Privacy Policy – Paraiso Beach Hotel

This website is operated by Paraiso Beach Hotel, owned and managed by Balance SA, located at Brig Bay 2, Playa Coco, 82100, Corn Island. We act as the data controller for all personal data collected via this website.

We take care of your personal data and undertake to guarantee its confidentiality and security. This policy determines how we process the information collected and the reasons why we must collect certain personal data about you.

---

Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data: name and surname.
• Contact data: email address and phone number.
• Booking data: reservation details and stay history.
• Payment data: processed securely via third-party providers (we do not store full card details).
• Technical data: IP address, browser type, and device info.
• Usage data: pages visited and interactions on our website.

How We Use Your Data (Legal Basis)

Under GDPR, we process your data based on the following legal grounds:

• Contract performance: To manage bookings, payments, and your stay.
• Legal obligation: To comply with tax, accounting, and local regulations.
• Legitimate interest: To improve our services, prevent fraud, and analyse website performance.
• Consent: Please note that we DO NOT use your data for marketing emails.

Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience. The types of cookies we use include:

• Essential cookies: required for website functionality.
• Analytics cookies: to understand website usage, such as Google Analytics.

You can manage your cookie preferences via our cookie banner.

Sharing Your Data

We only share your data with trusted third parties where necessary:

• Payment processors.
• Booking systems and PMS providers.
• Hosting and IT service providers.

All third parties are required to handle your data securely and in compliance with GDPR.

International Data Transfers

As an international business, some providers may process data outside the European Economic Area (EEA), including the United States. In such cases, we ensure safeguards like Standard Contractual Clauses (SCCs) or adequacy decisions are in place.

Data Retention

We retain personal data only as long as necessary:

• Booking and financial data: up to 7 years due to legal requirements.
• Contact inquiries: up to 12 months.

Your Rights (GDPR)

You have the following rights regarding your personal data:

• Right to access and correct your data.
• Right to request deletion (“right to be forgotten”).
• Right to restrict or object to processing.
• Right to data portability.

To exercise these rights, please contact us at info@paraisoclub.com.

Data Security

We implement technical and organizational measures to protect your data, including secure servers, SSL encryption, and restricted access.

Third-Party Links

Our website may contain links to external sites. We are not responsible for their privacy practices.

Complaints and Updates

If you believe your data is not handled properly, you have the right to file a complaint with your local data protection authority.

We may update this policy from time to time; the latest version will always be available on this page.

Contact Information

If you have questions about this Policy or your personal information, please reach out to:

Email: info@paraisoclub.com