Data Controller. Universal Bandi SL, with Tax Identification Number (NIF) B09721390, and email address bandiuniversal@gmail.com.
Data Processed. The personal data processed may include identification and contact details, information provided through forms, booking details, billing information, communications with guests, and technical browsing data.
Purposes. To manage requests for information, process bookings, provide accommodation services, handle incidents, send communications related to the stay, comply with legal obligations, improve the website, and analyse the performance of the direct booking channel.
Legal Basis. The legal basis for processing will be the performance of pre-contractual or contractual measures, compliance with legal obligations, the legitimate interest in improving the service and, where applicable, the user’s consent.
Recipients. Data may be disclosed to service providers necessary for the provision of the service, such as Lodgify, Stripe or other payment systems, web hosting providers, analytics tools, professional advisers, competent authorities and technology providers, always in accordance with applicable regulations.
Retention. Data will be retained for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods required by legal, tax, accounting or liability obligations.
Rights. Data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to bandiuniversal@gmail.com and providing proof of identity where necessary.
Complaints. If you believe that the processing of your personal data does not comply with applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency.
Security. Universal Bandi SL will implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or misuse.