Privacy Policy

• OUR PRIVACY POLICY AT A GLANCE

Who are we? We are LOS CRISTIANOS SAN TELMO, S.A., and we process your data as the data controller. This means that we are responsible for how your personal data is used and protected.

What do we use your data for? We use the data you have provided online or by any other means to provide our services to you.

Why do we hold your data? We have various legal grounds for processing your data. When you complete a form or send an email with a query or suggestion, we have a legitimate interest in responding to it.

Who do we share your data with? We will only share data with partner companies to deal with requests received and provide our services or products to you, with banks and with bodies where disclosure is required by law. We never sell your data to third parties.

What rights do you have? You have the right to access, rectify or erase your personal data. You also have the right to object to our use of data you previously authorised us to use, to data portability and not to be subject to automated individual decision-making.

When processing your personal data, we apply the following principles to provide you with the greatest possible protection:

• Lawfulness, fairness and transparency: We will always request your consent to process your personal data for one or more specific purposes, which we will explain to you beforehand with complete transparency.
• Data minimisation: We will only request data that is strictly necessary for the purposes for which we require it, keeping it to the minimum possible.
• Storage limitation: Data will be kept for no longer than necessary for the purposes of processing. We will inform you of the relevant retention period according to the purpose. For subscriptions, we will review our lists periodically and delete records that have been inactive for a considerable time.
• Integrity and confidentiality: Your data will be processed in a manner that ensures appropriate security and confidentiality. We take all necessary precautions to prevent unauthorised access to, or misuse of, our users’ data by third parties.

This privacy policy provides more detailed information about how we use the personal data of our customers, suppliers and users and, in general, anyone who contacts us, regardless of the means used to communicate with us (online form, telephone, email or in person).

We want to be transparent about what we do with your personal data and to help you understand the implications of how we use it and your rights in relation to it. We therefore keep our Privacy Policy, Legal Notice and Cookie Policy up to date. You can consult this information on this website.

If you have any questions or would like more information about the privacy policy, please continue reading this document.

WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

The controller of your personal data is LOS CRISTIANOS SAN TELMO, S.A.:

LOS CRISTIANOS SAN TELMO, S.A. informs users that the data they provide while browsing our website, through the various data collection forms or by email will be processed by LOS CRISTIANOS SAN TELMO, S.A. This processing is recorded in the Record of Processing Activities maintained by LOS CRISTIANOS SAN TELMO, S.A. in accordance with the GDPR.

WHAT IS YOUR PERSONAL DATA USED FOR?

At ccsantelmo.com, we process data relating both to users of our website and to third parties who have a relationship with us. To help you understand how we process your data, we have distinguished the purposes for which we use it, the types of data and the legal basis according to the category of individuals whose data we process. Below, we classify these individuals according to the type of relationship they have with LOS CRISTIANOS SAN TELMO, S.A.

• WEBSITE USERS

What data do we collect from our website users?

• Data relating to users who complete any of the available forms: The personal data requested by LOS CRISTIANOS SAN TELMO, S.A. includes:

• Identification details: first name and surname, telephone number, postal address and email address.
• Data relating to the request.

For what purposes will we process your personal data?

When users accept our privacy policy, they authorise us to process their personal data for the following purposes:

• To send them the information and provide the service they request through the various forms available on our website.

How do we obtain your data?

We obtain your personal data by the following means:

• Through the form completed by the website user for the purpose stated in it. Use of the form is subject to acceptance of this privacy policy by ticking the relevant box.
• We obtain browsing data from the various cookies accepted by users when they first access ccsantelmo.com.

What is the legal basis for processing your data?

The user’s express consent (Article 6(1)(a) GDPR), given by completing the various forms and ticking the relevant box, provides the legal basis for processing by LOS CRISTIANOS SAN TELMO, S.A. Users may withdraw their consent at any time. Withdrawal does not affect data processing carried out before consent was withdrawn.

Legitimate interests in creating browsing profiles and identifying preferences through the installation of cookies.

Performance of a contract or taking pre-contractual steps when a customer submits a request through the various forms available on our website or requests information about the services provided by LOS CRISTIANOS SAN TELMO, S.A.

• SUPPLIERS

What data do we collect from our suppliers?

• Supplier identification details: The personal data requested by LOS CRISTIANOS SAN TELMO, S.A. includes:

• Identification details: first name and surname, telephone number, postal address and email address.
• Employment and professional data.
• Business activities and operations.

How do we obtain your data?

We obtain your data through:

• The signing of the contract governing our relationship, acceptance of the quotation submitted, receipt of supplier invoices and, where appropriate for the service provided, the signing of a data processing agreement.

For what purposes will we process your personal data?

To manage information relating to our suppliers of goods and services and their representatives.

To maintain our contractual relationship with our suppliers.

To manage payments and collections relating to the contracts governing our relationship.

What is the legal basis for processing your data?

Taking pre-contractual steps or performing a contract, in order to send you information and manage the service provided, which would otherwise not be possible.

Legitimate interests in managing data relating to representatives of the suppliers of LOS CRISTIANOS SAN TELMO, S.A.

• CUSTOMERS

What data do we collect from our customers?

• Data relating to customers who complete any of the forms available on ccsantelmo.com or at the physical premises of LOS CRISTIANOS SAN TELMO, S.A.

• Identification details: first name and surname, telephone number, postal address and email address.
• Data relating to the request.

How do we obtain your data?

If you are an online customer, we obtain your data through the information request form you complete. Use of the form is subject to acceptance of this privacy policy by ticking the relevant box.

If you are a customer who deals with us in person, we obtain your data through:

• The customer registration form.
• Acceptance of the quotation submitted.
• The signed contract.

For what purposes will we process your personal data?

• To generate and manage documentation associated with your requests and purchases.
• To provide you with information about offers, products and services related to your purchase.
• To process your online booking or purchase through our platform.

What is the legal basis for processing your data?

Taking pre-contractual steps or performing a contract, in order to send you information and manage the service provided or product supplied, which would otherwise not be possible.

Users may withdraw their consent at any time.

HOW LONG DO WE KEEP YOUR DATA?

• WEBSITE USERS

Data processed on the basis of a website user’s consent will be kept for as long as it remains relevant to the purpose for which it was collected and consent has not been withdrawn.

For data processed on the basis of legitimate interests, the retention period will be linked to the reason for collecting the data, always ensuring appropriate safeguards and respect for the rights and freedoms of data subjects.

For data processed on the basis of performance of a contract or taking pre-contractual steps, the retention period will cover the duration of the contractual relationship and any subsequent period during which the data must be kept by law.

The IP address obtained through cookies will be kept for one year in order to demonstrate the user’s consent.

For more information about cookie retention periods, please see the Cookie Policy section of our website.

• SUPPLIERS

For data processed on the basis of legitimate interests, the retention period will be linked to the reason for collecting the data, always ensuring appropriate safeguards and respect for the rights and freedoms of data subjects.

Data processed on the basis of a contract, including where part of the processing is based on a legal obligation, will be kept for the duration of the contractual relationship. The retention period after that relationship ends, or where processing is linked to a legal obligation, will be the period prescribed by law. Data subjects may not withdraw authorisation for such processing, except as provided by law regarding the blocking of data.

• CUSTOMERS

Data processed on the basis of a customer’s consent will be kept for as long as it remains relevant to the purpose for which it was collected and consent has not been withdrawn.

For data processed on the basis of legitimate interests, the retention period will be linked to the reason for collecting the data, always ensuring appropriate safeguards and respect for the rights and freedoms of data subjects.

Data processed on the basis of a contract, including where part of the processing is based on a legal obligation, will be kept for the duration of the contractual relationship. Where processing is linked to a legal obligation, the retention period after that relationship ends will be the period prescribed by law. Data subjects may not withdraw authorisation for such processing, except as provided by law regarding the blocking of data.

ADDITIONAL INFORMATION ABOUT DATA PROCESSING

Only persons over 14 years of age may provide data through our website and by email. If you are younger than this, you must have the consent of your parents or legal guardians.

Users guarantee that all data they provide to LOS CRISTIANOS SAN TELMO, S.A. is authentic and up to date, declare that they are over 14 years of age and shall be solely responsible for any false or inaccurate statements they make.

The personal data processed by LOS CRISTIANOS SAN TELMO, S.A. may be mandatory or voluntary. To protect your privacy, special categories of personal data will not be requested through website forms. If such data is needed to provide a service, it will be requested through another channel. The data to be requested in the forms is:

Voluntary information is information that users are not required to provide in order to contact us.

Fields marked with an asterisk (*) or the word (required) in our forms are mandatory. Refusal to provide them will mean that we cannot provide the service or deal with your request.

If you provide us with third-party data, you declare that you have their consent and undertake to pass on the information we provide in this clause, releasing LOS CRISTIANOS SAN TELMO, S.A. from any obligation in this respect. Nevertheless, LOS CRISTIANOS SAN TELMO, S.A. may carry out checks to confirm that the third party has been informed, adopting the due diligence measures laid down in data protection legislation.

WHO WILL YOUR DATA BE DISCLOSED TO?

Data will not be disclosed to third parties unless required by law or necessary to deal with your request.

Recipients to whom your data may be disclosed include:

• C.P. SAN TELMO, LOS CRISTIANOS SAN TELMO, S.A.
• Public authorities and bodies where required by tax, employment, social security or any other applicable legislation. Companies acting as data processors (fraud detection and prevention providers, technology services, customer service providers, advertising and marketing services and, in general, third-party providers necessary to deliver the services offered by LOS CRISTIANOS SAN TELMO, S.A., such as courier and transport service providers, etc.).

ARE INTERNATIONAL DATA TRANSFERS MADE?

ccsantelmo.com is hosted in Germany, a country within the European Union and the European Economic Area, or meeting the requirements laid down in Articles 46 and 47 of the GDPR. Therefore, no international transfers of data provided by users on the website will take place.

Our website only accesses users’ data through the following channels:

• Through the contact forms available to users on the website.
• Through cookies previously accepted by users.

International data transfers may also take place in connection with the disclosures described above. For such transfers, LOS CRISTIANOS SAN TELMO, S.A. will use the mechanisms provided in Articles 46 and 49 of the GDPR as safeguards for transfers to countries without a European Commission adequacy decision.

In all cases, third parties with whom certain personal data is shared must first have demonstrated that they have adopted appropriate technical and organisational measures to protect it properly. Transfers to third countries will only be made where a binding legal instrument exists in accordance with Article 46 and subsequent articles of the GDPR. By accepting this privacy policy, you accept that an international data transfer may take place subject to the safeguards described.

If the requirements laid down in the GDPR are not met, the data subject may consent to the international transfer, or a contract may be performed in the data subject’s interests. Otherwise, authorisation must be requested from the Supervisory Authority.

LOS CRISTIANOS SAN TELMO, S.A. never sells its users’ data to third parties.

WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

Users may exercise the following rights with LOS CRISTIANOS SAN TELMO, S.A.:

• Access their personal data.
• Rectify it when it is inaccurate or incomplete.
• Request the erasure or cancellation of data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
• Object to its processing.
• Request restriction of the processing of their data where any of the conditions laid down in the legislation apply.
• Request portability of their data in the cases provided for by law.
• Not be subject to automated decision-making.
• Withdraw any consent given.

To exercise their rights, users must send a written request stating the right they wish to exercise, together with proof of identity and a postal or email address for notifications. Requests may be sent by post to: LOS CRISTIANOS SAN TELMO, S.A. LA HABANA, 11 CTRO COMERCIAL SAN TELMO LOCAL 3 A 38650 - PLAYA DE LOS CRISTIANOS, or by email to: santelmo_1@infonegocio.com.

LOS CRISTIANOS SAN TELMO, S.A. must respond to requests to exercise rights within one month of receiving the request. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests. We will inform you of any extension within one month of receiving the request, explaining the reasons for the delay.

Data subjects also have the right to lodge a complaint with the competent Supervisory Authority (Spanish Data Protection Agency) at www.aepd.es if they consider that LOS CRISTIANOS SAN TELMO, S.A. has infringed their rights under data protection legislation.

IS MY DATA SECURE?

LOS CRISTIANOS SAN TELMO, S.A. has a current agreement with the hosting company IONOS SE to host its website. This is a European company with the latest security systems.

In all cases, LOS CRISTIANOS SAN TELMO, S.A. guarantees that it will adopt appropriate measures to ensure the confidential processing of your data, given its confidential nature, and undertakes to keep it secret and treat it with the utmost confidentiality. It declares that it has implemented security policies in its information system appropriate to the type of data handled, in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that establishes an encrypted connection whenever a user visits our website and exchanges information with us.

LINKS TO OTHER WEBSITES

If you choose to leave our website through links to other websites that do not belong to our organisation, LOS CRISTIANOS SAN TELMO, S.A. will not be responsible for those websites’ privacy policies or any cookies they may store on your computer.

Date: 21/09/2026

Version: V.1.0