PRIVACY POLICY

CORAL HOTELS TRADEMARK
This privacy policy applies to the companies operating the hotels and apartments under the Coral Hotels trademark: Breogan, S.L., Explotaciones Turística Compostela, S.A., Canary Island Paradise, S.L., Inversiones y Explotaciones Compostela, S.L., as well as the service provider company Breogan Management, S.L.

DATA CONTROLLERS
When a user makes a reservation or any other transaction on this website, as well as in any of the hotel establishments where personal information is required, such information will be processed according to the establishment where the reservation and/or processing takes place:

Breogan, S.L. – B38057006
• Coral Compostela Beach Golf II
• Coral Cotillo Beach
• Coral Los Alisios
• Coral Los Silos
• Coral Suites & Spa
• Coral Teide Mar
• Coral La Quinta
• Contact Forms
• Club Coral Happiness Form
• Newsletter Subscription Form
• Company Registration Form
• Agency Registration Form
• Online Check-in

Explotaciones Turística Compostela, S.A. – A38063251
• Coral Compostela Beach
• Contact Forms
• Club Coral Happiness Form
• Newsletter Subscription Form
• Company Registration Form
• Agency Registration Form
• Online Check-in

Canary Island Paradise, S.L. - B38301339
• Coral Dream
• Coral Ocean View
• Contact Forms
• Club Coral Happiness Form
• Newsletter Subscription Form
• Company Registration Form
• Agency Registration Form
• Online Check-in

Inversiones y Explotaciones Compostela, S.L. - B38051637
• Coral California
• Contact Forms
• Club Coral Happiness Form
• Newsletter Subscription Form
• Company Registration Form
• Agency Registration Form
• Online Check-in

Breogan Management, S.L. - B38393484
• Coral Villas La Quinta
• Job Application Form

DATA PROCESSING INFORMATION
Below is a breakdown of each type of data processing carried out on this website, as well as additional information regarding data processing in hotel establishments:

A. DATA PROCESSING ON THIS WEBSITE

RESERVATIONS

• Purpose: Managing accommodation reservations made by direct customers and intermediaries.
• Legal Basis: GDPR Article 6.1(b) – Processing necessary for the execution of a contract in which the data subject is a party or for the implementation of pre-contractual measures at their request (hospitality contract).
• Data Sharing: Competent authorities (Royal Decree 933/2021); web reservation manager; Coral Hotels companies; IT service providers (software and hardware).
• Data Retention: Subject to Royal Decree 933/2021, which establishes record-keeping obligations for hospitality services.

ONLINE PRE CHECK-IN

• Purpose: Managing the self-check-in process through the online check-in link.
• Legal Basis:
o GDPR Article 6.1(b) – Processing necessary for the execution of a contract in which the data subject is a party (self-check-in).
o GDPR Article 6.1(c) – Processing necessary to comply with a legal obligation.
• Data Sharing: Competent authorities (Royal Decree 933/2021); Coral Hotels companies; IT service providers.
• Data Retention: Subject to Royal Decree 933/2021.

CLUB CORAL HAPPINESS

• Purpose: Managing membership applications and benefits of Club Coral Happiness.
• Legal Basis:
o GDPR Article 6.1(a) – Explicit consent of the data subject.
o GDPR Article 6.1(b) – Processing necessary for contract execution (Club Coral Happiness membership).
• Data Sharing: Coral Hotels companies; service providers.
• Data Retention: Throughout the contractual relationship and legally mandated retention period for possible claims.

COMMERCIAL COMMUNICATIONS

• Purpose: Sending newsletters, hotel promotions, and notifications.
• Legal Basis: GDPR Article 6.1(a) – Explicit consent of the data subject.
• Data Sharing: Coral Hotels companies; service providers; mass communication and reservation management providers.
• Data Retention: Until the data subject requests removal.

AGENCIES & COMPANIES

• Purpose: Managing applications for registration as an agency or company.
• Legal Basis:
o GDPR Article 6.1(a) – Explicit consent of the data subject.
o GDPR Article 6.1(b) – Processing necessary for contract execution (agency or company registration).
• Data Sharing: Coral Hotels companies; service providers.
• Data Retention: Throughout the contractual relationship and legally mandated retention period.

WIFI ACCESS

• Purpose: Managing guest access to the hotel and apartment WiFi network.
• Legal Basis: GDPR Article 6.1(a) – Explicit consent of the data subject.
• Data Sharing: Law enforcement agencies; WiFi provider; Coral Hotels companies; service providers.
• Data Retention: Stored as necessary to fulfill the processing purpose and determine any legal responsibilities.

JOB APPLICATIONS

• Purpose: Managing job applications submitted to Coral Hotels.
• Legal Basis: GDPR Article 6.1(a) – Explicit consent of the data subject.
• Data Sharing: Coral Hotels companies.
• Data Retention: 2 years from the date of submission.

B. ADDITIONAL INFORMATION

GUESTS

(Check-in)

• Purpose: Managing hotel and apartment check-ins and check-outs.
• Legal Basis:
o GDPR Article 6.1(b) – Execution of a hospitality contract.
o GDPR Article 6.1(c) – Compliance with legal obligations.
• Data Sharing: Competent authorities; reservation managers; Coral Hotels companies; IT service providers.
• Data Retention: Subject to Royal Decree 933/2021.

VIDEO SURVEILLANCE
• Purpose: Security monitoring and workplace supervision.
• Legal Basis: GDPR Article 6.1(f) – Legitimate interest.
• Data Sharing: Law enforcement agencies; security system maintenance companies.
• Data Retention: 30 days from image capture.

SUPPLIERS & INVOICING

• Purpose: Managing administrative tasks, orders, payments, and invoicing.
• Legal Basis:
o GDPR Article 6.1(b) – Contract execution.
o GDPR Article 6.1(c) – Compliance with tax obligations.
• Data Sharing: Tax authorities, banks, auditors, Coral Hotels companies, IT service providers, financial and legal advisors.
• Data Retention: Stored as necessary for legal and contractual compliance.

SOCIAL MEDIA

Coral Hotels uses social media to share relevant information. Any personal data provided through social media will be processed in accordance with this privacy policy.

DATA SUBJECT RIGHTS & DATA PROTECTION OFFICER
You may exercise your ARCO-POL rights (Access, Rectification, Erasure, Portability, Restriction, and Objection) at any time by sending a written request, along with proof of identity, to the Data Protection Officer at:
Address: Avda. Noelia Afonso, Nº10, Playa de Las Américas, 38660 Arona - S/C de Tenerife
Further information on data processing is available on request at
lopd@coral-hotels.es.
If unsatisfied, you may file a complaint with the Spanish Data Protection Agency (AEPD) at www.agpd.es.

CHANGES TO THE PRIVACY POLICY

Coral Hotels may update this policy in accordance with applicable laws. Changes will be published to keep users informed.
Last updated: March 14, 2025
© CORAL HOTELS. All rights reserved.