Privacy Policy

Updated to reflect By Salvaje’s hospitality, adventures, and property management services across Spain.

We care, not only about our flats, but above all we care about you. While we respect your right to privacy, know that we process your data in accordance with the applicable legal regulations.

We would like to encourage you to familiarise yourself with our data protection rules, which are established on the basis of Regulation (EU) 2016/678 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (RODO).

Data Controller

The administrator of your personal data, i.e. the entity that decides on the purposes and means of processing your personal data, is By Salvaje S.L. with its registered office at Avenida de Espaňa 2, 38660 Costa Adeje, Santa Cruz de Tenerife, Spain, hereinafter referred to as By Salvaje.

Why We Process Your Data

By Salvaje offers comprehensive property management, adventures, and hospitality services across Spain. In fulfilling our business objectives, we process your personal data for the following purposes:

  • for the purpose of acting in order to conclude and perform a contract (Article 6(1)(b) RODO);
  • for the purpose of sending marketing content on the basis of your consent (Article 6(1)(a) RODO);
  • for the purpose of processing the bookings you make through the portals we cooperate with, i.e. Booking.com, Expedia Inc, Flatio sp. z o.o., Slowhop sp. z o.o., AlohaCamp S.A. (Article 6(1)(b) RODO);
  • for the purposes of billing, accounting and financial reporting (Article 6(1)(c) of the DPA);
  • for the purpose of sending the newsletter you have requested (Article 6(1)(b) RODO);
  • for the purpose of running the contact form (Article 6(1)(f) RODO);
  • for customer satisfaction surveys, e.g. through the use of questionnaires;
  • in order to improve the quality of the services offered by By Salvaje (Article 6(1)(f) RODO);
  • for social media purposes, e.g. Facebook, Instagram, TikTok, LinkedIn (Art. 6(1)(f) DPA);
  • for the purpose of dealing with complaints, requests and claims (Article 6(1)(b), (c) and (f) RODO);
  • for the establishment, investigation and defence of claims (Article 6(1)(f) RODO);
  • for the purpose of processing cookies (Art. 6(1)(f) RODO). By Salvaje uses the necessary cookies to enable the basic functions of the website. In addition, in the case of statistical research, marketing or recording your preferences using cookies, By Salvaje will obtain your consent to store cookies on your device.

Recruitment & Employment

By Salvaje, when recruiting and employing staff, processes personal data for purposes:

  • for the management of human resources – employees and associates (Article 6(a, b, c and f) RODO; Article 9(2)(a, b, h) RODO);
  • for the purpose of recruitment (Article 6(1)(a), (c) RODO – for employee candidates); Article 6(1)(a) and (b) RODO – for associate candidates.

How Long We Keep Data

By Salvaje is obliged to process your data for a legally defined period of time:

  • contracts with contractors for the period of time specified in the contract, necessary for By Salvaje to fulfil its obligations requiring data processing;
  • financial accounts for a period of time until the expiry of data retention obligations under the law, in particular the retention of accounting documents (5 years after the year in which the legal event occurred that obliged the issuing of the accounting document);
  • to carry out marketing until you have lodged an objection, i.e. until we have been informed in the manner you have chosen that By Salvaje has ceased to send you marketing information, or until the statute of limitations for claims has expired;
  • recruitment for up to 6 months after the end of the recruitment process and, in the case of consent given for further recruitment processes, for no longer than one year;
  • employment of employees in accordance with the current legislation requiring the archiving of employment law documents, i.e. we keep personnel files for a period of 50 or 10 years. The 10-year retention period for employee records applies to employees hired after 1.01.2019. For other employees, records will be kept for a period of 50 years;
  • granted consent for marketing activities until it is withdrawn;
  • cookies for the periods indicated in section VIII or until you object to the processing.

Who We Share Data With

In connection with its activities, By Salvaje will disclose your personal data to the following entities:

  • business persons, including lawyers and solicitors, who cooperate with By Salvaje in the provision of consultancy services to By Salvaje clients;
  • to state authorities or other entities authorised by law;
  • entities that support us in our activities on our behalf, in particular: providers of external ICT systems to support our activities, entities that audit our activities, an entity that provides accounting services or entities that cooperate with By Salvaje in the framework of marketing campaigns, where such entities will process data on the basis of a contract with By Salvaje and only in accordance with our instructions;
  • payment service providers within the meaning of the Payment Services Act of 19 August 2011, i.e. Stripe, as well as banks, in the event of a settlement requirement;
  • in the case of job applicants, also online recruitment portals.

Legal Basis & Data Provision

The provision of data is necessary in order to conclude contracts and to account for the activities carried out and for By Salvaje to comply with legal requirements. This means that if you wish to make use of the services we offer, you must provide your personal data.

For the rest (in particular the processing of data by By Salvaje for marketing purposes), the provision of data is voluntary.

Your Rights

In relation to the processing of your personal data, by By Salvaje, you have the right to:

  • access to their data and receive a copy of their data;
  • rectification (amendment) of your data;
  • delete your data;
  • restrict the processing of your data;
  • portability of your data – where the legal basis for processing is consent (Article 6(1)(a) or Article 9(2)(a) RODO) or contract (Article 6(1)(b) RODO);
  • to object to the processing of his/her personal data – where the legal basis for the processing is a legitimate interest (Article 6(1)(f) RODO);
  • revoke consent at any time, without affecting the lawfulness of the processing carried out on the basis of consent before revocation;

In addition, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Data Protection Authority.

Cookies

Cookies are small text files that can be used by websites to enable you to use the website as smoothly as possible. The law states that we may store cookies on your device if this is necessary for the operation of our website (Section 173 (3) of the Telecommunications Act). For all other types of cookies, we need your consent.

As some of the cookies we use constitute personal data, we want you to be aware of your rights under the RODO:

  • By Salvaje stores https requests directed to the server;
  • Your personal data will be processed in order to provide basic functions of our website such as navigating our website and accessing secure areas of our website. If you have given the appropriate (voluntary) consent, your data will also be processed to provide you with services, offers and communications tailored to your preferences and to analyse website traffic and provide social features (depending on the preferences you have indicated).

Thank you for your attention, By Salvaje.