The privacy and confidentiality of user information is important to ANPORA ISLANTILLA S.L. We are committed to the privacy and security of user information.

We may update this policy from time to time, so please check it frequently.

This Privacy Policy is intended to help you understand:

• Who is responsible for processing your data;

• What regulations apply;

• What personal information we collect about you;

• How we use, disclose, and protect your personal information;

• With whom we may share your personal data;

• How you can update, manage, export, and delete your information;

• What the retention period for your personal data is;

• What your rights are regarding personal data protection;

• How you can contact us to learn more about our privacy practices.

1.- RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA

For data protection purposes, ANPORA ISLANTILLA is considered the Data Controller regarding the files/processings collected through this website or by any other means (telephone, email, in person, on paper via forms, through legal documents, etc.). The identifying data is as follows:

ANPORA ISLANTILLA S.L. with CIF: B10773752
Data protection address: Paseo Barranco del Moro s/n, 21440, Lepe, Islantilla
Email: lopd@islantillagolfresort.com

2.- REGULATIONS

ANPORA ISLANTILLA S.L. is committed to protecting its customers' privacy in compliance with the applicable legislation (EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 regarding the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC).

3.- INFORMATION WE COLLECT ABOUT YOU

The categories of personal information we collect and how we use such information are outlined below:

3.1. Personal Information for Booking the Services Provided by Hotel Islantilla
When you book accommodation or any service provided by ANPORA ISLANTILLA (such as accommodation, golf, spa, sports, or events), the following information may be collected:

• First and last name;

• Address;

• Email;

• Telephone;

• Banking details;

• Credit card details;

• Preferences and tastes.

The legal basis for this processing is the performance of the contractual or pre-contractual relationship arising from the service booked and managing the booking.
These data will be retained for as long as the contractual or pre-contractual relationship lasts, as well as for the time necessary to comply with legal obligations.

3.2. Personal Information for Subscribing to the Newsletter
When you request to receive our newsletter, the following information may be collected:

• First and last name;

• Email.

The legal basis is the explicit consent given by the user to receive the newsletter, which includes commercial offers regarding the services provided at our facilities (e.g., golf, events, conventions, accommodation, spa, sports, entertainment, etc.).
These data will be retained until the data subject withdraws their consent.
To opt out, please contact: lopd@islantillagolfresort.com.

3.3. Personal Information for Booking Congresses, Conventions, and Events
When you request a booking for a congress, convention, or other event, the following information may be collected:

• Name of the company/legal entity and contact details;

• Name of the interested individual;

• Email address;

• Mobile phone;

• Booking date;

• Number of participants.

The legal basis is the performance of the contractual or pre-contractual relationship and managing the booking.
These data will be retained for as long as necessary for contractual and legal purposes.

3.4. Images
To comply with security obligations and protect persons and property in our facilities, we use video surveillance cameras that are installed, signposted, and include data protection information.
The images captured when accessing Hotel Islantilla Golf Resort are recorded.
The legitimate basis is the public interest in protecting persons, property, and facilities.
Images are retained for a maximum of fifteen days and are automatically deleted thereafter, though data may be blocked for legally mandated periods.
Images are shared with State Security Forces only if legally required.

3.5. Personal Information for Compliance with Royal Decree 933/2021
In accordance with EU Regulation 2016/679 (GDPR) and Spanish law (LOPDGDD), the personal data provided as part of the Traveler Registry will be processed solely to comply with the legal obligations set forth in Royal Decree 933/2021, of 26 October.
Data processed include:

• First and last name;

• Document number;

• Date of birth;

• Address;

• Telephone or email;

• Relationship (only for minors);

• Digital or biometric signature;

• Payment method;

• Payment date and card expiration details.

Legal basis: Compliance with a legal obligation (Art. 6.1(c) GDPR).
Data may be communicated to competent authorities (including security forces) and to technology service providers solely to ensure legal compliance.
Retention period: Up to 3 years or longer if required by law.

4.- MINORS
Minors may not use the services offered on the website without prior authorization from their parents or legal guardians, who are solely responsible for any actions taken by the minors, including filling out forms with personal data.

5.- WIFI NETWORK
User data is processed to provide access to the WiFi network at Hotel Islantilla Golf Resort, based on the contractual relationship between the user and the Controller.
Data is retained as long as necessary or until the user exercises their rights to object, delete, or revoke consent.
Data is only shared with third parties when legally mandated or with user consent.

6.- CASA CLUB
Data from CASA CLUB subscribers is processed for managing the Club’s services.
Data is collected via a subscription form, and the Data Controller is ANPORA ISLANTILLA S.L.
For members, data is also processed by the Spanish Golf Federation (under contract with ANPORA ISLANTILLA S.L.), accessible via a portal and an application (https://open.imaster.golf/es/islantilla/disponibilidad).
Legal basis: Performance of the subscriber contract.
Data is retained during membership and then blocked per legal requirements.

7.- SECURITY
ANPORA ISLANTILLA S.L. is committed to protecting the security of your personal information.
Data is stored on a secure server, and measures are taken to prevent unauthorized access, destruction, alteration, or disclosure.
Despite reasonable precautions, we cannot guarantee complete security due to the nature of the Internet, and we disclaim liability for unauthorized access or any related damages.

8.- OTHER USES
Any personal data you provide via electronic registration forms, email, telephone, or other means on the Website is processed exclusively by ANPORA ISLANTILLA S.L.
By providing your data, you consent to its processing for the following purposes:

• Tailoring products and services to your preferences;

• Creating statistics;

• Sending you informational, commercial, advertising, and promotional communications regarding our activities;

• If explicitly consented, sending additional commercial communications.
  You may object at any time by contacting lopd@islantillagolfresort.com.

9.- COMMUNICATIONS TO THIRD PARTIES
Your data may be communicated to:

• State Security Forces (only necessary information);

• When booking at “Double Tree by Hilton Islantilla Beach Golf Resort”: data shared with Hilton (see privacy policy: Hilton Link);

• When booking golf via (https://open.imaster.golf/es/islantilla/disponibilidad): data shared with Portal Golf Gestion S.A.;

• Service providers per legal requirements;

• Booking managers: Bookassist/Automatic Netware Ltd (Ireland) & Bookassist/Softdoc Netware SLU (Spain);

• When using spa services: data shared with Aestra Balnearios y Spa S.L.

10.- DURATION OF PROCESSING
Your data will be retained as long as necessary to fulfill the purposes for which it was collected or until you request deletion or object.
Additionally, data is retained as long as legally required.

11.- EXERCISE OF RIGHTS
You have the following rights:

• To withdraw consent;

• To access your stored data;

• To rectify inaccurate or incomplete data;

• To request deletion when data is no longer necessary;

• To object to processing (e.g., direct marketing);

• To request restriction of processing (e.g., while verifying data accuracy);

• Data portability (receiving your data in a structured, common, machine-readable format);

• To file a complaint with the Spanish Data Protection Agency (www.aepd.es).

To exercise these rights, please send a written request to:
ANPORA ISLANTILLA S.L.
Address: Paseo Barranco del Moro s/n, 21440, Lepe, Islantilla
Email: lopd@islantillagolfresort.com

12.- CHANGES TO THIS NOTICE
We continually review and update this Notice based on new technologies, services, business practices, and customer needs. Significant changes will be updated here and, if substantial, communicated via email.

13.- COOKIES
XSRF-TOKEN: Used for security – Session – Essential
hs: Used for security – Session – Essential
svSession: Used with user login – 12 years – Essential
SSR-caching: Indicates the accessing system – 1 minute – Essential
_wixCIDX: For system monitoring/debugging – 3 months – Essential
_wix_browser_sess: For system monitoring/debugging – Session – Essential
consent-policy: For cookie banner settings – 12 months – Essential
smSession: To identify logged-in members – Session – Essential
TS*: For security and fraud prevention – Session – Essential
bSession: Measures system efficiency – 30 minutes – Essential
fedops.logger.X: Measures stability/efficiency – 12 months – Essential
wixLanguage: Stores user language preference – 12 months – Functional