In compliance with the principles of lawfulness and transparency and in order to provide the information to data subjects established in Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data (GDPR), we hereby inform you of the characteristics of the processing of personal data carried out under the responsibility of SWEET HOLIDAYS, S.A.:

Treatment:
(I) Attention to requests received through the Web.
(II) Commercial management.
(III) Accounting, tax and commercial management.
(IV) Administrative management and invoicing.
(V) Management of reservations and guest registrations.
(VI) Attention to users’ privacy rights.
(VII) Subscription to the Newsletter.
(VIII) Creation of the user account.
(IX) Loyalty program.

Purpose:
(I) Attention to requests received through the contact form on the Web page.
(II) Preparation and follow-up of budgets, management of commercial actions.
(III) Preparation of official accounting and calculation, filing and payment of taxes, preparation of business documents, such as balance sheets and reports.
(IV) Administrative management involving collections and payments and relationship with suppliers. Invoicing to customers.
(V) Provision of tourist accommodation and catering services. Communicate the legally established data to the State Security Forces and Corps.
(VI) To attend to the rights of data subjects related to personal data.
(VII) Sending of electronic newsletter and promotions.
(VIII) Access to the user panel to manage your reservations.
(IX) Receive discounts, exclusive offers and other benefits based on the number of points accumulated.

Legitimation:
(I), (VII), (VIII) and (IX) Consent of the data subject.
(II), (IV) and (V) Application of contractual and pre-contractual measures.
(III) and (VI) Legal obligation.

Conservation period:
The period necessary to provide the service or meet the request. In all cases, the period necessary to meet possible liabilities.

Addressees:
(V) State Security Forces and Corps.
(VI) Spanish Data Protection Agency.
(V) PushTech, WinHotel.

Exercise of rights:
You may exercise your right of access, rectification, deletion, limitation and opposition to processing, under the terms and conditions established in the regulations on the protection of personal data (RGPD), by sending a request by email to: info@slasuites.com or in writing to: Calle Urano, s/n, Puerto del Carmen, CP 35510, Las Palmas, indicating in any case the reference: “Data Protection” and clearly identifying the right you wish to exercise, and accompanying some document proving your identity, as well as to file a claim before the Spanish Data Protection Agency.