Privacy policy
Last updated: October 2026
This English version is provided for convenience. In case of discrepancy, the Spanish version prevails.
At Single Fin Surf Hostel we respect your privacy. This policy explains what personal data we process, why, and what your rights are, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD).
1. Data controller
- Owner: SINGLE FIN HOSTEL
- Tax ID (NIF): J75455139
- Trade name: Single Fin Surf Hostel
- Address: Calle María del Carmen García, 24, 38631 Las Galletas, Arona (Santa Cruz de Tenerife)
- Email: singlefinhosteltenerife@gmail.com
- Phone and WhatsApp: +34 666 360 683
2. What data we process
Booking and information requests via WhatsApp
The booking form on the website does not send or store data on any server. Using your choices (service, date, number of people and, if you write one, your comment), the website prepares a message and opens your WhatsApp app. We only receive this data if you decide to send the message. When you write to us we also receive your phone number, your profile name and any information you share in the conversation.
Browsing data
Only if you accept it in the cookie notice, Google Analytics 4 collects statistics about how the website is used: pages visited, device and browser type, approximate location and traffic source. More details in the cookie policy.
Technical data
Our hosting provider logs technical data, such as IP address and time of access, needed to serve the website and protect it against fraudulent use.
3. Purposes, legal basis and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering your enquiries and managing your bookings | Pre-contractual steps at your request and performance of the contract (Art. 6.1.b GDPR) | While the enquiry is handled or the relationship lasts and, afterwards, for the applicable legal periods (tax, accounting…) |
| Website usage statistics with Google Analytics 4 | Your consent (Art. 6.1.a GDPR), which you can withdraw at any time | Cookies: up to 2 years. Data in Google Analytics: [PENDING] |
| Website security and technical operation | Legitimate interest in protecting the website (Art. 6.1.f GDPR) | Short periods set by the hosting provider |
We do not make automated decisions or build profiles with your data.
4. Recipients and processors
We do not sell your data or share it with third parties for commercial purposes. To provide the service we work with these providers:
- Netlify, Inc. (United States): website hosting.
- Google Ireland Ltd. / Google LLC: Google Analytics 4, only with your consent, and Google Maps, only if you click “Load map”.
- WhatsApp Ireland Ltd. (Meta group): the messaging service you use to contact us, subject to its own privacy policy.
We may also disclose data to public authorities where there is a legal obligation.
5. International transfers
Some providers (Netlify, Google and Meta) may process data in the United States. These transfers rely on the EU-US Data Privacy Framework where the provider has joined it or, otherwise, on standard contractual clauses approved by the European Commission.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, at any time by writing to singlefinhosteltenerife@gmail.com with the subject “Data protection” and stating the right you wish to exercise. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Minors
We do not knowingly process data of children under 14 without the consent of their parents or legal guardians. Conditions for minors taking part in activities will be set out in the terms and conditions.
8. Security
We apply appropriate technical and organisational measures to protect your data. The whole website is served over an encrypted connection (HTTPS).
9. Changes to this policy
We may update this policy to reflect legal or service changes. The current version will always be published on this page with its update date.