Política de Privacidad

Introduction and General Policy

La Cala Resort is a residential and recreational estate that provides Property sales, Accommodation, Golf, Bar and Restaurant and Spa and Leisure facilities to its customers and guests.

We (La Cala Resort) take the utmost care to ensure that the personal information we obtain from you to enable us to provide these services is not used in a way that you are unaware of or not agreeable to you.

Please read this policy carefully (together with our cookies policy) as it is intended to clearly set out to you how your personal data that is collected by us is processed by us. By submitting the information, you confirm that we are authorised to process it on your behalf in accordance with this Privacy Policy.

Please note that from time to time, supplementary privacy notices may be provided to you where we wish to provide you with additional information in relation to our data processing activities. These privacy notices should be read in conjunction with this policy and are not intended to supersede this main privacy policy.

Our identity as Data Controller

Ranchos Reunidos S.A. (trading as La Cala or La Cala Resort) is the owner of the Resort. Ranchos Reunidos S.A. generally manages and administers the entire resort, with a focus on the real estate and spa activities within the resort.

Ranchos Reunidos S.A. is a data controller.

La Cala Resort also includes the following entities (all of which have the same corporate address and contact details as the parent company) which are under the direct control of Ranchos Reunidos S.A. All of the above-named entities combine as a group (under common ownership) to operate the facilities at La Cala Resort that we provide to our guests.

Company Name	Company Function
La Cala Golf Club S.L.	Owns and operates the golf facilities at La Cala Resort
Bay Management S.L.	Owns and operates the hotel facilities at La Cala Resort
Resort Catering S.L.	Operates the food and beverage facilities at La Cala Resort

Each of the above-named entities is its own separate data controller with respect to its personal data and processing activities and is responsible for its own files in this regard.

Due to the common nature of the activities, this overall privacy policy is intended to address all data processing activities that may take place and within the resort and is applicable to each of the above-named entities equally. References to ‘We’ in this document mean any or all of the above entities.

Please note that your personal data may be shared with these entities where it is necessary for us to operate our overall resort business – but only in a way that you would reasonably expect.

Our Contact Details as Data Controller

If you have any questions or comments about this policy, or the data processing activities of any of the above-named entities, please address these to the Data Protection Administrator by any of the following mediums;

Phone: +34 952 669 000

Email: [email protected]

Corporate Address: Urbanización La Cala Golf s/n, 29649 Mijas Costa, Malaga, Spain

What personal information is Collected?

Unless otherwise agreed with you, we will only collect basic personal data about you, which does not include any special categories of personal information about you.
Generally speaking, at the time you submit personal information or make a request, the intended use of the information that you submit will be apparent in the context in which you submit it and/or because the website or form states the intended purpose.

We have prepared the following table to indicate the main categories of personal data we process.

1) Data Sourced from the Website (lacala.com) or via any other direct interaction with you.

Category of Personal Data	Data Subject (Generally)	Types of Personal Data Collected
General Identity Information	Anyone person that interacts with the hotel and its associated services may provide us with some element of personal data	Examples would be; Name, Address, Mobile Phone Number, Gender, Email Address, Passport/Id … Data is generally provided via contact or booking forms.
Financial Information	The person who we have contracted with to provide the goods or service	Debit/Credit Card or Bank Account Details
Relationship Data	The person who we have contracted with to provide the goods or service	May involve survey responses, customer testimonials or complaints
C.V. and Associated Personal Data	Potential Employees	General Identity Information and personal data you include on a CV or cover letter.
CCTV	Public at Large within the entire resort	CCTV Data
Marketing and Loyalty Preferences	Our Customers and Potential Customers	Your Opt-Out Preferences for Marketing Communications.
Other Personal Data	Customers and Potential Customers	You may provide us with personal data where you wish to acquire property at the resort which may include financial information
Your Preference Information / Information you have provided to us	May be any person that interacts with our hotel and associated services	Examples would be; Specific Room Preferences or requests, Allergy Information, Function/Event Set-Up preferences, Generally, includes data that you have asked us to process on your behalf or where we have asked you to provide to us to improve our service levels and your customer experience.

2) Data Sourced from the Website (Only)

Category of Personal Data	Data Subject (Generally)	Types of Personal Data Collected
Technical Data (to compile statistical data via cookies)	Anyone that uses our website or uses our on-site wi-fi facilities	IP Address, Browser Type, Access Time and referring URLPlease refer to Cookies Policy

Website usage information is collected using Cookies. This information may be used to help us improve our site and the services we offer. Cookies are small text files that a site transfers to a visitor’s hard disk or browser for added functionality or for tracking site usage. In order to measure the effectiveness of our online presence, La Cala Resort may use cookies to determine the path users take on our site and to identify repeat visitors of our site. We do not use cookies to gather personal information such as a person’s name or e-mail address.

We only ask that you disclose enough personal data as is necessary to;

process a booking with us for general hospitality, leisure or associated services,
respond to you as comprehensively as possible where you have asked us a question or made an enquiry, made a comment or a suggestion or requested additional information about us,
manage our ongoing relationship with you, our customer,
contact you in relation to future marketing initiatives and hotel and resort promotions,
improve the quality of your visit to our website or our hotel,
enable us to function as a business, but while always ensuring that any privacy impact to you, the data subject, is minimised and that there is a fair balance between our rights as a data controller and your rights as a data subject.

Why do we collect your personal information?

We may process your personal data for many different reasons.

To comply with our legal and statutory obligations
To enter into and perform a contract for a product or a service with you
To enable us, acting in our legitimate interests, to function as a business
To enable us to carry out any processing activity of your personal data, where that processing activity requires us to obtain your consent.

We have prepared the following table to explain this in more detail to you.

Legal Basis of Processing	Explanation/Examples
1) To Comply with legal and statutory obligations	As Hoteliers, we operate within a wide ranging legislative framework that requires us to provide a duty of care to our guests. We process personal data to ensure that we meet these obligations.
2) To enter into and perform a contract for a product or a service	Generally, our customers use our website to enquire about and to make bookings for hotel accommodation, tee times and associated services. These bookings bind us contractually and there is a necessity for us to process certain personal data in order to fulfil our obligations under the contract. Please note that you will always receive a confirmation email from us in relation to your accommodation or golf booking.
3) To enable us, acting in our legitimate interests, to function as a business	Examples of us processing your data under this basis include; – Where you are a hotel customer, contacting you by email in relation to your stay (before and after) for the purposes of ensuring that we meet your expectations in making your stay as enjoyable as possible and obtaining your feedback, so we can improve our overall offering to guests. – Where you have signed up as a member of any of our loyalty schemes, or are considered to be a member of the Golf Club or Spa and Sports Club, we will contact you from time to time in relation to benefits and advantages to you as a member of the scheme(s)/club(s) – Except where we are relying on your consent for the purposes of processing personal data for marketing purposes, we process personal data for marketing purposes as is necessary for the purpose of our legitimate interests in promoting our products and services that we offer within the Resort, subject to any opt-out preferences you notify us of in respect of electronic direct marketing communications. Please be aware that you may object at any time to us processing your personal data under our legitimate interests as a data controller by a) contacting us directly at the details provided above or b) simply opting out on any communication from us by emailing [email protected]
4) Where you have provided your consent for us to process your data.	It will be clear to you when you are providing consent to us to process your personal data as you will be the person providing us with that express consent. Examples would include; – where you are providing special categories of data to us we will request your consent e.g. medical data which we may process for Spa treatments. – where you have expressly indicated to us your wish to receive our marketing communications. Please be aware that where processing of your data is based on consent you have the absolute right to withdraw your consent at any time.

What will happen if I do not provide personal data?

If we require your personal data, for example, where we intend to enter into a contract with you, and you fail to provide us with this data, we may not be able to perform our obligations under our contract with you. e.g. book you a room or tee time

Children’s Privacy & Parental Consent

Please be aware that La Cala Resort has not designed this site for and does not intend for it to be used by, anyone under the age 18.

What do we do with your personal information?

All personal data we hold about you will be processed by our staff in Spain, unless otherwise indicated.
We do not sell, rent or share your personal information to any third party joint promoters, nor use it for any unapproved commercial purposes.
On occasion, where it is necessary, we may need to share basic personal data with third parties in;

order to satisfy applicable laws and regulations, as part of a legal process or where a valid request has been made by a public body e.g. Guardia Civil
order to allow us to perform our obligations under a contract. e.g. share personal data with third party event planners or specialist service providers
order to provide you with a service you have requested from one of our trusted partners, e.g. car rental services, hairdressing appointments etc
connection with a merger, acquisition, sale corporate reorganisation or other changes in corporate control.
order to ensure that events, functions or large group bookings are hosted efficiently, your personal data may be shared with the event, function or group booking organiser. e.g. the organiser of a football club stay
relation to the general management and administration of the FBD Hotels and Resorts Group (whom we are a part of) where personal data may be shared with our Head Office or parent companies located in Ireland.
relation to the management of our business where we may share your personal data with professional advisors in the areas of IT, Legal, Insurance, Banking etc.

As has been stated earlier in the policy, it may be necessary for us to share your personal data with separate data controllers that are owned by Ranchos Reunidos S.A.

External links

La Cala Resort website may contain links to other third-party sites, plug-ins and applications. Please take note that La Cala Resort is not responsible for, nor has any control over the privacy policies or practices of such other sites. We encourage our users to be aware when they leave our site and to read the privacy policies of each and every site that collects personally identifiable information. This privacy policy applies solely to information collected and processed by La Cala Resort.

Security of your information

La Cala Resort has adopted all appropriate security measures with regards its installations, systems and files. We have done this to protect personal data from unauthorised access or improper use or disclosure. We cannot however guarantee the security of your information during transmission to our site and any such transmissions are at your own risk.

Measures have been put in place to ensure that your personal data can only be accessed where there is a business need for them to access same.

Secure Reservations:
If you decide to make an online reservation at the site, you will be linked to a reservation interface and a third party booking engine provided by our booking management system vendors;

Hotel Bookings – Net Affinity
Golf Bookings – Golf Manager

All information sent to these sites, is in an SSL session and encrypted, protecting against disclosure to third parties. We would like our Site visitors to feel confident about using the Site to plan and purchase their accommodations/green fees, so La Cala Resort is committed to protecting the information we collect. La Cala Resort has implemented a security program to keep information that is stored in our systems protected from unauthorized access.

How long do we retain your information?

Generally, we will retain all personal data securely and for as long as is necessary to ensure that we comply with the relevant legislative environment that we in the Real Estate, Hotel and Leisure sector operate in.

Please note that if you consent to being contacted for marketing and promotion purposes, any personal information we use for this purpose will be retained by us until you notify us that you no longer wish to receive this information.

Your Rights

You have the right to

request from us access to, rectification or erasure of your personal data or restrict processing concerning your data.
withdraw consent for the processing of your personal data at any time, where relevant.
object to the processing of your data as well as the right to data portability.
have your personal data erased if we do not have a legitimate reason for processing same.
You also have the right to lodge a complaint with The Spanish Data Protection Agency (AEPD) where you consider that the processing of your personal data by us infringes the European General Data Protection Regulation 2016/679 (GDPR)

Policy Modifications

La Cala Resort reserves the right to change this Privacy Policy at any time. Please revisit our site from time to time to view any material changes to this policy.