General Regulatory Framework
The European GDPR 679/2016 on personal data protection governs this privacy policy.
General
To use the GuestArrive application and related platforms, visitors and users must accept the privacy terms outlined below, in accordance with the European Data Protection Regulation (Regulation 2016/679) and the local laws of the country or region where the data subject resides.
By using GuestArrive services and accepting this privacy policy, you consent to the accommodation owner or host, as the data controller, collecting and processing your personal data for platform use. The user is hereby informed of the specific data processing activities based on the provided information.
What Do We Do with Your Data?
We process your personal data for the following purposes:
- Reservation Management: To monitor and manage your stay at our accommodations.
- Information Reporting to Authorities: To comply with legal requirements related to tourism and tax regulations in the relevant jurisdiction.
What Personal Data Do We Process?
Depending on the region, we may process the following personal data for managing your stay and fulfilling legal obligations:
- First Name
- Last Name
- Second Surname (if applicable)
- Gender
- Nationality
- Citizenship
- Date of Birth
- Birth Country
- Birth City
- Residence Country
- Residence City
- Residence Address
- ID Type
- ID Number
- ID Date of Issue
- ID Country of Issue
- ID City of Issue
- Passport number
- Purpose of Stay
- Value Added Tax (VAT) number
- VISA Number
The specific data required may vary depending on regional regulations.
How Long Do We Store Your Data?
We retain your data for as long as necessary to complete the relevant processes, and for at least three years, in accordance with tourism and tax regulations.
To whom is your data transferred?
The data collected by the accommodation owner or host will never be transferred to third-party companies, except in the following cases:
- All the aforementioned processing is exclusively assigned to GuestArrive for the purpose of fully managing the application.
- Transfers required to comply with the Authorities’ regulations.
Do we make automated decisions?
No, there are currently no automated decisions made in the processing of your data.
Rights of access, rectification, deletion, restriction of processing, data portability, and objection.
In accordance with the General Data Protection Regulation, as well as the right to object to automated decision-making, any user who has provided data to the accommodation owner has the following rights, which they can exercise:
- Access
- Rectification
- Restriction of processing
- Deletion
- Objection
- Data portability
To exercise these rights, a communication must be sent either to the physical or electronic address provided by the accommodation owner or host for this purpose. This does not exclude the use of other legally valid means to meet the required legal standards.
To confirm your identity when exercising these rights, you will need to provide:
- Full name of the individual concerned, along with a copy of their ID, passport, or similar document. If applicable, proof of representation.
- Description of the request.
- Notification address, date, and signature of the applicant.
- Documents supporting the petition, where necessary or deemed relevant.
Changes to the Privacy Policy
GuestArrive reserves the right to update or modify this Privacy Policy periodically. Any changes will be posted on this webpage.