Privacy
Policy

Last updated: 23 October 2026

Contents

1. Who we are
2. What data we collect
3. Why we use your data
4. What you must give us
5. Who we share it with
6. How long we keep it
7. Your rights
8. Photos and videos
9. Cookies
10. Security
11. Children
12. Changes to this policy

1. Who We Are

KYO Surf & Youth Hostel is run by Champsaur Sicilia S.L., which is responsible for your personal data (the “data controller”).

• Company: Champsaur Sicilia S.L.
• Registered office (company address, not the hostel): Calle Cano 44, 35002, Las Palmas de Gran Canaria, Spain
• Hostel address: Calle Bolivia 11, Las Palmas de Gran Canaria
• Email: hostel@kyosurf.es

If you have any questions about this policy or your data, contact us at the email above.

2. What Data We Collect

We only collect the data we need. Depending on how you use our services, this can include:

• Booking a stay: your name, email, phone number, nationality, dates of stay and any requests you send us. Room bookings are made through our booking system, Bananadesk.
• Checking in: the details on your ID or passport, such as your name, date of birth, nationality, document number and address. Check-in is done through the Partee app. Spanish law requires hostels to record this information for every guest and send it to the police.
• Surf rentals and classes: your name, ID or passport number, contact details, surf level, the equipment you rent, and your deposit details (card hold or cash).
• Booking forms on our website: your name, email, the service you choose, your surf level and your message.
• Messages: anything you send us by email, WhatsApp or Instagram.
• Payments: card payments are handled by our payment provider. We don't store your full card number.
• Photos and videos: only if you agree (see section 8).

3. Why We Use Your Data

We use your data only for the following purposes, and only when the law allows it:

We never sell your data, and we don't use it for advertising. We don't make automated decisions about you or create profiles based on your data.

4. What You Must Give Us

• ID or passport details are required by Spanish law for check-in and for surf rentals. Without them, we can't check you in or rent you equipment.
• Contact details (name and email or phone) are needed to answer your booking requests and manage your booking.
• Everything else, such as photos, is optional.

5. Who We Share It With

We only share your data when it's needed to run our services or required by law:

• Service providers that work for us: our booking system (Bananadesk), our check-in app (Partee), our website form service (Formspree), our payment provider and our website host. They may only use your data to provide their service to us.
• Meta (the company behind WhatsApp and Instagram) also processes your data when you message us on those apps. See their privacy policies for how they use it.
• Authorities, such as the police, when Spanish law requires us to report guest details, or when we are legally required to share information.
• Our accountant or gestoría, for tax and accounting purposes.

Some of these providers may store data outside the European Economic Area, for example in the United States. When this happens, we make sure your data is protected by appropriate safeguards, such as the European Commission's standard contractual clauses.

6. How Long We Keep It

• Booking requests and messages that don't lead to a booking: up to 1 year.
• Bookings, rentals and payments: as long as needed to handle your stay or rental and any claims, and after that as long as tax and accounting law requires.
• Guest registration details: for the period required by Spanish law.
• Photos and videos: until you ask us to remove them.

When we no longer need your data, we delete it or make it anonymous.

7. Your Rights

Under the EU General Data Protection Regulation (GDPR), you have the right to:

• Access the personal data we hold about you
• Correct data that is wrong or incomplete
• Delete your data, unless we must keep it by law
• Restrict how we use your data
• Object to how we use your data
• Receive your data in a format you can take elsewhere
• Withdraw your consent at any time, where we rely on it

To use any of these rights, email us at hostel@kyosurf.es. We will reply within one month. We may ask you to confirm your identity first.

If you are not happy with how we handle your data, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es.

8. Photos and Videos

We love sharing moments from the hostel and the beach. We only post photos or videos where you can be recognised if you have agreed to it. We'll always ask you first.

You can change your mind at any time. Just tell us at reception or by email, and we'll remove the photo or video from our website and Instagram as soon as possible.

9. Cookies

Our website does not use cookies for tracking or advertising. Some services we link to, such as Instagram, Google Maps, WhatsApp or our booking system, may use their own cookies when you visit them. Please see their privacy policies for more information.

10. Security

We take reasonable steps to protect your data from loss, misuse or unauthorised access. Only staff who need your data to do their job can see it, and we use trusted service providers to store it.

11. Children

We don't knowingly collect data from children under 14 without the consent of a parent or guardian. If a parent or guardian books for a child, they give us the child's data on the child's behalf.

12. Changes to This Policy

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.

• Back to Home