PRIVACY POLICY

Web Privacy Policy

ZAHARADREAMS S.L., as the owner of the website, collects, processes, and stores personal information through its website www.zaharaplaya.com

This information will relate to the users of the website. The information will be collected, processed, and stored in accordance with this Privacy Policy, updated in MAY 2025.

Applicable Legislation

• GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons)
• Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights.
• LSSI (Law 34/2002, of July 11, on Information Society Services and Electronic Commerce)

Data Controller

• Company Name: ZAHARADREAMS S.L.
• Tax Identification Number: B-36.618.791
• Address: NUEVOS PABELLONES DE BOUZAS, ALMACÉN Nº82 CP 36208 VIGO (PONTEVEDRA)
• Contact E-mail: oficina@zaharaplaya.com

Collected Data

Only the data strictly necessary to carry out the normal activity of the service will be collected, adhering to the principle of data minimization.

The collected data will in any case be from individuals over 16 years of age (Art. 8.1 GDPR). ZAHARADREAMS S.L. reserves the right to take appropriate measures to verify the accuracy of the user's age.

In any case, this data will be personal identifying and non-sensitive:

• Email address
• Telephone
• Name and surname(s)
• ID Card (DNI)
• Gender
• Address
• Bank details
• Nationality
• Date of Birth
• Relationship between the travelers who contract our services

Profiling:

No profiling is carried out.

Collection Methods

Personal data will be collected through the website www.zaharaplaya.com, when the user enters information in any of the fields provided for this purpose on the website. These fields are duly marked and will not collect any data until you expressly accept the management in accordance with this privacy policy.

Purpose of Data Collection and Use

The collection and use of data is carried out for the following purposes:

1. That the user can request information or contact our organization.
2. That the user can purchase our products and/or contract our services.
3. That the user can receive information about products and services related to those contracted with us.
4. To register and communicate the personal data of users of accommodation and vehicle rental services, in compliance with regulations on the protection of citizen security.

Legitimation for the Processing of Collected Data

1. The legal basis for the processing of your personal data is the explicit acceptance of its processing, management, and storage when contact is made through the website to request information about services and/or products.
2. The legal basis for the processing of personal data is the execution of a contract when purchases of our products are made through the website and/or the services offered on the website are contracted.
3. The legal basis for promotional and communication actions related to other products and services will be the consent of the interested party, which will have been previously granted in the enabled Web forms.

Data Recipients

The collected data will be communicated to:

• Tax Administration for compliance with legal obligations.
• Administrative agencies for business management.
• Financial entities for payment management.
• Collaborating third parties who are necessary for the provision of the final service.
• In addition, the personal data of users of accommodation and vehicle rental services, for compliance with legal obligations, will be communicated to the Secretary of State for Security, State Security Forces and Corps, Judicial Authority, and Public Prosecutor's Office.

International Data Transfers

No International Data Transfers will be carried out.

Data Retention Period

The data provided will be kept for as long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.

How Do We Protect Your Data?

The data is transferred and stored securely as the website and the servers where the information is stored have:

Technical Security Measures:

• Encryption with SSL protocol.
• Server-level firewall.
• Security protocols to prevent unauthorized access.
• Access control.
• Encrypted storage.

Physical Security Measures:

• Our computer systems are located in restricted areas. We only allow authorized personnel to access personal data.

Administrative Security Measures:

• Both employees and service providers sign a confidentiality agreement.

In addition, ZAHARADREAMS S.L. is committed to maintaining the confidentiality of the data and will not communicate or allow access to unauthorized third parties.

Your Rights Regarding Data Protection

Legislation recognizes, as a user who has provided their personal data, the right to access, rectify, or delete personal data, to oppose its processing, to data portability, and to limit its processing. If you wish to exercise any of these rights, you can do so by sending an email to oficina@zaharaplaya.com or by sending a letter to ZAHARADREAMS S.L. at its postal address NUEVOS PABELLONES DE BOUZAS, ALMACÉN Nº82 CP 36208 VIGO (PONTEVEDRA), indicating the rights you wish to exercise and a copy of your ID document on both sides.

We undertake to respond to the request within a maximum period of 30 working days.

Data Protection Authority in Spain

If the user wishes to assert their data protection rights and considers that we are not respecting them, they can contact the Data Protection Supervisory Authority (https://www.aepd.es/es).

Consequences of Not Accepting the Privacy Policy

In the event that the management of data according to this privacy policy is not accepted, the data will not be collected, which may mean that the service provided by ZAHARADREAMS S.L. cannot be carried out.

Changes to the Privacy Policy

ZAHARADREAMS S.L. reserves the right to modify this Privacy Policy; these modifications will be made in accordance with legislation and jurisprudence and will be reflected in this Privacy Policy.