Privacy policy

Data controller

[TITULAR], tax ID [NIF], [DOMICILIO]. Contact: [EMAIL DE CONTACTO].

What data we process

Guests: name, email, phone (optional), dates, number of guests and the language of the request.

Owners: email, name or company name, phone, tax ID and the details of their homes (including the address, which is only shared with the guest once the booking is accepted).

Technical data: a session cookie for those who log in to their dashboard, a cookie with the chosen language and, to prevent abuse, an encrypted code (hash) of the IP address that is deleted within 24 hours. We count visits to each page anonymously (which page and which website visitors come from, with no cookies or data that identify anyone). We don't use advertising or analytics cookies.

Why, and on what legal basis

Managing requests, bookings and owner sign-ups: performance of a contract or of pre-contractual steps requested by the data subject.

Complying with legal obligations: reporting owners' income to the Spanish Tax Agency (DAC7 Directive, form 238) and keeping accounting and tax records.

Protecting the service against abuse and fraud: legitimate interest.

Who we share it with

With the owner of the requested home, the guest details needed to manage the booking; and with the guest, once the booking is accepted, the owner's address and contact details.

With the Spanish Tax Agency, as required by law.

With the providers of web hosting, database and email services, as data processors under contract. Some may be outside the European Economic Area; in that case the transfer relies on an adequacy decision or on the European Commission's standard contractual clauses.

How long we keep it

Booking data, for as long as the booking lasts and then for the legal limitation periods. Owner account data, while the account is active. When an account is deleted, its data is erased, except what the law requires us to keep (for example, tax data for six years), which remains blocked.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [EMAIL DE CONTACTO]. Owners can delete their account from their dashboard. If you believe we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).