Privacy Policy (SES-App)

Last updated: June 9, 2025

1. Data Controller

ConnectMe C.B., Calle Mar 8, 03189 Orihuela Costa, Spain — NIF: E42648907 — info@connectme.es

2. What personal data do we collect?

Full name
Gender
Nationality
Date of birth
Document type and number
Check-in and check-out dates
Booking reference
IP address and technical logs

3. Why do we collect your data?

Purpose	Legal Basis
Guest registration for authorities	Article 6(1)(c) GDPR – legal obligation
System security	Article 6(1)(f) GDPR – legitimate interest
Account access and verification	Article 6(1)(b) GDPR – contract performance

4. Is data provision mandatory?

Yes. It is required under Spanish law (Organic Law 4/2015, INT/1922/2003). Without this data, check-in is not possible.

5. Who has access to your data?

Policía Nacional or Guardia Civil (mandatory reporting)
Authorized technical service providers (under contract)
Hosting and email infrastructure (GDPR-compliant)

6. Payments and Stripe

We use Stripe, a trusted third-party payment processor, to handle secure transactions. When making a payment, Stripe may process personal data including your name, email address, billing address, and payment card details.

Stripe acts as an independent data controller for these transactions. You can view their privacy policy here:
https://stripe.com/privacy

We do not store or process your full credit card information on our servers.

7. Data retention period

Data is retained for 3 years from check-out or longer if legally required. Logs (IP, activity) are retained for 6 months.

8. Data storage and security

Data is encrypted, stored in EU-based secure servers, protected by HTTPS, access controls, and encrypted daily backups.

9. Your GDPR rights

Access, correct or delete your data
Restrict or object to processing
Lodge a complaint with the Spanish Data Protection Authority (AEPD)

10. Automated decisions

No profiling or automated decisions are made using your data.

11. Cookies and tracking

This site uses session cookies only. No marketing or tracking cookies are used.

12. International transfers

All data remains in the EU. If transferred, we apply GDPR safeguards (adequacy, SCCs).