Data Controller | STAY MANAGEMENT, S.L. ( “STAY”) Tax Id.: B-87944559 Phone.: [●] Address: Paseo de la Castellana, 40, 9ª (28046) Madrid Web: www.sleepbystay.com DPO: |
Purposes of the processing | We process your personal data for the following purposes: to execute and fulfil a tourist or seasonal accommodation agreement in your chosen apartment; to send you newsletters or commercial communications; to provide you with the information requested via our online form; to conduct statistical analysis and market research, to protect our rights and lawful interests and those of third parties and to comply with applicable laws. |
Data collection | You provide your personal data directly to us when you purchase our goods, use our services or browse our website, using cookies and similar technologies. We may also collect personal data from third parties or group companies. In addition, we collect data from third party partners, including booking engines and online travel agencies. |
Categories of data | We collect personal data including your name and surname, Id card or tax identification number, date of birth, gender, address, e-mail, telephone, employment data, IP address, location, device ID, bank and financial data, credit card data and payment information, information about your obligations; information about your interests and preferences and how you use our goods and services; and any data or information you provide to us. In certain cases we may process images. |
Legal Basis | We process personal data on the basis of your consent, pursuant to an agreement, where the data is necessary for the execution of the agreement, or on the basis of our lawful interest. |
Automated decision-making | We do not make automated decision-making. |
Data recipients | We may share your data to third parties for the provision of a service, executing an accommodation agreement and to comply with applicable laws. |
Rights | You have the right to: (i) request access, rectification and deletion of your personal data that are no longer required for processing, (ii) restrict or object to the processing of your personal data, and (iii) request that you or a third party be provided with a copy of your personal data in digital format. You may also contact our Data Protection Officer at: You also have the right to file a claim regarding the processing of your personal data with the Spanish Data Protection Authority (Agencia Española de Protección de Datos (www.aepd.es). |
Minors | Persons under 18 years of age may not use the services available on this website without the prior authorisation of their parents, guardians or legal representatives, who will be solely responsible for any actions carried out by such minors. |
Security measures | We have implemented the security measures and standards required by applicable law suitable to the nature of the data being processed. However, your data are transferred online, which is not an impenetrable medium. As a result, such transmission may not be completely secure. If you use passwords provided by us or created by you, you are responsible for their safekeeping, ensuring that they are not used by third parties. |
Detailed information on data protection
1. Detailed information on data protection
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“GDPR”) and the Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”), we inform you that your personal data will be include included in a file under the responsibility of STAY MANAGEMENT, S.L. (“STAY”), with registered office at Paseo de la Castellana, 40, 9ª (28046) Madrid, Tax Id. number B-87944559, registered in the Commercial Registry of Madrid, Volume 36550, Folio 1, Page M-656465, 1st Entry.
In this section you will find all the information about our Privacy Policy.
If you have any questions or queries related to our Privacy Policy. please email us at or send us a letter by ordinary post to Paseo de la Castellana, 40, 9ª (28046) Madrid (Spain).
You may also contact our Data Protection Officer:
2. Data controller
STAY MANAGEMENT, S.L.
Tax Id.: B-87944559
Phone: [●]
Address: Paseo de la Castellana, 40, 9ª (28046) Madrid
Madrid DPO:
3. Data processing
https://www.sleepbystay.com is a tool proprietary of STAY, who is its titleholder or licensee and carries out its maintenance.
Your privacy is important to us.
We process your data in order to be able to provide you with your purchased services and for other purposes described in this document.
You are advised to read our Cookies Policy to become familiar with the use that we make of data we gather as you browse our site on https://www.sleepbystay.com, whether you are registered or not in our system.
4. Purpose of the data processing
We process your personal data for the following purposes:
- to execute and fulfil an accommodation agreement for your chosen apartment;
- to send you newsletters or commercial communications;
- to give you access to our app STAY;
- to provide you with information requested by you via our online form;
- to conduct statistical analyses and market research; and
- to protect our rights and lawful interests (including those of third parties) and comply with applicable laws.
We also process your personal data where:
- the data are necessary for compliance with our statutory duties (e.g. to comply with reporting duties to supervisory authorities or the Spanish Data Protection Authority or any other competent authority, to identify and prevent fraud and money laundering, the financing of terrorism and any other criminal or illicit activity);
- the processing is required for us to safeguard our lawful interests in the conduct of our business, including the following: (i) to manage and execute your accommodation agreement, which includes, where appropriate, debt collection, contacting you in relation to any changes related to our services or our business relationship; (ii) to improve our products and services; (iii) to prevent crime; (iv) for statistical and market research purposes intended to measure and understand the effectiveness our advertising; (v) to administer and improve our websites, guarantee the security of our websites, and ensure that content is presented in the most effective manner on your device, provided that these interests do not conflict with your interests and rights;
- for marketing purposes (SEO and SEM measurement, use of Google Adwords, etc.) subject to your consent, which you may withdraw at any time.
If you do not provide us with your personal data, we will not be able to enter into a contract with you or provide you with our products and services.
5. Collection of data
We gather information and personal data in the following ways:
- automatically, when you use our website, our forms or our goods or services.
- information may also be provided to us by third parties, our group companies, online travel agencies and/or booking engines.
- when information is provided to us by you, for example, when filling out our online forms, on our websites, on social media, by post, by email, by telephone, or by any other means or service.
- much of the automatic information we obtain is collected via cookies and similar technologies. For more information, please refer to our Cookie Policy.
6. Categories of data
Information supplied by you:
We collect the following information which you provide to us:
- when you use our website, download content or subscribe to our blog, or when you fill in a form or request a service, whether you have provided the information to our staff or to a third party.
- when you report a problem to us, or when you communicate with us regarding our products or services.
- when you use social media features on our website, or when you participate in a promotion, survey or any other activity held through our website or our social networks; when you participate in a contest, promotion or survey, also with our partners and in social networks.
In the circumstances described, we collect personal data including your name and surname, identity card, tax identification number or passport, country of origin, date of birth, age, gender, address, e-mail, telephone, employment data, IP address, location, device ID, bank and financial data, credit card data and payment information, data about your obligations, data about purchasing power; information about your interests and preferences and how you use our goods and services; and any data or information you provide to us.
In certain cases, we may process images.
You guarantee to us at all times that the information you provide is yours, true, accurate, complete and up to date.
Information we collect from you automatically:
Whenever you visit our website, download content or subscribe to our blog, we can automatically collect the following information:
- technical data, including type of device, IP address and Internet provider used to connect the device to the network, access and connection data, country from which you are accessing the device, browser type and version, time zone, plug-in types and versions, platform and operating system, screen resolution, location, character encoding.
- data on the visit and behaviour on our website, including the pages you visit, where you click, time of visit and date, traffic data, location data and other data and information derived from your downloads or requests.
Information received from third parties:
We may request information about you from third parties, such as other group companies, respecting at all times data protection regulations and, if necessary, seeking your prior approval. We may receive information about you:
- from other group companies and business partners with whom we collaborate such as online travel agencies or booking engines;
- business partners who provide technical, payment and delivery services, advertising networks, analytical providers, and search providers when they offer services to us;
- in any other case in which you have agreed to provide us with your data.
7. Automated decision-making
We do not make automated decision-making.
8. Your rights
You have the right to: (i) request access, rectification and deletion of your personal data that are no longer required for processing, (ii) restrict the processing or object to the processing of your personal data, and (iii) request that you or a third party be provided with a copy of your personal data in digital format.
You may also contact our Data Protection Officer at
In addition, you are entitled to file a claim related to the processing of your personal data with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, www.aepd.es).
Right of access:
You have the right to enquire about the personal data we hold about you and the purpose and nature of the processing, and to receive information from us about who we intend to share it with (unless such information is prohibited by law). You may request a copy of the information we process about you to verify what information we hold. This copy will be free of charge, provided that such requests are not manifestly unfounded or unreasonable, especially if they are repetitive nature.
Right of rectification and withdrawal:
You have the right to ask us to update, correct or delete (as long as this does not affect the services we provide to you) your personal data at any time. Please note that we may reject requests that compromise the privacy of third parties, that are repetitive or unreasonable, or that require a disproportionate effort.
However, please be aware that we are subject to a number of legal obligations that prevent us from immediately deleting your personal data. These obligations arise from anti-money laundering legislation, tax regulations and consumer rights laws, among others.
You should inform us of any changes in the information you have provided to us when entering into the contract or if you believe that the personal data we are processing about you are incorrect.
Right to object:
You have the right to opt-out of receiving e-mail newsletters, SMS messages or similar promotional information at any time by indicating this in your user profile on our website or by contacting us; you may also unsubscribe from such information.
Also, at the bottom of each email of a commercial nature, a link will be displayed for you to click on it and stop receiving our promotions. Please note that our messages may contain useful or important information about our products, discounts and other offers that may be of interest to you.
Right to a limited processing:
You have the right to request limitation on the processing of your personal data, if you consider that the processing is unlawful, but you do not wish to request deletion, or if you believe that the data controller no longer needs your personal data for the purposes for which they were collected, but you need such data in order to draft, exercise or defend your claims.
Right of portability:
You have the right to receive a copy of your personal data that you have provided to us in a structured format, of common use and mechanical reading, as well as the right to have said data transferred to another Controller. Please note that we will not pass on the information or refuse your exercise of this right if it adversely affects the freedoms and rights of third parties. This copy shall be free of charge, provided that it is not manifestly unfounded or excessive due to repetitive requests.
Right to claim:
You have the right to lodge a complaint with the Spanish Data Protection Authority if you consider that the processing of your personal data does not comply with applicable legislation.
9. Data retention
We may retain your personal data even after you have ceased to be our customer, in order to safeguard our legal interests in the event of litigation with you or if required by law. However, we keep personal data for as long as is strictly necessary taking into account the purpose for which the data was collected, which is usually to perform our contractual duties, to exercise our lawful interests, or to meet statutory data retention deadlines.
10. Recipients of the data; sub-processors; data assignments and international data transfers
At STAY we can share your data with other companies in the group internally and for administrative, management or contract performance purposes. We may disclose your data to other group companies and/or certain third parties for processing if this is required to fulfil our contractual obligations. Similarly, for any other purposes described in this Policy.
We may also transfer your personal data to third parties who assist us in our business by hosting, maintaining and developing our website, carrying out risk assessments where appropriate, detecting possible fraud, performing debt recovery services, offering customer service, supporting us in the fight against fraud, providing us with analyses on the use of our services, and/or helping us in our marketing activities.
Provided we are required to do so by law, we may provide information about your use of our services and visits to our websites when we believe in good faith that we need to provide such information to protect our rights, your safety and that of others, prevent and investigate fraud, or respond to an administrative or judicial request.
In addition, in the event of a total or partial breach of your obligations, we may transfer the data related to your outstanding liabilities to debt collection companies and credit bureaus, including legal firms.
Also, we may share your personal data with search and analytical providers that help us improve and optimise our website.
Based on our lawful interest, the sale of all or part of the company to a third party could force us to share your information.
When we transfer data to third parties, we undertake to ensure that the recipient has in place the same security measures for storing and processing personal data as we do.
Your personal data will be processed, stored and transferred to third parties in the manner and to the extent set out in this Privacy Policy, in any agreement(s) signed and any consents you have given.
None of the data we collect about you is processed or stored outside the European Economic Area (EEA).
11. Processing: purposes, legal basis and miscellaneous information
Purpose of the processing | Purpose of the processing To enable us to execute and fulfil an accommodation agreement in your chosen apartment |
Legal basis | Contractual relationship for the provision of the service requested. |
Recipients | Your data may be transferred to group companies for the execution of the agreement; they may also be transferred to third parties for the provision of a service to the Controller. For further information about these recipients please contact:
|
International transfers | No international transfers outside of the EEA are made. |
Retention period | Your data will be kept for the period resulting from applicable law, for the handling of judicial, administrative or tax claims. However, they may be kept for longer for historical or statistical purposes, unless you exercise your rights of objection and/or cancellation. |
Purpose of the processing | In order to send you newsletters or commercial communications |
Legal basis | Consent granted by you for such purpose. You may at any time object to such mailings by sending an email to indicating in the subject line “UNSUBSCRIBE FROM THE DISTRIBUTION LIST”. |
Recipients | Your data may be transferred to group companies for the execution of the agreement; they may also be transferred to third parties for the provision of a service to the Controller. For further information about these recipients please contact:
|
International transfers | No international transfers outside of the EEA are made |
Retention period | Your data will be kept for the period resulting from applicable law, for the handling of judicial, administrative or fiscal claims. However, they may be kept for longer for historical or statistical purposes, unless you exercise your rights of objection and/or cancellation. |
Purpose of the processing | To allow you to access the STAY app |
Legal basis | The contractual relationship for the provision of the service requested, even if this is free of charge. |
Recipients | Your data may be transferred to group companies for the execution of the agreement; they may also be transferred to third parties for the provision of a service to the Controller. For further information about these recipients please contact:
|
International transfers | No international transfers outside of the EEA are made |
Retention period | Your data will be kept for the period resulting from applicable law, for the handling of judicial, administrative or tax claims. However, they may be kept for longer for historical or statistical purposes, unless you exercise your rights of objection and/or cancellation. |
Purpose of the processing | To provide you with the information requested via our web form |
Legal basis | Our legitimate interest to deal with requests for information made via our website. |
Recipients | Your data may be transferred to group companies based on our legitimate interest in fulfilling your request for information. For further information about these recipients please contact:
|
International transfers | No international transfers outside of the EEA are made |
Retention period | Until the resolution of your request. Your data will be kept for the period resulting from applicable legislation, for handling judicial, administrative or tax claims. However, your data may be kept longer for historical or statistical purposes, unless you exercise your rights of objection and/or cancellation. |
12. Social media. Links to third-party sites
Our website includes links to social media including Facebook, Instagram, Twitter or LinkedIn and may include links to other third party websites.
This Privacy Policy applies only to the data and information we collect through the website or our services, and we disclaim any responsibility for data processed by such third parties. We recommend that you carefully review the privacy policies applicable to each of the websites you visit.
13. Amendments to this Privacy Policy
We may make changes and updates to this Privacy Policy at any time. Any future changes to this Privacy Policy will be posted on this website and, if necessary, notified to the customer by email or mail. Please review this Privacy Policy frequently to keep up to date with any new releases.
This Privacy Policy has been updated in September 2019.