Privacy Policy

The Privacy Policy forms part of the General Terms and Conditions governing this Website.

Who is responsible for processing your data?

FATAGA, S.A.

Tax ID (CIF): A35046382

Avenida de Ansite nº 3, 1st floor

35011, Las Palmas de Gran Canaria

Phone: +34 928 290 614

Email: admon@hotelfataga.com

Data Protection Officer: dpo@livvohotels.com

You may contact us in any way you prefer.

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend you review it periodically, and if you have registered and access your account or profile, you will be informed of any changes.

If you belong to one of the following groups, please check the relevant information below:

Website or email contacts

What data do we collect through the Website?

We may process your IP address, the operating system or browser you use, and even the duration of your visit, anonymously.

If you provide data through the contact form, you will identify yourself so that we can contact you, if necessary.

For what purposes will we process your personal data?

• Answering your queries, requests, or petitions.
• Managing the requested service, responding to your request, or processing your petition.
• Providing information by electronic means concerning your request.
• Providing commercial or event-related information by electronic means, provided express authorisation exists.
• Carrying out analysis and improvements to the Website, our products, and services. Improving our business strategy.

What is the legal basis for processing your data?

The acceptance and consent of the data subject, granted through a voluntary action, such as in cases where making a request requires completing a form and clicking the send button; doing so necessarily implies that the data subject has been informed and has expressly given consent to the content of the clause attached to that form or to the acceptance of the privacy policy.

All our forms indicate mandatory fields with an asterisk (*). If you do not provide those fields, or do not tick the checkbox accepting the privacy policy, you will not be able to submit the information.

For how long will we keep your personal data?

Until the consent granted is revoked.

Guests

For what purposes will we process your personal data?

We inform you that your personal data will be processed for the purpose of managing your reservation, formalising and administering your stay at the hotel, attending to requests related to the contracted services, and guaranteeing payment of the expenses arising from that stay.

Likewise, certain data may be processed to comply with the legal obligations applicable to accommodation establishments, particularly those relating to the documentary registration and communication of information on the persons staying at the establishment.

Your data may be disclosed, where appropriate, to the Security Forces and Corps in compliance with current regulations, as well as to travel agencies, tour operators, booking platforms, or other intermediaries that have taken part in arranging or managing your reservation.

Data will be kept for as long as necessary to fulfil the purposes indicated and, in any case, for the periods required by tax, commercial, consumer, and traveller documentary registration regulations. As a general rule, certain data may be kept for a minimum period of 6 years when necessary to comply with those legal obligations.

What is the legal basis for processing your data?

The legal basis for processing your personal data is the performance of the contractual or pre-contractual relationship arising from the reservation and stay at the hotel, as well as compliance with the legal obligations applicable to the establishment.

In particular, processing may be carried out in compliance with regulations on the documentary registration and information of persons staying at accommodation establishments, including Royal Decree 933/2021, of 26 October (Real Decreto 933/2021, de 26 de octubre), as well as any applicable regulations on guest registers and traveller arrival forms.

Where processing is based on your consent, this may be withdrawn at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.

Important notice about possible fraud and unofficial communications

The LIVVO Group will not ask you for additional payments, banking details, passwords, verification codes, or sensitive information through links received via WhatsApp, SMS, social media, or other unofficial channels, on the pretext of an alleged modification, incident, cancellation, or confirmation of your reservation.

If you receive a communication asking you to make a payment, provide banking details, or access an unverified link, do not take any action without first checking the authenticity of that communication.

For your safety:

• Do not provide personal or banking details through unofficial channels.
• Do not share passwords or verification codes.
• Do not click on payment links received via WhatsApp, SMS, social media, or suspicious messages.
• Do not download attachments from unverified communications.

If in doubt, contact the hotel directly through the official channels published on our website before making any payment or providing information.

Clients

For what purposes will we process your personal data?

• Preparing the quote/estimate and following up on it through communications between both parties.
• Providing information by electronic means concerning your request.
• Providing commercial or event-related information by electronic means, provided express authorisation exists.
• Managing the administrative, communication, and logistics services carried out by the Controller.
• Invoicing and filing the relevant taxes.
• Carrying out the corresponding transactions.
• Collection and recovery management.
• During the card payment process, the Bank holding the Virtual POS will collect the following personal data: connection type, date and time, IP address, device information, email address, mobile phone number, browsing data, transaction data, and data required by 3D Secure security protocols, for the sole purpose of detecting and preventing unauthorised payment transactions.

What is the legal basis for processing your data?

The existence of a contractual relationship between the parties. Processing is necessary for the performance of a contract to which the data subject is party or for the application of pre-contractual measures at their request.

For how long will we keep your personal data?

For the duration of the relationship between the parties and for the statute-of-limitations periods arising therefrom.

LIVVO Plus loyalty programme

For what purposes will we process your personal data?

By signing up for the loyalty programme, we will process your personal data for the purpose of properly managing the loyalty programme, through which you will benefit from:

• Discounts on bookings and purchases.
• Additional benefits and exclusive promotions.
• Receiving information about special sales updates and exclusive promotional offers.

What is the legal basis for processing your data?

The legal basis for processing your data is your express, free, and voluntary consent, which you may withdraw at any time without affecting the lawfulness of the processing carried out prior to withdrawal of consent.

For how long will we keep your personal data?

Your data will be kept for as long as you do not withdraw the consent given or request the cancellation of your data or object to its processing.

Quality surveys

For what purposes will we process your personal data?

• Assessing the level of quality of the service provided.
• Improving the services offered, in compliance with ISO requirements.

What is the legal basis for processing your data?

The legal basis is the express consent of the person surveyed.

For how long will we keep your personal data?

Until the consent granted is revoked.

Suppliers

For what purposes will we process your personal data?

• Providing information by electronic means concerning your request.
• Providing commercial or event-related information by electronic means, provided express authorisation exists.
• Managing the administrative, communication, and logistics services carried out by the Controller.
• Invoicing.
• Carrying out the corresponding transactions.
• Invoicing and filing the relevant taxes.
• Collection and recovery management.

What is the legal basis for processing your data?

The legal basis is the acceptance of a contractual relationship or, failing that, your consent when contacting us or offering us your products through any channel.

For how long will we keep your personal data?

For the duration of the relationship between the parties and for the statute-of-limitations periods arising therefrom.

Social media contacts

For what purposes will we process your personal data?

• Answering your queries, requests, or petitions.
• Managing the requested service, responding to your request, or processing your petition.
• Engaging with you and building a community of followers.

What is the legal basis for processing your data?

The legal bases legitimising the processing are the data subject's voluntary consent to get in touch and, where applicable, the acceptance of a contractual relationship within the environment of the relevant social network. The processing of data within the Social Network will be carried out in accordance with its Privacy Policies.

For how long will we keep your personal data?

We can only consult or deregister your data in a limited way, as we hold a specific profile. We will process your data for as long as you continue to follow us, be our friend, or click "like", "follow", or similar buttons.

Any correction of your data or restriction of information or posts must be made through your profile or user settings on the social network itself.

Work with us

For what purposes will we process your personal data?

We will process the personal data included in your curriculum vitae, as well as any data you provide during the selection process, for the following purposes:

• Assessing and managing your profile as a candidate in relation to the personnel selection processes we are carrying out or may carry out in the future that could match your professional profile.
• Organising and managing selection processes for the recruitment of employees.
• Contacting you to schedule interviews, carry out electronic or telephone communications, and, where applicable, conduct selection tests.
• Managing unsolicited applications, applications sent by email, web forms, employment platforms, or submitted in person at the hotel.

If you submit your curriculum vitae in person through the box provided at the hotel, we inform you that your data will be processed for the purposes set out in this section. Basic information on data protection will be available on the sign posted next to the box, without prejudice to your ability to consult the extended information in this Privacy Policy.

Where you have given us your consent, we may share your application with group entities or partner or affiliated companies, for the purpose of including you in selection processes that may match your professional profile.

Once the retention period indicated has elapsed, we will securely destroy your curriculum vitae, unless there is a legal obligation to retain it or you have previously requested its deletion.

What is the legal basis for processing your data?

The legal basis for processing your personal data is the application of pre-contractual measures at the request of the data subject, by voluntarily sending or submitting your application, as well as, where applicable, the consent given for the retention of your application for future selection processes or for its disclosure to group entities or partner companies.

For how long will we keep your personal data?

Your data will be kept for a maximum period of 24 months from receipt of the curriculum vitae, or until you request its deletion, unless a longer legal retention period applies.

Ethics channel

What data do we collect through the Website?

If you identify yourself, we may collect: first name, surname, email, phone number, and the personal data of any third party/parties that you provide in the communication.

For what purposes will we process your personal data?

• Managing communications.
• Adopting the corresponding corrective measures, and
• Where necessary, informing you of the outcome of the procedure.

What is the legal basis for processing your data?

The legal basis is legal obligation or, failing that, the public interest.

For how long will we keep your personal data?

Data will be kept for the period strictly necessary to clarify the facts reported. In any case, after six (6) months, the data provided will be anonymised unless it is being investigated in a different legal context.

Additional information on the processing of personal data

Do we include personal data of third parties?

No, as a general rule we only process the data provided to us by the data subjects themselves. If you provide us with third-party data, you must first inform those persons and obtain their consent, or otherwise you release us from any liability for failure to comply with this requirement.

And data on minors?

We do not process data of minors under 14 years of age. Therefore, please refrain from providing such data if you are under that age or, where applicable, from providing data of third parties who are under that age. LIVVO HOTEL GROUP, S.L.U. is released from any liability for failure to comply with this provision.

Will we send electronic communications?

• These will only be carried out to manage your request, if it is one of the means of contact you have provided us with.
• If we send commercial communications, they will have been previously and expressly authorised by you.

What security measures do we apply?

You can rest assured: we have adopted an optimal level of protection for the Personal Data we handle, and we have implemented all the technical means and measures available to us, according to the state of the art, to prevent the loss, misuse, alteration, unauthorised access, and theft of Personal Data.

To which recipients will your data be disclosed?

Your data will not be transferred to third parties, except where legally required. Specifically, it will be disclosed to the State Tax Administration Agency (Agencia Estatal de la Administración Tributaria) and to banks and financial institutions for the collection of payment for the service provided or product purchased, as well as to the data processors necessary for the performance of the agreement.

In the event of a purchase or payment, if you choose an application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed within its environment, always with the utmost security. During the card payment process, data will be collected by the Bank holding the Virtual POS.

When instructed by us, our website development and maintenance company, or our hosting company, will have access to our website. They will have signed a service agreement obliging them to maintain the same level of privacy as us.

International data transfers may take place when using American applications; however, such transfers will be made to entities that have demonstrated compliance with the level of protection and guarantees required under current data protection regulations, such as European Regulation, or where there is a legal basis authorising the international transfer.

What rights do you have?

• To know whether or not we are processing your data.
• To access your personal data.
• To request the correction of your data if it is inaccurate.
• To request the deletion of your data if it is no longer necessary for the purposes for which it was collected, or if you withdraw the consent given.
• To request the restriction of the processing of your data, in certain cases, in which case we will only retain it in accordance with current regulations.
• To data portability, whereby your data will be provided to you in a structured, commonly used, machine-readable format. If you prefer, we can send it to the new controller you designate. This applies only in certain cases.
• To file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) or the competent supervisory authority, if you believe we have not handled your matter correctly.
• To withdraw your consent for any processing to which you have consented, at any time.

If you change any of your data, please let us know so that we can keep it up to date.

Do you want a form for exercising your rights?

• We have forms for exercising your rights; request them from us by email, or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
• These forms must be signed.
• If someone represents you, you must provide proof of representation.
• The forms may be submitted in person, sent by post, or by email to the Controller's address given at the beginning of this text.

How long do we take to respond to a request to exercise your rights?

It depends on the right in question, but at most within one month of your request, and two months if the matter is very complex and we notify you that we need more time.

Do we use cookies?

If we use any type of cookies other than the necessary ones, you can consult the cookies policy at the corresponding link from the homepage of our website.

For how long will we keep your personal data?

• Personal data will be retained for as long as you remain associated with us.
• Once you cease to be associated with us, the personal data processed for each purpose will be retained for the legally established periods, including the period during which a judge or court may request it in light of the statute of limitations for legal actions.
• Data processed will be retained as long as the aforementioned legal periods have not expired, if there is a legal obligation to retain it, or, in the absence of such a legal period, until the data subject requests its deletion or withdraws the consent given.
• We will retain all information and communications relating to your purchase or the provision of our service for as long as the warranties on the products or services last, in order to handle possible claims.