Privacy Policy
Last updated: November 2026
At OYOOSTAYS (InAtlantis BV), accessible via oyoostays.eu (the "Website"), safeguarding the personal privacy of our visitors and guests is a top priority. This Privacy Policy outlines the types of personal data we collect, why we collect it, how it is handled, and your legal rights under the European General Data Protection Regulation (GDPR).
1. Data Controller
The data controller responsible for the processing of your personal data is:
- Trade name: OYOOSTAYS
- Legal entity: InAtlantis BV
- Registered in: Belgium
- Contact email for privacy inquiries: info@oyoostays.eu
2. Personal Data We Collect
We only collect personal information that is necessary to provide our hospitality and property management services. This includes:
- Contact information: Full name, email address, telephone number, and home address.
- Booking and stay details: Dates of stay, chosen accommodation, number of guests, special requests, and check-in details.
- Communication records: Messages, questions, and feedback sent via our website forms, email, or direct chat.
- Identity verification data: Identity document details as required by local Spanish accommodation and safety regulations (e.g., guest registration for authorities).
- Technical and usage data: IP address, browser type, device information, and pages visited, collected automatically through standard server logs and cookies.
3. Purpose and Legal Grounds for Processing
We process your data based on the following legal grounds under the GDPR:
- Contractual necessity: To process booking inquiries, confirm reservations, provide check-in and local property management support, and fulfill our obligations under your rental agreement.
- Legal obligations: To comply with mandatory tax, accounting, and local tourist registration requirements under Spanish and Belgian laws.
- Legitimate interests: To maintain, monitor, and improve the security, usability, and performance of our Website, and to prevent fraudulent bookings.
- Consent: Where you have opted in to receive promotional updates, newsletters, or marketing communications. You can withdraw your consent at any time.
4. Sharing and Disclosure of Data
We do not sell, rent, or trade your personal information. Your information is only shared with third parties when strictly necessary:
- Local keyholders, property hosts, and service providers (cleaning, maintenance) strictly to ensure your stay runs smoothly.
- Payment gateway providers and secure booking engines to process transactions.
- Official public authorities and law enforcement bodies where legally mandated by Spanish or Belgian hospitality and registration laws.
- IT, hosting, and cloud service providers operating under compliant data processing agreements.
5. Data Retention
We only retain your personal information for as long as is strictly necessary:
- Booking and customer administration records: Retained for the statutory tax and accounting retention period (typically 7 to 10 years).
- General inquiries and chat messages: Retained for up to 12 months after resolution.
- Server logs: Retained for a limited technical security period, after which they are routinely deleted.
6. Cookies and Tracking Technologies
Our Website uses cookies and similar technologies to improve browsing performance, analyze traffic trends, and customize your experience. You can choose to accept, decline, or modify your cookie preferences through your web browser settings.
7. Your Rights Under the GDPR
Under European data protection law, you hold the following rights:
- Right of access: You have the right to request a copy of the personal data we hold about you free of charge.
- Right to rectification: You have the right to request correction of inaccurate or incomplete data.
- Right to erasure (Right to be forgotten): You may request the deletion of your personal data, provided it is no longer required for legal compliance or contractual duties.
- Right to restriction of processing: You may request that we temporarily suspend the processing of your data under specific conditions.
- Right to data portability: You have the right to receive your personal data in a structured, commonly used format.
- Right to object: You have the right to object to the processing of your personal data based on legitimate interests or direct marketing.
To exercise any of these rights, please contact us at info@oyoostays.eu. We will respond to your request within one month.
8. Protection of Minors
Our Website and booking services are not intended for use by individuals under 18 years of age (and primary bookers must be at least 25 years old). We do not knowingly collect personal data from children without verifiable parental or guardian consent.
9. Complaints and Supervisory Authority
If you have concerns about how we handle your personal information, please contact us first so we can resolve the matter. You also have the right to lodge a complaint with the competent supervisory authority:
- In Belgium: The Belgian Data Protection Authority (Gegevensbeschermingsautoriteit - GBA), Drukpersstraat 35, 1000 Brussels (www.gegevensbeschermingsautoriteit.be).
- In Spain: The Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD).
10. Updates to This Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Any updates will be published directly on this page with a revised date.
