CANARY IMPROVISES

OUR PRIVACY POLICY AT A GLANCE

Who are we? We are IRENE LUISA ALVAREZ RODRIGUEZ and treat your data as Data Controller. That means we take responsibility for how we use and protect your personal data.

What do we use your data for? We use the data you have provided us online or through any other means to answer your queries and suggestions, provide you with the services or supply you with the products requested, register you as a user, send you personalized communications to which you have subscribed, as well as to process your online reservation or purchase.

Why do we have them? We are entitled to process your data for different reasons. When you fill out a form or send us an e-mail with a question or suggestion, we have a legitimate interest in responding to it. When you register on our website or make a reservation or purchase we must execute the contract you accept with us, just as we have a legal obligation to issue an invoice containing your details when the service or purchase is carried out. We are also legitimized by your consent when you give us permission to send you our personalized offers.

With whom do we share your data? We will only share the data with those collaborating companies to meet the requests received and provide our services or provide you with the products, banks and agencies required by law. Under no circumstances do we sell your data to third parties.

What rights do you have? You have the right to access, rectify or delete your personal data. You also have the right to object to our use of data that you have previously authorized us to use, to port it and not to be subject to automated individualized decisions.

In processing your personal data, we apply the following principles to ensure the best protection for you:

Principle of legality, fairness and transparency: We will always require your consent for the processing of your personal data for one or more specific purposes that we will inform you in advance with absolute transparency.
Data minimization principle: We will only request data that is strictly necessary in relation to the purposes for which we require it. As few as possible.
Principle of limitation of the conservation period: the data will be kept for no longer than necessary for the purposes of processing, depending on the purpose, we will inform you of the corresponding retention period, in the case of subscriptions, we will periodically review our lists and delete those records inactive for a considerable time.
Principle of integrity and confidentiality: Your data will be treated in a way that ensures adequate security of personal data and guarantees confidentiality. You should know that we take all necessary precautions to prevent unauthorized access or misuse of our users’ data by third parties.

In this privacy policy you will find more detailed information about the use we make of the personal data of our customers, suppliers and users, and in general of all persons who maintain contact with us, regardless of the means they have used to communicate (online form, by telephone or e-mail, in person).

We like to be transparent about what we do with your personal data, that you understand the implications of the uses we make of it, or the rights you have in relation to your data. For this reason, we keep our Privacy Policy, Legal Notice and Cookies Policy updated, information that you can consult on this web page.

If you have any questions or would like more information about the privacy policy, please read on.

IRENE LUISA ALVAREZ RODRIGUEZ, is committed to complying with current legislation at all times on the processing of personal data. Through the following privacy policy IRENE LUISA ALVAREZ RODRIGUEZ, in accordance with the requirements of the RGPD and the LOPDGDD, informs users and persons whose data is processed:

1. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

The person responsible for the processing of your data is IRENE LUISA ALVAREZ RODRIGUEZ:

Identity	IRENE LUISA ALVAREZ RODRIGUEZ – 54047648V
Address	LADERA PINTORA, 8 38290 La Esperanza (Santa Cruz de Tenerife)
Phone	618104531
Web	www.canariasimprovisa.com
E-mail	imprudentes.tfe@gmail.com

IRENE LUISA ALVAREZ RODRIGUEZ informs the user that the data you provide through browsing our website, the various data collection forms or sending emails, will be processed by IRENE LUISA ALVAREZ RODRIGUEZ and that such treatment is contained in the Register of Processing Activities managed by IRENE LUISA ALVAREZ RODRIGUEZ in accordance with the provisions of the RGPD.

2. WHAT ARE YOUR PERSONAL DATA USED FOR?

At www.canariasimprovisa.com, we process data both from users of our website, as well as from third parties that maintain relationships with us. In order to make it easier for you to know how we process your data, we have differentiated the purpose for which we use the data, the types of data and the basis of legitimacy according to the category of persons whose data we process. Below, we classify the people from whom we process data according to the type of relationship they have with IRENE LUISA ALVAREZ RODRIGUEZ

Web users

What data do we collect from our website users?

Data of users who fill in any of the available forms: The personal data that IRENE LUISA ALVAREZ RODRIGUEZ requests include:

Identification data: name and surname, telephone, postal and e-mail address.
Data related to the application

Data of users who subscribe to the newsletter or want to receive information, commercial communications and information:

Identification data: Name and surname, e-mail address.

Data of users who register on our platform:

Identification data: Name and surname, postal and e-mail address, telephone, billing address.

Data of users who browse our website: Data provided by cookies.
Data of customers who make a purchase online or in person:

Identifying data: Treatment, name, surname, postal and e-mail address, telephone, billing address.
Transaction data: Products purchased/services rendered and means of payment, invoice or purchase ticket.

Identifying data of the user of the Social Network: IRENE LUISA ALVAREZ RODRIGUEZ will not request data beyond those you have included in your user profile.
Data of users browsing our website: Data provided by cookies and Google Analytics and collected by partners or collaborators.

For what purposes will we process your personal data?

Whenthe user accepts our privacy policy, he/she authorizes us to use the personal data provided for the following treatments:

To enable users to browse the site, allowing them access to the information and contents of the site, regardless of whether the specific contents, services and products are paid or free of charge.
To send you the information and provide you with the service you request through the various forms available on our website.
Organizing, communicating and holding events or similar.
Develop statistical studies to assess the success of campaigns / ways in which the user has known a service provided by IRENE LUISA ALVAREZ RODRIGUEZ. These data are collected for statistical purposes only and are for internal use by IRENE LUISA ALVAREZ RODRIGUEZ.
Send you the newsletter when you are subscribed, with events, activities and promotions of IRENE LUISA ALVAREZ RODRIGUEZ and the sector that may be of interest.
Send commercial communications about offers, activities and promotions of IRENE LUISA ALVAREZ RODRIGUEZ and the sector that may be of interest by conventional or electronic means when you have checked the box that you want to receive information.

How do we get your data?

We obtain your data by:

The form filled in by the web user for the purpose stated therein. The form is subject to the acceptance of this privacy policy by ticking the box indicated.
The navigation data are obtained from the different cookies that the user accepts when accessing canariasimprovisa.com for the first time.
The purchase of tickets through our own or third party platforms.
Through the social network when the web user interacts through the social network and is part of our community of followers.

What is the legitimacy for the processing of your data?

The user’s express consent (Article 6.1.a. RGPD) manifested by filling out the various forms, checking the box to send the newsletter and receiving commercial communications / information offers, activities and promotions IRENE LUISA ALVAREZ RODRIGUEZ and the sector that may be of interest is the one that legitimizes the treatment by IRENE LUISA ALVAREZ RODRIGUEZ. The user may revoke the consent given at any time, although if the consent is revoked, this does not affect the data processing carried out prior to the revocation of the consent.

Legitimate interest for the elaboration of browsing profiles and to detect preferences through the installation of cookies.

The execution of a contract or the adoption of pre-contractual measures when the customer makes a request through the various forms available to the user on our website or request information about the services provided by IRENE LUISA ALVAREZ RODRIGUEZ.

Suppliers

What data do we collect from our suppliers?

Identifying information of the provider: The personal data that IRENE LUISA ALVAREZ RODRIGUEZ requests include:

Identification data: name and surname, telephone, postal and e-mail address.
Employment and professional data
Activities and business

How do we get your data?

We obtain your data by:

The signature of the contract that binds us, the acceptance of the budget presented, the receipt of invoices from the supplier and the signature of the contract of Data Processor in case it is appropriate for the service provided.

For what purposes will we process your personal data?

Manage the information related to the data of our suppliers of goods and services, as well as their representatives.

Maintenance of the contractual relationship with our suppliers.

Management of payments and collections related to the contracts that bind us.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract to send you the information and make the proper management of the service provided, not being possible its realization otherwise.

In the legitimate interest for the management of data relating to representatives of suppliers of IRENE LUISA ALVAREZ RODRIGUEZ.

Customers

What data do we collect from our customers?

Data of customers who fill out any of the forms available at www.canariasimprovisa.com as well as in the physical establishment of IRENE LUISA ALVAREZ RODRIGUEZ

Identification data: name and surname, telephone, postal and e-mail address.
Data related to the application

Data of customers who register on our platform:

Identification data: Name and surname, postal and e-mail address, telephone, billing address.

Data of customers who make a reservation or order in our establishment in person:
- Identification data: Name and surname, postal and e-mail address, telephone number, billing address.
Customer data obtained from our contracts and quotations
Data of customers who make a purchase online or in person:

Identifying data: Treatment, name, surname, postal and e-mail address, telephone, billing address.
Transaction data: Products purchased/services rendered and means of payment, invoice or purchase ticket.

How do we get your data?

If you are an online customer we obtain your data through:

The form that the user fills out to request information and/or a quotation, order or to complete the online purchase in our e-commerce. The form is subject to the acceptance of this privacy policy by ticking the box indicated.
We obtain the browsing data from the different cookies that the customer accepts when accessing www.canariasimprovisa.com for the first time.

If you are an in-person customer, we obtain your data through:

The customer registration form.
Acceptance of the budget submitted.
The signed contract.

For what purposes will we process your personal data?

Generate and manage the documentation associated with your requests and purchases.
Provide you with information about offers, products and services related to your purchase.
Process your reservation or purchase on-line through our platform.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract to send you the information and make the proper management of the service provided or the product supplied, not being possible otherwise.

In the user’s consent to send the newsletter and commercial communications offers, activities and promotions of IRENE LUISA ALVAREZ RODRIGUEZ and the sector that may be of interest and the management of our blog. The user may revoke the consent given at any time.

In the legitimate interest of sending information about exclusive promotions, latest news and personalized information tailored to the profile of the person concerned and for sending satisfaction surveys on products or services purchased.

Job applicants and candidates.

What data do we collect from applicants?

Candidate data requested on the ‘work with us’ form by IRENE LUISA ALVAREZ RODRIGUEZ:

Identification data: name and surname, telephone, postal and e-mail address.
Academic and employment data
Data that the candidate himself/herself includes as attached documents

How do we get your data?

We obtain your data by:

The delivery of a resume at our facilities or the completion of the ‘Work with us’ form on our website.

For what purposes will we process your personal data?

The personal data provided by the candidates are used only for the selection processes that are open or will be carried out in the event that the data provided are for our employment exchange.

What is the legitimacy for the processing of your data?

In the user consent by incorporating your data and your resume on the website of IRENE LUISA ALVAREZ RODRIGUEZ to participate in the selection processes that are active as well as in future processes that may be carried out while not oppose the processing of their data.

Social Networking Contacts

What data do we collect?

Identifying information in the Social Network: IRENE LUISA ALVAREZ RODRIGUEZ not request data beyond those you have included in your user profile.

For what purposes will we process your personal data?

Answer and manage your inquiries, requests or requests.

Engage with you as long as you are part of our community of followers.

What is the legitimacy for the processing of your data?

In the execution of a pre-contract/contract binding you to the relevant social network and in accordance with its privacy policies:

Facebook http://www.facebook.com/policy.php?ref=pf

Instagram https://help.instagram.com/155833707900388

Twitter http://twitter.com/privacy

LinkedIn http://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Pinterest https://about.pinterest.com/es/privacy-policy

Youtube https://policies.google.com/privacy?hl=es&gl=es

www.canariasimprovisa.com will try at all times to establish appropriate mechanisms to obtain the consent of the User for the installation of cookies that require it. When a user accesses our website a pop-up appears informing of the existence of cookies and that if you continue browsing our site you consent to the installation of cookies. The acceptance of the installation of cookies implies the acceptance of the conservation of the IP address in the logs of www.canariasimprovisa.com, together with the date of acceptance, for a period of one year, for the purpose of proving the consent given. You can obtain more information in our “Cookies Policy”.

3. HOW LONG DO WE KEEP YOUR DATA?

Web users

Data that are processed on the basis of the web user’s consent will be kept as long as they are relevant for the purpose for which they were collected and the consent is not revoked.

Those data that are processed on the basis of legitimate interest, the conservation time will be linked to that which motivated the collection of the data, always ensuring adequate safeguards and respect for the rights and freedoms of data subjects.

Those data that are processed on the basis of the execution of a contract or the adoption of pre-contractual measures, the retention period will be that in which the contractual relationship remains in force as well as the subsequent time that by legal obligation must be retained.

The IP address obtained through cookies will be kept for a period of one year, in order to demonstrate the user’s consent.

Regarding the period of conservation of cookies, you can obtain more information on our website in the section “Cookies policy”.

Suppliers

Data that are processed on the basis of a contract, as well as if part of the processing is legitimized by a legal obligation, the data will be kept for as long as the contractual relationship is in force. The retention period of the data after the end of the processing, or in the event that the processing is linked to a legal obligation, will be that legally provided for and the data subject may not revoke the processing of the data except in the provisions of blocking of the same provided for by law.

Customers

Data that is processed on the basis of the customer’s consent will be retained for as long as it is relevant for the purpose for which it was collected and the consent is not revoked.

Data that are processed on the basis of a contract, as well as if part of the processing is legitimized by a legal obligation, the data will be kept for as long as the contractual relationship is in force. The retention period of the data after the end of the processing, in the event that the processing is linked to a legal obligation, will be as long as it is foreseen and the processing of the data cannot be revoked by the data subject, except in the case of the legally foreseen blocking of the data.

Job applicants and candidates

Those data that are processed based on the consent of the job applicant and candidate will be kept as long as the selection process to which he/she applied remains open. In the event that the application is not for a specific selection process and is for future applications, the retention period will be a maximum of one year, at which time the CV will be deleted and destroyed, unless the interested party expresses its will to keep it and it is updated.

Social Networking Contacts

The data processed from the contacts of Social Networks will remain as long as the user and IRENE LUISA ALVAREZ RODRIGUEZ ALVAREZ RODRIGUEZ maintain linkage in the social network. By not depending directly on IRENE LUISA ALVAREZ RODRIGUEZ data processing can only consult or unsubscribe your data in a restricted way. We will treat your data as long as the user of the social network is linked to IRENE LUISA ALVAREZ RODRIGUEZ as ‘friends’, ‘like’, ‘follow’ or similar buttons.

To proceed with the rectification of your data, restriction of information or those publications that you share will not be IRENE LUISA ALVAREZ RODRIGUEZ responsible for making such corrections, but must be made by the user of the Social Network through the configuration of your profile in accordance with the privacy policy of the Social Network itself.

Regardless of the legitimacy that supported the collection of the data, it may be processed for scientific, historical or statistical research purposes, always implementing appropriate safeguards and respecting the rights and freedoms of data subjects.

4. ADDITIONAL INFORMATION ON DATA PROCESSING

Only people over 14 years old can provide data through our website and e-mail. If you are under this age, you must have the consent of your parents or legal guardians.

The User guarantees the authenticity and timeliness of all data communicated to IRENE LUISA ALVAREZ RODRIGUEZ and declares that he is over 14 years, and shall be solely responsible for any false or inaccurate statements made.

In the case of making a reservation of a service or purchase on line, the interested party must be over 18 years of age, the age legally established in the civil code to acquire the age of majority and capacity to act.

The personal data processed by IRENE LUISA ALVAREZ RODRIGUEZ may be mandatory or voluntary. No special category data will be requested through the web forms in order to guarantee your privacy. In case it is necessary to collect data of special categories in order to provide you with a service, you will be asked for them in a different way. The data to be requested in the forms are:

Identification data: name and surname, telephone, postal and e-mail address.
Data related to the application.
Data of users who subscribe to the newsletter / want to receive information, commercial communications and information.
Data of users who register on our platform.

Voluntary information is information that the user is not required to provide in order to contact us.

Fields marked with an asterisk (*) or with the word (required) in our forms are mandatory, refusal to provide them will result in the impossibility to provide the service or fulfill your request.

In the event that you provide us with data from third parties, you declare to have the consent of the same and you agree to transfer the information that we provide in this clause, exempting IRENE LUISA ALVAREZ RODRIGUEZ IRENE LUISA of any obligation. However IRENE LUISA ALVAREZ RODRIGUEZ may carry out checks to verify that the third party has been informed by adopting the measures of diligence established in the data protection regulations.

5. TO WHOM WILL YOUR DATA BE COMMUNICATED?

No data will be transferred to third parties unless required by law or in the event that it is necessary to fulfill your request.

Among the recipients to whom your data may be communicated are:

Public administrations and agencies when so required by tax, labor, social security or any other applicable regulations. Companies in charge of data processing (providers of fraud detection and prevention, technology services, customer services, advertising and marketing services, and, in general, third party providers that are necessary for the provision of services offered by IRENE LUISA ALVAREZ RODRIGUEZ as providers of courier services and transportation, etc…
Through the social network when the web user interacts through the social network and is part of our community of followers.

6. ARE THERE ANY INTERNATIONAL DATA TRANSFERS?

www.canariasimprovisa.com is hosted in Spain, a country that is in the European Union, in the territory of the European Economic Area, or that complies with the guidelines established in articles 46 and 47 of the RGPD, therefore, there will be no international transfers of the data provided by users on the web.

Our website only accesses user data using the following methods:

Through the contact forms available to the user on the website.
Through cookies that the user has previously accepted.
By registering for the newsletter.
Through the comments made by the user in our social networks.

International transfers of data may also occur on the basis of the above assignments/communications for which IRENE LUISA ALVAREZ RODRIGUEZ will use the tools provided in Article 46 and 49 of the GDPR as a guarantee of those transfers made to countries that do not have an adequacy decision of the European Commission.

In any case, third parties with whom certain personal data is shared will have previously accredited the adoption of adequate technical and organizational measures for the correct protection of such data and will only do so with third countries when there is a binding legal instrument in accordance with articles 46 and following of the RGPD. By accepting this privacy policy, you agree that an international transfer of data may occur in accordance with the safeguards indicated.

If the requirements set out in the GDPR are not met, the data subject may consent to the international transfer or a contract may be executed in the interest of the data subject. Otherwise, an authorization must be requested from the Control Authority.

We also inform you that some services provided by and for IRENE LUISA ALVAREZ RODRIGUEZ may involve the transfer of personal data to a third country outside the EU, in “cloud” services offered by some of the major international providers (e.g. Google, Microsoft). In these services, the above mentioned compliance will be confirmed.

IRENE LUISA ALVAREZ RODRIGUEZ does not sell in any case user data to third parties.

7. WHAT RIGHTS DO YOU HAVE AND HOW CAN YOU EXERCISE THEM?

The user may exercise the following rights before IRENE LUISA ALVAREZ RODRIGUEZ:

Access to your personal data
Rectify them when they are inaccurate or incomplete
Request the deletion or cancellation of data when, among other reasons, they are no longer necessary for the purposes for which they were collected.
Oppose your treatment
Request the limitation of the processing of your data when any of the conditions provided for in the regulations are met.
Request the portability of your data in the cases provided for in the regulations.
Prevent being subject to automated decisions
Revoke consents granted

In order to exercise their rights, users must send a letter indicating the right they wish to exercise and attach a document proving their identity and a postal or e-mail address for notification purposes. This request can be made either by mail to: IRENE LUISA ALVAREZ RODRIGUEZ Camino Ladera Pintora 8, 38290 – La Esperanza (santa Cruz de Tenerife), or at the following e-mail address: imprudentes.tfe@gmail.com.

IRENE LUISA ALVAREZ RODRIGUEZ must answer the request for the exercise of rights within one month of receipt of the request. This period may be extended for a further two months if necessary, taking into account the complexity and number of applications. We will inform you of any extension within one month of receipt of the request, stating the reasons for the delay.

Also, data subjects have the right to complain to the competent supervisory authority (Spanish Data Protection Agency) when they consider that IRENE LUISA ALVAREZ RODRIGUEZ has violated the rights that data protection regulations recognize them in www.aepd.es

8. IS MY DATA SECURE?

IRENE LUISA ALVAREZ RODRIGUEZ has a contract in force with the hosting company IONOS SE for the hosting of its website. It is a European company and has the latest systems in security measures. It is a company hosted in Spain that has the security measures, both technical and organizational, adequate for the correct protection of the data and the international transfer is carried out because there is a binding legal instrument in accordance with articles 46 and following of the RGPD.

In any case, IRENE LUISA ALVAREZ RODRIGUEZ guarantees the adoption of appropriate measures to ensure the confidential treatment of your data given the confidential nature of the same and undertakes that such data remain secret, treating them with the utmost reserve, and declares to have implemented in its information system, the security policies corresponding to the type of data handled in accordance with the provisions of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (GDPR).

All data provided through our platform is collected using a secure protocol. Our website has an SSL certificate that allows an encrypted connection to be established when a user visits our website and exchanges information with us.

9. DO YOU NEED AN ACCOUNT AND/OR PASSWORD?

The user can register on our website, for which it is essential to create an account. It is the user’s responsibility to maintain the confidentiality of the account information, including the password, as well as any and all activities that occur in it.

The user is obliged to inform IRENE LUISA ALVAREZ RODRIGUEZ immediately in case of illegitimate use of your account or password, or if any problem occurs regarding security, by sending an email to imprudentes.tfe@gmail.com.

10. LINKS TO OTHER WEBSITES

If you choose to leave our Web site through links to other Web sites not owned by our entity, IRENE LUISA ALVAREZ RODRIGUEZ will not be responsible for the privacy policies of such Web sites or cookies that they can store on the user’s computer.

Date: 19 APRIL 2023

Version: V.1.0