Privacy Policy

Data Controller

Identity: Recursos Solares Alternativos S.L.U. (Sands Beach Resort)
Tax ID: B13720032
Postal address: Avda. Islas Canarias, 18 — 35508 Costa Teguise (Las Palmas)
Telephone: +34 928 59 58 20
Email: reservas@sandsbeach.eu

Information and Consent

By reading this Privacy Policy, the User is informed about how Recursos Solares Alternativos S.L.U. (Sands Beach Resort) collects, processes, and protects the personal data provided through the website www.sandsbeach.es (hereinafter, the “website”), as well as the data from their connection and navigation through the website (hereinafter, “navigation”) and any other data that may be provided in the future to Recursos Solares Alternativos S.L.U. (Sands Beach Resort), or through any other enabled means.

The User must carefully read this Privacy Policy, which has been drafted in a clear and simple way to facilitate its understanding, and freely and voluntarily decide whether to provide their personal data, or that of third parties, to Recursos Solares Alternativos S.L.U. (Sands Beach Resort).

Purpose

The information provided will be processed for the management of your commercial relationship. If you have provided us with your email address in the corresponding registration, we will subsequently send you information about news and offers of our services by sending a newsletter. In order to offer you products and services according to your interests and improve your user experience, we will create a “commercial profile” based on the information provided. No automated decisions will be made based on this profile.

Depending on the User's requests, the personal data collected will be processed by Recursos Solares Alternativos S.L.U. (Sands Beach Resort) in accordance with the following purposes:

• Manage your contact requests with Recursos Solares Alternativos S.L.U. (Sands Beach Resort) through the channels provided for this purpose. When you contact us, we collect your contact details. This data may include your name, postal addresses, phone numbers, and email addresses, as well as details of your social media profiles.
• Manage the subscription to the newsletter and its subsequent sending, with the registration identification data: name and surnames, email addresses, and phone numbers.
• Manage the conducting of surveys and/or evaluations related to the quality of services provided by Recursos Solares Alternativos S.L.U. (Sands Beach Resort) and/or the perception of its image as a company.
• Data related to website use: when you interact with our website, we collect information that indicates which content, topics, products, types of products, brands, or styles interest you, downloads of additional information, access via links, and problems we detect in the handling of tools. The use of this information is governed by our Cookie Policy.
• Geolocation data: we collect location data derived from your device's IP address, only up to the locality level. This address cannot be used to identify your internet connection or device. We use this geolocation system to detect fraud and/or detect suspicious orders.
• Social networks: Recursos Solares Alternativos S.L.U. (Sands Beach Resort) maintains profiles (fan pages) on various social networks. Furthermore, our services may incorporate social network functions, for example messaging services or so-called social plugins. On our fan pages, we publish and share content, offers, and product recommendations. With each interaction, social network operators record your usage behavior with cookies and similar technologies. Fan page operators can view anonymous general statistics about the interests and demographic characteristics (such as age, gender, region) of the fan page's audience. If you use social networks, the social network operators determine the nature, scope, and purposes of data processing on them.
• Our services may include social plugins from social networks. With the help of these plugins, we can, for example, share content or recommend products. The plugins are disabled by default and therefore do not send data. You can activate the plugins by clicking on the corresponding button (e.g., "Activate social networks"). The plugins can be deactivated with a single click. When the plugins are enabled, your web browser will establish a direct connection to the web servers of the particular social network. The content of the plugin is transmitted from the social network directly to your web browser and incorporated into our website. By integrating the plugins, the social network receives the information that you have accessed the corresponding page of our website and may record your device and access data.
• We currently use Facebook's messaging service (WhatsApp Business Enterprise) and plugins from the following social networks: Facebook, X, Instagram, but we may include others.
• These social networks have their own privacy policies, which will explain how they use and share your personal information. We recommend that you carefully review the privacy policies before using these social networks to ensure you are comfortable with how your personal information is collected and shared.

In the event that the Interested Party provides data of third parties, they declare to have their consent and undertake to transfer the information contained in the Privacy Policy to them, exempting Recursos Solares Alternativos S.L.U. (Sands Beach Resort) from any liability in this regard.

How long will we keep your data?

Your personal data will be kept for as long as the commercial relationship is maintained, as long as its deletion is not requested by the Interested Party, or for the period necessary to fulfill each purpose (during the legal prescription periods established, especially the 4 years required by the General Tax Law and the 6 years by the Commercial Code for invoicing, as well as the obligation to report to the Ministry of the Interior for the traveler registry book, 3 years). If you have consented to receive the newsletter, your data will be kept as long as its deletion is not requested by the interested party, being kept for the attention of possible liabilities arising from the processing during their prescription period.

Legal Basis

The legal basis for the processing of your data is:

• The established contractual relationship and the legitimate interest in receiving information about our products and services.
• In order to process your data, on certain occasions, it is necessary for you to give us your consent, by which you agree that your data will be processed for a specific purpose, such as: the periodic sending of newsletters that include information about the Company, campaigns, discounts, and promotions that we exclusively offer to users/clients; or participation in contests and sweepstakes.
• Compliance with legal obligations: these are processing activities that the law requires us to perform and that we cannot fail to comply with, such as compliance with fiscal, accounting, and administrative obligations arising from the contractual relationship (traveler registry, invoicing, etc.); collaboration with judges and courts; collaboration with the Spanish Data Protection Agency; compliance with tax obligations and collaboration with the State Tax Administration Agency; obligations regarding the Prevention of Money Laundering and the Financing of Terrorism; the provision of product guarantees; and collaboration with state security forces and bodies.
• Legitimate interest: to send information about our products and services to clients; for quality and satisfaction surveys, occasionally contacting you to understand how you perceive and value our activity and the possibility of improving it; and for fraud prevention in your purchases, processing the strictly necessary data for the purpose of analyzing orders placed and preventing operations that may be considered suspicious.

Recipients

In general, personal data will not be transferred to third parties, unless legally obligated to do so. User data may be communicated to affiliated companies or companies within the business group, solely for internal administrative purposes and/or for the aforementioned purposes, as well as to:

• Public Administrations with competence in the matter (National Police, Civil Guard, Traveler Registry, Tax Agency), in compliance with legal obligations.
• Banking or payment entities for the management of collections and refunds.
• Paraty Tech S.L. (booking engine), as a data processor, with whom the corresponding data processing agreement has been signed in accordance with Article 28 of the GDPR.
• Technological service providers (hosting, website maintenance), also as data processors.
• If you are enrolled in a loyalty program in which Recursos Solares Alternativos S.L.U. (Sands Beach Resort) is a collaborating company and participate in it, your data will be communicated to third parties in order to inform them of the points obtained, as well as the redemptions made for products available at any given time, in order to keep your data updated in the loyalty program.

User data may be processed by providers located outside the European Economic Area (e.g., Google LLC) only when adequate safeguards are in place in accordance with Chapter V of the GDPR (standard contractual clauses, adequacy framework, etc.).

Are data of minors processed?

The website of Recursos Solares Alternativos S.L.U. (Sands Beach Resort) and its stores, applications, and products are not generally intended for minors, although we may occasionally run a campaign. However, we do not collect any personal information from minors.

If you are a minor, please do not attempt to register as a user of our websites, applications, or products. If we discover that we have accidentally obtained personal information from a minor, we will delete that information as soon as possible.

Confidentiality and Security of Personal Data

Recursos Solares Alternativos S.L.U. (Sands Beach Resort) undertakes to adopt the necessary technical and organizational measures, according to the appropriate security level for the risk of the data collected, in order to guarantee the security of personal data and prevent accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorized disclosure or access to such data.

However, since Recursos Solares Alternativos S.L.U. (Sands Beach Resort) cannot guarantee the impregnability of the internet or the complete absence of hackers or others who gain fraudulent access to personal data, the Data Controller undertakes to notify the User without undue delay when a personal data security breach occurs that is likely to result in a high risk to the rights and freedoms of natural persons. A personal data security breach is understood to be any breach of security that results in the accidental or unlawful destruction, loss, or alteration of personal data transmitted, stored, or otherwise processed, or unauthorized disclosure or access to such data.

Personal data will be treated as confidential by the Data Controller, who undertakes to inform and guarantee through a legal or contractual obligation that such confidentiality is respected by its employees, associates, and any person to whom the information is made accessible.

Rights

Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, to request its erasure when, among other reasons, the data are no longer necessary for the purposes for which they were collected.

In certain circumstances, interested parties may request the restriction of the processing of their data, in which case we may retain them for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data, as well as to its portability.

To exercise their rights, they may send a written request to Recursos Solares Alternativos S.L.U. (Sands Beach Resort), Avda. Almirall Bernat de Sarria nº 8, Edificio Evamar, 1º, 03501 Benidorm - Alicante, or an email to privacidad@sandsbeach.eu, in both cases with the reference “Data Protection”, attaching a document proving their identity.

Modifications

We will update the data protection information when there are changes in legislation or in any of the processing procedures for your personal information.

This data protection information was last reviewed and updated in March 2026.