Privacy Policy Nook Colletion

1. Data Controller

This privacy policy has been drawn up in accordance with Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data, and Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights.

The personal data collected through the website will be the responsibility of Nook Urban S.L., with Tax ID (CIF) B72860182 and postal address at Plaza de la Concepción, 2. 38201. San Cristóbal de La Laguna, whom you may contact via the email address lopd@tarosantacruz.com

2. Category of Data

The personal data requested, where applicable, from the users of the website will consist solely of those strictly essential to identify them and provide them with the requested service in accordance with the purposes described in section 3 of this privacy policy.

The browsing system and the software necessary for the functioning of the website collect some data of a personal nature, the transmission of which is implicit in the use of Internet communication protocols. This information is not obtained to be associated with identified users, but by its very nature, through its association with third-party data, it could allow their identification. This category of data includes the IP address or domain name of the computer used by the user to connect to the website, the URL address of the requested resource, the time, and other parameters relative to the operating system of the user’s computing environment.

3. Purposes

The personal data collected through this website will be processed for the following purposes:

a) Browsing data

  • Purpose: To obtain anonymous statistical information on the use of the website or to monitor the correct operation of the website.
  • Legal basis: Legitimate interest in monitoring the correct technical functioning of the website. This legitimate interest does not breach the rights and freedoms of the data subject.
  • Data communication: Your personal data may be communicated to service-related providers acting as data processors. These companies will demonstrate rigorous compliance with data protection legislation prior to being contracted.
  • Data retention period: The data will be deleted once the correct technical functioning of the website is verified.

b) Booking management

  • Purpose: To manage your hotel stay bookings, carry out the legal registration of travellers required by regulations, and guarantee the payment of expenses derived from the stay.
  • Legal basis: Contractual relationship, as it is necessary for the formalisation of the accommodation contract. Compliance with a legal obligation of the data subject.
  • Data communication: Your data will be communicated to the Law Enforcement Agencies in compliance with the provisions of current legislation, as well as to third-party companies providing services linked to said purpose, acting as data processors. These companies will demonstrate rigorous compliance with data protection legislation prior to being contracted.
  • Data retention period: The data will be kept for the periods established by applicable tax, accounting, and security legislation.

c) Commercial newsletters

  • Purpose: Sending newsletters with commercial information and hotel promotions by email.
  • Legal basis: The express consent of the data subject by virtue of Art. 6.1 of the GDPR.
  • Data communication: Your personal data may be communicated to service-related providers acting as data processors. These companies will demonstrate rigorous compliance with data protection legislation prior to being contracted.
  • Data retention period: Your data will be processed until you revoke your consent, which you can do at any time through the newsletter itself or by writing to lopd@tarosantacruz.com

d) Personnel selection

  • Purpose: To manage personnel selection processes, evaluate candidacies received, conduct interviews, verify references, and communicate hiring decisions.
  • Legal basis: The express consent of the data subject by virtue of Art. 6.1 of the GDPR.
  • Data communication: Your personal data may be communicated to service-related providers acting as data processors. These companies will demonstrate rigorous compliance with data protection legislation prior to being contracted.
  • Data retention period: Your data will be processed for 1 year, at which point it will be deleted, unless the person is hired, in which case their data will be included and processed for the purpose of managing the employment relationship.

4. Rights of Data Subjects

Data subjects have a series of rights through which they can request to access, rectify, or erase their data, limit its processing, or object to it, as well as request data portability.

Furthermore, they have the right not to be subject to a decision based solely on automated processing, including profiling, and in the event that the processing of their data is based on their consent, to revoke it at any time.

We also remind you that you have the right to lodge a complaint with the supervisory authority, which in Spain is the Spanish Data Protection Agency (www.aepd.es).

The revocation of consent and the exercise of your rights can be carried out by email addressed to Nook Urban S.L via the email address lopd@tarosantacruz.com, indicating the right you wish to exercise in the subject line and attaching a document that proves your identity.