Privacy Policy
Last updated: June 2026
1. Legal basis for processing
The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee (LOPDGDD), on the following basis:
- Art. 6.1.a GDPR — consent of the data subject.
- Art. 6.1.b GDPR — performance of a contract to which the data subject is party.
- Art. 6.1.c GDPR — compliance with a legal obligation applicable to the controller.
- Art. 6.1.f GDPR — legitimate interests of the controller.
The specific legal basis applicable to each processing activity is specified in the relevant sections below.
2. Security
We have implemented the technical and organisational measures necessary to ensure the security of personal data and prevent its alteration, loss, unauthorised processing or access. Data is stored on servers located within the European Union.
3. Rights of data subjects
Any data subject may exercise the following rights:
- Access — find out what data we process.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data.
- Objection — object to processing for certain purposes.
- Restriction — request that processing be restricted.
- Portability — receive your data in a structured, machine-readable format.
To exercise any of these rights, please contact us at support@eguestregister.com.
If you believe that processing does not comply with applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.
Specific information by user type
4. Platform clients
This section applies to companies and professionals who subscribe to eGuestRegister to manage digital check-in for their properties.
Data collected
- Identification and contact data: name, email address, phone number.
- Company data: company name, tax ID, registered address.
- Billing and payment data.
- Platform usage data.
Purpose
- Managing the contractual relationship and user account.
- Providing the contracted service.
- Managing billing and payments.
- Handling enquiries and support requests.
- Sending service communications (with prior consent).
Retention
Data will be retained for the duration of the contract and subsequently for the legally established periods for the limitation of liability.
5. Properties
This section applies to tourist accommodation establishments that use eGuestRegister to manage guest registration.
Data collected
- Property data: name, address, phone number, email address.
- Connection credentials for the relevant authorities (Mossos d'Esquadra, SES Hospedaje), stored in encrypted form.
- Email configuration for sending communications to guests.
Purpose
- Setting up and managing the digital check-in service for the property.
- Transmitting guest data to the competent authorities on behalf of the property, in accordance with Royal Decree 933/2021.
- Sending communications to guests on behalf of the property.
Recipients
- Mossos d'Esquadra and SES Hospedaje, in compliance with applicable regulations.
- Technology providers acting as data processors, with whom the relevant agreements have been formalised.
6. Guests
This section applies to travellers who complete digital check-in through eGuestRegister.
Data collected
- Identification data: first name, surname(s), document type and number, date of birth, nationality, gender.
- Contact data: email address, phone number (optional).
- Residence data: address, postcode, city, country.
- Stay data: check-in and check-out dates, property.
Purpose
- Managing the guest registration at the property.
- Complying with the legal obligation to report traveller data to the competent security forces.
- Sending a check-in confirmation by email.
Recipients
- The property where the booking was made.
- Mossos d'Esquadra and SES Hospedaje, in compliance with Royal Decree 933/2021.
- Technology providers acting as data processors, with whom the relevant agreements have been formalised.
Retention
Data will be retained for as long as necessary to comply with the legal obligations established by Royal Decree 933/2021 and applicable regulations on traveller registration.
7. Data controller
The controller responsible for the personal data collected through this platform is:
Company name: Depia Decoració SLL
Tax ID: B17716549
Address: Sa Tarongeta 1, 17488 Cadaqués, Spain
Email: support@eguestregister.com
8. Changes to this policy
We reserve the right to update this policy to reflect changes in legislation or our service. We will notify you of any significant changes through the contact details you have provided.