Privacy Policy and Cookie Information
1. Data Controller
In compliance with the applicable regulations on personal data protection, users of this website are hereby informed that any personal data provided through this site will be processed by:
SUAI BEACH, S.L.
Tax ID (CIF): B72697600
Trade name: OYANA Beach Club & Restaurant
Registered address: Calle Playa Hermosa (Urb Costabella), 204
Contact email: reservations@oyanabeach.com
Telephone: +34 621 359 585
Website: www.oyanabeach.com
2. Purpose of the Processing
The personal data provided by users through this website may be processed for the following purposes:

• To respond to requests for information, enquiries, or communications submitted through the forms or contact details published on the website.

• To manage reservations, requests related to the restaurant or beach club and, where applicable, associated events or experiences.

• To manage the commercial or pre-contractual relationship with clients and prospective clients.

• To send our own commercial communications, provided there is a legitimate basis for doing so or the user has given their consent.

• To improve the browsing experience and analyse the use of the website through cookies and similar technologies, under the terms set out in this policy.

• To comply with the legal obligations applicable to SUAI BEACH, S.L.

3. Legal Basis for Processing
The legal basis for processing personal data will depend on the specific purpose for which the data is collected. In general terms, the lawful bases may include:

• The user’s consent, when they voluntarily contact us, accept the installation of certain cookies, or request to receive commercial communications.

• The performance of a pre-contractual or contractual relationship, when processing is necessary to manage reservations, service requests, or communications related to our services.

• Compliance with legal obligations, where a legal provision requires the processing of certain data.

• The legitimate interest of SUAI BEACH, S.L., for example, to ensure website security, prevent misuse, or improve our services, provided that such interest does not override the user’s rights and freedoms.

4. Categories of Data Processed
Depending on each case, we may process the following categories of data:

• Identification data: first name and surname.

• Contact data: email address, telephone number.

• Data voluntarily provided by the user through forms, emails, or messages.

• Browsing data, IP address, online identifiers, and other data obtained through cookies or similar technologies.

• Data related to reservations or requests made through the website.

Unless expressly stated otherwise, the data requested in our forms will be necessary in order to properly process the user’s request.
5. Data Retention
Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the legally required periods in order to address any potential liabilities.
As a general guideline:

• Data sent through contact forms or enquiries will be kept for as long as necessary to respond to the user’s request and, subsequently, for the period required to address any possible liabilities.

• Data linked to contractual relationships or reservations will be kept for the duration of that relationship and for the legally applicable retention periods.

• Data processed for commercial purposes will be kept until the user withdraws their consent or objects to such processing, where applicable.

• Cookies will be stored for the specific periods indicated in this policy or in the cookie settings panel.

6. Data Recipients
Personal data will not be disclosed to third parties unless required by law or where necessary for the proper provision of a service requested by the user.
However, certain service providers of SUAI BEACH, S.L. may have access to personal data as data processors, exclusively for the purpose of providing ancillary services necessary for the operation of the website or the business activity, such as:

• web hosting,

• technical maintenance,

• analytics tools,

• booking platforms,

• email services or form management services.

In such cases, SUAI BEACH, S.L. will adopt the necessary contractual and organisational measures to ensure that such providers process the data in accordance with the applicable regulations.
7. International Data Transfers
As a general rule, SUAI BEACH, S.L. will seek to ensure that data is processed within the European Economic Area.
However, some technological tools used on this website may involve international transfers of data. In such cases, these transfers will be carried out with the appropriate safeguards предусмотрed by the applicable regulations, such as adequacy decisions of the European Commission or the execution of standard contractual clauses, where appropriate.
8. Users’ Rights
Users may exercise their data protection rights at any time. In particular, they may request:

• access to their personal data,

• rectification of inaccurate data,

• erasure of their data when, among other reasons, it is no longer necessary for the purposes for which it was collected,

• objection to processing,

• restriction of processing,

• data portability, where applicable,

• withdrawal of consent at any time, without affecting the lawfulness of processing carried out before such withdrawal.

To exercise these rights, users may send a request to:
SUAI BEACH, S.L.
Email: reservations@oyanabeach.com
Postal address: Calle Playa Hermosa (Urb Costabella), 204
The request must clearly indicate the right the user wishes to exercise and, where necessary, be accompanied by documentation allowing verification of the identity of the applicant.
Users also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they consider that the processing of their data does not comply with the applicable regulations.
9. Information Security
SUAI BEACH, S.L. applies appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, or improper processing, taking into account the nature of the data, the state of the art, and the risks associated with processing.
10. Minors
This website is not intended for minors. Users guarantee that they are over 14 years of age and that the data provided is true, accurate, and up to date. If SUAI BEACH, S.L. becomes aware that data has been collected from minors without proper legal basis, it may take the necessary steps to delete such data.
11. Changes to the Privacy Policy
SUAI BEACH, S.L. reserves the right to amend this Privacy Policy in order to adapt it to legislative, case law, or supervisory authority criteria updates, as well as to changes in the operation of the website.
Should substantial changes be introduced, users will be informed by the appropriate means.
Cookie Policy
1. What are cookies?
Cookies are small files that are downloaded onto the user’s device when accessing certain websites. They allow, among other things, the storage and retrieval of information about a user’s browsing activity or their device and, depending on the information they contain and how the device is used, they may be used to recognise the user.
2. What types of cookies does this website use?
This website may use first-party and third-party cookies, including technical, analytics, and, where applicable, advertising or personalisation cookies.
a) Technical or necessary cookies
These are essential for the basic functioning of the website and to enable browsing, form management, website security, or the provision of services requested by the user.
These cookies do not require consent under the applicable regulations, provided they are strictly necessary to provide the requested service or solely enable communication between the user’s device and the network.
b) Analytics or measurement cookies
These allow us to quantify the number of users and carry out statistical measurement and analysis of how users make use of the website, in order to introduce improvements.
These cookies will only be installed if the user accepts them, unless the tool used strictly complies with the exemption conditions provided for by the AEPD for certain audience measurement tools.
c) Personalisation cookies
These allow the website to remember certain user preferences in order to improve the browsing experience.
d) Advertising or behavioural advertising cookies
Where used, these allow the management of advertising spaces and the analysis of users’ browsing habits in order to display personalised advertising.
These cookies will always require the user’s prior consent.
3. Legal basis for the use of cookies
The legal basis for the use of technical or necessary cookies is the legitimate interest and the technical necessity of properly providing the requested service.
The legal basis for the use of analytics, non-essential personalisation, and advertising cookies is the user’s consent, which must be granted through the settings panel or cookie banner enabled when accessing the website.
4. Cookie management and settings
When accessing this website, users may accept, reject, or configure the use of cookies through the relevant settings panel.
Users may, at any time, modify or withdraw their consent through the cookie management system enabled on the website.
Likewise, users may allow, block, or delete cookies installed on their device through the settings options of the browser they use. However, disabling certain cookies may affect the proper functioning of the website.
5. Third-party cookies
This website may use third-party services that collect information for statistical, technical, personalisation, or service operation purposes.
6. Cookie retention period
Cookies will be stored for the period strictly necessary to fulfil their purpose. In the case of persistent cookies, the specific retention period may be consulted in the settings panel or in the cookie information table made available on the website.
7. Updates and changes to the Cookie Policy
SUAI BEACH, S.L. may amend this Cookie Policy as a result of regulatory or technical changes, or due to variations in the cookies used on the website.