According to the Law 34/2002, of 11th July, regarding Services of the Information Society and Electronic Commerce, we inform you that the web you are visiting under the domain http://www.cactlanzarote.com belongs to EPEL, ART, CULTURE AND TOURISM CENTRES OF LANZAROTE with the following identifying data
Business name: EPEL, ART, CULTURE AND TOURISM CENTRES OF LANZAROTE
In compliance with the principles of legality and transparency and in order to provide the information to the interested parties established in articles 13 and 14, we inform you of the characteristics of processing personal data carried out under the responsibility of EPEL, ART, CULTURE AND TOURISM CENTRES OF LANZAROTE:
Data treatment: (I) Human resources management. (II) Web Requests. (III) Sending newsletter. (IV) Invoicing, accounting and fiscal management. (V) Administrative management. (VI) Monitoring of budgets (VII) Attention to the exercise of rights. (VIII) Security breach notification (IX) Reserve management. (X) On-line sale. (XI) Satisfaction surveys. (XII) Marketing Management.
Objective: (I) Selection of personnel, training, preparing and sending payroll, and other necessary documents for an employment relationship. (II) Attention to requests received through the Web. (III) Dispatching the promotional information of the entity. (IV) Issuing invoices for clients, preparing the official accounts, presenting and liquidating taxes, preparing commercial documents, such as balance sheets and reports. (V) Administrative management that involves collections and payments and relationships with suppliers. (VI) Budget tracking. (VII) Address requests for the exercise of rights related to personal data. (VIII) Notify the interested parties and the Control Authority of any security breaches that may affect the rights and freedom of the interested parties. (IX) Management of reservations made for services or tickets. (X) Ticket sales through the web. (XI) Carrying out satisfaction surveys for visitors or users (XII) Managing ticket sales through other tour operators.
Legitimation: (I) Application of contractual and pre-contractual measures. (II) Legitimate interest. (III) Consent of the interested party. (IV) Law 58/2003, of December 17, General Tax. (V) Legitimate interest. (VI) Application of contractual and pre-contractual measures. (VII) and (VIII) Regulation (EU) 2016/679 of the European Parliament and the Council, of April 27, 2016, concerning the protection of natural people with regard to the process of personal data. (IX), (X) and (XII) Application of contractual and pre-contractual measures. (XI) Consent of the interested party.
Duration term: (I) Duration of the employment contract and the time needed to meet responsibilities arising from the provision of work. (II) The period necessary to meet the request, as well as for the duration of the responsibilities that may arise from them. (III) Until the interested party revokes the consent. (IV) and (V) Six years for mercantile purposes, and the necessary term to take care of responsibilities derived from liquidating taxes. (VI) and (XII) While the provision of the service lasts and the time necessary to meet the responsibilities derived from it. (VII) and (VIII) The term necessary to fulfil said purpose, as well as for the duration of the responsibilities that may derive from them. (IX), (X) and (XI) The period necessary to meet the request, as well as for the duration of the responsibilities that may arise from them.
Recipients: (III) Mailchimp, (VII) and (VIII) Spanish Agency for Data Protection. (IX) Turitop. (X) Turitop and Paypal. (XII) Third party tourist operators in Lanzarote.
Exercise of rights: You can exercise your right of access, rectification, deletion, limitation and opposition to the treatment, under the terms and conditions established in the personal data protection Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, regarding the protection of natural people with regard to the process of personal data, by sending a request by email to email@example.com or in writing to: Calle Triana, 38, Arrecife, CP 35500, Las Palmas, indicating in any case the Reference: “Data Protection” together with any document that proves your identity as a photocopy of the DNI (Spanish ID), as well as to file a claim with the Spanish Agency for Data Protection.
Who is responsible for processing your data?
The owner of the institution and this web page is EPEL, ART, CULTURE AND TOURISM CENTRES OF LANZAROTE, so that any personal data that you communicate through this web page as well as on the data collection forms that are carried out face-to-face, will be treated under the responsibility of EPEL, ART, CULTURE AND TOURISM CENTRES OF LANZAROTE.
How do we use the personal data that we manage under our responsibility?
We use your data for the following purposes:
(I) Management of human resources.
(II) Attention of requests received through the Web.
(III) Sending newsletter.
(IV) Invoicing, accounting and fiscal management.
(V) Administrative management that involves collections and payments and relationships with suppliers.
(VI) Budget tracking
(VII) Exercise of rights.
(VIII) Security Gaps Notification.
(IX) Reserves management.
(X) Online sale.
(XI) Satisfaction surveys.
(XII) Marketing management
And the use we make of them is exclusively the necessary for each of the purposes, for example for the management of human resources, we send data to our work advisors to draw up work contracts and payroll, also to the bank for payment of salaries and the Tax Administration State Agency to report the annual withholdings we apply on salaries, the Insurance Company and the Occupational Risk Prevention Company, except for obligation, or to receive a service that is necessary to carry out our activity, not communicating or treating data for additional purposes.
What personal data do we collect? (How do we get it?)
We will ask you for the minimum necessary data to carry out the purposes indicated in the previous section, normally, name and surname, address, and contact information.
For how long?
When data processing is imposed by a standard, this usually incorporates the period during which data must be treated or stored, so the Commercial Code establishes the obligation to keep the data for accounting and commercial purposes for six years, but there are certain assumptions such as the application of certain deductions that require keeping economic justifications for a longer period, sometimes up to fifteen years.
Disclosure to third parties
As in previous cases, the data we communicate to third parties is always limited to the minimum necessary.
What security measures do we apply to personal data?
EPEL, ART, CULTURE AND TOURISM CENTRES OF LANZAROTE, has appropriate policies and technical and organisational measures in place to safeguard and protect your personal data against illegal or unauthorised access, loss or accidental destruction, damage, use and illegal or unauthorised disclosure.
We will also take all reasonable precautions to ensure that our staff and employees who have access to your personal information have received appropriate training.
What are your rights as the owner of your own data?
You have the right to request the deletion of your data when, among other reasons, the data is no longer necessary for the purposes that was collected. You have the right to obtain confirmation about whether in EPEL, ART, CULTURE AND TOURISM CENTRES OF LANZAROTE we are dealing with your personal data or not. You have the right to access your personal data and obtain a copy of it, as well as to request the correction of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes it was collected. In certain circumstances, you may request the limitation of the process your data undergoes, in which case we will only keep it for the exercise or defence of claims. In certain circumstances and for reasons related to your particular situation, you may object to have your data processed. EPEL, ART, CULTURE AND TOURISM CENTRES OF LANZAROTE, will stop treating the data, except for compelling legitimate reasons, or the exercise or defence of possible claims. Likewise, you can exercise the right to the portability of the data, as well as revoke the consents that you have provided. You can exercise these rights upon request via email to firstname.lastname@example.org or in writing to: Calle Triana, 38, Arrecife, CP 35500, Las Palmas, attaching a copy of your ID or other document that proves your identity, and clearly indicating the right you wish to exercise. Finally, that you can file a claim with the Spanish Agency for Data Protection, especially when you have not obtained satisfaction with regard to the exercise of your rights.