Privacy Policy - Finca de Uga

PRIVACY POLICY

1. OBJECT AND ACCEPTANCE

OUR PRIVACY POLICY AT A GLANCE

Who are we? We are FINCA DE UGA, S.L. and we process your data as the Controller. That means that we are responsible for how we use and protect your personal data.

What do we use your data for? We use the data that you have provided to us online or through any other means in order to handle your queries and suggestions.

Why do we have them? We are entitled to process your data for different reasons. When you fill in a form or send an e-mail in which you raise a query or suggestion, we have a legitimate interest in handling it.

Who do we share your data with? We will only share the data with those partner companies in order to deal with the requests received and provide our services or deliver the products to you, banking entities and bodies required by law. In no case do we sell your data to third parties.

What rights do you have? You have the right to access, rectify or erase your personal data. You also have the right to object to our use of data that you have previously authorised us to use, to data portability and not to be subject to automated individual decisions.

In the processing of your personal data, we apply the following principles to guarantee the highest protection for you:

Principle of lawfulness, fairness and transparency: We will always request your consent for the processing of your personal data for one or more specific purposes which we will inform you of in advance with absolute transparency.
Principle of data minimisation: We will only request data which is strictly necessary in relation to the purposes for which we require them. The minimum possible.
Principle of limitation of the storage period: the data will be kept for no longer than necessary for the purposes of the processing; depending on the purpose, we will inform you of the corresponding retention period. In the case of subscriptions, we will periodically review our lists and delete those records which have been inactive for a considerable time.
Principle of integrity and confidentiality: Your data will be processed in such a way as to ensure adequate security of personal data and to guarantee confidentiality. You should know that we take all necessary precautions to avoid unauthorised access to or misuse of our users’ data by third parties.

In this privacy policy you will find more detailed information about the use we make of the personal data of our customers, suppliers and users, and in general of all the persons who maintain contact with us, regardless of the means they have used to communicate (online form, by telephone or by e-mail, in person).

We like to be transparent about what we do with your personal data, that you understand the implications of the uses we make of it, and the rights you have in relation to your data. For this reason, we keep our Privacy Policy, Legal Notice and Cookies Policy updated; you can consult this information on this same website.

If you have any questions or would like more information about the privacy policy, you can continue reading the document.

1. WHO IS THE CONTROLLER OF YOUR DATA?

The controller of your data is FINCA DE UGA, S.L.:

Identity: FINCA DE UGA, S.L. – B91021220
Address: TIMANFAYA, 2, PLANTA 1 35510 – PUERTO DEL CARMEN, TIAS, LANZAROTE
Telephone: 928510175 EXT. 5010
E-mail: info@fincadeuga.com

FINCA DE UGA, S.L. informs the user that the data provided to us through browsing our website, the different data collection forms or when sending e-mails will be processed by FINCA DE UGA, S.L. and that said processing is recorded in the Record of Processing Activities managed by FINCA DE UGA, S.L. in accordance with the provisions of the GDPR.

2. FOR WHAT PURPOSES ARE YOUR PERSONAL DATA USED?

At www.fincadeuga.com, we process data both from users of our website and from third parties who maintain relations with us. In order to make it easier for you to know how we process your data, we have differentiated the purpose for which we use the data, the types of data and the legal basis depending on the category of persons whose data we process. Below, we classify the persons whose data we process according to the type of relationship they have with FINCA DE UGA, S.L.

WEB USERS

What data do we collect from users of the website?

Data of users who fill in any of the forms available: The personal data that FINCA DE UGA, S.L. requests includes:
– Identification data: name and surname, telephone number, postal and e-mail address
– Data relating to the request
Data of users who browse our website: Data provided by cookies and by Google Analytics.

For what purposes will we process your personal data?

When the user accepts our privacy policy, they authorise us to use the personal data supplied for the following processing:

Sending you the information and providing you with the service requested through the various forms available on our website.

How do we obtain your data?

We obtain your data through:

The form completed by the web user for the purpose indicated therein. The form is subject to acceptance of this privacy policy through the relevant checkbox.

What is the legal basis for the processing of your data?

The express consent of the user (Article 6.1.a. GDPR) given by completing the different forms, ticking the offers, activities and promotions of FINCA DE UGA, S.L. and of the sector that may be of interest to them is what legitimises the processing by FINCA DE UGA, S.L. The user may revoke the consent given at any time; however, if they revoke their consent, this will not affect any data processing carried out prior to the revocation.

The legitimate interest for profiling browsing habits and detecting preferences through the installation of cookies. The performance of a contract or the implementation of pre-contractual measures when the customer makes a request through the different forms available to the user on our website or requests information about the services provided by FINCA DE UGA, S.L.

• SUPPLIERS

What data do we collect from our suppliers?

a) Identification data of the supplier: The personal data that FINCA DE UGA, S.L. requests includes:
• Identification data: name and surname, telephone number, postal and e-mail address
• Employment and professional data
• Activities and business

How do we obtain your data?
We obtain your data through:

The signing of the contract between us, acceptance of the quotation submitted, receipt of invoices from the supplier and signing of the Data Processor contract, where applicable due to the service provided.

For what purposes will we process your personal data?

Managing the information relating to the data of our supplier companies of goods and services, as well as their representatives.
Maintaining the contractual relationship with our suppliers.
Managing payments and collections related to the contracts that bind us.

What is the legal basis for the processing of your data?

The performance of a pre-contract/contract in order to send you information and carry out the management inherent to the service provided, which would not be possible otherwise. The legitimate interest for the management of data relating to the representatives of the suppliers of FINCA DE UGA, S.L.

• CUSTOMERS

What data do we collect from our customers?

a) Data of customers who fill in any of the forms available at www.fincadeuga.com as well as at the physical establishment of FINCA DE UGA, S.L.

Identification data: name and surname, telephone number, postal and e-mail address
Data relating to the request

How do we obtain your data?

If you are an online customer we obtain your data through: The information request form completed by the user. The form is subject to acceptance of this privacy policy through the relevant checkbox. We obtain browsing data from the different cookies that the customer accepts when first accessing www.fincadeuga.com

If you are a face-to-face customer we obtain your data through:
• The customer registration form.
• Acceptance of the quotation submitted.
• The contract signed.

For what purposes will we process your personal data?

Generating and managing the documentation associated with your requests and purchases.
Providing you with information on offers, products and services related to your purchase.
Processing your booking or online purchase through our platform.

What is the legal basis for the processing of your data?

The performance of a pre-contract/contract in order to send you information and carry out the management inherent to the service provided or the product supplied, which would not be possible otherwise. The user may revoke the consent given at any time.

• SOCIAL MEDIA CONTACTS

What data do we collect?

a) Identification data on the Social Network: FINCA DE UGA, S.L. will not request data beyond those you have included in your user profile.

For what purposes will we process your personal data?

Replying to and managing your queries, requests or petitions.
Interacting with you while you are part of our community of followers.

What is the legal basis for the processing of your data?
The performance of a pre-contract/contract that links you with the corresponding social network and in accordance with its privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf
Instagram https://help.instagram.com/155833707900388
Twitter http://twitter.com/privacy
LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
Pinterest https://about.pinterest.com/es/privacy-policy
YouTube https://policies.google.com/privacy?hl=es&gl=es

www.fincadeuga.com will endeavour at all times to establish appropriate mechanisms in order to obtain the User’s consent for the installation of cookies when required. When a user accesses our website, a pop-up appears informing them of the existence of cookies and that, if they continue browsing our site, they give their consent to the installation of cookies. Acceptance of the installation of cookies implies acceptance of the storage of the IP address in the records of www.fincadeuga.com, together with the date of acceptance, for a period of one year, for the purpose of proving the consent given. You can obtain more information in our “Cookies Policy”.

3. FOR HOW LONG DO WE KEEP YOUR DATA?

• WEB USERS

Those data processed on the basis of the web user’s consent will be kept as long as they remain relevant for the purpose for which they were collected and consent has not been revoked.

Those data processed on the basis of legitimate interest will be kept for the time linked to the reason that motivated the collection of the data, always ensuring appropriate safeguards and respect for the rights and freedoms of the data subjects.

Those data processed on the basis of the performance of a contract or the implementation of pre-contractual measures will be kept for as long as the contractual relationship remains in force, as well as for such further period as is required by law.

The IP address obtained through cookies will be stored for a period of one year for the purpose of demonstrating the user’s consent. As for the retention period of cookies, you can obtain more information on our website in the “Cookies Policy” section.

• SUPPLIERS

Those data processed on the basis of a contract, as well as where part of the processing is legitimised by a legal obligation, will be kept for as long as the contractual relationship remains in force. The retention period for the data once this relationship has ended, or in the event that the processing is linked to a legal obligation, will be that which is legally established; the processing of the data may not be revoked by the data subject except in the cases of blocking provided for by law.

• CUSTOMERS

Those data processed on the basis of the customer’s consent will be kept as long as they remain relevant for the purpose for which they were collected and consent has not been revoked.

Those data processed on the basis of a contract, as well as where part of the processing is legitimised by a legal obligation, will be kept for as long as the contractual relationship remains in force. The retention period for the data once this relationship has ended, in the event that the processing is linked to a legal obligation, will be that which is established and the processing of the data may not be revoked by the data subject except in the cases of blocking provided for by law.

• SOCIAL MEDIA CONTACTS

The data processed from Social Media contacts will be kept as long as the user and FINCA DE UGA, S.L. remain linked on the social network. As the processing of the data does not depend directly on FINCA DE UGA, S.L., we can only consult or delete your data in a restricted way. We will process your data for as long as the user of the social network is linked to FINCA DE UGA, S.L. as “friends”, “likes”, “follows” or similar buttons.

As regards rectification of your data, restriction of the information or of those publications you share, it will not be the responsibility of FINCA DE UGA, S.L. to carry out such rectifications, but rather the user of the Social Network must do so by configuring their profile in accordance with the privacy policy of the Social Network itself.

Regardless of the legal basis that supported the collection of the data, it may be processed for scientific, historical or statistical research purposes, always implementing appropriate safeguards and respecting the rights and freedoms of the data subjects.

4. ADDITIONAL INFORMATION ABOUT DATA PROCESSING

Only persons over 14 years of age may provide data through our website and by e-mail. If you are under this age you must have the consent of your parents or legal guardians.

The User guarantees the authenticity and current validity of all data communicated to FINCA DE UGA, S.L. and declares that they are over 14 years of age, and will be solely responsible for any false or inaccurate statements made.

The personal data processed by FINCA DE UGA, S.L. may be mandatory or voluntary. Through the web forms, no special category data will be requested in order to guarantee your privacy. In the event that, in order to provide you with a service, it is necessary to collect special category data, they will be requested by another means. The data requested in the forms are:

Voluntary information is that which the user is not obliged to provide in order to contact us.
Fields marked with an asterisk (*) or with the word (required) in our forms are mandatory; refusal to provide them will make it impossible for us to provide the service or deal with your request.

In the event that you provide us with data of third parties, you state that you have their consent and undertake to pass on to them the information provided in this clause, thus exempting FINCA DE UGA, S.L. from any kind of obligation. Nevertheless, FINCA DE UGA, S.L. may carry out checks in order to verify that the third party has been informed, adopting the due diligence measures established in the data protection regulations.

5. TO WHICH RECIPIENTS WILL YOUR DATA BE COMMUNICATED?

Data will not be disclosed to third parties except in cases of legal obligation or where necessary in order to deal with your request.

The recipients to whom your data may be communicated include:
HOTEL FARIONES, S.L., HOTEL AGUERE, S.L., HOTEL PRINCESA YAIZA, S.A., GESTION ATLANTICA LANZAROTE S.L., CENTRO DEPORTIVO FARIONES, S.L., FINCA DE UGA, S.L.
Public Administrations and Bodies when required by tax, employment, Social Security or any other applicable regulations. Companies acting as data processors (providers of fraud detection and prevention, technological services, customer service, advertising and marketing services and, in general, third-party providers necessary for the provision of the services offered by FINCA DE UGA, S.L., such as providers of courier and transport services, etc.).

6. ARE INTERNATIONAL DATA TRANSFERS CARRIED OUT?

www.fincadeuga.com is hosted in Spain, a country that is part of the European Union, in the territory of the European Economic Area, or which complies with the guidelines set out in Articles 46 and 47 of the GDPR, therefore there will be no international transfers of data provided by users on the website.

Our website only accesses user data through the following means: Through the contact forms available to the user on the website.

International data transfers may also occur in connection with the aforementioned disclosures/communications, for which FINCA DE UGA, S.L. will use the tools provided in Article 46 and Article 49 of the GDPR as a guarantee for those transfers to countries that do not have an adequacy decision from the European Commission.

In any case, third parties with whom certain personal data are shared must have previously evidenced the adoption of appropriate technical and organisational measures for the correct protection of such data and transfers will only be made to third countries where there is a legally binding instrument in accordance with Articles 46 and following of the GDPR. By accepting this privacy policy, you accept that an international transfer of data may take place in accordance with the guarantees indicated.

If the requirements set out in the GDPR are not met, the data subject may give their consent to the international transfer or a contract may be executed in the interest of the data subject. Otherwise, authorisation must be requested from the Supervisory Authority.

We also inform you that some services provided by and for FINCA DE UGA, S.L. may involve the transfer of personal data to a third country outside the EU, in “cloud” services offered by some of the main international providers (for example, Google, Microsoft). In such services, compliance with the aforementioned requirements will be verified.

FINCA DE UGA, S.L. does not, under any circumstances, sell user data to third parties.

7. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

The user may exercise the following rights before FINCA DE UGA, S.L.:
a) Access to their personal data
b) Rectification when they are inaccurate or incomplete
c) Request erasure or cancellation of the data when, among other reasons, they are no longer necessary for the purposes for which they were collected
d) Object to their processing
e) Request restriction of the processing of their data when any of the conditions provided for in the regulations are met
f) Request data portability in the cases provided for in the regulations
g) Prevent being subject to automated decisions
h) Revoke the consent given

In order to exercise their rights, the user must send a written request indicating the right they wish to exercise and attach a document proving their identity and a postal or e-mail address for notification purposes. This request may be made either by post to: FINCA DE UGA, S.L. TIMANFAYA, 2, PLANTA 1 35510 – PUERTO DEL CARMEN, TIAS, LANZAROTE, or to the following e-mail address: .

FINCA DE UGA, S.L. must respond to the request to exercise rights within one month from receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month of receipt of the request, indicating the reasons for the delay.

Likewise, data subjects have the right to lodge a complaint with the competent Supervisory Authority (Spanish Data Protection Agency) when they consider that FINCA DE UGA, S.L. has infringed the rights recognised by the data protection regulations at www.aepd.es

8. ARE MY DATA SECURE?

FINCA DE UGA, S.L. has a current contract with the Hosting company IONOS SE for the hosting of its website. It is a European company and has the latest security systems.

In any case, FINCA DE UGA, S.L. guarantees the adoption of appropriate measures to ensure the confidential processing of your data, given their reserved nature, and undertakes to keep such data secret, processing them with the utmost confidentiality, and declares that it has implemented in its information system the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected via a secure protocol. Our website has an SSL certificate which allows that when any user visits our website and exchanges information with us, an encrypted connection is established.

9. LINKS TO OTHER WEBSITES

If you choose to leave our Website via links to other Websites not belonging to our entity, FINCA DE UGA, S.L. will not be responsible for the privacy policies of such Websites nor for the cookies that they may store on the user’s computer.

Date: 25/11/2025
Version: V.1.0