Privacy policy

Last updated: 30 September 2026

Controller

Carmelo Pérez Brito · Tax ID (NIF) 45768509G · C/ Prudencio Morales 10, 35008 Las Palmas de Gran Canaria, España · info@myourb.com · +34 619 45 01 02

Browsing this site

This site has no forms, guest accounts, analytics tools or advertising. It only uses a technical cookie to remember the language; the cookie policy explains it.

Like any web server, the one hosting this site automatically records the IP address, date and time and page requested, for the sole purpose of keeping the service secure and running (legitimate interest). These logs are kept for a limited time and are not combined with other data.

The map on each home’s page is served by Google Maps and shows where the home is; this site does not ask for or use the visitor’s location.

Booking

Bookings and payments are made on the Lodgify platform (the owner’s booking system), which collects the data its form asks for: name, e-mail, phone, country, stay and payment details. If you book through another platform (Airbnb, Booking.com or others), that platform passes your booking details to us. Payment data is handled by the platform and its payment provider; the owner does not receive it.

From the booking system, the owner receives and keeps the name, e-mail, phone, country, language, dates, number of guests, amounts and notes of the booking. If you ask for an invoice in your name, also your tax ID and address.

Staying

Guest registration. Spanish law (Royal Decree 933/2021) requires guests to be registered and reported to the Ministry of the Interior. This is done through CheKin, which collects the ID document details and the other data required by law.

Access to the home. The electronic lock code (Nuki) is linked to the dates of your booking. The lock records when it is opened with your code; we use this to know you have arrived safely (for example, to let the team know about your first entry or that the code has not been used yet) and to solve access issues.

Communications. We write to you by e-mail, through the platform’s messaging or by WhatsApp if you contact us that way, only about your stay.

Reviews. The reviews shown on the site are from real guests and appear only with a first name or initials. To show them in the site’s three languages, their text is translated automatically with DeepL or, if DeepL is not available, with Google Cloud Translation. If you want yours removed, write to us.

Purposes and legal basis

Managing the booking and the stay (communications, access, cleaning, incidents): performance of the accommodation contract (art. 6.1.b GDPR).

Invoicing and meeting tax and accounting obligations, and registering guests: legal obligation (art. 6.1.c GDPR).

Keeping the website secure: the owner’s legitimate interest (art. 6.1.f GDPR).

No automated decisions are made, no profiles are built and the data is not used for advertising.

Who it is shared with

With the providers who deliver the service, as processors or under their own terms: Lodgify (bookings, payments and messaging; its privacy policy), CheKin (guest registration; its policy for guests), Nuki (lock), IONOS (website hosting, server and e-mail), GitHub (backups, encrypted), DeepL and Google Cloud Translation (translation of review texts), Google (map) and Meta (WhatsApp, only if you use it). The terms under which Lodgify and CheKin act as processors are those in their own terms of service.

With public authorities when the law requires it (Tax Agency, Ministry of the Interior).

With the owner’s accountants, for bookkeeping and taxes.

If the home belongs to another owner and is managed on their behalf, that owner sees the guest’s name and the dates of the stay, but not their phone. As the accommodation invoice is issued in the owner’s name, they also see the details on it: the name and, if provided, the tax ID, address and e-mail.

The cleaning team only receives the dates and the number of guests. The person who looks after arrivals may receive your name and the time of your first entry, to know you have arrived safely.

Some providers (Google, Meta, GitHub) may process data outside the European Economic Area with the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses.

How long it is kept

Booking data and invoices are kept for six years from the close of the financial year in which the stay ends (the period set by commercial and tax law). After that, the name, e-mail, phone, tax details and notes are deleted automatically from bookings and invoices, and the PDF invoices are removed; only the accounting data (dates, amounts, country and booking platform) is kept.

The guest register is kept for the period set by Royal Decree 933/2021 (three years). Backups are kept for about three months at most and are then replaced by more recent ones.

Your rights

You can exercise the rights of access, rectification, erasure, objection, restriction and portability under Regulation (EU) 2016/679 and Spanish Organic Law 3/2018 by writing to info@myourb.com. If you believe they have not been addressed, you may lodge a complaint with the Spanish Data Protection Agency.