Privacy Policy

Through this privacy policy we inform you how the SANDOS Group. processes the personal data that you provide to us through any means and/or channel made available to you, including, but not limited to, customer service telephone lines, the services provided on our Call Center, this website, and SANDOS sales representatives and agents. SANDOS Group is responsible for adequately protecting your personal data and complies with due diligence regarding all legal provisions regarding the protection, legal use, confidentiality, and security of personal data. The User must pay special attention to this Privacy Policy, which has been written in clear and simple language, and freely and voluntarily determine whether they wish to provide their personal data, or that of third parties, to SANDOS. The following statements are of a general nature and cover all data processing operations within the SANDOS Group.

If you are a user of any of the companies in the SANDOS Group, the controller of your data is the owner company that provides the services to you. In addition, all the companies specified below also act as joint controllers of the processing, marketing hotel services depending on the destination of the Hotel.

The User must carefully read this Privacy Policy, which has been written in a clear and simple manner, to facilitate its understanding, and freely and voluntarily determine whether they wish to provide their personal data, or those of third parties, to SANDOS.

-Purposes – Legitimation:

Depending on the User's requests, the personal data collected will be processed by SANDOS in accordance with the following purposes and categories of data that we may process:

• Manage your requests to contact SANDOS through the channels provided for this purpose.

When you contact us, we collect your contact information. This information may include your name, postal addresses, telephone numbers, and email addresses,as well as details of their social media profiles.

• Manage your reservation data: When you make a reservation or request a service or assistance, we collect your purchase or order information. Purchase data may include the following information, depending on the type of sale and the status of the process:

• Locator Number.

• Reservation details.

• Details of the payment method used.

• Direct messages and communications related to the booking and execution of the service (e.g. customer notifications, booking status, availability, etc.)

• Manage payment data: We offer common e-commerce payment methods such as credit cards and PayPal, and others as developed. All payment data you have provided will be processed by the payment gateways of our payment service providers, including the data necessary for processing.

• Manage the subscription to the newsletter and subsequent sending of it, with the registration identification data: Name and surname, email addresses and telephone numbers.

• Manage the performance of surveys and/or evaluations related to the quality of the services provided by SANDOS and/or the perception of its image as a company.

• Data relating to the use of the website: When you interact with our website, we collect information that tells us what content, topics, services or styles you are interested in, downloads of additional information, access through links, problems that we detect in the use of the tools. The use of this information is regulated in our Cookie Policy.

• Geolocation Data: We collect location data derived from your device's IP address, only down to the locality level. This address cannot be used to identify your internet connection or device.

• Social Networks: SANDOS maintains profiles (Fanpages) on various social networks. In addition, our services may integrate social network functions. For example, messaging services or so-called social plugins. On our fan pages, we publish and share content, offers, and product recommendations. With each interaction, the social network operators record your usage behavior using cookies and similar technologies. The operators of the fan pages can access general, anonymous statistics about the interests and demographic characteristics (such as age, gender, region) of the fan page audience. If you use social networks, the nature, scope, and purposes of data processing on those networks are determined by the social network operators.

• Our services may include social plugins ("plug-ins") from social networks. With the help of these plugins, we can, for example, share content or recommend products. The plugins are disabled by default, andTherefore, they do not send any data. You can activate the plugins by clicking the corresponding button (e.g., "Activate social media"). The plugins can be deactivated with a single click. When the plugins are activated, your web browser establishes a direct connection to the web servers of the respective social network. The content of the plugin is transmitted from the social network directly to your web browser and integrated into our website. By integrating the plugins, the social network receives the information that you have accessed the corresponding page of our website and can register your device and access the data.

• We currently use the Facebook messenger (What'sApp Business Enterprise) and plugins from the following social networks: Facebook, Twitter, Instagram, Youtube, Tiktok, Vimeo, Pinterest, but we may include others.

• These social networks have their own privacy policies, which will explain how they use and share your personal information. We recommend that you carefully review the privacy policies before using these social networks to ensure that you are happy with the way your personal information is collected and shared.

If the Data Subject provides data from third parties, they declare that they have their consent and undertake to transfer the information contained in the Privacy Policy to them, exempting SANDOS from any liability in this regard.

Legitimation: The legal basis for the processing of your data is:

1. The relationship contractual established and the legitimate interest in receiving information about our products and services.

2. In order to process your data, on certain occasions,It is necessary that you give us your consent, by which you accept that your data will be processed for a specific purpose, such as, for example:

• Periodic sending of newsletters (for example; newsletters) that include information about the Company, the campaigns, discounts and promotions that we offer exclusively to users/customers.

• Participation in contests and sweepstakes.

1. Compliance with legal obligations:

These are treatments that the law requires of us and that we cannot fail to comply with, such as the following:

• Collaboration with judges and courts.

• Collaboration with the Spanish Data Protection Agency.

• Compliance with tax obligations and collaboration with the State Tax Administration Agency.

• Obligations regarding the Prevention of Money Laundering and the Financing of Terrorism.

• Provision of product warranties.

• Compliance with applicable regulations on general product safety.

• Collaboration with state security forces and bodies.

1. Legitimate interest:

2. To send information about our products and services to customers.

3. Quality and satisfaction surveys: We have a legitimate interest in contacting you occasionally to carry out quality and satisfaction surveys, asking you for information about how you perceive and rate our activity and about the possibility of improving them.

4. Fraud prevention in your purchases: We process the data strictly necessary for the purpose of analyzing the reservations made by the user/customer and preventing fraud, in case we notice that operations are being carried out that may be considered suspicious, based on the legitimate interest in the fight against fraud.

Recipients: The User's data may be communicated to: Participating companies or those of the business group, solely for internal administrative purposes and/or for the purposes indicated above.

• SANDOS suppliers, such as companies providing Information Services and technologies (information storage and processing), in cases where you contract services that require this communication. These companies only access the personal information they need to carry out said services, and we require them to guarantee the confidentiality of your personal information.

• Public Administrations, in the cases provided for by Law.

• If you are a member of a loyalty program in which SANDOS is a collaborating company and therefore participates in it, your data will be communicated to third parties in order to inform you of the points obtained, as well as the exchanges made for the products available at any given time, in order to keep your data updated in the loyalty program.

The recipients indicated in this section may be located within or outside the European Economic Area, in the latter case international data transfers being duly legitimized: we have adopted appropriate contractual guarantees to protect your information.

Are data of minors processed? On the SANDOS website, applications and products are normally not directed at minors. Although on occasion we may run a campaign. However, we do not collect any personal information from minors.

If you are a minor, please do not attempt to register as a user of our websites, applications or products. If we discover that we have accidentally obtained personal information from a minor, we will delete that information as soon as possible.

Secrecy and security of personal data: SANDOS undertakes to adopt the necessary technical and organizational measures, according to the level of security appropriate to the risk of the data collected, in order to guarantee the security of personal data and to prevent accidental or unlawful destruction, loss, alteration of personal data transmitted, stored or otherwise processed, or unauthorized communication or access to such data.

However, because SANDOS cannot guarantee the impregnability of the Internet or the total absence of hackers or others who fraudulently access personal data,The Data Controller undertakes to inform the User without undue delay when a breach of personal data security occurs that is likely to entail a high risk for the rights and freedoms of natural persons. A breach of personal data security means any breach of security leading to the accidental or unlawful destruction, loss, alteration of personal data transmitted, stored or otherwise processed, or unauthorized communication of or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and guarantee by means of a legal or contractual obligation that such confidentiality is respected by its employees, associates, and any person to whom it makes the information accessible.

Epi Gestión, SL CIF - B81890006

For the purposes of this Privacy Policy, we must point out that “Epi Gestión, SL” is the company of the SANDOS Group, established to provide customer service for any needs that may arise from the commercial activity of the rest of its businesses and commercial activities of the SANDOS Group, such as marketing, Call Center, administrative services and hotel operations. Why do we process your Data?

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR") and current regulations applicable to the protection of personal data, we inform you that your personal data will be processed by Epi Gestión, SL with CIF B-81890006 and registered office at Juan Fuster Zaragoza, 18, 03500 Benidorm, parent company of the SANDOS Group, for the purpose of (i) providing you with the necessary information to manage your registration as a supplier, employee, or candidate, client of any of the companies of the SANDOS Group or of the MÁS loyalty programs, as well as of the products and services marketed through the SANDOS Network or third-party collaborators as well as to administer, manage,monitor and optimize the existing relationship with you; (ii) the sending of commercial communications, by any means, of products and/or services of a similar nature to those contracted with Grupo SANDOS and any of the Group's companies and businesses; and (iii) the sending of commercial communications of products and/or services of GRUPO SANDOS and/or third parties that may be based on automated individual decision-making through profiling. In order to carry out these processes, the data provided by the client to Epi Gestión SL and/or other companies of Grupo SANDOS within the framework of any of the formalized relationships will be used. Profiling, through the analysis of your automated individual decisions, consists of the use of your personal data to evaluate certain personal aspects, such as the analysis and prediction of your personal preferences, interests, behavior, location, movements and attitudes; the logic applied to obtain these profiles being the use of different data science tools and, the consequences of these treatments being the sending of personalized communications of interest to you based on the profiling results obtained.

In the event that Epi Gestión, SL is going to process your personal data for other additional purposes based on a legal basis other than the one indicated, the corresponding notification will be provided.

We also inform you that your personal data will be processed in a lawful, fair, transparent, adequate, relevant, limited, accurate and up-to-date manner, and we therefore undertake to adopt reasonable measures to ensure that your data is rectified or deleted without delay when it is inaccurate.

What is the legitimacy for processing your Personal Data?

The legal basis that justifies the treatment indicated in section (i) is the need to execute the pre-contractual and contractual relationship existing between You and Epi Gestión, SL and any of the companies and businesses of the SANDOS Group, in addition to compliance with a legal obligation. The legal basis that justifies the treatment indicated in section (ii) is legitimate interest.The legal basis that justifies the treatment indicated in section (iii) above is your express consent. You guarantee the veracity of your personal data and undertake to notify Epi Gestión, SL of any variation in them. Who do we share your Personal Data with? We inform you that the personal data held by Epi Gestión, SL (including those resulting from the profiling carried out) will be transferred to companies of the SANDOS Group, identified at the following address. href="https://www.sandos.com/en/privacy-policy" target="_blank">www.sandos.com/en/privacy,, as well as for internal administrative purposes of the SANDOS Group, based on legitimate interest. These SANDOS Group companies may be located in countries that do not have the same level of protection as Spain, in which the SANDOS Group may expand in the future. Epi Gestión, SL will take the necessary measures to ensure that the SANDOS GROUP companies receiving the personal data take appropriate measures to ensure the same level of protection. In this case, however, we ensure that appropriate privacy safeguards are in place, e.g. : e.g., through binding corporate data protection regulations or EU standard data protection clauses.

How did we obtain your consent?

We have been able to obtain your consent for the purposes indicated above through different means, such as, for example, by telephone, through telephone conversations with the SANDOS Group customer service, through the formalization of service contracts with the different entities of the SANDOS Group, through paper forms, web form, etc.

If you have not granted it, in the event that you wish to grant, at any time, your consent for the processing indicated above through the registration form on the SANDOS Group website, you must click on the option that appears before completing the registration.

If you do not wish to grant all of the consents, please do not click on the general box “I agree to grant the consents indicated below”, but only on those specific consents that you want to grant. If you do not wish to grant any of these consents, no problem, you can continue with the registration without clicking any of the consent boxes.

If you wish to revoke your consent, you can do so in any of the following ways, or by sending an email to privacy@sandos.com , communicating the type of consent you wish to revoke or accessing your web profile and unchecking the boxes for the consent you wish to revoke.

What are “communication preferences” and what are they for?

The “communication preferences” are the different options you have to choose the form and/or means in which you wish to receive our communications.

At any time you can choose and/or modify the communication channels available through the SANDOS Group websites. In any case, you can contact the Group's data protection officer at any time SANDOS, by email to privacidad@sandos.com to communicate any decision regarding your communication preferences.

The choice or modification of communication preferences does not affect the consents granted by you as indicated in this Privacy Policy nor does it imply the modification of the same, which are in force at any time, which you may grant, modify or revoke as indicated in the previous section.

Do we record our telephone conversations?

Epi Gestión, SL, to guarantee both the quality of the customer service provided, as well as the exercise of the commercial rights of the clients of the different companies of the SANDOS Group and the exercise of the rights related to the protection of your personal data, may record some or all of your incoming and outgoing phone calls.

The content of these conversations is subject to the general data protection policy of the SANDOS Group, so you may exercise your data protection rights under the conditions set out in this privacy policy.

How long do we keep your Data?

Your personal data will be kept: for purposes (i) and (ii): for the time necessary to formalize our relationship and, where appropriate, for the duration of your relationship with Epi Gestión, SL and, once the formalized relationship has ended, for the time in which any legal liability may arise for the parties; and for the purpose (iii) until you exercise your right to object, delete, imitate the processing, and/or revoke your consent, as appropriate.

What are your rights?

When the basis for processing is your consent, you may object to granting your consent or revoke it at any time by sending an email to the following address: privacy@sandos.com, the refusal to grant your consent will not have any effect on the existing relationship.

Furthermore, we inform you that you may exercise your rights of access, rectification, cancellation, portability, limitation and/or opposition in the terms established by current regulations on data protection, by directing your request to the postal address Juan Fuster Zaragoza, 18, 03500 Benidorm free of charge by sending a letter addressed to Epi Gestión, SL, stating the initials "DPD" on the envelope, duly signed by you, including your full name, address, telephone number, email address and a valid document proving your identity, in which you request the exercise of one or more of these rights. You may also exercise your rights free of charge by sending a communication to the following email address: privacidad@sandos.com, attaching identical information.

Likewise, if you consider that your rights have not been properly respected, you may contact the competent Control Authority (AEPD) to file any complaint you deem appropriate. https://www.aepd.es/es.

GRUPO SANDOS reserves the right to make any changes to the Privacy Policy it deems appropriate, to the content of the website and to its conditions of use.

 

Papagayo Arena SL (Sandos Papagayo) CIF - B38484796

 

For the purposes of this Privacy Policy, we must point out that “Papagayo Arena SL” is the company of the SANDOS Group, as defined below, established to provide hotel operation services.

 

Why do we process your Data?

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR") and current regulations on the protection of personal data, we inform you that your personal data will be processed by Papagayo Arena SL with CIF B38484796, with registered office at C/Las Acacias, no. 6, 35580 Playa Blanca – Yaiza, Lanzarote, and belonging to the SANDOS Group, for the purpose of (i) providing you with the information necessary to manage your registration as a customer or the MÁS loyalty programs, as well as the products and services marketed through the SANDOS Network or third-party collaborators, as well as to administer, manage, supervise and optimize the existing relationship with you; (ii) sending commercial communications, by any means,of products and/or services of a similar nature to those contracted with Grupo SANDOS and any of the Group's companies and businesses; and (iii) sending commercial communications of products and/or services of GRUPO SANDOS and/or third parties that may be based on automated individual decision-making through profiling. In order to carry out these treatments, the data provided by the client to Papagayo Arena SL will be used. Profiling, through the analysis of your automated individual decisions, consists of using your personal data to evaluate certain personal aspects, such as the analysis and prediction of your personal preferences, interests, behavior, location, movements and attitudes; the logic applied to obtain these profiles being the use of different data science tools and, the consequences of these treatments being the sending of personalized communications of interest to you based on the profiling results obtained.

In the event that Papagay