Privacy Policy
Last updated: 12/06/2026
1. Data Controller
The Data Controller is Atardecer.
Address: Camino El Rompimiento N1, 35571 Macher, Lanzarote, Spain.
Email: info@fincaisolina.com
This Privacy Policy applies to the website www.fincaisolina.com.
2. Scope of this Privacy Policy
This Privacy Policy is provided in accordance with Regulation EU 2016/679, GDPR, and the applicable Spanish data protection legislation.
This Privacy Policy applies only to the website www.fincaisolina.com and does not apply to third party websites or services that may be accessed through external links.
3. Types of Data Processed
While browsing the website, the following categories of personal data may be processed:
- navigation data;
- IP addresses and other technical identifiers;
- browser and device information;
- data relating to visited pages and interactions with the website;
- data collected through cookies or similar tracking technologies;
- data voluntarily submitted through contact forms, newsletter forms or the booking system.
The website may also process identification and contact data such as name, surname, email address, telephone number and any other information voluntarily provided by the user.
4. Purposes of Processing
Personal data may be processed for the following purposes:
- to allow the technical operation of the website;
- to ensure website security and prevent unauthorized access or abuse;
- to improve website performance and user experience;
- to collect statistical information on website use;
- to manage contact requests and information requests;
- to manage availability requests and bookings;
- to send newsletters and promotional communications, subject to user consent;
- to comply with legal obligations;
- to protect the rights of the Data Controller;
- to measure the effectiveness of advertising campaigns and carry out marketing activities, subject to user consent.
5. Legal Basis for Processing
The processing of personal data is based, depending on the case, on one or more of the following legal bases:
- the consent of the data subject;
- the performance of pre contractual measures requested by the data subject;
- the performance of contractual obligations;
- compliance with legal obligations;
- the legitimate interest of the Data Controller;
- the establishment, exercise or defense of legal claims.
In particular:
- technical cookies are based on the technical need to provide the service requested by the user;
- Google Analytics, Meta Pixel and marketing tools are based on the user’s consent;
- contact requests and booking requests are based on the user’s request and on pre contractual measures;
- newsletter subscription is based on the user’s consent.
6. Methods of Processing
Personal data is processed using electronic and telematic tools, according to methods strictly related to the purposes described above and in compliance with the principles of lawfulness, fairness, transparency, minimization and security provided by the GDPR.
The Data Controller adopts appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
7. Nature of Data Provision
Except for navigation data, the provision of personal data by the user is generally optional.
Failure to provide the data required for specific services may make it impossible to manage contact requests, newsletter subscription or bookings.
8. Recipients of Personal Data
Personal data may be processed, within the limits of the purposes described above, by:
- authorized personnel of the Data Controller;
- hosting providers;
- technical and IT service providers;
- security and maintenance service providers;
- newsletter service providers;
- booking system providers;
- analytics and advertising service providers;
- CDN and traffic protection service providers;
- consultants and professionals assisting the Data Controller;
- public authorities or other parties where disclosure is required by law.
These parties may act, depending on the case, as data processors or independent data controllers.
An updated list of any data processors may be requested from the Data Controller.
9. Place of Processing and Data Transfers
Personal data is processed at the premises of the Data Controller and on the servers of the service providers used by the website.
Where certain services involve the transfer of personal data outside the European Economic Area, such transfer will take place in accordance with Articles 44 and following of the GDPR, using the safeguards provided by applicable law, including adequacy decisions, standard contractual clauses approved by the European Commission or other lawful transfer mechanisms.
10. Data Retention Period
Personal data is retained for the period strictly necessary to achieve the purposes for which it was collected, unless longer retention periods are required by law or by the need to protect the rights of the Data Controller.
In general:
- technical and navigation data is retained for the time necessary for the operation, security and analysis of the website;
- data processed on the basis of consent is retained until the consent is withdrawn, unless another legal basis applies;
- data submitted through contact forms or direct requests is retained for the time necessary to manage the request and any related obligations;
- data relating to bookings is retained for the time necessary to manage the booking and comply with administrative, accounting and legal obligations;
- data relating to newsletter subscription is retained until consent is withdrawn or cancellation is requested.
11. Cookies and Tracking Technologies
The website uses technical cookies necessary for its operation and, subject to the user’s consent, statistical, marketing and profiling cookies.
In particular, the website may use:
- technical cookies necessary for the operation of the website;
- statistical cookies related to Google Analytics 4;
- advertising and remarketing cookies related to Meta Pixel;
- cookies related to embedded content from YouTube, Vimeo and Google Maps;
- technical and security cookies related to Cloudflare;
- cookies necessary for the booking system;
- cookies necessary for newsletter management.
Consent is managed through the cookie banner available on the website.
For more information about the categories of cookies used, their purposes, duration and consent management, users are invited to consult the Cookie Policy.
12. Third Party Services
Google Analytics 4
The website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, to collect aggregated statistical information about the use of the website.
The data collected may include information about visited pages, duration of visit, device used, browser and other technical navigation data.
Google Analytics is activated only with the user’s consent where required by applicable law.
Meta Pixel
The website uses Meta Pixel provided by Meta Platforms Ireland Limited to measure the effectiveness of advertising campaigns and to provide personalized advertising content.
Processing through Meta Pixel takes place only with the user’s consent.
The website may include links or buttons that allow users to contact the Data Controller directly through WhatsApp.
Use of this service may involve the processing of personal data by WhatsApp Ireland Limited according to its own terms and privacy policy.
Google Maps
The website may embed interactive maps provided by Google.
Use of these maps may involve the collection of technical data and navigation information by Google.
YouTube and Vimeo
The website may embed video content from YouTube and Vimeo.
Viewing embedded content may involve the collection of personal data and technical information by the respective providers.
Cloudflare
The website uses Cloudflare Inc. for Content Delivery Network services, performance optimization, protection against abuse and traffic security.
Cloudflare may process IP addresses, technical device information and navigation data necessary to provide the service.
Newsletter
If the user subscribes to the newsletter, the personal data provided will be used to send informational, promotional or commercial communications relating to the services offered by the Data Controller.
Subscription is optional and consent may be withdrawn at any time through the unsubscribe link included in the communications received or by contacting the Data Controller.
Booking System
The website provides tools that allow users to request information, check availability or make bookings.
The data provided will be processed only for the management of the booking, customer assistance, administrative obligations and any applicable legal obligations.
Contact Form
The website provides contact forms that allow users to send requests to the Data Controller.
The data provided through the contact forms will be processed only to respond to the user’s request and to manage any related communication.
13. Rights of the Data Subject
Under Articles 15 and following of the GDPR, the user may exercise the following rights at any time:
- to obtain confirmation as to whether or not personal data concerning the user is being processed;
- to access personal data;
- to request rectification or updating of personal data;
- to request erasure of personal data in the cases provided by law;
- to obtain restriction of processing;
- to object to processing in the cases provided by law;
- to receive personal data in a structured, commonly used and machine readable format, where applicable;
- to withdraw consent, without affecting the lawfulness of processing based on consent before withdrawal;
- to lodge a complaint with the competent supervisory authority.
14. How to Exercise Rights
Users may exercise their rights by sending a request to the Data Controller at the following email address:
info@fincaisolina.com
The Data Controller will respond within the time limits provided by applicable law.
15. Supervisory Authority
The user has the right to lodge a complaint with the competent supervisory authority.
For subjects established in Spain, the competent authority is:
Agencia Espanola de Proteccion de Datos AEPD
Calle Jorge Juan, 6
28001 Madrid, Spain
Website: www.aepd.es
16. Legal Defense
The user’s personal data may be used by the Data Controller to defend its rights in court or in the preliminary stages of possible legal proceedings, as well as for the establishment, exercise or defense of legal claims.
17. System Logs and Maintenance
For operation, security and maintenance needs of the website and of any third party services used, system logs and other technical information may be collected. Such information may include personal data, such as the IP address.
18. Changes to this Privacy Policy
The Data Controller reserves the right to modify, update or supplement this Privacy Policy at any time, including as a result of legal, technical or organizational changes.
Changes will be published on this page with indication of the last update date.
19. Contacts
For any information relating to the processing of personal data or to exercise the rights provided by the GDPR, users may contact the Data Controller at:
Atardecer
Camino El Rompimiento N1, 35571 Macher, Lanzarote, Spain
Email: info@fincaisolina.com
