This Policy (hereinafter, the "Privacy and Cookies Policy") regulates the Privacy and Cookies Policy of Web Platform https://www.ebooking.com (hereinafter, "the Platform"), under the ownership of Domibay, S.L. (hereinafter, Domibay), with e-mail address of contact for the purposes of this policy: firstname.lastname@example.org.
Subject to the above, it should be underlined that this Platform can be connected or affiliated with platforms or differentiated systems of reserves under the ownership and/or managed by third-party partners of Domibay, Domibay operating, in such cases, as an advertising service system or provider generating reserves in cooperation with the above mentioned third parties. In such a way that, in these cases, the services shall be contracted by the user of the Platform directly with a data controller other than Domibay, and in accordance with the specific terms and conditions established for each case, and we therefore recommend that the customer carefully reads not only our Privacy and Cookies Policy, but also the terms, conditions and policies of such third parties concerning the specific reserves which can be made through the system offered by this Platform. For further information on these matters, please consult section 3 of this Policy.
This Privacy and Cookies Policy will be translated into various languages in accordance with the needs of the activity of Domibay and its corporate policy of quality, services and customer support. Subject to the above, in case of conflict in connection with its interpretation or the application of the conditions contained in this policy, the parties agree that the Privacy and Cookies Policy in Spanish shall prevail over the versions in any other language for all legal purposes.
1. Platform: Applicable legal regime, use and purpose
The Platform is a mechanism of interaction, communication and support that Domibay provides to the users of Internet in order to offer them sufficient, adequate legal information concerning its activity, products and services in relation with its legitimate economic and corporate activities, which are governed by the applicable Spanish legislation, as regards:
- The prestation of services of the information society, of a basic nature, in accordance with Law 34/2002, of 11 July, of services of the information society and of e-commerce.
- Personal data processing, in accordance with the Spanish and European legislation in force on the protection of personal data of natural persons. In particular, as from 25/05/2018, the Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (hereinafter, the "GDPR) shall apply directly, as provided for by this instrument.
In any case, the user undertakes to make an adequate and lawful use of the Platform, as well as of the contents, products and services provided on it, either offered directly by Domibay, or by third-party partners, in accordance with the legislation applicable from time to time.
Additionally, the user of the Platform undertakes specifically to:
- Guarantee that all the data communicated through the Platform, either to Domibay or to third-party partners of Domibay are authentic, true, updated and accurate, otherwise the user shall be held solely responsible.
- Use the Platform and the associated applications (apps) exclusively for the purposes and functionalities established by Domibay or third-party partners, such functionalities being presented "AS IS" by Domibay or, if it is the case, by the third-party partners of Domibay, the user being forbidden from using the Platform and associated apps for any purpose or through any mean other than those presented on them.
- Make a lawful and legitimate use of the Platform, its functionalities, contents and services avoiding non-authorised, fraudulent, illegal or illegitimate use, and avoiding infringing this policy and the applicable legislation, or harming the legitimate rights and interests of Domibay, or of any other third party who may be affected in result of such action.
- Not to harm the systems or elements associated with the Platform, of its suppliers or of third parties, or attempt to breach their security or authentication measures, carry out any action that leads to a disproportionate or unnecessary saturation of the infrastructure or of the communications environment related with the Platform, attacking it in way. Domibay can adopt all the preventive or corrective measures that may be necessary to protect its interests or the interests of its partners, in order to guarantee the proper functioning of the Platform and of the various specific functionalities and services provided by it. It can also implement mechanisms of detection and prevention of fraud and of attacks to ensure the correct use and the protection of the Platform, of its functionalities/services and of the information that may flow through it.
- Not to introduce or to disseminate through the Platform computer virus or malware which may cause damage.
- Not to attempt to access, use and/or manipulates the data of Domibay or of which Domibay is the controller, or of third-party suppliers and of other users.
- In particular, and for guidance purposes and not being exhaustive, the user undertakes not to transmit, disseminate or provide to third parties information, data, contents, messages which may lead to the infringement of rights of Domibay or of third parties or, in general, which may be contrary to the law, moral or public order.
- Not to access without authorisation and not to interact with a false identity, making or not an abusive use of the identity of third parties or using a profile or carrying out other action that may generate confusion or be misleading in relation to the correct identification of the user in question.
This Privacy and Cookies Policy is directed to the users of the Platform and concerns the personal data processing.
In any case, it is emphasised that this Platform is directed to user over the age of 18 and is forbidden to minors.
The information and personal data provided by the users who intend to navigate or register on the Platform must be:
- Sufficient, but adjusted, limited and proportionate to the legitimate processing purposes described by Domibay, with full respect for the principles of purpose limitation and data minimisation (article 5.1, sub-paragraphs b) and c) of the GDPR).
- Accurate, updated and true, in such a way that the identity, capacity and, if necessary, the representation of the user can be adequately confirmed, and, in each case, the data processing can be adjusted to the specific needs and the real situation of the users. All the above respecting the principle of accuracy of the personal data (5.1 sub-paragraph d) of the GDPR).
The users shall be fully responsible for the correct use of their user accounts and, if appropriate, the passwords. If the registered user considers that the security of his/her account and/or associated passwords has been compromised, he/she can immediately contact Domibay using the contact details indicated in the beginning of this Policy and report the situation or the incident in question, in order for Domibay to adopt the appropriate measures as from the moment of the communication made by the user. The users who are the holders of such accounts shall be responsible for the damages and losses associated to an inadequate use and a personal management of the accounts and associated passwords, fully releasing Domibay or any other third party which this entity relates with as a result of the above from any responsibility.
3. Who is the controller?
In accordance with articles 13 and 14 of the GDPR, the controller for the data processing associated with the navigation of the users of the webpage https://www.ebooking.com is Domibay, S.L., with registered office at Arrecife - Lanzarote, calle Fajardo, nº 12, 1º planta, oficina 8, the Palmas (35.500), Spain, and holder of the Tax Identification Code No B-35.971.498. It is registered in the Companies Registry Office of Lanzarote, in volume 386, book 0, folio 191, sheet IL-9272 and with e-mail address of contact for the purposes of this policy: email@example.com.
Subject to the above, as mentioned before, this Platform can be connected or affiliated with other platforms or reserve systems under the ownership and/or managed by third-party partners of Domibay (hereinafter, "the partners"), in particular, Expedia or EAN.COM L.P. (reserves of lodging) forming a part of Domibay of the network called "Expedia Affiliate Network (EAN)", RentalCars or TravelJigsaw Limited (rental of vehicles or rent-a-car), and GetYourGuide Deutschland GmbH (reserves of activities), Domibay operating in these cases as a mere advertising service system or provider of generation of reserves in cooperation with such third parties. In these cases, the partners are the controllers vis-à-vis Domibay, and therefore they shall be directly liable to the users in relation with the data processing that they may carry out. In these cases, Domibay shall only operate as platform or affiliated webpage or webpage of provenance, enabling the relevant contact between the user and the partner and, as controller, it shall inform in a clear and transparent manner the user of its specific terms, conditions and policies, both for the contracting of services, and the processing of his/her personal data, the user contracting directly the relevant services with such partners. In any case, such partners can communicate to Domibay certain personal data of the users associated to the contracts concluded through https://www.ebooking.com, in order for Domibay to perform others services or supplies in connection with the contracts concluded on behalf of such partners, to control the satisfaction level of the users about its Platform as regards the information, contents or services offered through it and, if applicable, with the corresponding authorisation of the user, to be able to send him/her information which may be of interest to him/her concerning the services or goods contracted through the Platform (promotional or advertising purposes).
4. 4. For what purposes does Domibay process your personal information?
As a controller differentiated from its partners, Domibay shall process the personal data provided by you through the Platform for the following purposes:
- Enable you to navigate through the Platform, as well as to use, I f applicable, the associated apps, thus allowing the access to the information and contents provided therein and directly offered either by Domibay, or by its third-party partners, including any information on promotional or advertising campaigns to contract goods and services of Domibay or its partners (advertising intermediation services). Domibay does not control, review or offers on behalf of such partners tourism goods or services, therefore you contact and contract such third parties directly, and such third parties are the ones determining the terms and conditions of access, the contracting and/or processing of your personal data in each case, reason why Domibay excludes to the extent permitted by the applicable legislation any responsibility in this connection.
- To fully process the requests or petitions submitted by you in connection with the Platform, including any subscriptions to communications or information newsletters on initiatives or offers provided by Domibay or by the partners.
- If applicable, it can assess the satisfaction level and the quality level concerning the information, contents or services offered on the Platform by Domibay or by the partners through questionnaires in which you can participate if you so wish.
- To receive ads on webpages other than this one (retargeting), based on your background of navigation through the Platform, and it can block the cookies associated with this action at any moment. For further information, please consult section 12 of this Policy.
- In case it is necessary for advertising or promotional purposes, and you can withdraw your consent or oppose this processing at any moment if you so wish.
- For statistics purposes and for purposes of market analysis.
- To process the data on your computer devices, such as IP address, the type of browser and (for the users who use a mobile device) the Unique Device Identifier, the operating system, the version of the application and the coordinates of latitude/longitude. In general, these data are processed as non-identifiable or anonymous information but are considered to be personal data on their own or combined. In these cases, the data are processed in accordance with the European data protection laws.
- If necessary, to detect and analyse possible cases of fraud, attacks and/or other activities not permitted or illegal against the Platform.
- To apply the security, technical and/or organisational measures on the personal data of the users that may be necessary taking into consideration the risks detected by Domibay in connection with your rights at each moment, including the encryption of personal data and other measures applied to certain processing operations concerning the data of the users of the Platform.
- To adopt all the protection measures of protection which are applicable in accordance with the legislation in force, including the possible anonymisation of your personal data applying for this purpose the adequate techniques available for this purpose. Therefore, in this context, anonymised and pseudonymised processing can also be carried out for a better protection of your personal data.
In case you do not agree with such processing purposes, we urge you to immediately leave our Platform. Otherwise, for example, if you accept this policy, or simply continue navigating through the Platform, previously knowing the information contained in this policy, it will be considered that you unambiguously give your consent to the previously indicated processing purposes.
5. Storage of your personal data by Domibay
Your user data will be stored for the period that is necessary to ensure you a correct navigation, access and use of the contents, products and services provided on the Platform that are requested or visited by you, all this in accordance with the provisions of this Privacy and Cookies Policy and the applicable legislation. Subject to the above, Domibay can store, in any case, your personal data for a period of 3 years as from collection, in accordance with the personal data protection legislation and in order to analyse the possible responsibilities for the data processing made through the Platform.
6. Legal ground for the processing carried out by us
The legal ground for the processing is mainly your consent, and therefore, after you have been informed of this policy, if you accept it, or you simply continue navigating through the Platform, it will be considered that you give your unambiguous consent to the processing of your personal data for the above-mentioned purpose. Therefore, if you do not agree with this Policy or with the indicated processing purposes, please do not continue navigating and immediately leave the Platform. This is irrespective of the existence of a legitimate interest of Domibay in the processing, in accordance with the article 6.1 f) of the GDPR.
You are entitled to, at any moment, chose the processing and the destination of your data, and you have the right to withdraw your consent at any moment, although such withdrawal will not affect in any way the lawfulness of the prior processing carried out by Domibay.
In any case, you can be prevented by Domibay to use the Platform and the associated services, contents and functionalities associated in case you do not accept this policy, or do not give your consent to the processing of your personal information in accordance with the provisions thereof.
The acceptance of this policy is independent to the possible acceptance of the specific legal terms and conditions which may govern each contracting with the partners that operate through our Platform.
7.7. Who are the recipients of your personal data? Who are the recipients of your personal data?
As we have already explained in section 3 of this Policy, through our Platform you can directly contract with third-party partners and, in this case, you provide your information and personal data directly to them, therefore we inform you that in general your personal data collected through the Platform will not be transmitted to third parties without previously informing you of which is the exact data that will be transmitted, the type of the transferors or the recipients of your data, of its activity and of the specific processing purposes for which that the above-mentioned transferors can use your data. For these purposes, we inform you that Domibay can communicate your personal information to reliable advertising companies for them to provide you offers, advantages or promotions which may be of interest to you based on you background of navigation and/or of purchases operated through our Platform. You can withdraw your consent to this processing at any time, and you can also oppose the processing at any time.
This is irrespective of the possibility of such partners of communicating us certain personal data that concerns you for the purposes described in section 3 of this Policy, and of the existence of other recipients of personal data that operate vis-à-vis Domibay as data processors (services of data hosting, sub-contracted advertising companies, sub-processors, etc.).
Additionally, we inform you that in general the international transfer of your personal data is not envisaged, and if that is the case, the necessary measures shall be adopted in accordance with the GDPR.
8.8. Your personal rights
You can exercise your rights of access, rectification, suspension, limitation of the processing, portability of data, opposition and the right not to be subject to a decision based solely on the automated processing, by sending a written communication using the e-mail address firstname.lastname@example.org with Ref. "Exercise of Rights" together with, if necessary, a copy of your national identity document or equivalent identifying document (passport, Identification Number of Foreigner….). In case you consider that your personal rights are not duly protected, you can submit a complaint to the competent supervisory authority, in this case, the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
If needed, we inform you that we have standard forms for the exercise of such rights, therefore all you need to do is to write us also using the email address email@example.com with Ref. "Exercise of Rights" and request them.
9. Security of the personal data
Domibay has adopted and applies the security levels required by the applicable legislation in relation with the personal data of which it is the controller, according to the corresponding level of risk, and seeks to implement and/or apply additional technical and organisational means and measures of protection, in order to reinforce the general security of the processing with personal data, systems, communications environment and corporate organisation, as well as to guarantee the due protection against non-authorised or unlawful processing and against accidental loss, destruction or damage (principle of integrity and confidentiality). Nevertheless, the user should be aware of the fact that the security measures on the Internet are not at all inexpungable and correspond to the state of technology at each moment and to its cost of application.
For these purposes, criteria of application and security measures shall be considered, as well as the remaining obligations of security associated with the GDPR, in particular the provisions of article 32 of the GDPR.
10. Duty of secrecy and confidentiality
Domibay undertakes to comply with the duty of secrecy and confidentiality in relation to the information and personal data provided by the users of the Platform, and of which it is the controller, in accordance with the applicable legislation and the level of risk at each moment.
11. Cookies Policy
As established by Recital 30 of the GDPR, natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses, cookie identifiers or other identifiers such as radio frequency identification tags. This may leave traces which, in particular when combined with unique identifiers and other information received by the servers, may be used to create profiles of the natural persons and identify them. For this reason, Domibay has a cookies policy in line with the applicable legislation.
11.1. Applicable legislation
Article 22 of Law 34/2002, of 11 July, on services of the information society and e-commerce (LSSICE), concerning the rights of the recipients in electronic commercial communications, the suppliers of services can only use devices for the storage and recovery of data in terminal equipment of the recipients, when they have given their prior informed consent.
For this purpose, such recipients and the final users must be provided with a clear and complete information about their use, in particular, about the data processing purposes, in accordance with the provisions of personal data protection legislation. Thus, whenever it is technically possible, and it is considered to be an effective measure, the consent of the recipient for the acceptance of the data processing may be given using the adequate parameters of the browser or of other applications.
The above shall not prevent the possible storage or access of a technical nature with the sole purpose of making a transmission or communication through a network of electronic communications or, to the extent strictly necessary, for the provision of a service of the information society expressly requested by the recipient.
11.2. Consent of the user and cookies: general rule and exception
The only cookies that are excluded from such consent are those which exclusively allow the communication between the equipment of the user and the network and, strictly, those used to supply a service requested by the user. For example, the following cookies would be excluded: the so-called "technical cookies" (e.g., those necessary for the navigation through the platform or application); "cookies of customisation or configuration" (e.g., those which allow the webpage to recognise the language of the user, etc.); and "security cookies" (e.g. those which allow to detect failed and repeated attempts to connect to a website).
11.3. Are Cookies used on the Platform? Which ones?
Cookies are used on the Platform, in particular, files or devices which are downloaded in the user’s terminal equipment (personal computer, smartphone, tablet, mobile terminals and devices, etc.), irrespective of its character, and with the main purpose of guaranteeing the proper functioning of the Platform (remind the selected language, and similar functions). Thus, in general, and subject to provisions set out below, the cookies shall allow the navigation through the Platform, as well as certain utilities and services provided therein, and therefore attention is drawn to the fact that their deactivation or blocking may affect the navigation or their correct or full use by the user.
11.4. Which Cookies do we use on the Platform?
The cookies can be own cookies and cookies of third parties. The own cookies are those that are sent or used in the user’s terminal equipment from the Platform (editor) being managed by it, while the cookies of third parties are those sent or used in the user’s terminal equipment form other domains or equipment not managed by the Platform (editor), but by other entity which processes the data obtained through the cookies.
Additionally, those cookies can be cookies of ID session or persistent cookies. The former are a type of cookies designed to collect and store data as the user accesses the Platform with the main purpose of storing information which is stored only for the provision of the service requested by the user only once. Nevertheless, with the latter the data are stored in the user’s terminal and can be accessed and processed for period which is defined by the responsible for the cookie.
There also technical cookies which allow the user to navigate through the Platform and use the various options or services offered thereon, for example, to control the traffic and the communication of data, to identify the session, to access to restricted-access areas, to remind the elements contained in a contractual request, to use security elements during the navigation, to store contents for the dissemination of videos or sound or to share contents through social media.
There are also cookies of customisation, which are those that allow the user to access the service with some pre-defined characteristics according to certain criteria associated with its own terminal, for example, the type of browser through which the user accesses the service, the regional configuration from which he/she accesses the service, etc.
Similarly, cookies can have a statistical or information purpose for the editor in connection with the specific use that the users make of the Platform and of the contents or services provided therein.
Below there is a summary information of the specific cookies currently used by Domibay on the platform:
Cookies of third parties:
The information collected through the cookies which are used on the Platform can be used, both by the data subject, and by a third party that provides a service to such data subject.
11.6. Management and configuration of the Cookies
Based on the information provided in this policy, we offer information on how to carry out the management of the cookies used on the Platform through the various options that the most common browsers offer.
12. Term and amendment of the Privacy and Cookies Policy
This policy is in force since 25 of april of 2018. Domibay reserves the right to amend this policy, to adapt it to future legislative, doctrine or case law developments which may be applicable, or for technical, operating, commercial, corporate and business reasons, previously and reasonably informing the users of the changes introduced whenever possible. In any case, we recommend you to, every time you access this Platform, carefully read this policy, given that any amendment will be published therein. Additionally, Domibay can inform the users personally and previously of the changes introduced into this policy, before their entrance in force, whenever technically and reasonably possible, in particular, when they are regarded as registered users or customers of Domibay.
13. Legal contact
The protection of your rights is very important for Domibay, therefore, in case you have any question or suggestion that you wish to communicate us in connection with this policy, please do not hesitate to contact us using the e-mail address: firstname.lastname@example.org.
14. Competence and jurisdiction
In general, any controversy or conflict shall be submitted by one of the parties to the other party in order to reach an amicable solution by mutual agreement, for this purpose, as far as Domibay is concerned, the legal contact referred to in section 13 of this policy should be used. In case it is not possible to reach an amicable solution, taking into consideration criteria contained in the GDPR for the determination of the competence of the competent authority to decide on any conflict, controversy or complaint in connection with this Privacy and Cookies Policy, at least, in an administrative procedure, we inform that the such authority shall be Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), and, in any case, the provisions of article 56 of the GDPR shall apply. As regards the right to effective judicial review against Domibay in these cases, article 79.2 of the GDPR shall apply, and the relevant proceedings should be instituted before the Judges and the Courts of Arrecife-Lanzarote, given that Domibay, S.L. is a company based in Spain. In any case, the applicable legislation shall be the Spanish legislation.
Loading hotels, please wait a moment...
Error while loading the map, please refresh the page and try again.
Select the number of rooms and guests.
Please select the number of rooms and persons who are traveling and complete the age of the children.
Adults Children Children ages
Please specify the age of children, in fields in red. (from 1 to 17)