Privacy policy

OUR PRIVACY POLICY AT A GLANCE

Who are we? We are EXPLOTACIONES SANTONEL, S.L. and we process your data as the Data Controller. This means we are responsible for how we use and protect your personal data.

What do we use your data for? We use the data you have provided online or through any other means to respond to your inquiries and suggestions, provide you with services or deliver requested products, register you as a user, send you personalized communications to which you have subscribed, manage comments on our blog, and process your reservation or online purchase.

Why do we have your data? We are authorized to process your data for different reasons. When you fill out a form or send an email with an inquiry or suggestion, we have a legitimate interest in addressing it. When you register on our website or make a reservation or purchase, we need to execute the contract you accept with us, just as we have the legal obligation to issue an invoice containing your data when the service or purchase is completed. We are also authorized by your consent when you grant us permission to send you our newsletter and personalized offers.

With whom do we share your data? We only share your data with partner companies to handle received requests, provide our services, or deliver products, as well as with banking entities and legally obligated organizations. We do not sell your data to third parties under any circumstances.

What rights do you have? You have the right to access, rectify, or delete your personal data. You also have the right to object to us using data you have previously authorized us to use, to transfer your data, and not to be subject to automated individual decisions.

When processing your personal data, we apply the following principles to ensure the highest level of protection for you:

• Principle of lawfulness, fairness, and transparency: We will always require your consent for processing your personal data for one or more specific purposes, which we will inform you about in advance with complete transparency.
• Principle of data minimization: We will only request the data that is strictly necessary for the purposes we require it for—the bare minimum.
• Principle of storage limitation: Data will be kept no longer than necessary for the purposes of processing. Depending on the purpose, we will inform you of the corresponding retention period. For subscriptions, we periodically review our lists and delete records that have been inactive for a significant time.
• Principle of integrity and confidentiality: Your data will be processed in a way that ensures appropriate security and confidentiality. You should know that we take all necessary precautions to prevent unauthorized access or misuse of user data by third parties.

In this privacy policy, you will find more detailed information about how we use the personal data of our customers, suppliers, and users, as well as all individuals who contact us, regardless of the communication method used (online form, phone, email, or in person).

We like to be transparent about what we do with your personal data, help you understand the implications of how we use it, and inform you of your rights regarding your data. For this reason, we keep our Privacy Policy, Legal Notice, and Cookie Policy updated, which you can review on this website.

If you have any questions or would like more information about the privacy policy, you can continue reading the document.

EXPLOTACIONES SANTONEL, S.L. is committed to complying with the current legislation on personal data processing. Through this privacy policy, EXPLOTACIONES SANTONEL, S.L., in accordance with the requirements set out in the GDPR and the LOPDGDD, informs users and individuals whose data it processes about:

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

The Data Controller for your data is EXPLOTACIONES SANTONEL, S.L.:

Identity	EXPLOTACIONES SANTONEL, S.L. – B38588760
Address	Calle Fernando López Arvelo, 1, 38660 – Costa Adeje (S/C de Tenerife)
Phone	(34) 922 97 51 54
Fax	922160909
Website	www.zambraskybar.com
Email	proteccciondedatos@grupofedola.com
Data Protection Officer

EXPLOTACIONES SANTONEL, S.L. informs users that the data provided through website navigation, various data collection forms, or emails will be processed by EXPLOTACIONES SANTONEL, S.L. and that such processing is recorded in the Register of Processing Activities managed by EXPLOTACIONES SANTONEL, S.L. in accordance with the GDPR.

2. WHAT ARE YOUR PERSONAL DATA USED FOR?

On www.zambraskybar.com, we process data from both users of our website and third parties who maintain relationships with us. To help you understand how we process your data, we have differentiated the purposes for which we use data, the types of data, and the legal basis depending on the category of individuals whose data we process. Below, we classify the individuals whose data we process based on the type of relationship they maintain with EXPLOTACIONES SANTONEL, S.L.

1. Website Users

What data do we collect from website users?

1. Data from users who fill out any of the available forms: The personal data requested by EXPLOTACIONES SANTONEL, S.L. include:

• Identification data: Name, surname, phone number, postal address, and email.
• Request-related data.

1. Data from users who subscribe to the newsletter or want to receive commercial communications and information:

• Identification data: Name and surname, email address.

1. Data from users who register on our platform:

• Identification data: Name, surname, postal and email address, phone number, billing address.

1. Data from users browsing our website: Data provided by cookies and Google Analytics.

1. Data from users who comment on our blog.

What are the purposes of processing your personal data?

When the user accepts our privacy policy, they authorize us to use their personal data for the following purposes:

• To send information and provide the service requested through various forms available on our website.
• To organize, communicate, and hold events or similar activities.
• To conduct statistical studies to evaluate the success of campaigns or the ways users discovered a service provided by EXPLOTACIONES SANTONEL, S.L. These data are collected solely for statistical purposes and are for internal use by EXPLOTACIONES SANTONEL, S.L.
• To manage comments on our blog.
• To send the newsletter when subscribed, including events, activities, and promotions of EXPLOTACIONES SANTONEL, S.L. and the sector of interest.
• To send commercial communications about offers, activities, and promotions of EXPLOTACIONES SANTONEL, S.L. and the sector of interest via conventional or electronic means if the user has checked the box to receive such information.

How do we obtain your data?

We obtain your data through:

• The form filled out by the website user for the specified purpose. The form is subject to acceptance of this privacy policy through the indicated checkbox.
• Browsing data obtained from the various cookies that the user accepts upon first accessing www.zambraskybar.com.

What is the legal basis for processing your data?

The express consent of the user (Article 6.1.a. GDPR) is given when filling out the various forms, marking the box to receive newsletters and commercial communications, information about offers, activities, and promotions of EXPLOTACIONES SANTONEL, S.L. and the sector of interest, and participating in our blog. The user may revoke their consent at any time; however, this does not affect the legality of data processing conducted before consent was withdrawn.

Legitimate interest in profiling browsing behavior and detecting preferences through the installation of cookies.

The execution of a contract or pre-contractual measures when the client submits a request through the different forms available on our website or requests information about services provided by EXPLOTACIONES SANTONEL, S.L.

2. Suppliers

What data do we collect from our suppliers?

1. Supplier identification data: The personal data requested by EXPLOTACIONES SANTONEL, S.L. include:

• Identification data: Name, surname, phone number, postal address, and email.
• Employment and professional data.
• Business and commercial activity data.

How do we obtain your data?

We obtain your data through:

• The signing of a contract that binds us, acceptance of the presented budget, receipt of invoices from the supplier, and signing of a Data Processing Agreement if required by the provided service.

What are the purposes of processing your personal data?

• Managing information regarding our supplier companies and their representatives.
• Maintaining contractual relationships with our suppliers.
• Managing payments and collections related to contracts binding us.

What is the legal basis for processing your data?

The execution of a pre-contract/contract for sending information and managing the provided service, which would be impossible without this data.

Legitimate interest in managing the data of representatives of EXPLOTACIONES SANTONEL, S.L. suppliers.

3. Customers

What data do we collect from our customers?

1. Customer data collected through any forms available on www.zambraskybar.com and in the physical establishment of EXPLOTACIONES SANTONEL, S.L.

• Identification data: Name, surname, phone number, postal address, and email.
• Request-related data.

1. Customer data collected during platform registration:

• Identification data: Name, surname, postal address, email, phone number, billing address.

1. Data from customers making reservations or placing orders in our physical establishment:

• Identification data: Name, surname, postal address, email, phone number, billing address.

1. Data from customers obtained through contracts and quotations.

1. Data from customers making purchases online or in person:

• Identification data: Title, name, surname, postal address, email, phone number, billing address.
• Transaction data: Purchased products/services, payment method, invoice, or purchase receipt.

How do we obtain your data?

If you are an online customer, we obtain your data through:

• The form the user fills out to request information, a quote, or an order, or to complete an online purchase. This form is subject to acceptance of this privacy policy through the indicated checkbox.
• Browsing data obtained from cookies that the customer accepts upon first accessing www.zambraskybar.com.

If you are an in-store customer, we obtain your data through:

• The customer registration form.
• Acceptance of the presented budget.
• The signed contract.

What are the purposes of processing your personal data?

• Generating and managing documentation associated with your requests and purchases.
• Providing information about offers, products, and services related to your purchase.
• Processing your reservation or online purchase through our platform.

What is the legal basis for processing your data?

The execution of a pre-contract/contract for sending information and managing the provided service or delivered product, which would be impossible otherwise.

The consent of the user for sending newsletters and commercial communications regarding offers, activities, and promotions of EXPLOTACIONES SANTONEL, S.L. and related sectors of interest, as well as managing our blog. The user may revoke their consent at any time.

The legitimate interest in sending information about exclusive promotions, the latest news, and personalized information tailored to the user’s profile, as well as for sending satisfaction surveys about purchased products or services.

4. Job Applicants and Candidates

What data do we collect from job applicants?

1. Data requested in the “Work with us” form by EXPLOTACIONES SANTONEL, S.L.:

• Identification data: Name, surname, phone number, postal address, and email.
• Academic and professional data.
• Data included by the candidate in attached documents.

How do we obtain your data?

We obtain your data through:

• Submission of a résumé at our facilities or filling out the “Work with us” form on our website.

What are the purposes of processing your personal data?

The personal data provided by candidates is used exclusively for ongoing or future selection processes if the data is intended for our employment pool.

What is the legal basis for processing your data?

The consent of the user by including their data and résumé in the EXPLOTACIONES SANTONEL, S.L. website to participate in active selection processes as well as future processes while not opposing data processing.

5. Social Media Contacts

What data do we collect?

1. Identification data on the social network: EXPLOTACIONES SANTONEL, S.L. will not request data beyond what you have included in your user profile.

What are the purposes of processing your personal data?

• Responding to and managing your inquiries, requests, or petitions.
• Engaging with you while you are part of our follower community.

What is the legal basis for processing your data?

The execution of a pre-contract/contract that binds you to the respective social network and in accordance with its privacy policies:

• Facebook: http://www.facebook.com/policy.php?ref=pf
• Instagram: https://help.instagram.com/155833707900388
• Twitter: http://twitter.com/privacy
• LinkedIn: http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
• Pinterest: https://about.pinterest.com/es/privacy-policy
• YouTube: https://policies.google.com/privacy?hl=en

www.zambraskybar.com will always attempt to establish appropriate mechanisms to obtain user consent for the installation of cookies when required. When a user accesses our website, a pop-up notification informs them of the existence of cookies and that continuing to browse implies consent to their installation. Acceptance of cookies entails consent to store the IP address in www.zambraskybar.com’s records, along with the acceptance date, for a period of one year to demonstrate given consent. More information can be found in our “Cookie Policy.”

3. HOW LONG DO WE KEEP YOUR DATA?

1. Website Users

• Data processed based on the user’s consent will be retained as long as it remains relevant for the purpose for which it was collected and the consent is not withdrawn.
• Data processed based on legitimate interest will be retained as long as the reason for collection persists, always ensuring appropriate guarantees and respecting users’ rights and freedoms.
• Data processed based on contract execution or pre-contractual measures will be retained for the duration of the contractual relationship and for the legally required period afterward.
• The IP address obtained through cookies will be retained for one year to demonstrate user consent.
• For cookie retention periods, refer to our “Cookie Policy” on the website.

2. Suppliers

• Data processed based on legitimate interest will be retained as long as the purpose for collection remains valid, ensuring adequate guarantees and respecting users’ rights and freedoms.
• Data processed under contract execution or legal obligations will be kept for the duration of the contractual relationship and for the legally established period afterward.

3. Customers

• Data processed based on customer consent will be retained as long as it remains relevant for the purpose for which it was collected and the consent is not withdrawn.
• Data processed based on legitimate interest will be retained for the time related to the reason for collection, ensuring adequate guarantees and respecting users’ rights and freedoms.
• Data processed under contract execution or legal obligations will be kept for the duration of the contractual relationship and for the legally established period afterward.

4. Job Applicants and Candidates

• Data processed based on the job applicant’s consent will be retained while the selection process remains open.
• If the application is for future job openings, data retention will not exceed one year, after which the CV will be deleted unless the applicant requests an extension.

5. Social Media Contacts

• Data from social media contacts will be retained as long as the user and EXPLOTACIONES SANTONEL, S.L. maintain a connection on the respective social network.

Regardless of the legal basis for collecting data, it may be processed for scientific, historical, or statistical research purposes, always implementing the necessary guarantees and respecting the rights and freedoms of data subjects.

—

6. ADDITIONAL INFORMATION ON DATA PROCESSING

Only users over 14 years old may provide data through our website and email. If you are under this age, you must have parental or legal guardian consent.

Users guarantee the authenticity and accuracy of all data provided to EXPLOTACIONES SANTONEL, S.L. and confirm they are over 14 years old. They will be solely responsible for any false or inaccurate statements made.

For service reservations or online purchases, the customer must be at least 18 years old, the legal age for entering into contracts under the Civil Code.

Personal data processed by EXPLOTACIONES SANTONEL, S.L. may be mandatory or voluntary. Through our web forms, we do not request special category data to ensure privacy. If special category data is necessary to provide a service, it will be requested separately.

Fields marked with an asterisk (*) or labeled as (required) in our forms must be completed. Failure to provide this information may result in an inability to provide the requested service.

If you provide third-party data, you declare you have their consent and commit to informing them about this privacy policy. However, EXPLOTACIONES SANTONEL, S.L. may conduct verification checks to confirm that the third party has been informed.

—

7. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

You can exercise the following rights before EXPLOTACIONES SANTONEL, S.L.:

1. Access your personal data.
2. Correct inaccurate or incomplete data.
3. Request the deletion of data when, among other reasons, they are no longer necessary for the purposes they were collected.
4. Object to their processing.
5. Request restriction of data processing when certain conditions established by law apply.
6. Request data portability where applicable.
7. Prevent automated decision-making based on your data.
8. Revoke consent granted.

To exercise your rights, send a written request indicating the right you wish to exercise, along with proof of identity, to:

• Postal address: EXPLOTACIONES SANTONEL, S.L., Calle Fernando López Arvelo, 1, 38660 – Costa Adeje (S/C de Tenerife).
• Email: proteccciondedatos@grupofedola.com.

Users may also contact the Data Protection Officer at dpo@gfhoteles.com.

EXPLOTACIONES SANTONEL, S.L. will respond within one month of receiving the request. This period may be extended by two additional months if necessary due to complexity or the number of requests.

If users believe their rights have been violated, they may file a complaint with the competent supervisory authority (Spanish Data Protection Agency): www.aepd.es.

—

8. SECURITY MEASURES

EXPLOTACIONES SANTONEL, S.L. implements security measures to protect personal data and prevent unauthorized access, alteration, or loss.

All collected data is secured using SSL encryption.

9. LINKS TO OTHER WEBSITES

If you leave our site via external links, EXPLOTACIONES SANTONEL, S.L. is not responsible for those sites’ privacy policies or cookies.

Date: March 11, 2025

Version: V.1.0