Privacy policies

1. Data Controller

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter the "GDPR") and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights ("LOPDGDD"), users are informed that the controller responsible for processing personal data is:

Day Apartment Group S.L.

Tax Identification Number (CIF): B-87361077

Registered Office: Calle Ferraz, 28, 28008 Madrid, Spain

Email: info@dayapartment.com

Telephone: (+34) 91 810 43 57

Day Apartment provides corporate accommodation, temporary housing and flexible rental services for companies and professionals.

2. Categories of Personal Data Processed

Depending on the circumstances, Day Apartment may process the following categories of personal data:

1. Identification data (name, surname, identity document)
2. Contact details (email address, telephone number, postal address)
3. Professional information (company, job title, department, reason for relocation)
4. Financial and billing information
5. Data relating to accommodation management (dates, occupants, preferences and contracted services)
6. Information obtained through communications and contact forms
7. Browsing data and online identifiers
8. Information required under Spanish Traveller Registration regulations (Order INT/1922/2003)

3. Purposes of Processing

Personal data will be processed for the following purposes:

1. Managing and responding to requests for information, quotations and commercial enquiries, where applicable
2. Preparing, performing and managing temporary accommodation agreements and related services
3. Complying with legal obligations in relation to tax, accounting, administrative requirements and sector-specific regulations, including the Traveller Registration system
4. Responding to enquiries, complaints or incidents raised by users or clients
5. Sending electronic marketing communications where valid consent has been obtained
6. Analysing website usage, improving services and monitoring website quality
7. Ensuring security, preventing fraud and managing internal business operations

4. Legal Basis for Processing

Personal data is processed on the legal bases set out in Article 6 of the GDPR:

1. Performance of a contract or implementation of pre-contractual measures (reservation and accommodation management)
2. Compliance with legal obligations (tax, accounting, Traveller Registration requirements and other legal obligations)
3. The legitimate interests of the data controller (system security, service improvement and administrative management)
4. The explicit consent of the data subject (marketing communications and the use of non-essential cookies)

5. Recipients and Disclosure of Personal Data

Personal data may be disclosed to:

• Property managers or owners of the accommodation booked
• Service providers supporting accommodation services (cleaning, maintenance, transport, check-in services and catering)
• Technology service providers acting as data processors (hosting providers, CRM systems and management platforms)
• Financial institutions for payment processing
• Spanish law enforcement authorities, strictly where required by law (Traveller Registration)
• Public authorities with jurisdiction over the relevant matters

No additional disclosures will be made unless required by law or authorised by the data subject.

6. International Data Transfers

Where it is necessary to use service providers located outside the European Economic Area (EEA), compliance with Articles 44 to 49 of the GDPR will be ensured by means of:

• Adequacy Decisions adopted by the European Commission; or
• Standard Contractual Clauses (SCCs), together with any additional security measures required.

7. Data Retention Periods

Personal data will be retained for the following periods:

• Data relating to contractual relationships: for the duration of the contractual relationship and, once terminated, for six (6) years in accordance with the Spanish Commercial Code.
• Billing information: six (6) years.
• Traveller Registration data: three (3) years.
• Non-contractual enquiries and communications: up to twelve (12) months.
• Data processed for marketing purposes: until consent is withdrawn.
• Data collected through cookies: as set out in the Cookie Policy.

Once the applicable retention periods have expired, personal data will be deleted or anonymised.

8. Mandatory Nature of the Data

Providing the personal data identified as mandatory is essential for processing requests, confirming reservations and performing the contractual relationship.

Failure to provide such information will make it impossible to provide the requested services.

9. Source of the Personal Data

Personal data may be obtained directly from the data subject or, where appropriate, from authorised third parties, including:

• Companies arranging accommodation for their employees
• Property managers or accommodation owners
• Partner agencies or intermediary platforms

10. Accuracy and Updating of Personal Data

The data subject guarantees that the personal data provided is accurate, complete and up to date and undertakes to notify Day Apartment of any changes.

Day Apartment shall not be held liable for any inaccurate or outdated information provided by the data subject.

11. Automated Decision-Making and Profiling

Day Apartment does not make automated decisions that produce legal effects or similarly significant effects on data subjects.

Statistical analysis or customer segmentation may be carried out solely for service improvement, statistical purposes or the personalisation of communications, without producing any significant legal effects.

12. Data Subject Rights

Data subjects may exercise the rights recognised under Articles 15 to 22 of the GDPR:

• Right of access
• Right to rectification
• Right to erasure
• Right to object
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent

Requests should be submitted in writing to:

info@dayapartment.com

or to the registered office address indicated above.

Data subjects also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos): www.aepd.es.

13. Data Protection Officer

Day Apartment is not required to appoint a Data Protection Officer under Articles 37 to 39 of the GDPR or Article 34 of the LOPDGDD.

However, any questions relating to privacy may be sent to:

info@dayapartment.com

14. Commercial Communications (LSSI-CE)

Electronic marketing communications will only be sent where the data subject has provided prior express consent, in accordance with Articles 21 and 22 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).

Consent may be withdrawn at any time.

15. Cookie Policy

This website uses both first-party and third-party cookies for technical, analytical and personalisation purposes.

Full details are available in the Cookie Policy, which can be accessed through this website.

16. Updates to this Privacy Policy

Day Apartment reserves the right to amend this Privacy Policy at any time in order to reflect changes in applicable legislation, case law or the services provided.

The most up-to-date version will always be available on this page.