Club La Santa SAU (Resort Lanzarote), Club La Santa A/S (Danish Sales Office), Club La Santa GmbH (German Sales office) are all part of the Group: A/S of June 3, 1986. Club La Santa SAU, therefore, has a legitimate interest in sharing data with Club La Santa A/S and Club La Santa GmbH for administrative purposes as well as analyzing customer personal data.
Thus, Club La Santa SAU has a shared data responsibility for the processing of personal data on this website, but your primary contact is Club La Santa SAU.
Club La Santa SAU (Lanzarote), Club La Santa A/S (Denmark), Club La Santa GmbH are using a common reservation system, which allows authorized employees to have access to reservation and customer data for all companies.
Your personal information
Club La Santa S.A.U., Club La Santa A / S, and Club La Santa Reisen GmbH respect the privacy of our customers and visitors to our websites and our goal of this policy is in a clear and transparent way to describe to you how we collect, view, transfer, and save your information to make sure that your personal information is securely stored. Club La Santa carries out all the handling of personal data in accordance with the Personal Data Act of the EU rules for processing personal data GDPR (General Data Protection Regulation)
You can contact us by email at firstname.lastname@example.org or email@example.com or you can send a letter to Club La Santa SAU, Avenida Krogager, 35560 Tinajo, Lanzarote, Spain.
Collection of personal data
What is personal information?
Personal information is any information that may be directly or indirectly related to a living person. The following are examples of personal information: name, social security number, address, email address and telephone number, ticket numbers, encrypted data and various types of electronic identities such as IP address if they can be linked to natural persons.
How we collect personal information and what information we collect
Club La Santa collects personal information in several ways, but first, directly from you.
Information collected for a hotel booking
When you make a room reservation at clublasanta.com, or through our Club La Santa, Reservations Department, Lanzarote, we collect personal information from you to complete your order. It is information about the name, date of birth, age and gender for all travellers visiting Club La Santa, as well as the address and contact details of the lead booker. When you book, we also collect payment information from the person responsible for the payment. If your booking includes children, we collect the same information as above for each child.
When you make an event week or race booking with us, we also collect information about the event week or the race you are participating in. This booking also contains your personal data.
Information collected by personal contact
We collect personal information from you when you contact us, for example, via our Reservations Department in Lanzarote by email, telephone or other means. Primarily, we collect the personal information needed to answer your question or process your case. It is information about the name and reservations number. Depending on how you choose to contact us, we may also collect contact information such as email address or phone number.
By personal contact, we will also collect other personal information that you choose to provide to us, for example, information about allergies, medical conditions or other information about you or anyone else that is covered by your booking.
Club La Santa makes use of Video surveillance on its interior and exterior areas. Video cameras are placed at resort entrances and at the receptions, safe rooms and luggage areas. The majority of the video cameras surveillance is placed to provide surveillance of the exterior of the resort.
Cameras are never used in areas where you would have an expectation of privacy, such as restrooms or locker rooms.
The purpose of the camera surveillance is to allow the after-the-fact investigation of crimes committed against Club La Santa or our guests. The surveillance may also be used to assist in the investigation of certain types of occupational health and safety violations.
Club La Santa has legitimate interests in interior surveillance of safety areas as well as use surveillance of employees and guests for the above-listed purposes.
Club La Santa has an agreement with a photographer who is taking pictures of guests doing sports and is offering to sell these pictures to the guests in the photos.
Club La Santa take pictures of guests to use for the website, Social Media, digital campaigns and printed material.
The photographer or Club La Santa will offer model releases to obtain consent for all participants in photos and videos.
Information collected through My Club
If you register a profile at clublasanta.com (My Club), we will save your email address to create your login. On My Page, you can then choose to enter information about name, date of birth, address and contact details.
Information collected when you subscribe to our newsletter
If you choose to subscribe to our Club La Santa newsletter or one of our special interest newsletters (Mountain Bike or Triathlon) we will collect your name and email address to send the newsletter. If you choose to, we also collect data about your gender and date of birth.
Information collected by using our digital services
When you use one of our websites, our sports booking app or other digital services from us, we collect information about your use of the service. Some of this information may be personal information, such as IP address. We also collect information about how you navigate in the service, what searches you are making and which pages you are interested in.
Information collected when you book sports activities
When you book sports activities at Club La Santa, using our sports booking app or directly in the Sports Booking department, we collect your activity data for your service and for internal planning purposes.
Information collected when you book wellness services
When you book massages or treatments from the wellness centre, we collect your given booking data.
Information collected from someone other than you
When ordering and contacting us in different contexts, a person may provide personal information about one or more fellow travellers. Our starting point is that the person who gives us such information has obtained all the consent of fellow travellers to provide such personal information to us. If you have not made an order yourself and someone else has made an order on your behalf, we collect personal information about you from that person. The same happens if someone else has been in contact with us on your behalf.
Processing and storing of personal data
A legal basis for Club La Santa to process your personal information
Club La Santa is processing your personal information under the law. It may happen that the same personal information is processed both in connection with the performance of the booking agreement, specifically due to consent and because the information is required to fulfil other legal obligations. This means that even if you withdraw your consent and the treatment based on the consent expires, personal information may still be available to us for other purposes. Mainly, we process your information to fulfil an agreement with which you are a part of, such as booking terms and conditions.
Club La Santa may also process information necessary for Club La Santa to pursue a legitimate interest unless the registrant's interests precede this. The legitimate interests which Club La Santa pursues are “Forward travel information” and “Marketing before departure”.
Administration of sports activities
In order to provide service to you when you have booked sports activities, we use your data for your service and for internal planning purposes.
We store your data for 2 months after collecting it, and hereafter we anonymize your data to be used for overall statistical purposes.
Administration of your booking
In order to provide the travel services, you have booked with us, we use your personal information in different ways. The information is used to issue reservation documents as well as to make actual hotel booking and to pay for the services you have ordered.
Administration of your trip also includes the use of your information for posting, settlement, review, credit or other payment card verification.
We store your booking information in our customer database. In the customer database, personal data and booking history are stored for six (6) years, if you have not given your consent that we can store your data for a long time.
Your credit card information will be stored for 3 months and hereafter deleted from our systems. Your Passport information will be stored for 3 years, and hereafter deleted from our systems.
If you agree specifically, we will store your personal information for up to 10 years. If you file a complaint within two years of your last booking, we will keep all your information for 10 years.
Provide service during your stay with us
Your name and room number will be included in various lists provided to the internal service providers at Club La Santa, e.g. cleaning department and restaurants. These lists are destroyed after use.
Forward travel information
Once you have made your booking with us, we use your personal information to forward booking confirmation, important information about your upcoming trip and deals related to your visit. We forward this information by the email address which was provided when you made the booking.
After your stay with us, you are invited by e-mail to evaluate your stay and you can participate in an online guest satisfaction survey. This data is used to evaluate and improve our guest services and facilities. The data collected in the survey is personalized to the name and e-mail of the lead booker, the dates and room number for the booking. After answering the survey, you can choose to share your review on a review site such as. If you choose to do so, Club La Santa can choose to publish your review in clublasanta.com
We send information about deviations such as time changes and other changes in relation to your trip. This information is sent either by email, letter, text or telephone, depending on the change and contact information we have. We send you payment reminders via e-mail.
Marketing and personalization
Customer information can be used by Club La Santa in a marketing context in connection with your booking.
If you subscribe to one or more of our newsletters, we keep your data until you unsubscribe.
Development of services
We use the information we collect about our customers to develop and improve our products and services. This applies to our digital services, where we analyze user behaviour to develop how we present information and campaigns as well as design features. This also applies to the development of our products according to customers' needs and behaviours, and for example. to overcome deficiencies or increase security.
Mainly, we use anonymous or anonymized data at an aggregated level to perform this kind of analysis.
We use your information for your security during your stay. Your name and room number are included in a daily list produced for the security guards at the entrances to Club La Santa. The lists are destroyed daily.
Your personal information may also be processed to enable us to comply with the laws and regulations, such as regarding safety and reporting.
Club La Santa follows good practice within the travel industry. We store your personal information if it is necessary for processing. We store your data on local servers and secure Cloud Servers in EU, controlled by Microsoft Azure.
The same personal data can be stored in different locations for different purposes. Information that is removed from a system because it is no longer needed can possibly still be found in another system where it is stored under an agreement or for another purpose where there is still a need for personal information.
Club La Santa 'technical and organizational measures for the safe processing of your personal data
We continuously take steps to comply with the principles of "Integrated Data Protection and Data Protection by default." We evaluate ongoing risks in the personal information processing that takes place and take the necessary precautions to reduce the risk.
We continuously train our employees on data protection issues, and we have our own data protection officer in the Group. If you have any direct questions about how we work with the Personal Data Act (PDL) or the new EU Data Protection Rules (GDPR), you can send an email to DPO@clublasanta.com.
Disclosure of personal data
We use hosting solutions, Microsoft Office products and system services for our internal work provided by Microsoft Azure. This means that your personal information will be stored on a secure cloud server, placed within EU and controlled by Microsoft Azure. In this case, Microsoft Azure is our data processor and handles the information on our behalf and according to our instructions.
Agreement partners and IT providers
We use a wide range of IT services and IT systems in our company. In some of these, personal information is stored and administered. We respect your privacy and security for your data in all handling. Some systems are installed locally at Club La Santa SAU, and it is only our staff who have access to this information. In these cases, there is no transfer to third parties. However, some systems are cloud solutions or installed by the vendor, which means we pass on personal information to the vendor. In these cases, the supplier is our data processor and handles the information on our behalf and according to our instructions.
Internal IT systems
Internally we handle personal information in our customer database, in our order and sales systems, our customer service system and in a data management and data recovery system. These systems are designed to provide the services you have ordered from us and to handle questions and customer care in connection with the performance of these services. These systems can handle all the personal information we collect.
We use external vendors to handle payments. These providers have access to personal information such as names, addresses and payment information. This handling is necessary for us to be able to provide the services you have ordered from us.
We use external suppliers and contract partners for several online marketing services. It will often be necessary for us to provide certain aspects of personal information for these services to be performed.
Suppliers of travel-related services
To offer some of the services you have ordered from us, we use suppliers and contractors. It will often be necessary for us to provide personal information to them for the service to be performed.
Extradition to third countries
We use MailChimp for sending newsletters and storing subscriber information on the Newsletters. This data is stored on a secure server at MailChimp in the United States.
Necessary handling of personal data and handling based on consent
Personal data processing necessary to fulfil an agreement with you or to fulfil a legal obligation is permitted without consent. However, if we collect and handle your personal information for another purpose, you are required to accept the terms and conditions. You agree to the processing of your personal information when using our services at www.clublasanta.com, in our sports booking app, or in contact with our reservations department.
Withdrawal of consent
You may at any time choose to withdraw your consent by contacting us via the contact information found above in the "Contact Information" section. If you revoke your consent, we will delete your personal information and discontinue the processing that was covered by your consent.
It may happen that the same personal data is processed both based on the consent and because the information is required or due to other lawful grounds. This means that even if you withdraw your consent and the treatment based on the consent ends, personal information may still be stored with us for other purposes.
Right to get information about the personal information we have stored about you
If you want information about what information we have registered about you, use this form available on our website and submit it to firstname.lastname@example.org or to Irene Rojas, Club La Santa, Avenida Krogager, Tinajo 35560, Las Palmas, Spain. In the form, your rights and instructions for requesting your data are carefully described.
Right to control your personal information
You are entitled to request that the information about you be deleted, supplemented or corrected. You also have the right to request that the processing of your personal information is limited to specific purposes and cannot be used for direct advertising or so-called profiling.
What is a cookie?
A cookie is a small text file that is stored on your PC or mobile device when you visit a website and can be downloaded later from your PC from the website. Cookies are used partly to make the user experience of a website better by e.g. to remember your choices and settings and partly to develop the website and analyze your visit. Some features do not work without cookies.
What types of cookies do we use?
For certain features on Clublasanta.com or our other websites to work, for example, For the correct websites to be displayed to the correct person, the website uses so-called "session cookies". When you visit some of our websites, our websites equip your computer with a unique ID number for the unique visitors. These cookies have no expiration date and are temporarily stored in the user's computer until the browser closes. This cookie means that you do not have to fill in all the information again, for example, when you return to the ordering dialogue.
A persistent cookie has a specific duration or lifetime that determines how long it is stored on your computer or mobile device. Such cookies are saved until the lifetime expires or until you manually remove them.
A third-party cookie is a cookie that is placed on your device on behalf of anyone other than us. This can happen when we have suppliers who provide services for us, such as some analytics services or services that let you share our pages on social media.
You can set the handling of cookies in your browser
If you want to complain
Anyone who believes that a company violates PDL or any other privacy act may contact the Data Inspectorate. Read more on the Data Inspectorate's website.
You can contact us by email at email@example.com or firstname.lastname@example.org or you can send a letter to Club La Santa SAU, Avenida Krogager, 35560 Tinajo, Lanzarote, Spain.