Privacy Policy

1. Introduction

At HostFinn, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property management platform.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

• Name and contact information
• Account credentials
• Property details and financial information
• Communication preferences

2.2 Automatically Collected Information

When you use our platform, we automatically collect:

• Device and browser information
• IP address and location data
• Usage patterns and preferences
• Cookies and similar tracking technologies

2.3 Signing in with Google

If you choose “Continue with Google”, Google Ireland Limited sends us your name, email address and Google account identifier, only so we can create your account or sign you in. We never receive your Google password and we have no access to anything else in your Google account.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our services
• Process your transactions
• Send you important updates and notifications
• Improve our platform and user experience
• Comply with legal obligations

4. Information Sharing

We may share your information with:

• Service providers and business partners
• Legal authorities when required by law
• Other parties with your explicit consent

5. Data Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction.

6. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Object to certain data processing
• Export your data

7. Cookies and Analytics

Essential cookies keep you signed in, remember your language and protect the forms against cross-site request forgery. They measure nothing and cannot be switched off — without them the site does not work.

On your first visit we look up the country of your IP address in a database stored on our own server (DB-IP), only to open the site in Spanish or Romanian where that fits. The address is not stored and is not sent to anyone. Choosing a language in the menu overrides this, and is remembered in the language cookie.

Everything else loads only after you agree, and nothing is sent to any of the companies below before you do:

• Google Analytics (Google Ireland Limited) — which pages are visited, from which country, on what kind of device.
• Hotjar (Hotjar Ltd) — anonymised recordings of how pages are used, so we can see where people get stuck.
• Microsoft Clarity (Microsoft Ireland Operations Limited) — click heatmaps and session recordings of the public pages, with form fields masked, for the same purpose. Never inside your account.
• Google Ads (Google Ireland Limited) — whether a sign-up followed one of our ads. Only with marketing consent; no name or email address is sent.
• Facebook Pixel (Meta Platforms Ireland Limited) — whether a visit followed one of our ads.

You can change your mind at any time, and withdrawing is exactly as easy as agreeing was: open the cookie settings. Refusing costs you nothing — every part of the platform works the same either way.

8. Guest Data and SES.HOSPEDAJES

If you use HostFinn to report your guests to Spain's Ministry of the Interior (SES.HOSPEDAJES, Royal Decree 933/2021), you enter your guests' data in your account: names, identity document, date of birth, nationality, address, contact details and, for minors, their relationship to the adult. For that data you are the controller and HostFinn is your processor, under our Data Processing Agreement, which you accept before connecting your SES operator.

• Guest data and your SES web-service credentials are stored encrypted, and only your account can see them.
• Data is sent to the Ministry only when you press send, or when you turn on automatic sending for your operator. The Ministry receives it as required by law; it is not our subprocessor.
• We do not use guest data for anything else: no marketing, no analytics, no sale.
• We do not keep a copy of the files sent to the Ministry, and our logs contain no guest data.
• Guest data is deleted when you delete the booking, or at your request. Keeping it for the period the law requires of you (three years under Royal Decree 933/2021) is your decision as the accommodation operator.

Your guests are informed by you, as the accommodation operator. They can exercise their rights with you; we help you answer them.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: contact@hostfinn.com
• Phone: +34 624 850 181