SurTenerife

Privacy Policy

1. Who is responsible for your data

Data controller: Elena Yasnova, NIE Y3005968C.

Address: Avenida Palm-Mar 43, Residencial Corazones, 38632 Arona, Santa Cruz de Tenerife, Spain.

Email: booking@tene-sur.com

Phone / WhatsApp: +34 697 29 49 69

For guest registration (SES.Hospedajes), the owner of the booked apartment is also responsible; its number in the Tourism Register of the Canary Islands (VV-38-4-…) is shown on the apartment page and in the booking confirmation.

2. Legal basis

Regulation (EU) 2016/679 on data protection (GDPR), Spanish Organic Law 3/2018 (LOPDGDD), Royal Decree 933/2021 on guest registration.

3. What data we collect

— First name, surnames, sex, date of birth, nationality

— Identity document: type (passport, DNI, NIE/TIE, ID card of your country or another document), number, document support number (if any), date of issue

— Permanent address, city, country, postcode

— Email and phone

— Data of all guests in the booking, including children; for minors, their relationship or link to the adult responsible for them (required by law)

— Booking data: apartment, dates, number of guests, price

— Payment data: method (card, Stripe, PayPal, cash), date, holder of the payment method and other details required by Royal Decree 933/2021. Full bank card details are processed only by Stripe or PayPal; we do not receive or store them

— Your messages to us and our replies

Guest registration data is mandatory: without it we are not allowed by law to accommodate you.

4. Why we process your data and on what basis

— To handle your booking, take payment, check you in and communicate with you — performance of the contract (Art. 6.1.b GDPR)

— To register guests in the SES.Hospedajes system of the Spanish Ministry of the Interior and to keep accounts and pay taxes — legal obligation (Art. 6.1.c GDPR)

— To prevent fraud and protect property — legitimate interest (Art. 6.1.f GDPR)

— To prepare replies to your messages with the help of artificial intelligence software; every reply is checked by a person before it is sent — legitimate interest (Art. 6.1.f GDPR)

— To send you offers — only with your consent (Art. 6.1.a GDPR); you can withdraw your consent at any time

We do not take decisions about you based solely on automated processing.

5. Who we share data with

— Spanish authorities, when required by law: the Ministry of the Interior (SES.Hospedajes), tax authorities, courts

— Service providers working on our behalf and only for these purposes:

· Beds24 — booking management system (Germany)

· Stripe and PayPal — payment processing

· Hetzner — servers (EU); Supabase — database; Vercel — website hosting

· OpenAI — drafting replies to messages

We do not sell your data or share it with advertising networks.

6. Transfers outside the EU

Some providers (for example Vercel, OpenAI, Stripe, PayPal) may process data in the United States. Such transfers are based on the EU–U.S. Data Privacy Framework or on the Standard Contractual Clauses of the European Commission.

7. How long we keep data

— Guest registration data (SES.Hospedajes): 3 years from the end of the stay (Art. 5.3 of Royal Decree 933/2021)

— Booking, invoice and payment data: for the periods set by Spanish tax and accounting law

— Messages: as long as they are needed for the booking and any claims

— Consent to receive offers: until you withdraw it

After that, the data is deleted or anonymised.

8. Your rights

You may request access to your data, its rectification or erasure, restriction of processing and data portability, object to processing and withdraw your consent. Write to booking@tene-sur.com. The right to erasure does not cover data that the law requires us to keep (section 7).

You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es

9. Security

Data is transmitted encrypted (HTTPS); only authorised persons have access to it.

10. Cookies

The website uses only strictly necessary cookies: to make the site work and to remember the language you chose. Stripe and PayPal use their own cookies during payment under their own policies. We do not use analytics or advertising cookies.

Last updated: October 2026