Privacy Policy

Amplistay · RENTATOP TECH, S.L.

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, Amplistay (hereinafter, the "Website" or "Platform") undertakes to adopt the necessary technical and organizational measures according to the level of security appropriate to the risk of the data collected.

Laws incorporated into this Privacy Policy This privacy policy is adapted to the current Spanish and European regulations regarding the protection of personal data. Specifically, it complies with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
• Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
• Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

• Company Name: RENTATOP TECH, S.L.
• NIF (Tax ID): B26742510
• Address: Calle Jose Antonio Coderch, 50, 28055, Madrid, Spain.
• Contact Email: info@rentatoptech.com

Legal Basis for Data Processing

• Consent: For inquiries, account registration, and acceptance of terms.
• Performance of a Contract: For managing payment infrastructures, stay extensions, and the provision of the SaaS platform services between Businesses and Amplistay.

Purposes of Data Processing

• To provide technological infrastructure for processing payments between Guests and Businesses.
• SaaS operational functionality: property management, check-in/out extension logs, and automated booking records.
• Administrative management, billing via Stripe Connect, and technical support.
• Legal compliance: recording user IP addresses and timestamps for "Self-Declaration of Legality" as a security measure.

Recipients of Personal Data Communication between Platform Users: When a Guest processes a payment, certain identification data is shared with the Business (Property Manager) to facilitate the stay and legal registration of the booking.

Third-Party Service Providers (Data Processors): Amplistay uses necessary third-party services that comply with GDPR standards:

• Stripe, Inc.: Payment processing, KYC verification, and fund distribution via Stripe Connect.
• Cloud Hosting Infrastructure: Secure data storage and software environment providers located in the EU/US with high security standards.
• Transactional Email Services: Delivery of transactional emails and payment receipts.

Data Retention Periods Personal data will be retained for the duration of the commercial relationship or until the User requests its deletion. Upon account deletion, data will be kept blocked for the legally required periods (typically 6 years) to address potential legal liabilities.

Rights Derived from Personal Data Processing Users may exercise the rights of Access, Rectification, Erasure, Restriction, Objection, and Portability by sending a written communication to info@rentatoptech.com attaching a copy of their ID.

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY The use of the Website implies acceptance of this Privacy Policy. Amplistay reserves the right to modify it to adapt to legislative changes or new software features.

Last updated: April 30, 2026.