- Home
- Privacy policy
Privacy policy
We process your personal data to manage bookings and answer enquiries. We do not sell it or pass it on for commercial purposes. You can access, correct or delete your data by writing to fincaamorplatanico@gmail.com. This policy follows Regulation (EU) 2016/679 (GDPR) and Spanish data protection law.
Data controller
- Controller
- Sara Belén Santana González
- Tax ID
- 54106589D
- Address
- Calle Isla de Banahoare, 6, 2.º A — 35217 Valsequillo de Gran Canaria, Las Palmas, Spain
- Contact email
- fincaamorplatanico@gmail.com
What we use your data for and on what legal basis
- Managing your booking
- Name, email, phone, language, number of people and any accessibility needs or allergies. Legal basis: performance of a contract (Art. 6.1.b GDPR).
- Taking payment
- Payment is handled by Stripe. We never store your card details. Legal basis: performance of a contract.
- Answering your enquiries
- The data in the contact or private event form. Legal basis: consent (Art. 6.1.a).
- Tax and accounting obligations
- Invoicing data. Legal basis: legal obligation (Art. 6.1.c).
How long we keep your data
Booking data is kept for the duration of the relationship and afterwards for the statutory tax and accounting periods (six years). Contact form enquiries are kept for a maximum of one year from the last communication.
Who else processes your data
We work with the following processors, who only access what is strictly necessary:
- Supabase
- hosting of the bookings database (servers in the European Union).
- Stripe
- payment processing. This may involve an international data transfer, covered by the European Commission’s standard contractual clauses.
- Resend
- sending booking confirmation and reminder emails.
- Netlify
- website hosting.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to fincaamorplatanico@gmail.com, stating which right you wish to exercise.
You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe your request has not been handled properly.
Minors
Bookings must be made by adults. Children may take part in the experiences accompanied by a responsible adult.
