Effective: 1 September 2025

This is a user-friendly summary — and not a substitute — for the legally compliant privacy notice found on the pages that follow.

Who are we?
Controller: Bálint Fülep, sole proprietor
Services operating under the names Canary4U and YOUnerife

Address: Avenida J.M. Galván Bello 3. AP 128, 38639 Golf del Sur, Santa Cruz de Tenerife, España
Managing director: Bálint Fülep
Email: hello@canary4u.com and hello@younerife.eu
Phone: +34 638 39 37 23

What do we do?

We respect your rights and strive to fulfill your requests within the deadlines set by law. We handle your data the way we expect others to handle ours.

The protection of your personal data is a priority for us. We safeguard your data, transmit it via encrypted channels, and never sell it to others, never use it for any purpose other than the one for which you provided it.

We have a website; we measure its use and keep logs for security reasons; we run online marketing with targeted campaigns; we process the data you provide.

If you ask, after identification we will provide your data. If you ask, we will delete your data.

Our services

Website
We log visits to our website for security reasons (IP address, pages viewed). With the help of Google Analytics we track what you look at so that we can produce more content of interest to you (cookies). Facebook and Google AdWords cookies are placed in your browser; later you may see Canary4U ads through these providers. We delete these data after 90 days.

Newsletter
By providing your email address and name you can subscribe to our newsletter. We inform you by email about our programs, holiday offers, accommodation options and sights in the Canary Islands. Every email contains an unsubscribe link so you can cancel at any time if you change your mind. We store your data for 365 days after the last interaction.

Subscription
If you subscribe to our service, we keep your contact details and our notes in our CRM system for 3 years from our last contact.
Due to statutory requirements, we retain some of your personal data and the data on issued invoices for the period required by applicable law (at least 10 years, at most 15 years from the date of the last invoice issued).

---

Detailed Privacy Notice

When drafting this notice (hereinafter: the “Notice”), the company has paid special attention to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (“General Data Protection Regulation” or “GDPR”), Act CXII of 2011 on the Right to Informational Self-Determination and on Freedom of Information (“Infotv.”), and Act V of 2013 on the Civil Code (“Ptk.”).

Processing is based on the voluntary, prior, and properly informed statement of the natural persons representing Customers, which statement includes the Customers’ explicit consent for the use of the Personal Data they provide during the use of the service, as well as the Personal Data generated about them. In the case of processing based on consent, the Customer has the right to withdraw consent at any time; this does not affect the lawfulness of processing based on consent before its withdrawal.

By providing their data, any Customer assumes responsibility that the service will be used exclusively by the Customer from the provided email address and using the data provided by them. In view of this assumption of responsibility, all liability related to logins performed with a given email address and/or data rests exclusively with the Customer who registered the email address and provided the data.

The Customer warrants that, with respect to the services used, they have lawfully obtained the consent of the natural persons concerned for the processing of personal data about other natural persons provided or made accessible by them.

In addition to the Customer’s voluntary consent, the legal basis for processing within or in connection with the Service may be the Controller’s legitimate interest, as well as the provision of the fundamental rights to information and freedom of expression, within the limits defined by law.

Identification of the Controller

Company name: Canary4U and YOUnerife
Full company name: Balint Fulep
Address: Avenida J.M. Galván Bello 3. AP 128, 38639 Golf del Sur, Santa Cruz de Tenerife, España
Managing director: Balint Fulep
Email: hello@canary4u.com and hello@younerife.eu
Phone: +34 638393723
Website: www.canary4u.com and www.younerife.eu
EU VAT number: ESY2852123E

Consent statement to the processing of my personal data

I give my voluntary and explicit consent to the processing of the data I provide during visits, subscriptions, and registrations on the electronic platforms of Canary4U and YOUnerife (www.canary4u.com and www.younerife.eu, Facebook ads, Google Ads ads).

By recording my data, I declare that I am over 18 years of age and have legal capacity. I represent a legal person or another organization without legal personality, and I am authorized and entitled to represent the person or organization I represent, and to give the consent necessary for the processing and data processing as set out in this notice.

I declare that I will not provide special categories of personal data to Canary4U and YOUnerife either during registration or later in any form. Special categories include, among others: racial or ethnic origin; political opinions; religious or philosophical beliefs; trade-union membership; genetic or biometric data for uniquely identifying a natural person; health data; or data concerning a person’s sex life or sexual orientation.

I declare that I will only provide numbers suitable for personal identification — non-exhaustive examples: passport number, personal number, identity card number, address card serial number, driver’s license serial number — to Canary4U and YOUnerife if this becomes due at any stage of holiday organization (usually finalizing a booking). I accept that, in the case of apartment bookings, under Spanish law I am obliged to hand over such sensitive data no later than on the day of arrival so that the host can carry out guest registration on the Guardian Civil website.

By giving my consent I acknowledge that Canary4U and YOUnerife may send me messages with advertising content, information, event invitations related to their field of activity, and may contact me by phone.

I may withdraw my consent to the processing of my data at any time in the ways set out in the notice, for example by sending a request to hello@canary4u.com or hello@younerife.eu.

Legal basis based on legitimate business interest

If you provide your data by filling out a form and indicate your interest in Canary4U and YOUnerife, we consider your application as preparation for a contract. In this case, under the GDPR, the legal basis for your Personal data processing will be a legal basis based on legitimate business interest. Your rights and the handling of your Personal data do not change due to this change in legal basis; it only means that during the preparation of the contract, unless you request that the process be terminated, we will continue to process your Personal data for the purpose of preparing the contract.

Contract-based legal basis

If you use the service of Canary4U and YOUnerife, you do so under the conditions detailed in the General Terms and Conditions. In this case, under the GDPR, the legal basis for your Personal data processing will be a contract-based legal basis. Your rights and the handling of your Personal data do not change due to this change in legal basis; it only means that during the term of the contract, even if you withdraw your consent given before the existence of the contract for the processing of your data, we will continue to process your Personal data for the purpose and in the interest of performing the contract.

Once the contract is performed or terminated, the legal basis for your processing changes again, and we process your Personal data thereafter on the basis of law.

Following termination or performance of the contract, on the basis of law

We are obliged by law to continue to process your Personal data with respect to the data shown on invoices.

Your rights

You are entitled to the rights below. Under the GDPR we must respond to your request within a maximum of 1 month. We do our best to respond much sooner.

Right to information
You can ask us to inform you about the personal data we process about you. You can request access to these data.

You can request information at any time in writing by registered mail with return receipt sent to our address, or by email sent to hello@canary4u.com or hello@younerife.eu. We consider requests sent by mail authentic if we can clearly identify you on the basis of the request.

We only consider information requests sent by email authentic if you send them from your registered email address, which does not exclude that, for security reasons, we may identify you in another way before providing information.

The request for information may extend to the data we process, their source, the purpose, legal basis, and duration of processing, the names and addresses of any processors, the activities related to processing, and, in the case of the transfer of Personal data, to who received or receives your data and for what purpose.

Right of access
If you ask whether the processing of your Personal data is in progress, in case of a positive answer you may access the purpose of processing, categories of data, recipients, storage period, data subject rights, legal remedies, source of the data, automated decision-making, and international transfers.

Right to rectification
At any time by registered mail with return receipt or by email to hello@canary4u.com or hello@younerife.eu you may request the rectification or modification of your Personal data. Taking into account the purpose of processing, you may request the completion of incomplete Personal data.

Right to be forgotten (Right to erasure)
You may request the deletion of your Personal data processed by us. Deletion may be refused (i) for the exercise of the right to freedom of expression and information, or (ii) if the Personal data are processed in the public interest (authorized by law); and (iii) if it is carried out for a legitimate private interest (for the submission, enforcement, or defense of legal claims).

We will always inform you of the refusal of a deletion request, stating the reason for refusal. Once a request to delete Personal data is fulfilled, the previous (deleted) data cannot be restored.

Newsletters can be canceled via the unsubscribe link contained therein.

Right to restriction of processing
You may request that we restrict the processing of your Personal data if you contest the accuracy of the Personal data processed. In this case, the restriction applies for the period enabling us to verify the accuracy of the Personal data.

We mark the Personal data processed by us if you contest their correctness or accuracy, but the incorrectness or inaccuracy of the contested Personal data cannot be clearly established.

You may also request restriction if the Processing is unlawful but you oppose the deletion of the Personal data and instead request the restriction of their use.

You may also exercise this right if the purpose of Processing has been achieved but you require the processing of your data for the submission, enforcement, or defense of legal claims.

If you object to processing, we will restrict the processing of your Personal data for the period during which it is determined whether the legitimate grounds of the controller override those of the data subject.

Right to data portability
You may request that the Personal data you have provided to us and that you have processed by automated means be provided to you in a structured, commonly used, machine-readable format provided by Excel (XML/XLS/CSV) and/or that they be transmitted to another controller.

Right to object
You may object to the processing of your Personal data (i) if the processing is necessary solely for compliance with our legal obligation or for the enforcement of our legitimate interests; (ii) if the purpose of processing is direct marketing, public opinion polling, or scientific research; or (iii) if processing is carried out in the public interest.

We will examine the lawfulness of the objection, and if we establish that the objection is well-founded, we will terminate the Processing and block the Personal data processed, and will notify all those to whom the Personal data concerned by the objection were previously transferred of the objection and the measures taken on its basis.

Purpose of processing

• Protection of your rights.

• Identifying you and maintaining contact with you.

• Identifying your entitlements.

• Personalizing system and marketing messages sent to you. Providing targeted, relevant messages based on area of interest and decision criteria.

• Customer support, consulting, product presentation, answering questions.

• Preparing statistics and analyses, supporting decisions. Based on this, coordinating content development and product development so that truly read content is produced.

• Product development.

• Creating the services, service quality and security conditions undertaken in the General Terms and Conditions.

• Fulfilling our statutory obligations.

• Enforcing our legitimate business interests.

Canary4U or YOUnerife qualifies as Controller with respect to its own clients (information request, request for quotation) staff and its website (newsletter, cookie]).

Data processed

We process the data you provide:

• Name

• Email

• Phone number

• Date of birth (if required at booking)

• Passport or identity card number (if required at booking)

• Website

• LinkedIn/Facebook profile link

• Billing address, site

We log data for security reasons:

• Page/function viewed

• Exact time

• IP address

• Browser cookie

We build a profile for marketing purposes:

• Which Canary Islands location you search for, which island you browse

• What your main decision criteria are

Profile building is based on data provided by you. Our goal is for you to find the messages we send truly interesting and relevant. We don’t like receiving general, non-personalized messages either.

Based on profile data we target manually, using hand-created filters to build newsletters. There is no decision made by automated data processing in the process.

Identification of processors

Central customer database, storage and management of customer data

Name: MiniCRM Zrt.
Address: 1075 Budapest, Madách Imre út 13-14.
Phone: +36 (1) 999 – 0402
Email: help@minicrm.hu
Website: https://www.minicrm.hu/
Stored data: name, email address, phone number, inquiries, offers, contracts, archived emails
Operations: central customer database, task management, invoicing, order management, newsletter sending

Persons aged 16 or older staying in apartments operated by Canary4U will have their guest registration process managed in accordance with Spanish law (RD 933/2021) by the following service provider:

• Name: Partee.es (YNEEDS, YOUR INTELLIGENT IMAGING COMPANY, S.L.U)

• Address: Calle Progreso Nº24 – of. 5, 36202 Vigo, Pontevedra

• Email: partee@partee.es

• Website: https://partee.es/

• Data stored: surname, second surname, first name, date of birth, nationality, type and number of personal identification document, gender, email address, mobile and landline numbers, residential address, scanned copy of the personal identification document, guest’s signature

• Operations: preparing guest registrations in the SES.Hospedajes system

The controller of the information received from the Partee.es system:

• Name: Balint Fulep, sole proprietor

• Address: Av. J. M. Galván Bello 5, Ap. 128, 38639 Golf del Sur, Santa Cruz de Tenerife, Spain

• Email: hello@canary4u.com

• Website: https://canary4u.com

• Data stored: numbered registration forms (Hoja de Registro) in electronic format, copy of uploaded personal identification document

• Operations: The above data is stored in a dedicated folder on the company laptop with a bit-numeric password for access. The data is stored for 3 years in accordance with legal requirements and will then be deleted.

Hosting service:

Name: Olcsoweboldal.net – Zoltán Nagy sole proprietor
Address: Flat 1 Kitsbridge House, Brookhill Rd. Copthorn, UK RH10 3PS
Website: www.olcsoweboldal.net

Web analytics, email and document management, calendar, phone contacts, spreadsheet synchronization, targeted ad display:

Name: Google LLC
Address: 1 Hacker Way, Menlo Park, California 94025
Phone: N/A
Email: N/A
Website: https://www.google.com/
Stored data: website visit data, correspondence, individual contracts and offers, calendar entries, phone contacts, data shared into spreadsheets based on filters, unique user identifiers, visitor identifier cookie.
Operations: analysis of website visit data, running A/B tests, email service, document management, calendar service, synchronization of phone contacts between devices, online spreadsheet management, display of targeted advertisements (retargeting).

Targeted ad display:

Name: Facebook Inc.
Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Phone: +1 650-543-4800
Email: N/A
Website: https://www.facebook.com/
Stored data: website visit data, unique user identifiers, visitor identifier cookie.
Operations: display of targeted advertisements (retargeting).

Calendar, phone contacts:

Name: Apple Inc
Address: Apple Park, 1 Apple Park Way, Cupertino, California, U.S.
Phone: +1 800 220325
Email: N/A
Website: https://www.apple.com/
Stored data: calendar entries, phone contacts.
Operations: calendar service, synchronization of phone contacts between devices.

Encrypted static data, backups:

Name: Amazon Web Services Ireland Ltd
Address: One Burlington Plaza, Burlington Road, Dublin, Ireland
Phone: +1 (206) 266-1000
Email: N/A
Website: https://www.amazon.com/
Stored data: encrypted static files, encrypted backups.
Operations: static storage (S3), content delivery network (CloudFront).

Web analytics performed on the website

We inform you that to measure visits to the www.canary4u.com and/or www.younerife.eu website, to monitor visitor behavior, prepare statistics and measure the effectiveness of advertising, we use the Google Analytics, Google Remarketing, Google Ads Conversion Tracking, and Facebook Remarketing programs.

The referenced programs place so-called cookies in your browser that store unique user identifiers. As a visitor to the Canary4U and/or YOUnerife Website you allow the use of the Google Analytics, Google Remarketing, Google Ads Conversion Tracking, and Facebook Remarketing] programs. You also consent to the monitoring and tracking of your behavior and the use of all services provided by these programs.

In addition, you can disable the recording and storage of cookie data for the future at any time as described below. We inform you that the settings and use of the Google Analytics, Google Remarketing, Google Ads Conversion Tracking, and Facebook Remarketing] programs fully comply with the requirements of the data protection authority.

According to Google, Google Analytics primarily reports website visitor interactions through first-party cookies. These cookies record only information that does not allow personal identification. Browsers do not share their own cookies across domains. Further information about cookies can be found in Google’s Advertising and Privacy FAQ.

Google Analytics
Canary4U and/or YOUnerife.eu primarily uses the Google Analytics program to produce statistics, including measuring the effectiveness of its campaigns. By using the program, Canary4U and/or YOUnerife.eu mainly obtains information on how many visitors visited its Website and how long visitors spent on the Website. The program recognizes the visitor’s IP address, therefore it can track whether the visitor is returning or new, and it is possible to follow the path the visitor took on the Website and where they entered.

Google Remarketing
By using the Google Remarketing program, in addition to the usual Google Analytics data, Canary4U and/or YOUnerife.eu also collects DoubleClick cookie data. The DoubleClick cookie enables the use of the remarketing service, which primarily ensures that visitors to the Canary4U and/or YOUnerife.eu Website later encounter Canary4U and/or YOUnerife.eu ads on free Google advertising surfaces. Canary4U and/or YOUnerife.eu uses the Google Remarketing program for its online advertising. Canary4U and/or YOUnerife.eu ads are displayed by external service providers — such as Google — on internet websites. Canary4U and/or YOUnerife.eu and external service providers, such as Google, use first-party cookies (e.g., Google Analytics cookies) and third-party cookies (e.g., the DoubleClick cookie) together to inform based on users’ prior visits to the Website, and to optimize and display ads.

Google Ads conversion tracking
The purpose of Google AdWords conversion tracking is to enable Canary4U and/or YOUnerife.eu to measure the effectiveness of Google Ads advertisements. It does this using cookies placed on the user’s computer, which exist for 30 days.

Facebook Remarketing
Canary4U and/or YOUnerife.eu uses Facebook’s remarketing pixel to increase the effectiveness of Facebook advertisements, for the purpose of building a remarketing list. Thus, after visiting the Website, an external service provider — such as Facebook — may display advertisements on internet websites. Remarketing lists are not suitable for personal identification. They do not contain the visitor’s personal data; they identify only the browser software.

Disabling cookies
If you wish to manage cookie settings or disable the feature, you can do so in your own browser. Depending on the browser’s toolbar, this option can be found in the cookies/tracking features placement menu item. In general, under Tools > Settings > Privacy settings you can set which tracking features you allow/disable on your computer.

If you do not want Google Analytics to report on your visits, you can install the Google Analytics opt-out browser add-on. This add-on instructs Google Analytics JavaScript scripts not to send visit information to Google. If you have installed the opt-out browser add-on, you will also not participate in content experiments.

If you would like to disable Google Analytics’ web activity, visit the Google Analytics opt-out page and install the add-on for your browser. For more information on installing and removing the add-on, please consult the help for the given browser.

Principles of processing

• The Controller processes Personal data in accordance with the principles of good faith, fairness and transparency, as well as in accordance with applicable law and this Notice.

• The Personal data indispensable for the use of the Services are used by the Controller based on the consent of the data subjects (Customers) and exclusively for the intended purpose.

• The Controller processes Personal data only for the purposes defined in this Notice and/or in the relevant legislation. The scope of Personal data processed is proportionate to the purpose of processing and may not extend beyond it (data minimization).

• As a rule, Canary4U and/or YOUnerife.eu as service provider does not process the Personal data of persons under the age of 18. Exception: where required for making bookings.

• Apart from the Processors specified in this Notice and, in certain cases referenced in this Notice, External service providers, the Controller does not transfer Personal data processed by it to third parties. An exception to this is the use of data in aggregated statistical form, which does not contain any other data suitable for identifying the data subject Customer in any form and therefore does not constitute Processing or data transfer.

• In certain cases — official court or police requests, legal proceedings due to copyright, property or other infringement or reasonable suspicion thereof, prejudice to the Controller’s interests, endangerment of the provision of the Services, etc. — the Controller makes available the accessible Personal data of the data subject Customer to third parties.

• The Controller’s system may collect data on the Customer’s activity, which cannot be linked to the other data provided by the Customer during registration or to data generated when using other websites or services.

• The Controller informs the data subject Customer as well as all those to whom the Personal data were previously transmitted for the purpose of Processing of the rectification, restriction, or deletion of the Personal data processed by it. Notification may be omitted if it does not infringe the data subject’s legitimate interest in view of the purpose of the Processing.

• The Controller ensures the security of Personal data, takes the technical and organizational measures and establishes the procedural rules that ensure that the data recorded, stored, and processed are protected and that accidental loss, unlawful destruction, unauthorized access, unauthorized use, unauthorized alteration, and unauthorized distribution are prevented. The Controller calls upon every third party to whom it transfers Personal data to fulfill this obligation.

• In view of the relevant provisions of the GDPR, the Controller is not obliged to appoint a data protection officer.

• The Controller is responsible for compliance with the principles.

Confidential data processing

Canary4U and/or YOUnerife treats recorded data confidentially and does everything to ensure the security of the data, using them in a way necessary for the proper operation of the Website. This includes, among other things, sending emails and SMS messages to you and to the contact details provided by you; in such cases the message is sent via the given provider.

Canary4U and/or YOUnerife will never sell or lend your personal data to third parties for marketing purposes. In case of subpoena, court order, or in legal proceedings, Canary4U and/or YOUnerife may hand over your personal data and other relevant information.

Furthermore, Canary4U and/or YOUnerife may secure and exercise its statutory rights and may defend itself against legal claims.

To ensure the secure handling of data, Canary4U and/or YOUnerife selects the IT tools used during data processing so that during operation the processed data are accessible only to Canary4U and/or YOUnerife — as the authorized party — the integrity of the data is preserved, no change occurs in the recorded data other than through the data recording procedure, and the recorded data are protected from unauthorized access.

Data processed by Canary4U and/or YOUnerife may be transferred upon authority or court request and on the basis of statutory provisions, and Canary4U and/or YOUnerife will notify its users of this fact in its newsletter, provided that this is not contrary to the authority’s or court’s request or the applicable statutory provision.

Access by our employees to personal data

We provide our employees with only the access strictly necessary for the work to the personal data we process. We log every access; access to data export functions is strongly restricted.

Duration of processing

In accordance with the GDPR, for every set of processed data we handle your data with a predetermined limitation period.

As a rule of thumb, detailed security logs are stored for 90 days; other security logs for 365 days.

Personal data are stored for 365 days after the last contact, except where a statutory provision or contract performance requires a longer period.

A detailed description of each data set, processing purposes and retention times is under the “Our services” section.

Data transfer

We are entitled and obliged to transfer to the competent authorities any Personal data available and lawfully stored by us for which we are compelled to transfer by law or a final and binding order by an authority. Controllers cannot be held liable for such data transfers or for the consequences arising therefrom.

If we transfer the operation or exploitation of our service in part or in whole to a third party, we may transfer in part or in whole the Personal data we process to such third party without separately obtaining your consent, but with your appropriate prior information, to the new operator, provided that such transfer must not place you in a less favorable position than the data processing rules set out in the then-current text of this Notice. In the case of a transfer under this paragraph, we will provide an opportunity to object to the transfer before it takes place. In the event of objection, the transfer of your data under this paragraph is not possible.

For the purpose of checking the lawfulness of data transfers and informing the data subject, the controller keeps a record of data transfers, which contains the time of the transfer of personal data processed by it, the legal basis and recipient of the transfer, the definition of the scope of personal data transferred, and other data specified by the law prescribing the processing.

Updating the Notice, tracking legal changes

The controller continuously reviews and updates the Notice in accordance with changes in the legal environment and authority expectations. You can always find the current Notice under the “Privacy Notice” section of the Canary4U and/or YOUnerife website.

Further questions/answers

You can request information about data processing and/or processing at any time by email sent to hello@canary4u.comand hello@younerife.eu.

With complaints related to data processing in Hungary you can contact directly the National Authority for Data Protection and Freedom of Information (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.; phone: +36-1-391-1400; email: ugyfelszolgalat@naih.hu; website: www.naih.hu).

Supervisory authority in Spain: Agencia Española de Protección de Datos (AEPD)
Web: https://www.aepd.es
Address: C/Jorge Juan, 6. 28001 Madrid

We inform you that the data subject may also lodge a complaint with the supervisory authority of their EU Member State of residence.

In the event of a violation of your rights, you may turn to a court. The case falls within the jurisdiction of the regional court. The action may — at your choice — also be brought before the regional court having jurisdiction over your place of residence or place of stay. Upon request, we will inform you about the possibilities and means of legal remedy.

Definitions

Processing: any operation or set of operations performed on Personal Data, regardless of the procedure applied, such as the collection, recording, organization, structuring, storage, transformation, alteration, use, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, making public, alignment or combination, restriction, erasure and destruction of Personal Data.
Personal Data or data: any data or information on the basis of which a natural person — directly or indirectly — becomes identifiable, or such a person enters data into the System.
Processor: the service provider who processes Personal Data on behalf of the controller. In the case of the System services referred to in this Notice, the processor is Canary4U and/or YOUnerife, and the sub-processors are the sub-processors indicated in the Notice.
GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council (“General Data Protection Regulation”).

Golf del Sur, 2025.09.01.