Privacy Policy

Last updated: February 5, 2026

At Alaya Tenerife we are committed to protecting our guests' privacy and ensuring responsible, confidential and secure handling of the personal data provided to us through our website, booking platforms, check-in systems and communication channels.

This Privacy Policy explains how we collect, use, store and protect your personal information when you access alayatenerife.com, make a booking, or communicate with us through any channel.

1. Data controller

Alaya Tenerife
Email: [email protected]
Website: https://alayatenerife.com

2. Personal data we collect

Depending on the type of interaction with the user, we may collect and process the following categories of personal data:

Identification data:
Name, surname, nationality, date of birth, ID card or passport, required to comply with the legal obligations for guest registration.

Contact details:
Phone number, email address, postal address and any other information voluntarily provided by the user.

Booking and stay data:
Check-in and check-out dates, number of guests, preferences, comments, special requests and any information related to managing the stay.

Data submitted for check-in:
Information required by tourism and security regulations, provided through online check-in platforms, digital forms or direct communications.

Identity verification data:
Image or photograph of the guest's ID card or passport, captured during the online check-in process for the purpose of verifying the traveler's identity and confirming that the information provided is accurate and corresponds to the person staying.

These images are used exclusively for verification, security and legal compliance purposes, and are not intended for commercial or marketing use.

Payment data:
Partial information about the payment method, such as transaction ID, cardholder name, or the last digits of the method used. Payments are processed securely through external providers, so Alaya Tenerife does not store full card details or banking credentials.

Communications data:
Messages, files or information voluntarily sent by the user via WhatsApp, email, web forms, booking platforms or integrated messaging systems.

Technical and browsing data:
IP address, browser type, language, country of connection, device used and browsing behavior, collected automatically for statistical, security or service-improvement purposes.

3. Purpose of data processing

Personal data is processed for the following purposes:

• Managing bookings, stays and associated services.
• Carrying out online check-in and complying with the legal obligations for traveler registration.
• Processing payments and refunds through authorized providers.
• Managing communication with the guest before, during and after the stay.
• Handling inquiries, requests or incidents.
• Sending operational information related to the booking.
• Sending commercial or promotional communications only if the user has given consent.
• Complying with applicable legal, tax and administrative obligations.
  
• Ensuring security, preventing fraud and protecting our systems and services.
• Verifying the guest's identity through visual review of the ID document, ensuring that the information provided during check-in is correct, authentic and corresponds to the person staying.

4. Legal basis for processing

Data processing is based on:

• Performance of an accommodation or services contract.
• The user's express consent, when required.
• Compliance with legal obligations applicable to tourist accommodation.
• Alaya Tenerife's legitimate interest in improving its services and ensuring security.

5. Data retention

Personal data will be retained:

• For the duration of the contractual relationship or the stay.
• For the periods required by applicable legislation.
• For as long as necessary to address legal responsibilities.
• Until the user requests deletion, where processing is based on consent.

6. Platforms, third parties and external communications

Alaya Tenerife does not sell or trade personal data. However, data may be processed or shared with third parties strictly necessary to provide the service, such as:

• Hostify, TuriCheck or other booking and check-in management platforms.
• Online booking platforms such as Airbnb, Booking or other OTAs used by the guest.
• Payment providers such as Stripe, PayPal or banking institutions.
• Technology providers for web hosting, email or maintenance.
• Competent authorities where required by applicable regulations.

The user acknowledges that, when using third-party platforms, their data will also be subject to the privacy policies of those platforms, which are independently responsible for their own processing.

7. Use of WhatsApp and instant messaging

Communications carried out via WhatsApp or other messaging systems are used exclusively for booking management, customer service and service delivery.

The user is aware that these services depend on external platforms and that Alaya Tenerife cannot guarantee the functioning, availability or absolute security of such channels, although it takes reasonable measures to protect the information received.

8. User rights

The user may exercise the following rights:

• Access to their personal data.
  • Rectification of inaccurate data.
  • Erasure of data.
  • Restriction of processing.
  • Data portability.
  • Objection to processing or to commercial communications.

To exercise these rights, please send a request to [email protected], clearly stating the right you wish to exercise and providing proof of identity.

9. Information security

Alaya Tenerife applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration or improper disclosure.

The website uses encrypted connections and reasonable security systems appropriate to the nature of the data processed.

Images of identity documents used for guest verification are stored securely, with access restricted solely to authorized staff, and are kept for the time strictly necessary to fulfil the corresponding legal and security purposes.

10. Commercial communications and newsletter

The user will only receive commercial communications if they have given express consent. This consent may be withdrawn at any time via the links provided or by contacting us.

11. Cookies and browsing

This site uses first-party and third-party cookies to improve the browsing experience and analyze site usage. You can find more information in our Cookie Policy.

12. Links to third-party sites

Alaya Tenerife is not responsible for the content, operation or privacy policies of external websites linked from this site.

13. Changes to this Privacy Policy

Alaya Tenerife reserves the right to modify this Privacy Policy to adapt it to legal changes or internal improvements. The current version will always be available on this page.