3. Recipients
Data will not be shared with third parties except under legal obligation or for the provision of services through booking platforms (Airbnb, Booking.com, AvaiBook), subject to their own privacy policies.
4. Retention period
Data will be retained for the time necessary for the purpose collected and during the legally established periods (tax, tourism and anti-money-laundering regulations).
5. Your rights
You may exercise your rights of access, rectification, erasure, portability, restriction and objection by contacting gurpi@eltormillo.com. You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
6. International transfers
The use of international booking platforms may involve data transfers outside the European Economic Area, covered by the safeguards required by GDPR.