Data protection

Privacy policy

Draft pending review. This text is awaiting validation by Hogariza’s legal adviser before it is considered final. This English version is provided for convenience; in case of discrepancy, the Spanish version prevails.

Data controller

Hogariza Gestión S.L., with tax ID (CIF) B16436032 and registered address at Calle Labrador 20, 28005 Madrid. Contact email for privacy matters: administracion@hogarizagestion.es.

What data we process

• Contact form: first name, surnames, phone number, email address and the content of your message.
• Booking request: in addition to the above, date of birth, nationality, employment or academic status, type and number of ID document, an image or copy of that document and, if you choose to attach it, proof of income or proof of enrolment. Also the dates and the accommodation requested.
• Website account: your email address, first name and surnames. If you sign in with Google, Google provides us with those same details from your Google account; we never see or store your Google password.
• Technical data: the IP address, the date and time, and the page from which you submit the form, as proof of your consent.

What we use it for

• To handle your enquiry or booking request, verify your identity and assess your request.
• To contact you to confirm availability, price and terms.
• If the booking goes ahead, to prepare the rental contract and comply with the associated legal obligations.

Legal basis

The processing is based on taking pre-contractual steps at your request and on your consent, which you give by ticking the box on the form. You can withdraw your consent at any time by writing to us, without affecting the lawfulness of the processing carried out before its withdrawal.

How long we keep it

For one year at most. It is deleted automatically, without you having to ask:

• Documents (copy of your ID document, payslips, contracts or proof of enrolment): one year after you upload them.
• Booking requests, the data they contain and the messages you send us about them: one year after you submit them.
• Your account and your profile: after one year without signing in to the website. We will email you one month beforehand, and simply signing in is enough to keep it.

You can delete your documents or your whole account whenever you like from your profile. Deleting your account also deletes your booking requests and your record in Homming and, if any request was still pending, it is cancelled and we release the hold on your card; we only keep requests that have already been accepted (and your record in Homming, if there is a contract), as they support the contract and the invoice. The only exception is invoices and proof of payment, which the law requires us to keep for the periods set by tax and commercial legislation (up to six years). If a contract is signed, its data is kept for the duration of the contractual relationship and for those same legal periods.

Who has access to your data

• Our team, only the people who manage bookings.
• Homming, the platform we use to manage our flats, where we record your request, acting as data processor.
• Microsoft Azure, which hosts the website, the database and the files in data centres in the European Union (West Europe region).
• Google, only if you choose ‘Continue with Google’ to sign in: it verifies your identity and sends us your name and email address.
• Telegram, which we use to notify the team internally when a new request comes in. That notification includes your contact details and a temporary link to your documents.

We do not pass your data on to third parties for commercial purposes.

Cookies and analytics

We use cookies that are necessary for the website to work (for example, to keep you signed in). Only if you accept them in the cookie notice do we also use:

• Microsoft Clarity, which records in aggregate how people browse the website (clicks, scrolling, heatmaps) so we can improve it. It is not used on your account pages and, during the booking process, it masks what you type and your personal details.
• Google Analytics, to measure website traffic and see which pages work best, with IP anonymisation and not for advertising purposes.

You can change your choice at any time from ‘Cookie preferences’, in the footer of any page.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability by writing to administracion@hogarizagestion.es. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD).

Last updated: 24 September 2026.