PRIVACY POLICY
1. OUR PRIVACY POLICY AT A GLANCE
Who are we? We are C.P. APARTAMENTOS MASARU and we process your data as Data Controller. This means we are responsible for how your personal data is used and protected.
What do we use your data for? We use the data you have provided online or through any other means to respond to your queries and suggestions, send you the personalized communications you have subscribed to, and process your booking.
Why do we have your data? We are entitled to process your data for different reasons. When you fill in a form or send an email with a query or suggestion, we have a legitimate interest in responding, or when you make a booking. We are also entitled based on your consent when you authorize us to send you our newsletter and personalized offers.
Who do we share your data with? We will only share data with partner companies to handle requests received and provide our services or products to you, banking entities, and bodies required by law. We never sell your data to third parties.
What rights do you have? You have the right to access, rectify or delete your personal data. You also have the right to object to processing that you previously authorized, to data portability, and not to be subject to automated individual decisions.
When processing your personal data, we apply the following principles to ensure maximum protection for you:
- Principle of lawfulness, fairness and transparency: We will always request your consent for processing your personal data for one or more specific purposes, which we will inform you about in advance with full transparency.
- Principle of data minimization: We will only request data that is strictly necessary for the purposes for which it is required.
- Principle of storage limitation: Data will be kept no longer than necessary for processing purposes. For subscriptions, we will periodically review our lists and remove inactive records after a considerable period.
- Principle of integrity and confidentiality: Your data will be processed in a way that ensures adequate security and confidentiality. We take all necessary precautions to prevent unauthorized access or misuse by third parties.
In this privacy policy you will find detailed information on how we use the personal data of customers, suppliers and users, and in general all persons who contact us, regardless of the means used to communicate (online form, telephone, email, or in person).
We aim to be transparent about what we do with your personal data and about your rights. For this reason, we keep our Privacy Policy, Legal Notice and Cookie Policy updated, and you can consult this information on this same website.
If you have any questions or want more information about this privacy policy, please continue reading this document.
2. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?
The controller responsible for processing your data is C.P. APARTAMENTOS MASARU:
- Identity: C.P. APARTAMENTOS MASARU - E38018115
- Address: LOS ROBLES, 2 38400 - PUERTO DE LA CRUZ
- Phone: 922370085
- Fax: 922370331
- Website: https://www.apartamentosmasaru.com/es/
- Email: info@apartamentosmasaru.com
C.P. APARTAMENTOS MASARU informs users that the data provided through browsing our website, data collection forms, or sending emails will be processed by C.P. APARTAMENTOS MASARU, and that such processing is included in the Record of Processing Activities in accordance with the GDPR.
3. WHAT DO WE USE YOUR PERSONAL DATA FOR?
At https://www.apartamentosmasaru.com/es/ we process data from both users of our website and third parties who have relationships with us.
3.1 WEBSITE USERS
What data do we collect from website users?
- Data from users who fill in forms: identification data (name and surname, phone number, postal and email address) and request-related data.
- Data from users subscribed to newsletter/communications: name and surname, email address.
- Browsing data: data provided by cookies and Google Analytics.
For what purposes do we process personal data?
- To send information and provide services requested through website forms.
- To organize, communicate and hold events or similar activities.
- To send newsletters, events, activities and promotions from C.P. APARTAMENTOS MASARU and the sector that may be of interest.
How do we obtain your data? Through forms completed by the website user, subject to acceptance of this privacy policy via the indicated checkbox.
What is the legal basis for processing?
- Express user consent (Article 6.1.a GDPR) when completing forms and ticking newsletter and commercial communication checkboxes.
- Legitimate interest for creating browsing profiles and detecting preferences through cookies.
- Performance of a contract or pre-contractual measures when the user requests information or services.
3.2 CUSTOMERS
What data do we collect from our customers?
- Data from customers who fill in online forms or forms at our physical premises: name and surname, phone number, postal and email address, and request-related data.
- Data from customers who make a booking or place an order in person: name and surname, postal and email address, phone number, billing address.
- Data obtained through contracts and quotations.
How do we obtain your data?
- If you are an online customer: through information/quotation request forms and cookies accepted when first accessing the website.
- If you are an in-person customer: through customer registration forms, acceptance of quotations and signed contracts.
For what purposes do we process your personal data?
- To generate and manage documentation related to requests and purchases.
- To provide information on offers, products and services related to your purchase.
- To process online bookings or purchases.
What is the legal basis for processing?
- Performance of a pre-contract/contract for service or product management.
- User consent for newsletter, commercial communications and blog management.
- Legitimate interest for sending exclusive promotions, latest news, personalized information and satisfaction surveys.
3.3 SOCIAL MEDIA CONTACTS
What data do we collect? Identification data on social media. C.P. APARTAMENTOS MASARU will not request data beyond what you have included in your user profile.
For what purposes do we process your data?
- To answer and manage your queries, requests or applications.
- To interact with you while you are part of our community of followers.
What is the legal basis for processing? Performance of a pre-contract/contract linking the user to the relevant social network and its privacy policies.
- Facebook: http://www.facebook.com/policy.php?ref=pf
- Instagram: https://help.instagram.com/155833707900388
- Twitter: http://twitter.com/privacy
- LinkedIn: http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
- Pinterest: https://about.pinterest.com/es/privacy-policy
- YouTube: https://policies.google.com/privacy?hl=es&gl=es
https://www.apartamentosmasaru.com/es/ will always seek to establish appropriate mechanisms to obtain user consent for cookies that require it. Acceptance of cookies includes storage of the IP address in website logs, together with the acceptance date, for one year, in order to prove consent. You can find more information in the "Cookie Policy".
4. HOW LONG DO WE KEEP YOUR DATA?
4.1 WEBSITE USERS
- Data processed based on consent: while relevant to its purpose and until consent is withdrawn.
- Data processed based on legitimate interest: for the period linked to the purpose of collection, while respecting safeguards and rights.
- Data processed based on contract or pre-contractual measures: while the contractual relationship remains in force and for the legally required subsequent period.
- IP address obtained through cookies: kept for one year to prove consent.
4.2 CUSTOMERS
- Data based on consent: while relevant and until consent is withdrawn.
- Data based on legitimate interest: for the period linked to the purpose of collection with appropriate safeguards.
- Data based on contract or legal obligation: during the validity of the contractual relationship and applicable legal retention periods.
4.3 SOCIAL MEDIA CONTACTS
Data will be kept while there is a connection between the user and C.P. APARTAMENTOS MASARU on the social network (friendship, follow, like or similar). Rectification, restriction or removal must be carried out by the user through their profile settings, in accordance with each social network's privacy policy.
Regardless of the legal basis, data may be processed for scientific, historical or statistical research purposes, always applying appropriate safeguards and respecting the rights and freedoms of data subjects.
5. ADDITIONAL INFORMATION ON DATA PROCESSING
Only persons over 14 years of age may provide data through our website and email. If you are under this age, you must have consent from your parents or legal guardians.
The user guarantees the authenticity and currency of the data provided to C.P. APARTAMENTOS MASARU, declares that they are over 14 years old, and will be solely responsible for false or inaccurate statements.
Personal data processed may be mandatory or voluntary. Special categories of data will not be requested through web forms to protect privacy. If special categories are required to provide a service, they will be collected by another means.
Forms may request:
- Request-related data.
- Data from users subscribed to newsletter or commercial communications and information.
Fields marked with an asterisk (*) or the word "required" are mandatory. Failure to provide them will make it impossible to provide the service or handle the request.
If you provide third-party data, you declare that you have their consent and undertake to provide them with the information in this clause, exempting C.P. APARTAMENTOS MASARU from any additional obligation. However, C.P. APARTAMENTOS MASARU may carry out checks to verify that the third party has been informed in accordance with data protection regulations.
6. TO WHICH RECIPIENTS WILL YOUR DATA BE DISCLOSED?
Data will not be disclosed to third parties except where legally required or when necessary to handle your request.
Recipients may include:
- Public administrations and bodies when required by tax, labor, Social Security or other applicable regulations.
- Data processors (fraud detection and prevention providers, technology services, customer support services, advertising and marketing services, courier and transport services, among other providers necessary for service delivery).
7. ARE INTERNATIONAL DATA TRANSFERS CARRIED OUT?
https://www.apartamentosmasaru.com/es/ is hosted in Spain, within the European Union and the European Economic Area, or in territories that comply with Articles 46 and 47 GDPR. Therefore, as a general rule, international transfers of data provided by users through the website will not occur.
Our website accesses user data through:
- Contact forms available on the website.
- Newsletter subscription.
In certain cases arising from disclosures/communications and cloud services from international providers (for example, Google, Microsoft), international transfers may occur. In such cases, C.P. APARTAMENTOS MASARU will apply the safeguards set out in Articles 46 and 49 GDPR, verifying in advance appropriate technical and organizational measures and the existence of a binding legal instrument where applicable.
If GDPR requirements are not met, the data subject may grant consent for the transfer, a contract may be executed in the data subject's interest, or authorization may be requested from the Supervisory Authority where appropriate.
C.P. APARTAMENTOS MASARU never sells user data to third parties.
8. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?
Users may exercise the following rights before C.P. APARTAMENTOS MASARU:
- Access their personal data.
- Rectify inaccurate or incomplete data.
- Request deletion or erasure when data is no longer necessary for its purpose.
- Object to processing.
- Request restriction of processing in legally established cases.
- Request data portability in cases provided by law.
- Not be subject to automated decisions.
- Withdraw consent given.
To exercise your rights, you must send a written request indicating the right you wish to exercise, together with proof of identity and a postal or email address for notification purposes. You may do so by postal mail to C.P. APARTAMENTOS MASARU, LOS ROBLES, 2, 38400 - PUERTO DE LA CRUZ, or by email at info@apartamentosmasaru.com.
C.P. APARTAMENTOS MASARU will respond within one month from receipt of the request. This period may be extended by two additional months if necessary, taking into account the complexity and number of requests. Any extension will be notified within the first month, stating the reasons for the delay.
Likewise, data subjects have the right to lodge a complaint with the Spanish Data Protection Agency when they consider that C.P. APARTAMENTOS MASARU has infringed their rights: www.aepd.es.
9. IS MY DATA SECURE?
C.P. APARTAMENTOS MASARU has an active contract with Dinahosting S.L. for website hosting. It is a European company and has updated security systems.
C.P. APARTAMENTOS MASARU guarantees the adoption of appropriate measures to ensure confidential data processing and to keep data secret, treating it with maximum confidentiality. It also declares that it has implemented security policies in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
All data provided through our platform is collected through a secure protocol. Our website has an SSL certificate, so when a user visits the site and exchanges information with us, an encrypted connection is established.
10. LINKS TO OTHER WEBSITES
If you choose to leave our website through links to other sites not belonging to our entity, C.P. APARTAMENTOS MASARU will not be responsible for the privacy policies of those websites or for cookies they may store on the user's computer.
Date: 21/05/2026
Version: V.1.0