Under Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce, we inform you that the website you are visiting located under the domain http://www.lanzarotesmartisland.com belongs to EPEL, ART CENTERS, CULTURE AND TOURISM OF LANZAROTE whose identifying data are the following:
In compliance with the principles of legality and transparency and in order to provide the information to the interested parties established in articles 13 and 14, we inform you of the characteristics of the processing of personal data that are carried out under the responsibility of EPEL, ART, CULTURE AND TOURISM CENTRE OF LANZAROTE.
Treatment: (I) Human Resources Management. (II) Web Requests. (III) I send newsletter. (IV) Billing, accounting and tax management. (V) Administrative management. (VI) Budget tracking (VII) Attention to the exercise of rights. (VIII) Security breach notification (IX) Reservation management. (X) Online sale. (XI) Satisfaction surveys. (XII) Marketing Management.
Purpose: (I) Selection of personnel, training, preparation and sending of payrolls, and other documents necessary for the employment relationship. (II) Attention of requests received through the Web. (III) Sending promotional information of the entity. (IV) Preparation of customer invoices, preparation of official accounting and calculation, presentation and settlement of taxes, preparation of business documents, such as balance sheets and reports. (V) Administrative management that involves collections and payments and relationship with suppliers. (VI) Budget tracking. (VII) Address the requests for exercise of rights related to personal data. (VIII) Notify interested parties and the Control Authority of security violations that may affect the rights and freedoms of the interested parties. (IX) Management of reservations made of services or tickets. (X) Sale of tickets through the web. (XI) Conduct satisfaction surveys of visitors or users (XII) Ticket sales management through other tour operators.
Legitimation: (I) Application of contractual and pre-contractual measures. (II) Legitimate interest. (III) Consent of the interested party. (IV) Law 58/2003, of December 17, General Tax. (V) Legitimate interest. (VI) Application of contractual and pre-contractual measures. Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, concerning the protection of natural persons with regard to the processing of personal data. (IX), (X) and (XII) Application of contractual and pre-contractual measures. (XI) Consent of the interested party.
Conservation Term: (I) Duration of the employment contract and the period necessary to meet responsibilities arising from the labor benefit. (II) The period necessary to meet the request, as well as for the duration of the responsibilities that may arise from them. (III) Until the interested party revokes the consent. (IV) and (V) Six years for commercial purposes, and the period necessary to meet responsibilities arising from the settlement of taxes. (VI) and (XII) During the duration of the provision of the service and the period required to meet responsibilities arising from it. (VII) and (VIII) The period necessary for the fulfillment of said purpose, as well as for the duration of the responsibilities that may arise from them. (IX), (X) and (XI) The period required to meet the request, as well as the responsibilities that may arise from them.
Recipients: (III) Mailchimp, (VII) and (VIII) Spanish Agency for Data Protection. (IX) Turitop. (X) Turitop and Paypal. (XII) Third tour operators in Lanzarote.
Exercise of rights: You may exercise your right of access, rectification, deletion, limitation and opposition to the processing, under the terms and conditions established in the personal data protection regulation Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data, by sending a request by email to firstname.lastname@example.org or in writing to: Calle Triana, 38, Arrecife, CP 35500, Las Palmas., Indicating in any case the Reference: “Data protection” together with any document that proves your identity as a photocopy of the DNI, as well as to submit a claim to the Spanish Agency for Data Protection.
Who is responsible for the processing of your data?
The owner of the institution and this website is EPEL, ART, CULTURE AND TOURISM CENTRE OF LANZAROTE, so any personal data that you communicate through this website as the data collection forms that are made in a manner In person, they will be treated under the responsibility of EPEL, ART, CULTURE AND TOURISM CENTRE OF LANZAROTE
How do we use the personal data that we manage under our responsibility?
We use your data for the following purposes:
And the use we make of them is exclusively necessary for each of the purposes, for example for the management of human resources, we send data to our labor consultancy so that they elaborate employment contracts and payrolls, also to the bank for payment of salaries and the State Agency of the Tax Administration to report on the annual withholdings that we practice in salaries, to the Mutual and the Company of Prevention of Labor Risks, but except by obligation or to receive a necessary service for the development of Our activity does not communicate or process data for additional purposes.
What personal data do we collect? (How do we get them?)
We will request the minimum essential data to carry out the purposes indicated in the previous section, usually, name and address, and contact information.
For how long?
When the data processing is imposed by a rule, it normally incorporates the period during which the data must be processed or stored, so the Commercial Code establishes the obligation to keep the data for accounting and commercial purposes for six years, but There are certain assumptions such as the application of certain deductions that require the preservation of economic proof for a longer period, sometimes up to fifteen years.
Disclosure to third parties
As in the previous cases, the data we communicate to third parties is always limited to the minimum necessary.
What security measures do we apply to personal data?
EPEL, ART, CULTURE AND TOURISM CENTRE OF LANZAROTE, has appropriate policies and technical and organizational measures to safeguard and protect your personal data against illegal or unauthorized access, loss or accidental destruction, damage, use and illegal or unauthorized disclosure.
We will also take all reasonable precautions to ensure that our staff and employees who have access to your personal data have received appropriate training.
What are your rights as the owner of the data?
You have the right to request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes that were collected. You have the right to obtain confirmation on whether in EPEL, ART, CULTURE AND TOURISM CENTRE OF LANZAROTE we are treating your personal data or not. You have the right to access your personal data and obtain a copy of them, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes that They were picked up. In certain circumstances, you may request the limitation of the processing of your data, in which case we will only keep them for the exercise or defense of claims. In certain circumstances and for reasons related to your particular situation, you may object to the processing of your data. EPEL, ART, CULTURE AND TOURISM CENTRE OF LANZAROTE, will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. You can also exercise the right to data portability, as well as revoke the consents you have provided. You may exercise these rights, by email request addressed to lopd @ centrosturisticos.com or in writing to: Calle Triana, 38, Arrecife, CP 35500, Las Palmas, attaching a copy of your ID or other document proving your identity, and indicating clearly the right you want to exercise. Finally, indicate that you can file a claim with the Spanish Agency for Data Protection, especially when you have not obtained satisfaction in the exercise of your rights.