1. Who is responsible
The data controller is Gay Break Investment Group SL, tax identification number B76130160, trading as Basement Studios, Av. Estados Unidos, 37, 35100 Playa del Inglés, Canary Islands, Spain. Contact: info@basementstudios.eu or +34 928 763 835. CHIBRA provides the booking technology as a service provider acting on the controller’s instructions.
2. Information collected
For a direct reservation we collect the lead guest’s name, email address, optional telephone number, country of residence, stay dates, selected accommodation, guest count, booking choices, special requests and acceptance records. Where required for check-in, invoicing, security or legal reporting, the guest record can also contain date and place of birth, nationality, address, relationship between travellers and passport or national identity-document details. Operational records include communications, invoices, payment references and status, room assignments, access records and changes made to the stay.
Card numbers and card security codes are entered on the Redsys bank payment page and are not stored by Basement Studios or CHIBRA.
3. Purposes and legal bases
- Reservation and stay administration: necessary to perform the accommodation contract and take requested pre-contract steps.
- Payments, accounting, fraud prevention and dispute handling: performance of the contract, compliance with tax and accounting duties, and the legitimate interests of protecting guests and the business.
- Guest registration and other statutory reporting: compliance with applicable legal obligations.
- Operational messages: necessary to perform the reservation, including confirmations, amendments, cancellation, payment recovery and check-in information.
- Marketing: consent only. It is optional, separate from the booking and can be withdrawn at any time.
Required booking information must be provided so we can create and perform the reservation. Without it, the booking may not be completed.
5. Retention
- Incomplete or unsuccessful booking attempts: normally no longer than 30 days, except limited fraud-prevention records.
- Reservation and operational correspondence: for the stay and normally six years afterwards where needed for contractual, accounting or dispute records.
- Invoices and accounting records: for the periods required by Spanish tax and commercial law.
- Legally required traveller-registration records: for the statutory retention period.
- Marketing records: until consent is withdrawn, followed by a minimal suppression record so the preference continues to be respected.
- Security and application logs: normally up to 90 days unless an incident requires longer preservation.
Information is deleted, anonymised or access-restricted when the relevant period ends.
6. Your rights
You may request access, correction, deletion, restriction, portability or objection, and may withdraw marketing consent without affecting earlier lawful processing. Send the request to info@basementstudios.eu. Include enough information to identify the reservation; we may request proportionate identity verification before disclosing personal information.
You also have the right to complain to the Spanish Data Protection Agency (AEPD).
7. Security, automated decisions and cookies
Access is role-restricted and important reservation changes are recorded in an append-only audit trail. Connections use encryption in transit and payment credentials remain with the payment provider. No solely automated decision with legal or similarly significant effects is made from guest information.
The booking service uses only essential technical storage needed for security, reservation recovery and staff authentication. It does not currently use advertising or behavioural-tracking cookies. If optional analytics or marketing technologies are added, the notice and consent controls will be updated before they are enabled.
8. Questions and changes
Privacy enquiries can be sent to info@basementstudios.eu. Include the booking reference when the request relates to a reservation. Material changes to this notice will be dated and published on this page.