Privacy Policy

In compliance with EU Regulation 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD)

1. Data Controller

Shuttle Service SL
CIF: B65189698
Carrer Aragó 237, Principal 3, 08007 Barcelona, Spain
Email: info@bubahouse.com

2. Data We Collect

We collect personal data that you provide directly when making a reservation or contacting us:

• Name and surname
• Email address
• Phone number (if provided)
• Payment card data (processed exclusively by BBVA/Redsys — we never store card details)
• Dates of stay and booking details

We also collect anonymous browsing data through Google Analytics (see Cookie Policy).

3. Purpose and Legal Basis

• Booking management: execution of the accommodation contract (Art. 6.1.b GDPR)
• Payment processing: execution of contract via BBVA/Redsys (Art. 6.1.b GDPR)
• Legal compliance: compliance with legal obligations (Art. 6.1.c GDPR)
• Website analytics: legitimate interest in improving our service (Art. 6.1.f GDPR)

4. Data Recipients

Your personal data may be shared with the following third parties solely to provide our services:

• Cloudbeds (cloudbeds.com) — property management and booking system
• BBVA / Redsys — payment processing for card transactions
• Google Analytics (Google LLC) — anonymous website analytics

We do not sell, rent, or share your data with third parties for marketing purposes.

5. International Transfers

Google Analytics may involve data transfers to the United States under the EU-U.S. Data Privacy Framework. No other international transfers of personal data are made.

6. Data Retention

Booking and payment data is retained for 5 years to comply with Spanish tax and commercial law obligations. Analytics data is anonymous and retained according to Google's standard policies.

7. Your Rights

You have the right to access, rectify, delete, restrict processing, object to processing, and data portability. To exercise these rights, contact us at info@bubahouse.com. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration. Payment transactions are processed exclusively through the secure BBVA/Redsys gateway and are never stored on our servers.