Privacy policy

1. Data controller

The controller of the personal data collected through roomlyz.com is:

• Controller: Roomlyz
• Tax ID: ES77759458T
• Address: Camino de Murcia, 91, 2E, 30530 Cieza, Murcia, ES
• Email: javier@roomlyz.com

2. Data we process

We process the data you voluntarily provide, mainly through the contact form: name, name of the accommodation, email address and the content of the message. If you go on to contract a service, we will also process the billing data needed to issue the corresponding invoice.

We may also process technical browsing data in an aggregated and anonymous way for statistical purposes, without identifying you personally.

3. Purposes and legal basis

• To handle your contact or demo request and answer your enquiries. Legal basis: your consent and the application of pre-contractual measures at your request.
• To manage the contractual relationship and provide the service if you contract a plan. Legal basis: performance of the contract.
• To comply with legal obligations, particularly tax and accounting ones. Legal basis: legal obligation.
• To produce anonymous statistics on the use of the site. Legal basis: legitimate interest in improving our services.

4. Retention period

We will keep your data for as long as our relationship lasts and, once it ends, for the periods legally required to address possible liabilities (for example, those set out in tax and commercial regulations). Contact data from requests that do not lead to a contract will be kept only for as long as necessary to handle your request.

5. Recipients and processors

We do not share your data with third parties, except where legally required. To provide the service we rely on providers acting as processors that offer adequate guarantees:

• Hosting provider: servers located in the European Union.
• Payment gateway: Stripe, to securely process subscription payments.
• Email delivery: Brevo (Sendinblue), for transactional emails.
• Automatic translation services: used solely to translate website content, without including identifying personal data.

6. International transfers

As a general rule, data is processed within the European Economic Area. Where any of our providers process data outside the EEA, it is safeguarded by the mechanisms set out in the General Data Protection Regulation (standard contractual clauses or adequacy decisions of the European Commission).

7. Your rights

You may exercise the following rights at any time by writing to javier@roomlyz.com, indicating the right you wish to exercise:

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure of data when no longer necessary.
• Objection to processing.
• Restriction of processing in certain circumstances.
• Portability of your data to another controller.
• Withdrawal of consent given, without affecting the lawfulness of prior processing.

If you believe that the processing does not comply with the regulations, you have the right to lodge a complaint with the supervisory authority, in Spain the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption of communications (HTTPS), access control and backups.

9. Changes to this policy

We may update this privacy policy to adapt it to legislative developments or changes in our services. We recommend you review it periodically.