LEGAL INFORMATION
How we process and protect your personal data. Last updated: 23 October 2026.
At Bhost we respect your privacy. This policy explains who processes your data, for what purpose, on what legal basis, for how long and what rights you have, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
Data: full name, phone number, email address, city or address of the property, property features and the content of your message.
Purpose: to answer your enquiry, prepare the profitability assessment you request and send you our proposal.
Legal basis: the application of pre-contractual measures at your request (art. 6.1.b GDPR) and your consent (art. 6.1.a GDPR).
Retention: for as long as necessary to handle the request and, if no contractual relationship is formalised, for a maximum of 12 months.
Data: identification and contact details, property details, and the bank and tax details needed for statements.
Purpose: to provide the management service contracted, issue statements and invoices and meet tax and administrative obligations.
Legal basis: performance of the contract (art. 6.1.b GDPR) and compliance with legal obligations (art. 6.1.c GDPR).
Retention: for the duration of the contractual relationship and, afterwards, for the legal limitation periods (generally 6 years under the Spanish Commercial Code and 4 years under tax law).
Data: identification, contact, booking and payment details, and the traveller data that the law requires us to register.
Purpose: to manage your booking and your stay, assist you before, during and after it, and comply with the legal obligation to register travellers and report them to the authorities.
Legal basis: performance of the accommodation contract (art. 6.1.b GDPR) and compliance with legal obligations (art. 6.1.c GDPR), in particular Spanish Organic Law 4/2015 on the protection of public safety and Royal Decree 933/2021.
Retention: for as long as necessary to manage the booking and for the applicable legal periods. Traveller registration data is kept for 3 years, in accordance with Royal Decree 933/2021.
Data: email address.
Purpose: to send you news, stays and offers from Bhost.
Legal basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time through the unsubscribe link included in every email or by writing to info@bhost.es.
Retention: until you unsubscribe.
If you contact us through these channels, we will process your data to answer your enquiry, on the basis of your consent and, where applicable, the contractual relationship, and we will keep it for as long as necessary to resolve it.
We do not make automated decisions or create profiles with legal effects on you.
Your data is not shared with third parties except where required by law or where necessary to provide the service:
Our providers of web hosting, booking engine, email, messaging, advisory, cleaning and maintenance services also have access to the data as processors, under contracts that guarantee confidentiality and security, to the extent necessary for their work.
Some of our providers may be located outside the European Economic Area. In that case, transfers are made with the safeguards provided for in the GDPR, such as European Commission adequacy decisions (including the EU-US Data Privacy Framework) or standard contractual clauses.
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent given, without affecting the lawfulness of prior processing. To do so, write to us at info@bhost.es or by post to GESTITUR PROPERTY, S.L., Avenida Ronda de los Tejares, 18, local, 14001 Córdoba, stating the right you wish to exercise. We may ask you for additional information to verify your identity.
If you believe we have not processed your data correctly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).
You undertake to provide true and up-to-date data. If you provide us with data of third parties, such as other travellers on your booking, you confirm that you have informed them and have their authorisation. Our forms are not intended for children under 14.
We apply appropriate technical and organisational measures to protect your data against loss, alteration, unauthorised access or unlawful processing, taking into account the state of the art and the nature of the data.
We may update this policy to reflect changes in the law or in our services. We recommend that you review it periodically.
Your privacy
We use our own and third-party cookies (Google) to understand how the website is used and to measure our campaigns. You can accept them, reject them or choose which ones you allow. More information in our cookie policy.