Privacy and Data Protection Policy

In compliance with Reglamento (UE) 2016/679 (GDPR), Ley Orgánica 3/2018 (LOPDGDD), and Ley 34/2002 (LSSI-CE), the following details the Privacy Policy governing the processing of personal data of customers and users.

1. Data Controller

Identity

Ibernova Soluciones S.L.

Tax ID (NIF)

B70993365

Postal Address

Calle de Miguel Servet 9, Villaviciosa de Odón, Madrid, 28670, Spain

contact@ibernovasoluciones.es

2. Purpose of Processing: Why Do We Use Your Data?

We process the information provided by interested persons for the following purposes

Art. 6.1.b GDPR

1. Contractual Management

Managing the reservation, formalizing the seasonal lease agreement, collecting rents and deposits, and managing key handover and incidents during the stay.

Art. 6.1.c GDPR

2. Legal and Fiscal Compliance

Complying with billing, accounting, and tax declaration obligations.

Art. 6.1.c GDPR

3. Security and Traveler Registry

Communicating guest data to the State Security Forces and Bodies when required by citizen security regulations (Orden INT/1922/2003 and Real Decreto 933/2021), as well as to the Lease Registry ("Single Window") provided for in Real Decreto 1312/2024.

Art. 6.1.f GDPR

4. Customer Service

Attending to information requests received via web or email.

Important: We will not use your data for sending unsolicited commercial communications.

3. Conservation Period: How Long Do We Keep Your Data?

The personal data provided will be kept:

While the contractual relationship is maintained

During the years necessary to comply with legal obligations (5 years for tax purposes; 3 years for the traveler record book)

Subsequently, they will be kept blocked until the limitation period for possible liabilities arising from the processing

4. Recipients: To Whom Is Your Data Communicated?

Your data will not be transferred to third parties, except legal obligation. Specifically, they may be communicated to:

1. Tax Administration

For compliance with tax obligations

2. Security Forces and Bodies

In compliance with the Law on Protection of Citizen Security

3. Financial Entities

For the management of collections and payments

4. Data Processors

Technology service providers (e.g., Stripe, hosting providers) with confidentiality guarantees

International Transfers

For payment management, we use Stripe, which may perform data transfers to the USA under the adequacy framework (EU-US Data Privacy Framework) or Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection.

5. User Rights

You have the right to obtain confirmation as to whether Ibernova Soluciones S.L. is processing your personal data

Likewise, you have the right to:

Access your data

Request the RECTIFICATION of inaccurate data

Request its DELETION when data is no longer necessary

Request the LIMITATION of processing

Oppose the processing

Request the PORTABILITY of data

How to Exercise Your Rights

You can exercise these rights by sending an email to solucionesibernova@gmail.com, attaching a copy of your ID/Passport.

If you consider that your rights have not been met, you can file a claim with the Agencia Española de Protección de Datos (Spanish Data Protection Agency - www.aepd.es).

6. Security Measures

Ibernova Soluciones S.L. has adopted the security levels of personal data protection legally required and endeavors to install those other means and additional technical measures within its reach to avoid the loss, misuse, alteration, unauthorized access, and theft of the personal data provided.

For any questions about this Privacy Policy, please contact us at contact@ibernovasoluciones.es

Last updated: January 21, 2026