Legal Notice

1. Identifying information

In compliance with Article 10 of Law 34/2002, on Information Society Services and Electronic Commerce (LSSI-CE), the following information is provided:

Company name: Ocean y Ryans Management, S.L.
Tax ID (NIF/CIF): B21616145
Registered address: C/ Jaume I s/n, Edificio Odysseus, 07817 Sant Jordi, Ibiza, Spain
Commercial Register: Details available upon request
Contact email: marketing@ryans.es
Phone: +34 971 591 214
Domain(s): ryans.es

2. Purpose and scope

This Legal Notice governs the use of the website ryans.es (hereinafter, "the Website"), owned by Ocean y Ryans Management, S.L.. Access to and use of the Website grants the status of user and implies full acceptance of the conditions set out in this Legal Notice.

3. Conditions of access and use

The user agrees to use the Website and its content in accordance with the law, morality, and public order, and undertakes not to use it in any way that is contrary to the terms of this Legal Notice, that infringes the rights of third parties, or that could damage, disable, or overload the Website or prevent its normal use.

Ocean y Ryans Management, S.L. may modify, without prior notice, the content of the Website, as well as its configuration and presentation.

4. Intellectual and industrial property

All content on the Website (text, images, trademarks, logos, designs, source code, etc.) is owned by Ocean y Ryans Management, S.L. or by third parties who have authorised its use, and is protected by intellectual and industrial property regulations. Its reproduction, distribution, or transformation without express authorisation is prohibited.

5. Disclaimer of warranties and liability

Ocean y Ryans Management, S.L. does not guarantee the continued availability of the Website nor the absence of errors in its content, although it will take the necessary measures to correct them. Ocean y Ryans Management, S.L. is not liable for damages arising from misuse of the Website or from the content of linked sites not managed by it.

6. Links

The Website may include links to third-party sites. Ocean y Ryans Management, S.L. assumes no responsibility for the content, operation, or availability of such sites.

7. Applicable law and jurisdiction

These terms are governed by Spanish law. For the resolution of any dispute, the parties submit to the Courts of Ibiza, waiving any other jurisdiction that may apply to them.

8. Online dispute resolution

In accordance with Regulation (EU) No 524/2013, users/consumers may access the European Union's online dispute resolution platform via the following link: http://ec.europa.eu/consumers/odr/

Privacy Policy

1. Data Controller

Controller: Ocean y Ryans Management, S.L.
Tax ID: B21616145
Address: C/ Jaume I s/n, Edificio Odysseus, 07817 Sant Jordi, Ibiza, Spain
Contact for data protection matters: marketing@ryans.es

The appointment of a Data Protection Officer (DPO) is not mandatory under Article 37 of the GDPR, given the nature and volume of the processing carried out.

2. Purposes of processing

Managing room bookings and additional services, and the contractual relationship with the customer.
Handling enquiries, contact requests, and job applications.
Sending commercial communications (newsletter, offers), only where the user has given explicit consent.
Producing statistics on Website usage and improving its operation (analytics cookies, subject to consent).
Displaying personalised advertising, only where the user has accepted advertising/behavioural cookies.

3. Legal basis

Performance of a contractual relationship (bookings and provision of the hotel service).
Consent of the data subject (newsletter, non-technical cookies, sharing of data for recruitment purposes).
Compliance with legal obligations (invoicing, tourism and security regulations).

4. Retention period

Data will be retained for as long as the contractual relationship is maintained or consent is not withdrawn, and subsequently for the legal limitation periods applicable to liability. CVs received will be kept for a maximum of one year, unless the data subject indicates otherwise.

5. Recipients and international transfers

Data may be shared with the following categories of recipients, solely for the purpose of managing the booking, the Website, and the contracted services:

Neobookings (booking engine) — management of online bookings. Acts as data processor.
Dify (provider of the virtual assistant/customer service chatbot) — manages automated support conversations. Acts as data processor.
Analytics and advertising providers (Google, and where applicable Meta) — only where the user consents to the corresponding cookies.
Group companies: Eijo S.A. / Trenela Investments S.L. / White Land Investments S.L. / Cesa 2012 S.L. / Ryans La Marina S.L. / Ocean Barcelona Hoteles S.L. / Ryans Lola's S.L. / Las Setas Hotel Grayma S.L. / Ryans Coral S.L.

Should any of the above providers transfer data outside the European Economic Area, such transfer will be carried out under an adequacy decision of the European Commission or by means of standard contractual clauses, ensuring in all cases a level of protection equivalent to that required by the GDPR.

6. Rights of data subjects

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, portability, and the right not to be subject to automated individual decision-making, by writing to C/ Jaume I s/n, Edificio Odysseus, 07817 Sant Jordi, Ibiza, Spain, or by email to marketing@ryans.es, stating "DATA PROTECTION" in the subject line and attaching a copy of a document proving your identity.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with applicable regulations.

7. Security measures

Ocean y Ryans Management, S.L. has adopted the technical and organisational measures necessary to ensure the security and integrity of personal data and to prevent its alteration, loss, unauthorised processing, or access.

8. Updates

This Privacy Policy may be amended to reflect legislative changes or changes in data processing practices. Periodic review is recommended.

Cookie Policy

1. What are cookies?

Cookies are small text files stored on your device when you visit the Website. Among other things, they allow us to remember your preferences, analyse Website usage, and, where applicable, display advertising tailored to your interests.

2. Types of cookies used

Technical (necessary) cookies: essential for the Website to function. They do not require consent.
Personalisation/functionality cookies: remember language or browsing options.
Analytics cookies: allow us to measure Website usage (e.g. Google Analytics).
Advertising/behavioural cookies: manage advertising spaces and, where applicable, personalised advertising based on your browsing.
Third-party cookies embedded in the booking engine (Neobookings), the customer service chatbot (Dify), and other service providers integrated into the Website.

3. Cookies used on this Website

Analytics, personalisation, and advertising cookies are only installed if you give your consent via the settings panel. The cookies identified as of this review are listed below:

Cookie	Provider	Expiry	Purpose
PHPSESSID	Website owner	Session	Manages the user's session. Technical, essential.
XSRF-TOKEN	Website owner	Session	Security. Technical, essential.
_ga / _gid	Google	2 years / session	Website usage statistics (Google Analytics 4).
OptanonConsent / OptanonAlertBoxClosed	OneTrust	1 year	Stores the user's cookie preferences.
Sojern cookies	Sojern	Up to 2 years	Personalised advertising and remarketing based on the user's browsing interests, and measurement of campaign effectiveness.
Virtual assistant (chatbot) cookie(s)	Dify	Session / up to 1 year depending on configuration	Manages the conversation with the customer service chatbot.
Booking engine cookie(s)	Neobookings	Session / up to 1 year depending on configuration	Manages the online booking process and, where applicable, the booking engine provider's own analytics.

This list is reviewed periodically. If new analytics or marketing tools or external providers are added, the table will be updated accordingly.

4. Managing consent

When you access the Website, a consent banner is displayed with the options "Accept", "Reject", and "Cookie settings", all presented with the same level of visibility. You may change your decision at any time via the "Cookie settings" link available in the footer, or withdraw your consent by contacting us at the email address provided in section 6.

You may also configure your browser to block or delete installed cookies, although this may affect the proper functioning of some Website services.

5. Classification by intrusiveness level

Level 1: technical cookies essential for the Website to function.
Level 2: anonymous cookies necessary for maintaining content and navigation.
Level 3: third-party cookies not expressly requested by the user, which allow tracking across websites. Their installation is subject to prior express consent.

6. Updates and contact

This Cookie Policy may be updated depending on the services and cookies used. For any questions, or to withdraw consent previously given, please write to marketing@ryans.es stating "Cookie Policy" in the subject line.