Last updated: March 2026

1. Data controller

In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR), and Organic Law 3/2018 of 5 December on Personal Data Protection and the guarantee of digital rights (LOPDGDD), the following information is provided regarding the data controller:


2. Personal data collected by this website

The website campycanaria.com is exclusively informational in nature. As a result:

Accordingly, the controller does not act as a data controller of users' personal data within the meaning of Article 4(7) of the GDPR, except with regard to anonymised browsing data that may be generated through the use of analytics cookies, as described in the Cookie Policy.


3. Bookings, payments and data on the Yescapa platform

Important notice: This website does not manage or process any bookings, payments, rental contracts or insurance. All such operations are carried out exclusively through the Yescapa platform.

Yescapa is an independent entity that acts as the autonomous data controller for the personal data that the user provides during the booking process. Campy Canaria has no access to, and takes no part in, and bears no responsibility for, the processing of such data.

To find out how Yescapa processes your data, your rights and the applicable safeguards, users should consult the Yescapa Privacy Policy directly.


4. Cookies and browsing data

This website may use third-party analytics cookies (Google Analytics 4) for the purpose of obtaining aggregated and anonymised usage statistics. No cookie is installed or activated without the prior, express and freely given consent of the user, in accordance with Article 22.2 of the LSSI-CE and Article 6.1(a) of the GDPR.

For complete information on the cookies used, their purpose, duration and how to manage or withdraw consent, please see the Cookie Policy.


5. Legal basis for processing

Insofar as this website does not directly collect personal data, there is no legal basis for processing to communicate to the user in relation to data voluntarily provided. In the specific case of analytics cookies, the legal basis is the consent of the data subject, in accordance with Article 6.1(a) of the GDPR, which may be withdrawn at any time without affecting the lawfulness of processing based on consent given prior to its withdrawal.


6. Rights of data subjects

Under Articles 15 to 22 of the GDPR and Articles 12 to 18 of the LOPDGDD, as a user you have the following rights regarding your personal data:

Access Find out what personal data of yours is being processed and how.
Rectification Request the correction of inaccurate or incomplete data.
Erasure Request the deletion of your data (also known as the "right to be forgotten").
Restriction Request that the processing of your data be restricted in certain circumstances.
Portability Receive your data in a structured, commonly used and machine-readable format.
Objection Object to the processing of your data in certain circumstances.
Withdrawal of consent Withdraw consent at any time, without retroactive effect.
Where to exercise these rights?
Since this website does not process personal data directly, rights related to booking operations must be exercised with Yescapa. For any matter relating exclusively to this website or to cookies, you may contact the owner using the details provided below.
The owner will respond within a maximum of one month of receiving the request, extendable by two additional months in cases of particular complexity, in accordance with Article 12.3 of the GDPR.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the competent supervisory authority in Spain, via its electronic office at www.aepd.es.

7. Minors

This website is not intended for persons under the age of 14. The owner does not knowingly collect personal data from minors below that age. If you become aware that a minor has provided personal data through this site, please contact us at the email address provided so that it can be deleted.


8. Security and third-party links

The controller has implemented the technical and organisational measures necessary to ensure data security in accordance with Article 32 of the GDPR, given the limited amount of data processed on this site. However, no system for transmitting information over the Internet can be guaranteed as completely secure.

This site may contain links to third-party websites, including the Yescapa platform. The controller accepts no responsibility for the privacy practices of such sites, whose privacy policies are independent.


9. Amendments to the privacy policy

The controller reserves the right to amend this privacy policy at any time, in particular to adapt it to legislative, jurisprudential or AEPD guidance updates. The current version is the one published on this page. Users are encouraged to consult it periodically.