Privacy Policy

Amplistay · RENTATOP TECH, S.L.

I. PRIVACY AND DATA PROTECTION POLICY

In compliance with current legislation, Amplistay (hereinafter, the "Website" or "Platform") undertakes to adopt the necessary technical and organizational measures according to the level of security appropriate to the risk of the data collected.

Laws incorporated into this Privacy Policy This privacy policy is adapted to the current Spanish and European regulations regarding the protection of personal data. Specifically, it complies with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
  • Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD).
  • Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).

Identity of the Data Controller

  • Company Name: RENTATOP TECH, S.L.
  • NIF (Tax ID): B26742510
  • Address: Calle Jose Antonio Coderch, 50, 28055, Madrid, Spain.
  • Contact Email: [email protected]

Legal Basis for Data Processing

  • Consent: For inquiries, account registration, and acceptance of terms.
  • Performance of a Contract: For managing payment infrastructures, website hosting, and the provision of the SaaS platform services between Hosts and Amplistay.

Purposes of Data Processing

  • To provide technological infrastructure for processing payments between Guests and Hosts.
  • To host and publish Hosts' websites, including connecting custom domains for those on the Fixed Rate plan.
  • SaaS operational functionality: property management, website photos and content, and automated booking records.
  • Sending operational notifications by email and WhatsApp (new bookings, extensions, and confirmations).
  • Administrative management, billing via Stripe Connect, and technical support.
  • Legal compliance: recording user IP addresses and timestamps for "Self-Declaration of Legality" as a security measure.

Recipients of Personal Data Communication between Platform Users: When a Guest processes a payment, certain identification data is shared with the Host (Property Manager) to facilitate the stay and legal registration of the booking.

Third-Party Service Providers (Data Processors): Amplistay uses necessary third-party services that comply with GDPR standards:

  • Stripe, Inc.: Payment processing, KYC verification, and fund distribution via Stripe Connect.
  • Cloudflare, Inc.: Secure storage of photographs and hosting of the websites published by Hosts.
  • Twilio Inc.: Sending WhatsApp notifications when a booking or extension is received.
  • Brevo SAS: Sending transactional emails (confirmations, receipts, and account notifications).

Data Retention Periods Personal data will be retained for the duration of the commercial relationship or until the User requests its deletion. Upon account deletion, data will be kept blocked for the legally required periods (typically 6 years) to address potential legal liabilities.

Rights Derived from Personal Data Processing Users may exercise the rights of Access, Rectification, Erasure, Restriction, Objection, and Portability by sending a written communication to [email protected] attaching a copy of their ID.

II. ACCEPTANCE AND CHANGES TO THIS PRIVACY POLICY The use of the Website implies acceptance of this Privacy Policy. Amplistay reserves the right to modify it to adapt to legislative changes or new software features.

Last updated: September 12, 2026.