1. DATA CONTROLLERS. WHO WILL PROCESS YOUR DATA?

Identity Rent2ndhometenerife S.L.U. Address Calle Roques de Salmor, 5 Costa Adeje 38679 Adeje, Santa Cruz de Tenerife Email hello@baobabsuites.com Delegado de Protección de datos (DPD) Invesgia Nubelia S.L.U., dpd@nubelia.cloud

2. WHAT PERSONAL DATA DO WE PROCESS AND WHERE DO THEY COME FROM?

As a result of your relationship with us, we may process different categories of personal data, depending on the service or product contracted with us. These data may be collected by any of the means that Rent2ndhometenerife S.L.U. offers, both online and in person. The categories of data processed may be the following: Contact data. Identification data of natural persons: name and surname, ID card/identification document, telephone, email, address, signature. Special category data. Bank details. If you have booked your stay through a travel agency or online travel agency, it will communicate your data to Rent2ndhometenerife S.L.U. for the management of your booking and/or contracting. The travel agencies or online travel agencies can use your personal data for their own purposes so we will be before another Data Controller. You can obtain information about the processing of your data by these entities by going to the Privacy Policy section of the agency’s website. In any case, if a third party has provided us with your data, we will process them for the purposes set out in this Privacy Policy.

3. PURPOSE. WHAT ARE YOUR PERSONAL DATA USED FOR?

Rent2ndhometenerife S.L.U. informs you that it may process personal data for the purposes set out below, to the extent that there is a legal basis for each treatment as explained below. The main purposes for which your personal data may be used are as follows: PURPOSE More information about data processing Management of the booking and contracted services Management of your booking and/or purchase Sending booking confirmation Processing, if applicable, of the booking payment and pre-authorisations. In the event that the user provides data relating to their health in the freely worded fields of the data collection forms or by request to the call centre agent in order to manage specific services, Rent2ndhometenerife S.L.U. understands that this data is communicated expressly and voluntarily by the user, as there is no prior request for this information and will only be processed to manage the user’s request (for example, rooms adapted based on special needs). Management of requests for modification or cancellation of requested reservations. Check-in Management of the accommodation and other services such as SPA, bars and restaurants, nursery, etc. Fulfilment of legal obligations Fulfilment of accounting, legal, fiscal and administrative obligations. Compliance with Covid-19 requirements Guarantee the right to safety and health protection of all clients and collaborate with Covid-19’s monitoring, surveillance and epidemiological control. Competitions, sweepstakes and events Management of your participation in competitions, sweepstakes and other activities in which you have requested to participate. Submitting quality surveys In order to assess the level of satisfaction of users with the products and / or services contracted, Rent2ndhometenerife S.L.U. will send quality surveys in order to obtain your opinion about them and thus be able to improve the provision of its services on an ongoing basis. Commercial communications (not expressly requested) In order to offer the user products and services that may be of interest to him/her, offers will be sent about products and services related to those already contracted or that he/she has contracted in the past with Rent2ndhometenerife S.L.U.. You can object to receive these communications in each communication you receive. Commercial communications Sending commercial communications about offers unrelated to the services and / or products contracted. Rent2ndhometenerife S.L.U. may send promotional offers about certain products that the user can enjoy at the hotel (e.g., furniture in the room reserved, invitations to events, SPA, etc.). Similarly, Rent2ndhometenerife S.L.U. may send information about activities related to tourism and leisure, such as cultural activities, excursions, sporting events, etc. that may or may not be offered in conjunction with our accommodation services. Enquiries, requests or suggestions Management of the enquiry, request or suggestion made by the interested party. Sending of CVs Include it in the personnel selection processes currently open or for future processes in which the candidate may fit, and may not be used for other purposes. Furthermore, by providing your data by any of the means provided, you guarantee the accuracy of the data provided and undertake to communicate any changes that may occur in them. Remember that, when we ask you to fill in your personal data to give you access to some functionality or service, we will mark some fields as compulsory, as they are data that we need in order to be able to provide you with the service in question. Please note that if you choose not to provide us with this information, you may not be able to take advantage of those services or functionalities or submit your request to us.

4. LEGITIMATION. WHY DO WE USE YOUR PERSONAL DATA?

Rent2ndhometenerife S.L.U. is entitled to use your personal data for different reasons, in particular the following: PURPOSE – LEGITIMACY Management of the reservation and contracted services Execution of the contract Fulfilment of legal obligations Contractual performance, fulfilment of legal obligations Compliance with Covid-19 requirements Legal obligation (DECREE law 17/2020, of 29 October, on extraordinary measures in the field of tourism to deal with the effects of the health and economic crisis caused by the pandemic caused by the COVID-19) Competitions, prize draws and events Your consent Sending of quality surveys Legitimate interest of Rent2ndhometenerife S.L.U. Commercial communications (not expressly requested) Legitimate interest Commercial communications Your consent Queries, requests or suggestions If you send us a query, request or suggestion without being registered with Rent2ndhometenerife S.L.U., we will use the data provided to respond to the query based on your consent and our legitimate interest. When a registered user makes a query, request or suggestion we use your data to respond based on the execution of the contract. If you submit a request to exercise your rights as explained in section 7. RIGHTS THAT YOU MAY EXERCISE, we will use your data on the basis of a legal obligation. Sending of CVs Your consent to the voluntary sending of your curriculum vitae by electronic means or by signing the document for the processing of your personal data.

Data processing

5. HOW LONG WILL WE KEEP YOUR DATA. HOW LONG WILL WE KEEP IT?

The personal data provided will be processed and kept for the time necessary to fulfil the purpose for which they are collected. Once this period has expired, we will keep your data duly stored and protected in order to make them available to the competent Public Administrations, Judges and Courts or the Public Prosecutor’s Office for the period of limitation of any actions that may arise from the relationship maintained with the user and/or during the legally established retention periods. Once the possible actions of each case prescribe, Rent2ndhometenerife S.L.U. will proceed to the deletion of personal data. In the event that the legitimacy for the processing of your data is based on your consent, Rent2ndhometenerife S.L.U. will keep your information as long as the user does not withdraw the consent first provided. Some of the legal deadlines we must meet are as follows: DATA – DEADLINES

6. WHO DO WE PROVIDE YOUR DATA TO?

In order to fulfil the purposes indicated in this Privacy Policy, it is necessary for us to give access to your personal data to entities that support us in the services we offer you, namely: Financial entities, business consultancy, transport, etc: companies necessary for the management of your booking and stay. Recovery management entities and insurers in order to carry out the appropriate claims against tour operators or customers as a result of the legitimate interest of Rent2ndhometenerife S.L.U. in managing the collection of the services provided, as well as to ensure the outstanding amounts to be paid. External service providers, such as cloud-based services, payment processing technology services, services to carry out marketing initiatives, or services to conduct customer surveys on our behalf. Search engines Apart from those indicated, Rent2ndhometenerife S.L.U. will not transfer personal data to third parties, except by legal obligation. However, in the case of being transferred to a third party, the user will be informed beforehand, requesting express consent for such transfer. The entity responsible for the database, as well as those involved in any phase of the processing and/or the entities to whom the data has been communicated - in any case always with the corresponding authorisation granted by the user - are obliged to observe professional secrecy and to adopt the levels of protection and the necessary technical and organisational measures within their reach to guarantee the security of the personal data, avoiding, as far as possible, unauthorised access, illicit modifications, theft and/or loss of data, in order to ensure the corresponding level of security of the files, according to the nature and sensitivity of the data provided by the users of this website.

7. RIGHTS THAT YOU MAY EXERCISE

You may exercise any of the rights explained below, simply by indicating the reason for your request and the right you wish to exercise. If we consider it necessary to identify you, we may ask you for a copy of a document proving your identity. In general, you will always have the right to: Request access to your personal data, to find out what data we hold about you. Request rectification of your data: please note that, by actively providing us with your personal data by any means, you guarantee that it is true and accurate and undertake to notify us of any changes or modifications to it. Request that we delete your data to the extent that they are no longer necessary for the purpose for which we need to process them as we have informed you above, or to the extent that we no longer have the legitimacy to do so. Request that we restrict the processing of your data, which means that in certain cases you may ask us to temporarily suspend the processing of your data or to keep it longer than necessary when you may need it. Request portability of your personal data. This means that you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, so that it can be transmitted to another entity directly, where technically feasible. Request the right to object to the processing of your data where the processing of your data is based on our legitimate interest. Request not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on him or her or significantly affects him or her in a similar way. You may request to exercise your right by the following means: Postal mail, sending your request or delivering it in person at: Calle Roques de Salmor, 5 Costa Adeje 38679 Adeje, Santa Cruz de Tenerife. By e-mail: hello@baobabsuites.com Rent2ndhometenerife S.L.U. must reply to the request within one month of receipt of the request. This period may be extended for a further two months if necessary, taking into account the complexity and number of requests. You have the right to withdraw the consent given at any time by sending an e-mail to hello@baobabsuites.com. The withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal of consent. If you consider that your right to the protection of your personal data has been violated, you may lodge a complaint with the Spanish Data Protection Agency, www.aepd.es.

8. WHAT HAPPENS IF YOU PROVIDE US WITH THIRD PARTY DATA OR IF A THIRD PARTY HAS PROVIDED US WITH YOUR DATA?

There are occasions when you may provide us with data of third parties, for example, contact persons. If you provide us with Personal Data of third parties you warrant that you have informed them about the purposes for which and the way in which we need to process their personal data. If you have booked your stay through a travel agency or online travel agency, it will communicate your data to Rent2ndhometenerife S.L.U. for the management of your booking and/or contracting. The travel agencies or online travel agencies can use your personal data for their own purposes so we will be before another Data Controller. You can obtain information about the processing of your data by these entities by going to the Privacy Policy section of the agency’s website. In any case, if a third party has provided us with your data, we will process them for the purposes set out in this Privacy Policy.

9. CHANGES TO THE PRIVACY POLICY

We may modify the information contained in this Privacy Policy when we deem it appropriate, for example in compliance with legislative or jurisprudential changes. In the event that we do so, we will notify you in various ways through changes to the website, or we will notify you at your email address when the change in question is significant to your privacy, so that you can review the changes, assess them and, if appropriate, object or unsubscribe to any service or functionality.

10. ANY QUESTIONS ABOUT THIS POLICY OR YOUR RIGHTS?

If you have any questions or concerns about this privacy policy or how to manage any personal data you have provided to us, you can contact us at hello@baobabsuites.com.