Privacy Policy
The Privacy Policy is part of the General Conditions that govern this Website.
Who is responsible for processing your data?
- EXPLOTACIONES HOTELERAS LUMM, S.A.
- Tax ID: A-35.694.744
- Avenida de Ansite Nº 3, 1st Floor
- 35011, Las Palmas de Gran Canaria
- Phone: +34 928 290 614
- Email: admon@lummhotel.com
- Data Protection Officer: dpo@livvohotels.com
You can contact us in any way you prefer.
We reserve the right to modify or adapt this Privacy Policy at any time. We recommend reviewing it periodically, and if you have registered and access your account or profile, you will be informed of any modifications.
If you belong to any of the following groups, check the dropdown information:
-
-
What data do we collect through the Website?
We may process your IP address, the operating system or browser you use, and even the duration of your visit, anonymously. If you provide us with data through the contact form, you will be identified so that we can contact you, should this be necessary.
For what purposes do we process your personal data?
- Answer your queries, requests or petitions.
- Manage the requested service, respond to your request, or process your petition.
- Information by electronic means, regarding your request.
- Commercial or event information by electronic means, provided there is express authorization.
- Carry out analysis and improvements to the Website, our products and services.
- Improve our commercial strategy.
What is the legal basis for the processing of your data?
The acceptance and consent of the data subject, granted through a voluntary action, such as cases in which, in order to make a request, it is necessary to complete a form and click the send button; doing so necessarily implies that you have been informed of, and have expressly given your consent to, the content of the clause attached to said form or the acceptance of the privacy policy.
All our forms mark mandatory fields with the symbol *. If you do not provide these fields, or do not check the box accepting the privacy policy, the information will not be allowed to be sent.
How long will we keep your personal data?
Until the consent given is revoked.
-
For what purposes do we process your personal data?
We inform you that your personal data will be processed for the purpose of managing your reservation, formalizing and administering your stay at the hotel, handling requests related to the contracted services and ensuring payment of the expenses arising from your stay.
Likewise, certain data may be processed in order to comply with the legal obligations applicable to lodging establishments, in particular those relating to the documentary registration and reporting of information on the persons staying at the establishment.
Your data may be disclosed, where applicable, to the Security Forces and Bodies in compliance with current regulations, as well as to travel agencies, tour operators, booking platforms or other intermediaries that have taken part in the contracting or management of your reservation.
The data will be kept for as long as necessary to fulfil the purposes indicated and, in any case, for the periods required by tax, commercial, consumer and traveller documentary registration regulations. As a general rule, certain data may be kept for a minimum period of 6 years where necessary to comply with such legal obligations.
What is the legal basis for the processing of your data?
The legal basis for the processing of your personal data is the performance of the contractual or pre-contractual relationship arising from the reservation and stay at the hotel, as well as compliance with the legal obligations applicable to the establishment.
In particular, the processing may be carried out in compliance with the regulations on documentary registration and information on persons staying at lodging establishments, including Royal Decree 933/2021, of 26 October, as well as the applicable regulations regarding guest registers and traveller entry records.
Where the processing is based on your consent, it may be withdrawn at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.
IMPORTANT NOTICE ABOUT POSSIBLE FRAUD AND UNOFFICIAL COMMUNICATIONS
LIVVO Group will not ask you for additional payments, bank details, passwords, verification codes or sensitive information through links received via WhatsApp, SMS, social media or other unofficial channels on the pretext of a supposed modification, incident, cancellation or confirmation of your reservation.
If you receive a communication requesting you to make a payment, provide bank details or access an unverified link, do not take any action without first verifying the authenticity of that communication.
For your safety:
- Do not provide personal or bank details through unofficial channels.
- Do not share passwords or verification codes.
- Do not access payment links received via WhatsApp, SMS, social media or suspicious messages.
- Do not download attachments from unverified communications.
If in doubt, contact the hotel directly through the official channels published on our website before making any payment or providing any information.
-
For what purposes do we process your personal data?
- Preparation and follow-up of the budget through communications between both parties.
- Information by electronic means, regarding your request.
- Commercial or event information by electronic means, provided there is express authorization.
- Manage the administrative, communication and logistics services carried out by the Controller.
- Billing and declaration of the relevant taxes.
- Carry out the corresponding transactions.
- Control and collection management.
- During the card payment process, the Bank holding the Virtual POS will collect the following personal data: type of connection, date and time, IP address, device information, email address, mobile phone number, browsing data, transaction data and data required by the 3D Secure security protocols, solely for the purpose of detecting and preventing unauthorized payment transactions.
What is the legal basis for the processing of your data?
For as long as the relationship between the parties remains in force and for the statutory limitation periods arising therefrom.
-
For what purposes do we process your personal data?
By enrolling in the loyalty programme, we will process your personal data in order to properly manage the loyalty programme, through which you will benefit from:
- Discounts on bookings and purchases.
- Additional benefits and exclusive promotions.
- Receiving information about news, special sales and exclusive promotional offers.
What is the legal basis for the processing of your data?
The legal basis for processing your data is the express, free and voluntary consent, which you may withdraw at any time without affecting the lawfulness of the processing carried out prior to the withdrawal of your consent.
How long will we keep your personal data?
Your data will be kept for as long as you do not withdraw the consent given, or request the deletion of your data or object to its processing.
-
For what purposes do we process your personal data?
- Assess the level of quality of the service provided.
- Improve the services offered, in compliance with ISO requirements.
What is the legal basis for the processing of your data?
The legal basis is the express consent of the respondent.
How long will we keep your personal data?
Until the consent given is revoked.
-
For what purposes do we process your personal data?
- Information by electronic means, regarding your request.
- Commercial or event information by electronic means, provided there is express authorization.
- Manage the administrative, communication and logistics services carried out by the Controller.
- Billing.
- Carry out the corresponding transactions.
- Billing and declaration of the relevant taxes.
- Control and collection management.
What is the legal basis for the processing of your data?
The legal basis is the acceptance of a contractual relationship, or, failing that, your consent when contacting us or offering us your products through any means.
How long will we keep your personal data?
For as long as the relationship between the parties remains in force and for the statutory limitation periods arising therefrom.
-
For what purposes do we process your personal data?
- Answer your queries, requests or petitions.
- Manage the requested service, respond to your request, or process your petition.
- Engage with you and build a community of followers.
What is the legal basis for the processing of your data?
The legal bases for the processing are the voluntary consent of the data subject to get in touch and, where applicable, the acceptance of a contractual relationship within the environment of the relevant social network. The processing of data within the Social Network will be carried out in accordance with its own Privacy Policies.
How long will we keep your personal data?
We can only consult or delete your data in a limited manner, since we have a specific profile. We will process them for as long as you keep following us, being our friend, or clicking "like", "follow" or similar buttons.
Any correction of your data or restriction of information or posts must be made through the settings of your own profile or user account on the social network itself.
-
What data do we collect through the Website?
If you identify yourself, we may collect: first name, surname, email, telephone number and the personal data of the third party/parties that you provide us with in the communication.
For what purposes do we process your personal data?
- Manage the communications.
- Adopt the corresponding corrective measures.
- Where necessary, inform you of the outcome of the procedure.
What is the legal basis for the processing of your data?
The legal basis is legal obligation or, failing that, the public interest.
How long will we keep your personal data?
The data will be kept for the period strictly necessary to clarify the facts reported. In any case, once six (6) months have elapsed, the data provided will be anonymized unless it is being investigated within a different legal framework.
-
Do we include personal data of third parties?
No, as a general rule we only process the data provided to us by the data subjects themselves. If you provide us with data of third parties, you must first inform them and obtain their consent, or otherwise you release us from any liability for failure to comply with this requirement.
And data of minors?
We do not process data of minors under 14 years of age. Therefore, please refrain from providing such data if you are not of that age or, where applicable, from providing the data of third parties who are not of that age. LIVVO HOTEL GROUP, S.L.U. disclaims any liability for failure to comply with this provision.
Will we send communications by electronic means?
- These will only be sent to manage your request, if you have provided us with this as one of your means of contact.
- Should we send commercial communications, these will have been previously and expressly authorized by you.
What security measures do we apply?
You can rest assured: we have adopted an optimal level of protection for the Personal Data we handle, and have put in place all the means and technical measures available to us, in line with the state of the art, to prevent the loss, misuse, alteration, unauthorized access to and theft of Personal Data.
To which recipients will your data be disclosed?
Your data will not be disclosed to third parties, except where legally required. Specifically, it will be disclosed to the State Tax Administration Agency and to banks and financial institutions for the collection of the service provided or product purchased, as well as to the data processors necessary for the performance of the agreement.
In the event of a purchase or payment, if you choose any application, website, platform, bank card or other online service, your data will be disclosed to, or processed within, that platform, always with the utmost security. During the card payment process, data will be collected by the Bank holding the Virtual POS.
When instructed to do so, the web development and maintenance company, or the hosting company, will have access to our website. They will have signed a service provision agreement obliging them to maintain the same level of privacy as we do.
International data transfers may take place when using American applications; however, such transfers will be made to entities that have demonstrated compliance with the level of protection and guarantees required under the parameters and requirements set out in the current data protection regulations, such as the European Regulation, or where there is a legal basis authorizing the international transfer.What rights do you have?
- To know whether or not we are processing your data.
- To access your personal data.
- To request the rectification of your data if it is inaccurate.
- To request the erasure of your data if it is no longer necessary for the purposes for which it was collected, or if you withdraw the consent given.
- To request the restriction of the processing of your data, in certain cases, in which event we will only keep it in accordance with current regulations.
- To data portability, which will be provided to you in a structured, commonly used and machine-readable format. If you prefer, we can send it to the new controller you designate. This is only valid in certain cases.
- To lodge a complaint with the Spanish Data Protection Agency or the competent supervisory authority, if you believe we have not dealt with your request properly.
- To withdraw consent for any processing for which you have given consent, at any time.
If you change any of your data, we would be grateful if you would let us know so that we can keep it up to date.
Would you like a form to exercise your rights?
- We have forms for exercising your rights; ask us for them by email or, if you prefer, you may use those prepared by the Spanish Data Protection Agency or by third parties.
- These forms must be signed.
- If you are represented by someone else, they must provide proof of such representation.
- The forms may be submitted in person, sent by post or by email to the address of the Controller given at the beginning of this text.
How long do we take to respond to the exercise of rights?
It depends on the right in question, but at most within one month of your request, and two months if the matter is very complex and we notify you that we need more time.
Do we use cookies?
If we use cookies other than strictly necessary ones, you can consult the cookie policy through the corresponding link at the start of our website.
How long will we keep your personal data?
- Personal data will be kept for as long as you remain linked to us.
- Once the relationship has ended, the personal data processed for each purpose will be kept for the legally established periods, including the period during which a judge or court may request it in accordance with the statute of limitations for legal actions.
- The data processed will be kept for as long as the legal periods referred to above have not expired, where there is a legal obligation to retain it, or, where no such legal period exists, until the data subject requests its deletion or withdraws the consent given.
- We will keep all information and communications relating to your purchase or the provision of our service for as long as the warranties on the products or services last, in order to deal with any possible claims.
-