Key information
Gatavia processes the data needed to manage accounts, contracts, pagos, soporte, seguridad, analítica consentida y prestación de sus servicios. En Gatavia App también se procesan los datos financieros, documents and third-party data that the user enters in order to use las funciones contratadas.
When a user enters data relating to guests, owners, clients, proveedores u otras personas, ese usuario es responsable de dichos datos y debe contar con una base jurídica válida para tratarlos.
01
This Policy applies to the processing of personal data carried out through gatavia.es, app.gatavia.com, forms, user accounts, purchases, subscriptions, communications, support, guides, memberships, reports, professional services and other Gatavia products.
Las políticas de privacidad de plataformas externas enlazadas o conectadas con Gatavia corresponden a sus respectivos titulares.
02
First name, surname, email address, telephone number, country, language and data provided in forms or communications.
User ID, email address, verification status, technical access data and credentials protected by the authentication systems used.
Plan, billing period, subscription status, amounts, taxes, invoices, client and transaction identifiers, and data required for accounting and tax obligations.
Data on properties, locations, bookings, distribution channels, dates, occupancy, amounts, income, expenditure, categories, taxation, indicators and reports.
Invoices, receipts, contracts, images, PDF files, supporting documents and any other data that may appear in documents uploaded by the user.
Name, contact details, dates of stay, number of guests, booking channel, booking status and other data entered by the user in the course of their business activities.
IP address, browser, device, operating system, date and time, technical logs, incidents, cookie preferences and actions carried out on the service.
Content relating to emails, forms, incidents, requests, feedback and correspondence with Gatavia.
03
| Purpose | Key facts | Legal basis |
|---|---|---|
| Create and manage the account, authenticate the user and provide the Gatavia App. | Login, contact, account, properties, bookings, finance and documents. | Contract performance and pre-contractual measures. |
| Manage purchases, subscriptions, payments, invoicing, cancellations and contractual support. | Identification, contact details, plans, transactions and invoicing. | Contract performance and compliance with legal obligations. |
| Responding to enquiries, providing support and handling issues. | Contact details, account information, correspondence and any information required to process the application. | Contractual performance, pre-contractual measures and a legitimate interest in providing and improving the service. |
| Provide artificial intelligence functions and automated document scanning as requested by the user. | Enquiries, financial context, images, invoices, receipts, documents and extracted results. | Provision of the contracted service and voluntary action by the user. |
| Maintaining security, preventing fraud, abuse and unauthorised access, and resolving errors. | IP address, device, technical records, account, activity and incidents. | Legitimate interest in protecting users, information and systems, and compliance with legal obligations. |
| Measuring usage of the website and app via analytics is not necessary. | Cookie identifiers, device identifiers, browsing data and usage events. | Consent, which can be withdrawn via the cookie settings. |
| Send marketing communications where authorised. | Name, email address, preferences and consent history. | Consent and, where legally applicable, a prior contractual relationship for similar products or services. |
| Handling administrative, tax, accounting, legal and claims defence obligations. | Identification, contracting, invoicing, payments and relevant communications. | Compliance with legal obligations and the formulation, pursuit or defence of claims. |
04
Gatavia App permite que propietarios y gestores incorporen información relativa a huéspedes, propietarios, clientes, suppliers, workers or other persons related to their activity.
For those data, the user who determines why and how they are used acts as the data controller. Gatavia processes them to provide the contracted features and following the instructions derived from the use of the service, without using them for its own commercial purposes.
The user must inform the data subjects where appropriate, limit the data entered to what is necessary, keep it updated and not upload special categories of data or documents that are unnecessary for the intended purpose del servicio.
05
The data may come from:
06
Data is not sold. It may be disclosed when there is a legal obligation, sea necesario para ejecutar un contrato o intervengan proveedores que prestan servicios por cuenta de Gatavia.
Web hosting, domain name and email services linked to gatavia.es.
Hosting, deployment and technical operation of app.gatavia.com.
Authentication, database, storage and functions associated with Gatavia App accounts and data.
Payment processing, subscriptions, invoicing and fraud prevention. Gatavia does not store full card details.
Provision of certain artificial intelligence functions and automated processing requested by the user.
Measuring website and app usage where the user has consented to analytics cookies.
Where required by law or where necessary to meet valid requirements and defend rights.
Tax, accounting, legal or technical advice is provided only where necessary and subject to confidentiality obligations.
La lista de proveedores puede actualizarse cuando cambien las necesidades técnicas o empresariales, manteniendo las garantías exigibles.
07
Algunos proveedores tecnológicos pueden tratar datos desde países situados outside the European Economic Area or allow international access to its sistemas.
When international transfers take place, the garantías previstas por la normativa aplicable, como decisiones de adecuación, cláusulas contractuales tipo aprobadas por la Comisión Europea u otros mecanismos legalmente válidos ofrecidos por los proveedores.
08
Where erasure is applicable, data may remain blocked, sin utilización ordinaria, durante los plazos de prescripción aplicables.
09
Artificial intelligence and automated reading features are activated when the user makes a query or decides to submit information, a imagen, una factura, un ticket o un documento para su análisis.
Gatavia limita el contexto enviado al necesario para prestar la función, pero el usuario debe revisar los archivos y evitar incorporar datos personales excesivos, categorías especiales de datos o información que no sea necesaria.
Los resultados automáticos pueden contener errores y deben ser comprobados por el usuario. No se adoptan decisiones con efectos jurídicos basadas solely on automated processing by Gatavia.
10
Gatavia aplica medidas técnicas y organizativas razonables para proteger data against destruction, loss, alteration, disclosure or access without authorisation, taking into account the nature of the information, the estado de la técnica y los riesgos.
Entre las medidas utilizadas pueden incluirse autenticación, control de acceso, políticas de seguridad a nivel de base de datos, comunicaciones encrypted communications, backups, incident logging, limitation of privilegios y proveedores sujetos a obligaciones de confidencialidad.
No system is completely invulnerable. The user must protect sus credenciales, cerrar sesiones en dispositivos compartidos y comunicar any suspicious access immediately.
11
Where applicable, interested parties may exercise the following rights:
Log inTo exercise your rights, please send a request to info@gatavia.com, stating the right requested and the information needed to verify identity. Additional documentation may be requested only when there are reasonable doubts about the identity of the requester.
A complaint may also be submitted to the Spanish Data Protection Agency through www.aepd.es.
12
Fields marked as mandatory are necessary to create an account, contratar, procesar un pago, responder a una consulta o prestar la función solicitada. Si no se facilitan, puede que Gatavia no pueda prestar el servicio correspondiente.
Los datos opcionales se facilitan voluntariamente y pueden mejorar la precisión de informes, cálculos o análisis.
13
Los productos y servicios de Gatavia están dirigidos a personas mayores adults and professionals. Data from minors is not knowingly requested para crear cuentas o contratar servicios. Si se detecta un registro indebido de un menor, se adoptarán medidas para suprimirlo.
14
Gatavia utiliza tecnologías necesarias para el funcionamiento, la seguridad, el inicio de sesión, la gestión de preferencias y la contratación.
Las cookies o tecnologías de analítica no necesarias solo se activan cuando the user gives consent. Full information and the available options para aceptar, rechazar o configurar se encuentran en la Cookie Policy.
15
This Policy may be updated to reflect legal, técnicos, funcionales, contractuales o relacionados con proveedores. La versión vigente será la publicada en esta página.
Last updated: 28 July 2026.
To view this Policy or exercise your data rights:
info@gatavia.com