Privacy Policy

This privacy statement was last updated on 8. March 2026 and applies to citizens and legal permanent residents of the European Economic Area and Switzerland.

In this privacy statement, we explain what we do with the data we obtain about you via https://www.apartment-lalaguna.com/en/. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

• we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
• we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
• we first request your explicit consent to process your personal data in cases requiring your consent;
• we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
• we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)

1.1 Contact - Through phone, mail, email and/or webforms

For this purpose we use the following data:

• A first and last name
• A home or other physical address, including street name and name of a city or town
• An email address
• A telephone number
• IP Address

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We retain this data until the service is terminated.

1.2 To support services or products that a customer wants to buy or has purchased

For this purpose we use the following data:

• A first and last name
• Account name or alias
• A home or other physical address, including street name and name of a city or town
• An email address
• A telephone number
• IP Address
• Marital status
• Date of birth
• Sex

The basis on which we may process these data is:

It is necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party.

Retention period

We retain this data until the service is terminated.

2. Sharing with other parties

We only share this data with processors and with other third parties for which consent must be obtained.

Processors

Name: Smoobu GmbH
Country: Deutschland
Purpose: Buchung der Unterkünfte

Third parties

Name: Scannel IT, K. Bernhard
Country: Deutschland
Purpose: Webhosting
Data: IP-Adressen, Formulardaten, Mailverkehr, Serverzugriff Name: wagnergraphics | Torsten Wagner
Country: Deutschland
Purpose: Webdesign, Administration
Data: IP-Adressen, Formulardaten, Mailverkehr, Serverzugriff

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy. 

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorized access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

7. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

8. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. You have the following rights:

• You have the right to know why your personal data is needed, what will happen to it, and how long it will be retained for.
• Right of access: You have the right to access your personal data that is known to us.
• Right to rectification: you have the right to supplement, correct, have deleted or blocked your personal data whenever you wish.
• If you give us your consent to process your data, you have the right to revoke that consent and to have your personal data deleted.
• Right to transfer your data: you have the right to request all your personal data from the controller and transfer it in its entirety to another controller.
• Right to object: you may object to the processing of your data. We comply with this, unless there are justified grounds for processing.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

9. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the Data Protection Authority.

10. Contact details

Apartamentos La Laguna Kuehnel S.L.
Calle Ancha 14
Gebäude 44
29520 Fuente de Piedra
Spain
Website: https://www.apartment-lalaguna.com/en/
Email: apartamentos.lalaguna@ex.comoutlook.com
Phone number: +34 (0) 699 898 138

Annex

Complianz | The Privacy Suite for WordPress

This website uses the Privacy Suite for WordPress from Complianz to collect consent records. For this functionality, your IP address is anonymized and stored in our database. Further information can be found in the Complianz privacy policy.

 

WP Compress

The content of this website, including images, JavaScript files and other media files, is partially loaded via the servers of WP Compress. WP Compress uses BunnyCDN to improve the loading times of our website. The service optimizes the file size of media files and thus increases performance.

Data protection and GDPR compliance

WP Compress uses BunnyCDN, an EU-based CDN provider with servers in Germany and elsewhere, to optimize the loading times of the website. No personal data is permanently stored or processed.

The following points are important:

• No recording of IP addresses: Incoming IP addresses are pseudonymized and anonymized before any processing, so that no conclusions can be drawn about individual users. In fact, IP addresses are not stored or processed further.
• Anonymized data processing: Only anonymized data is processed in real time, such as browser type, screen size and the nearest server location. This data does not allow users to be identified.
• No use of cookies: WP Compress and BunnyCDN do not use cookies for user identification or tracking.
• Data storage within the EU: All data processing takes place within the EU in order to meet the requirements of the GDPR.
• Order processing: A corresponding contract for order processing with BunnyCDN is in place.

Legal basis of the processing

This data is processed on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in order to optimize the performance of our website and ensure the best possible user experience.

Rights of data subjects

You have the right to information about your personal data processed by us and to rectification, erasure or restriction of processing. You can also object to the processing and assert your right to data portability.

For more information on the privacy practices of WP Compress and BunnyCDN, please refer to their WP Compress privacy policy and BunnyCDN's GDPR notice.

 

WPML

WPML uses cookies to determine the current language of the visitor, the last language visited and the language of users who have logged in. While you are using the plugin, WPML will share the data relating to the page via the installer. No data is shared by the user themselves.

 

Booking module (Smoobu)

Booking module (Smoobu) On our website, we integrate the software of the provider Smoobu to display availability and process bookings. Smoobu GmbH, Falckensteinstr. 48, 10997 Berlin (hereinafter referred to as "Smoobu").

1. technical integration when calling up the page

The booking module is technically integrated into our WordPress site via a so-called widget (e.g. as an iFrame). When you call up a page that contains this booking module, your browser establishes a direct connection to the Smoobu servers in order to load the calendar and the input mask. In particular, it is technically necessary for your IP address and information about your browser/end device (e.g. browser type/version, operating system) and technical access data (e.g. date/time, referrer URL if applicable) to be transmitted to Smoobu and processed there to deliver the widget.

This processing is based on our legitimate interest in a functional and user-friendly presentation of our booking offer (Art. 6 para. 1 lit. f GDPR).

Note on cookies/similar technologies: Cookies or similar technologies (e.g. local storage) may be used as part of the booking module. Insofar as these are technically necessary, this is done on the basis of § Section 25 (2) TTDSG . Insofar as non-technically necessary cookies/similar technologies are used, this is only done on the basis of your consent (Art. 6 para. 1 lit. a GDPR in conjunction with Art. 6 para. 1 lit. b GDPR). § Section 25 (1) TTDSG ), which we obtain via our consent tool.

2. booking process and data processing

In order to make a booking via the module, it is necessary to provide contact details and travel-related data. The data you enter in the booking screen (including any notes) is personal data. This may include in particular Name, e-mail address, telephone number, address if applicable, travel period, number of guests and messages/requests.

We process this data in order to process the booking, provide the requested service (e.g. prepare the rental agreement) and to provide you with relevant information about your stay.

Mandatory information that is absolutely necessary for processing the contract is usually marked with an asterisk (*). Additional information is voluntary. If you do not provide the mandatory information, it may not be possible to complete the booking.

The legal basis for the processing of the data that you enter in the context of a specific booking request is the fulfillment of a contract with you or the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

3. cooperation with Smoobu (order processing)

The recipient of the data processed as part of the booking module is Smoobu as our technical service provider. Smoobu processes the data as a processor in accordance with Art. 28 GDPR.

We have concluded a corresponding contract with Smoobu for order processing. This contract ensures that Smoobu processes user data only in accordance with our instructions and in compliance with European data protection standards. Smoobu may use sub-processors (e.g. for hosting/IT operations) to provide the service. In principle, processing takes place in the EU/EEA.

Further information on data protection at Smoobu can be found in the provider's privacy policy at: https://www.smoobu.com/de/datenschutz/

4. storage duration

We generally only store personal data from bookings/enquiries for as long as is necessary for the processing and handling of the booking and, if applicable, beyond this period within the scope of statutory retention periods.

 

Independent Analytics

On our website we use the Independent Analytics plugin to analyze visitor behavior in a privacy-compliant manner. This plugin allows us to track interactions on our site without using cookies or storing personally identifiable information (PII).

Data protection and compliance:

• Cookie-less tracking: The plugin collects data about visits to our website without setting cookies. This means that no consent is required for the use of cookies, which facilitates compliance with the General Data Protection Regulation (GDPR).
• No storage of personally identifiable information: 
• No data is stored that could be used to identify a person. Name, address, e-mail address, telephone number, date of birth, social security number
• In this way, we respect the privacy of our users and act in accordance with the applicable data protection regulations.
• No external data transfer: All data collected is stored securely on our own server and is not passed on to third parties. This ensures that we have full control over our analysis data.

By using the Independent Analytics plugin, we can gain valuable insights into user behavior and at the same time ensure that we respect the privacy of our visitors. Further information on data protection and how the plugin works can be found in our detailed privacy policy.

 

Spam protection through Altcha

To protect the forms on our website (e.g. contact forms, comments) from automated access, spam and misuse by so-called bots, we use the captcha/bot protection system Altcha.

Altcha is a privacy-friendly alternative to conventional captchas. It uses a proof-of-work process in which your browser solves a small math problem to prove that it is a human visitor.

Data processing

According to our configuration, Altcha does not set any cookies, does not perform any tracking and does not carry out any fingerprinting. The check takes place exclusively on our server; no data is transmitted to the provider/developer of Altcha or other third parties.

In particular, your IP address and technically required connection data (e.g. time of the request and headers transmitted by the browser) are processed for the technical execution of the check.

Storage duration

Altcha does not store any personal data permanently as part of the audit. Irrespective of this, IP addresses and access data may be stored in server log files (depending on the hosting/server configuration) for a limited period of time to ensure technical operation and IT security and then deleted or anonymized.

Legal basis

The processing is carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR to ensure the security and functionality of our website and to protect us from misuse.

 

Map (Google Maps)

We integrate the map material of the "Google Maps" service on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This enables us to show you interactive maps directly on the website and makes it easier for you to find your way to us or search for a location, for example.

Legal basis and consent

The Google Maps service is deactivated (blocked) on our website by default. A connection to Google's servers and the associated data transfer will only take place if you have given your express consent to this via our consent management tool (cookie banner) or if you activate the blocked map by clicking directly on it. The legal basis for the processing of your data is therefore your consent in accordance with  Art. 6 para. 1 lit. a GDPR . You can revoke your consent at any time with effect for the future by accessing the cookie settings on our website and changing your selection.

Processed data

By activating the map, a connection to Google is established. In particular, your IP address, information about your browser and end device (e.g. device type, operating system, referrer URL) as well as the date and time of the request may be processed. If you use functions such as the route planner, the location or address data you enter will also be processed. We have no influence on the scope and further use of the data collected by Google.

Integration of Google Fonts and other resources

In order for the map material from Google Maps to be displayed correctly (e.g. street names and symbols), the service automatically loads the necessary resources, in particular fonts (so-called Google Fonts), directly from Google's servers when activated. Your IP address is also transmitted to Google for the purpose of providing this content.

Third country transfer (USA)

By using Google Maps, data may be transferred to the parent company Google LLC in the USA. The USA is generally considered a third country with a level of data protection that is not fully equivalent to that of the EU.

However, Google LLC is certified according to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Based on this adequacy decision by the EU Commission, the transfer of data to certified companies in the USA is permitted.

In addition, Google relies on standard contractual clauses (SCC) of the EU Commission for certain data transfers in order to ensure an adequate level of data protection.

For more information on data processing by Google, please refer to Google's privacy policy: GooglePrivacy Policy - Privacy & Terms - Google.

 

Popup Maker

Cookies

Popup Maker uses cookies for most pop-ups. The main function is to prevent your users from getting annoyed by seeing the same pop-up repeatedly.

This may result in cookies being stored for a longer period of time. These are not tracking cookies, which are only used by our pop-ups.

<strong class="privacy-policy-tutorial">Suggested text: </strong>We use anonymous cookies to prevent users from seeing the same pop-up repeatedly in order to provide our users with a more pleasant experience while delivering time-sensitive messages.

Analyzes

Popup Maker anonymously records pop-up calls and conversions.

Where we send your data

Popup Maker does not send any user data out of your website by default.

If you use our subscription forms to send data with the extension of a third-party provider such as Mailchimp, user information may be shared with these external services. These services may be located abroad.

 

Web hosting and technical administration

Nature and purpose of processing

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, meta and communication data, contact data, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).

 

Insofar as we also handle our email communication via the servers of this provider, the content of the email correspondence and the associated metadata (sender, recipient, timestamp) are also processed on the provider's servers for contract fulfillment and business communication (Art. 6 para. 1 lit. b and f GDPR)."

 

Hoster used:

Scannel IT

K. Bernhard
Rotdornweg 50
91126 Schwabach

phone: +49 (0)911 131 399 50
fax: +49 (0)911 131 399 78

mail: office@scannel.de
web: www.scannel.de

 

Administration by agency:

We also use a specialist agency for the technical support, maintenance and security of the website, which may gain access to the above-mentioned data as part of this activity:

wagnergraphics | Torsten Wagner

38855 Wernigerode

www.wagnergraphics.de

 

Order processing

We have concluded data processing agreements (DPAs) with the above-mentioned hoster and our agency in accordance with Art. 28 GDPR. These are contracts prescribed by data protection law that ensure that they only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.