Privacy policy
Last updated: 5 November 2026
Courtesy translation. In case of discrepancy, the Spanish version prevails.
1. Data controller
- Controller: InnovaSoluciones S.L. · Tax ID (NIF/CIF): B86609476
- Address: C/ Duero nº 37 - Villaviciosa de Odón, Madrid 28670
- Privacy contact: legal@booktripdirect.com
2. What data we process, why, and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Browsing the site | IP address, browser, pages visited (technical logs) | Security, abuse prevention and operation of the service | Legitimate interest (Art. 6.1.f GDPR) |
| Owner account | Name, email, phone (optional), password (stored encrypted), property data | Create and manage your account and property listing; verify ownership; service notices | Performance of a contract / pre-contractual measures (Art. 6.1.b) |
| Message to a property | Name, email, phone (optional), dates and message | Pass your enquiry to the property, which will reply to you directly | Your request / pre-contractual measures (Art. 6.1.b) |
| Reports and suggestions | Message, email (optional) and the page you write from | Review the report or suggestion and, if you leave an email, reply to you | Consent (Art. 6.1.a) and legitimate interest in improving the service |
| Reviews | Display name, rating and text | Publish your review of the property | Consent (Art. 6.1.a) |
| Non-essential cookies | Browser identifiers | Show third-party maps | Consent (Art. 6.1.a); see Cookie policy |
We do not make automated decisions or build profiles with your data. The site is not aimed at children under 14.
3. Property data
Information about establishments (name, address, phone, website, email) comes from public tourism registers, OpenStreetMap, the owners themselves and visitors, and is processed to provide users with an accommodation guide (legitimate interest, Art. 6.1.f GDPR). If you own a property and want to correct, complete or remove its contact details, you can do so from your account or by writing to us.
4. Recipients
We do not sell your data. It may be accessed by: (a) the property you write to, only with the data in your message; (b) providers of technical services (web hosting, email delivery), acting as processors under contract; (c) Google, if you accept map cookies, when its maps load; and (d) authorities, where required by law. If a provider processes data outside the European Economic Area, appropriate safeguards are required (for example, standard contractual clauses).
5. How long we keep data
- Owner account: while you keep it active and, afterwards, for the legal limitation periods.
- Messages to properties, reports and suggestions: as long as needed to handle them and, at most, 12 months.
- Reviews: while published, until you ask for removal.
- Technical logs: up to 12 months.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to legal@booktripdirect.com and stating the right you wish to exercise (we may ask you to prove your identity). If you believe we have not processed your data properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply reasonable technical and organisational measures: encrypted connection (HTTPS), hashed password storage, two-step verification for owners and access control.
8. Changes to this policy
We may update this policy; the current version is the one published here, with its update date.
Loading…