Privacy Policy
1. Data controller
Makuteros S.L.
CIF B19603810
Gran Vía de Colón, 53, 18001 Granada, España
hello@host53.es
+34 958 292 924
2. Data we may process
- Identification and contact details: first name, surname, identity document number, date of birth, nationality, address, telephone number and email address.
- Booking and stay details: dates, type of accommodation, number of guests, requests, preferences and communications relating to the booking.
- Billing and payment details. When a payment is processed via Mews or a financial institution, HOST53 does not need to retain the full card details if the payment provider handles them directly.
- Data required under the regulations on passenger registration and public safety, including those set out in Royal Decree 933/2021.
- Data from forms, group applications, employment, activities, artist residencies or other enquiries that the user submits voluntarily.
- Technical browsing data and, where consent has been given, data derived from analytical or advertising cookies.
3. Purposes and legal bases
| Legal basis | |
|---|---|
| Manage enquiries, bookings, payments, invoices, check-in, stays and guest services. | Contract performance and pre-contractual measures. |
| To comply with obligations relating to the registration and reporting of passengers, tax matters, accounting and security. | Compliance with legal obligations. |
| Managing incidents, complaints, damage, premises security and the protection of rights. | Legitimate interest and, where applicable, contractual or legal compliance. |
| To send marketing communications about HOST53 where consent has been given or there is an applicable legal basis. | Consent or legitimate interest in the cases permitted by the LSSI-CE. |
| Web analytics and non-essential personalisation. | Consent, where required. |
4. Passenger register
As an accommodation provider, HOST53 is required to collect, record, retain and disclose certain data to the relevant authorities in accordance with Royal Decree 933/2021.
The data in the computerised register subject to this regulation is retained for three years from the end of the contracted service or provision.
This purpose is mandatory and does not require the guest’s consent.
5. Recipients and data processors
Data may be disclosed to public authorities, law enforcement agencies and the relevant authorities where there is a legal obligation to do so.
They may also be processed by suppliers providing services to HOST53, including the Mews management and booking system, web hosting providers, email providers, IT support providers, consultancy firms, analytics providers and payment providers or gateways.
These suppliers act in accordance with their respective roles and data protection agreements.
6. International transfers
Some technology providers may use infrastructure or sub-processors located outside the European Economic Area.
Where there is an international data transfer, HOST53 will require that it be based on an adequacy decision, standard contractual clauses or another valid safeguard in accordance with the GDPR.
The specific information will depend on the suppliers that are actually active at any given time.
7. Retention periods
The data will be retained for as long as is necessary to manage the relationship and, thereafter, for the applicable statutory limitation and retention periods.
Passenger registration data subject to Royal Decree 933/2021 is retained for three years.
Tax and accounting records are retained for the periods specified in the relevant regulations.
Data processed on the basis of consent will be retained until such consent is withdrawn, subject to any legally required restrictions or retention periods.
8. People’s rights
You may exercise your rights of access, rectification, erasure, objection, restriction and data portability, as well as withdraw your consent where applicable, by writing to hello@host53.es and specifying the right you wish to exercise.
We may ask for further information to verify your identity where necessary.
If you believe that the processing of your data does not comply with the regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es.
9. Minors
Data relating to minors will only be processed where necessary to manage their accommodation, to comply with legal obligations or to act on authorisations from their legal guardians.
In the case of minors staying without a parent or guardian, HOST53 will apply the admission and authorisation conditions set out in its Booking Terms and Conditions.
10. Security and confidentiality
HOST53 implements reasonable technical and organisational measures to protect data against loss, alteration, unauthorised access or disclosure.
The level of security is tailored to the nature of the data and the risks associated with its processing.
11. Updates
This policy may be updated due to changes in regulations, suppliers or internal processes.
The current version will be the one published on the website.