Privacy Policy

PERSONAL DATA PROTECTION

The personal data linked to this website comply with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Organic Law 3/2018 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, and other applicable data protection legislation.

Who is responsible for processing your data?

The data controller is MIRABAY, S.L., with NIF B76778794, located at Calle Landa Golf, 6, 38640, Arona (Santa Cruz de Tenerife), Spain. You may contact us via telephone at 981585700 or by email at info@garasuites.com.

What is the purpose and legal basis for processing your data, and how long will we retain it?

1. Data of individuals who contact us through the form or other communication channels:
   • We process your data to handle your requests for information, inquiries, suggestions, or complaints.
   • We are legally entitled to process this data based on our legitimate interest in managing communications necessary for our business activities.
   • Your data will be stored for as long as necessary to fulfill this purpose.
2. Data of individuals making a reservation:
   • Pre-contractual/contractual relationship management (reservation confirmation, modification, cancellation, payment, etc.). We process your data because a pre-contract/contract exists and we have a legitimate interest in its formalization and execution.
   • Accounting management. If payment is made, we process your data based on the legal obligation established in the Commercial Code of August 22, 1885.
   • Tax management. If payment is made, we process your data based on the legal obligation established in General Tax Law 58/2003, of December 17, and other applicable tax regulations.
   • Your data will be retained as long as necessary for these purposes and then blocked for the maximum statutory limitation period in accordance with applicable regulations.

Is it mandatory to provide your data?

Yes, your data is necessary to complete your reservation. Without it, the contract cannot be formalized or executed, nor can the corresponding invoice be issued.

Who will your data be shared with?

1. Data of individuals who contact us through the form or other communication channels:
   • Your data will not be shared with third parties but may be provided to our data processors if necessary for the proper delivery of contracted services.
2. Data of individuals making a reservation:
   a) If payment is made, the necessary data will be shared with the Tax Administration to comply with legal obligations.
   b) If payment is made, the necessary data will be shared with the payment gateway and banking entities to process transactions.
   c) If payment is made, the necessary data will be shared with auditors for financial audits.
   d) The necessary data will be shared with insurance companies, brokers, lawyers, courts, and tribunals for claims management and legal matters.
   e) The necessary data will be shared with our data processors to ensure the proper provision of contracted services.

Will your data be transferred to third countries?

When using Bookassist’s channel manager and booking engine, an international data transfer may occur to the U.S. or other countries where their subcontractors operate. These transfers will be carried out under standard contractual clauses and alternative guarantees. You can obtain more information at:
Bookassist Data Processing and Security Terms.

What are your rights regarding your data?

• Access: Right to know whether we process your data, what data we have, its purpose, retention period, source, and whether it has been shared with third parties.
• Rectification: Right to request correction of inaccurate or incomplete personal data.
• Erasure: Right to request deletion of personal data when it is inappropriate, excessive, or no longer needed, including the “right to be forgotten.”
• Objection: Right to object, under certain circumstances, to the processing of your personal data or to request that processing cease.
• Restriction of Processing: Right to request that processing be limited to mere data retention in legally defined circumstances.
• Portability: Right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller when technically feasible.

Where can you exercise your rights?

You can exercise your rights by submitting a written request to Calle Landa Golf, 6, 38640, Arona (Santa Cruz de Tenerife), Spain, or by emailing info@garasuites.com. MIRABAY, S.L. provides forms for exercising your rights, available at the address or email mentioned above. More information is available at www.aepd.es.

Do you have the right to file a complaint with the Supervisory Authority?

If your rights are not respected, you may file a complaint with the Spanish Data Protection Agency at Calle Jorge Juan, 6, 28001, Madrid, or through its online portal: https://sedeagpd.gob. In both cases, you must include relevant documentation.