1. DATA CONTROLLER
- Owner / Corporate Name: APARTAMENTOS LIDO S.L.
- N.I.F. / C.I.F. (Tax ID): B54232434
- Registered Office: Alcalde Manuel Catalán Chana 16 - 03503 Benidorm Spain
- Contact Phone: 965 074 050
- Email: info@lido-benidorm.es
- Website: https://www.lido-benidorm.es
- Activity: Rental and management of tourist accommodation.
2. ORIGEN AND TYPES OF DATA PROCESSED
The personal data processed by the Owner comes directly from the User through the forms provided on the Website (contact forms, booking engine, customer registration, or subscriptions) or through website navigation.The categories of data that may be requested are:
- Identification and contact data: First name, last name, DNI/NIE/Passport, postal address, email address, phone number.
- Booking and stay data: Check-in/check-out dates, number of guests, special requests.
- Economic and billing data: Bank or credit card details (processed through secure payment gateways).
- Navigation data: IP address, data derived from cookies (in accordance with the Cookies Policy).
3. PURPOSES AND LEGAL BASIS FOR PROCESSING
| Purpose of processing | Data processed | Legal basis |
|---|---|---|
| Booking management and contractual execution: Processing booking requests, confirmations, payments, billing, and managing the stay in the tourist accommodations. | Identification, contact, economic, and booking data. | Execution of the tourist rental contract or application of pre-contractual measures (Art. 6.1.b GDPR) |
| Compliance with traveler registration obligations: Submission of traveler entry forms to the Law Enforcement Agencies and State Security Forces (Ministry of the Interior / SES.HOSPEDAJES Platform). | Identification data from identity documents and stay details. | Compliance with a legal obligation (Royal Decree 933/2021 and Organic Law 4/2015) (Art. 6.1.c GDPR) |
| Customer service and information: Responding to information requests, inquiries, or quotes submitted via the contact form or email. | Identification and contact data. | Legitimate interest of the Owner in handling user requests (Art. 6.1.f GDPR) or express consent (Art. 6.1.a GDPR). |
| Sending commercial communications: Delivering offers, promotions, or news related to similar vacation rental services. | Contact details (email, phone). | User consent (Art. 6.1.a GDPR) or legitimate interest for existing customers (Art. 21.2 LSSI). |
| Fraud prevention and website security: Ensuring technical security and preventing unauthorized access or illicit use of the Website. | Navigation data and IP. | Legitimate interest in ensuring network and information security (Art. 6.1.f GDPR). |
4. DATA RETENTION
Personal data will be kept only for the time necessary to fulfill the purposes for which it was collected:- Booking and contract data: Will be kept for the duration of the contractual relationship and subsequently blocked during the limitation periods of legal, tax, and commercial liabilities (between 4 and 6 years).
- Traveler entry forms (Hospitality Registry): Will be kept for the mandatory legal period established by public safety regulations (3 years in accordance with RD 933/2021).
- Inquiries and information: Will be kept until the submitted inquiry is resolved.
- Sending commercial communications: Will be processed until the User withdraws their consent or requests to unsubscribe from the service.
5. RECIPIENTS AND DATA TRANSFER
User data will not be transferred to third parties, except in the following situations:- Legal obligation: To the State Security Forces and Bodies (National Police, Civil Guard, or regional police forces) for the fulfillment of the mandatory traveler registry, as well as to the Tax Agency and competent judicial bodies.
- Data Processors: Service providers essential for the company's operations (hotel management IT platforms/PMS, payment gateways, web hosting, agencies, and legal advisors). These providers sign the corresponding data processing agreements in compliance with GDPR regulations.
- International transfers: If any provider whose servers are located outside the European Economic Area (EEA) is used, the Owner guarantees the adoption of appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission or adherence to the EU-US Data Privacy Framework).
6. MINORS' DATA
Access and booking through the Website are reserved for individuals over 18 years of age.Regarding the mandatory registration of traveler forms for accompanying minors, the data will be provided directly by their parents, tutors, or legal representatives at the time of check-in.
7. USERS' RIGHTS
In accordance with the GDPR and LOPDGDD, the User may exercise the following rights:- Access: Obtain confirmation as to whether the Owner is processing their personal data.
- Rectification: Request the modification of inaccurate or incomplete data.
- Erasure ("Right to be forgotten"): Request the deletion of their data when it is no longer necessary for the purposes for which it was collected.
- Objection: Object to the processing of their data for personal reasons or for sending advertising.
- Restriction of processing: Request that the processing of their data be restricted in certain cases.
- Portability: Receive their personal data in a structured, commonly used format to transmit it to another controller.
- Withdrawal of consent: Revoke the consent granted at any time, without affecting the lawfulness of the processing prior to its withdrawal.
How to exercise these rights?
The User can send a written request enclosing a copy of their identity document (DNI, NIE, or Passport) to:
Email: info@lido-benidorm.es
Postal address: Alcalde Manuel Catalán Chana 16, 11F - 03503 Benidorm Spain.
If you consider that your rights have not been properly addressed, the User has the right to file a complaint with the Spanish Data Protection Agency (AEPD) through its electronic office (www.aepd.es) or postal address (C/ Jorge Juan, 6, 28001 - Madrid).