Privacy Policy
Data Controller
The data controller for personal data processed through Autoregistro is the property manager who uses the platform to register guests. Autoregistro acts as a data processor on behalf of the property manager.
Legal Basis for Processing
Guest registration data is processed under Article 6(1)(c) of the GDPR — compliance with a legal obligation. Spanish Royal Decree 933/2021 requires all accommodation providers to collect and report guest data to the authorities via the SES Hospedajes system.
Categories of Personal Data Collected
We collect the following categories of personal data as required by RD 933/2021: full name, date of birth, nationality, gender, identity document type and number, address, phone number, email, and reservation details (check-in/check-out dates, number of guests, payment type).
Purposes of Processing
Personal data is collected exclusively to fulfill the legal obligation under RD 933/2021 and is submitted to the SES Hospedajes government system. Data is not used for marketing, profiling, or any purpose beyond regulatory compliance.
Data Retention
Guest registration data is retained for 3 years from the date of the stay, as required by Royal Decree 933/2021. After this period, data is deleted.
Your Rights
Under GDPR and LOPDGDD (Ley Orgánica 3/2018), you have the right to: access your personal data, rectify inaccurate data, request erasure (subject to legal retention obligations), data portability, and object to processing not based on legal obligation. To exercise these rights, contact us using the details below.
Sub-processors and Third Parties
Guest data is submitted to the SES Hospedajes government system as required by law. Additionally, we use the following data processors: • Vercel Inc. — Platform hosting and web analytics (only with consent). • Google LLC — Google Analytics for site usage analysis (only with consent). • Resend — Transactional email delivery (welcome emails, notifications). All data processors are subject to Data Processing Agreements (DPAs) and comply with GDPR. We do not sell or share personal data with third parties for commercial purposes.
Contact Information
To exercise your data protection rights or for any questions about how your data is processed, please contact us at: [email protected]. You can exercise your rights of access, rectification, erasure, portability, and objection at any time. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.