Privacy Policy
1. Who is responsible for data processing?
The party responsible for processing personal data is: Resva Platform for short-term rental management (Legal entity name and tax details to be completed once finalised) For any privacy-related queries, you can contact us through the support channels listed on the platform.
2. Data we collect
2.1. Data you provide directly
- First and last name
- Email address and phone number
- Information about your properties (approximate or full address, photos, descriptions, house rules)
- Booking-related information (guest name, dates, agreed amounts, internal notes)
- Messages and communications you send us via contact forms or support channels
2.2. Data collected automatically
When you browse Resva we may automatically record:
- IP address
- Browser type and device
- Pages visited and actions taken within the platform
- Dates and times of access
This data is used primarily for security, analytics, and service improvement purposes.
2.3. Third-party data
In some cases, the host may upload guest data (for example, name, surname and stay dates) in order to organise their bookings. When you upload third-party data, you declare that you are authorised to do so (for example, because the guest provided it to you to manage their booking).
3. How we use your data
We use personal data to:
- Provide and maintain the service
- Create and manage your host account
- Allow property uploads and management
- Display your property information to potential guests
- Record booking and availability information internally
- Communication
- Send you operational messages about your account or relevant service changes
- Respond to queries and support requests
- Product improvement and development
- Analyse platform usage to improve the experience and features
- Detect errors, service outages and anomalous behaviour
- Security and fraud prevention
- Verify unusual or potentially fraudulent activity
- Protect the integrity of the platform and our users
- Legal compliance
- Respond to requests from competent authorities where applicable
- Comply with applicable legal or regulatory obligations
4. Legal basis for processing
Depending on the case, we process your data on the basis of:
- Performance of a contract: when necessary to provide the service you have engaged (for example, creating your account, displaying your properties, managing your bookings).
- Consent: when you expressly agree to certain features or communications (for example, subscribing to commercial updates).
- Legitimate interest: to improve the service, prevent fraud, or ensure platform security, always respecting your rights.
- Legal obligation: when regulations require us to retain or disclose certain information.
5. Who we share your data with
Resva does not sell or rent your personal data. We may share data only with:
- Technology service providers
For example:
- Hosting and database services
- Analytics or monitoring tools
- Transactional email delivery platforms
These providers may only use your data following our instructions and for the specific purposes of the service (confidentiality and data protection agreements).
- Platform users and visitors
Some of the information you upload (for example, property photos and descriptions) is displayed publicly or via shareable links so that potential guests can learn about your listing.
- Competent authorities
When required by law, we may be obliged to share information with administrative, judicial or regulatory authorities.
6. WhatsApp and other external channels
Resva facilitates contact between hosts and guests, but many conversations take place outside the platform, for example via: - WhatsApp - Email - Phone calls Those external channels have their own privacy policies and terms of use, which are independent of Resva. We recommend that you review them. Resva does not have automatic access to the content of your WhatsApp chats or other external channels, unless you choose to share screenshots or data within the platform.
7. Cookies and similar technologies
Resva may use cookies and similar technologies to: - Keep you signed in - Remember certain preferences - Analyse platform usage and improve the experience You can configure your browser to refuse cookies, but this may affect some site functionality. In the future we may publish a more detailed Cookie Policy; in that case, this section will be updated to remain consistent with that policy.
8. Information security
We implement reasonable technical and organisational measures to protect your personal data against: - Unauthorised access - Accidental loss, destruction or alteration - Misuse However, no system is 100% secure. We cannot guarantee absolute security, but we do commit to: - Periodically reviewing our security measures - Limiting data access to only the personnel and providers who need it - Acting diligently in the event of security incidents that could affect your data
9. Data retention
We retain your personal data: - While you have an active account with Resva - While necessary to fulfil the purposes for which it was collected - While there is a legal obligation to retain it (for example, under accounting or tax regulations) Once those periods have elapsed, data will be: - Securely deleted, or - Anonymised for continued use for statistical or analytical purposes, with no possibility of individual identification
10. Your rights over your data
As the data subject, you have the right to:
- Access: know what data we process about you
- Rectification: correct inaccurate or incomplete data
- Erasure: request the deletion of your data when it is no longer necessary or when you withdraw your consent, subject to any legal obligation to retain it
- Objection: object to certain types of processing, in particular those based on legitimate interest
- Restriction: request that we temporarily restrict processing in certain cases
- Portability: request, where technically feasible, a structured copy of certain data to transfer to another provider
To exercise these rights, you can contact us through the support channels listed on the platform. We may ask for additional information to verify your identity before fulfilling your request.
11. Minors
Resva is not intended for users under 18 years of age. We do not intentionally collect personal data from minors. If we detect that an account has been created using a minor's data: - We may proceed to delete it, and - Request additional information to verify age in cases of reasonable doubt
12. International transfers
In some cases, your data may be stored or processed on servers located outside your country (for example, hosting services or technology providers in other countries). In those cases, we endeavour to work with providers that offer adequate levels of data protection and contractual agreements that respect reasonable international standards.
13. Changes to this Privacy Policy
We may update this privacy policy when: - We introduce new features or services - We modify the way we process personal data - Applicable legal regulations change When there are material changes, we will update the "Last updated" date and, where appropriate, notify you through reasonable means (for example, email or notices on the platform). Continued use of Resva after such changes implies your acceptance of the new version of the privacy policy.
14. Contact
If you have questions about this privacy policy or about how we process your data, you can contact us through the support channels listed on the platform. You may also exercise your rights of access, rectification, update and deletion of personal data through those same channels.