Privacy policy
How we handle the personal data of people using this website, under Regulation (EU) 2016/679 and Spanish Organic Law 3/2018. The Spanish version prevails.
Who the controller is
| Item | Value |
|---|---|
| Controller | DOBO HOMES, S.L. |
| Tax number | B87740007 |
| Address | Calle Toledo, 28, 2nd floor left, 28005 Madrid, Spain |
| Email for exercising rights | info@dobohomes.com |
| Data protection officer | Not appointed |
What we collect and why
We only collect data when someone completes a booking. Browsing the site, checking availability or viewing prices requires no personal data at all.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| First name, last name, email and phone | Managing the booking and contacting you before, during and after the stay | Performance of the accommodation contract (Art. 6.1.b GDPR) | For the duration of the relationship and afterwards, blocked, for the applicable limitation periods |
| ID document | Traveller register, mandatory for accommodation establishments | Legal obligation (Art. 6.1.c GDPR) | Three years, as required by Royal Decree 933/2021 |
| Address, postcode, town and country | Issuing the invoice and meeting tax obligations | Legal obligation (Art. 6.1.c GDPR) | The periods required by tax and commercial law |
Providing this data is necessary in order to book. Without it, the booking cannot be completed.
Who else sees this data
- Our internal property management system, where the booking is recorded.
- The payment gateway, which processes the charge. Card details are entered directly in its own environment: this website never receives or stores them.
- The technical providers that process data on our behalf and only to provide their service: Vercel (hosting of this website), Clouding.io and Amazon Web Services (servers and database of our management system, in the European Union), Stripe (payments), Microsoft (email) and the services we use to send you emails, text messages and WhatsApp messages about your booking.
- Public authorities where the law requires it, such as the traveller register.
We do not sell or transfer data to third parties for commercial purposes. Some of these providers — Vercel, Stripe, Microsoft and some of the messaging services — are US companies or belong to US-based groups. Where they process data outside the European Economic Area, they do so with the safeguards required by the GDPR: the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.
What we do NOT do
- We use no advertising, analytics or tracking cookies. The only thing stored in your browser is the choice you make in the cookie notice, and it stays on your device.
- We have no analytics or advertising tracking tool installed.
- We do not build profiles or make automated decisions about people.
- The map on each property page is provided by Google and only loads if you accept the cookie notice or open it yourself: until then, Google receives nothing.
Your rights
You may request access to your data, its rectification or erasure, restriction of processing, portability, and you may object to processing. Write to info@dobohomes.com stating which right you wish to exercise.
Some data cannot be erased while a legal duty to keep it remains, such as tax records or the traveller register.
If you believe we have not handled your request properly, you may complain to the Spanish Data Protection Agency (www.aepd.es).
Changes to this policy
If we change how we handle data — for example by installing an analytics tool or enabling the contact form — we will update this document before doing so.