1. Data controller
Data controller: SUN AND DREAMS SPAIN COMPANY, S.L
Tax ID: B09771296
Address: C/ Molinos de Gofio 10, 38300 La Orotava, Santa Cruz de Tenerife
Email: administracion@sunanddreams.es
Phone: (+34) 622 36 84 30
2. Purposes of processing
The personal data we collect through this website will be used for the following purposes:
- Managing holiday accommodation bookings.
- Responding to enquiries or requests made by users.
- Sending commercial information about our services (only with prior consent).
- Fulfilling legal and tax obligations arising from the contractual relationship.
3. Legal basis
The legal basis for processing your data is:
- Performance of a contract (managing bookings and requested services).
- The data subject’s consent (sending commercial communications).
- Compliance with legal obligations (for example, in tax or tourism matters).
4. Data retention
Your data will be kept for as long as necessary to fulfil the purpose for which it was collected and to comply with legal obligations.
Data used for commercial purposes will be kept until deletion is requested.
5. Disclosure of data
Your data will not be disclosed to third parties, except where legally required or necessary to provide the service (for example, to payment platforms, tourism authorities, or administrative agents under a data processing agreement).
6. User rights
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure when the data is no longer necessary
- Restrict or object to processing
- Request data portability
- Withdraw your consent at any time
To exercise your rights, you may send a written request, together with a copy of your ID card or equivalent document, to the controller’s postal address or email address.
If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es
7. Data security
SUN AND DREAMS SPAIN COMPANY, S.L applies the technical and organisational measures necessary to guarantee the security, integrity and confidentiality of personal data, preventing its loss, alteration or unauthorised access.
