En The Home Cake We process personal data with transparency, minimization, and security in mind. This policy explains what data we collect, what we use it for, the legal basis for its use, how long we retain it, and what rights travelers and hosts can exercise.
1. Responsible for the treatment
- Controller: José Francisco Andreu Gálvez
- NIF / CIF: 48847398K
- Professional/contact address: Calle Huerto Pomares, 1, bajos, 30004 Murcia, Spain
- Privacy email: [email protected]
- Website: thehomecake.com
The Home Cake acts as the controller of the personal data collected through the website and the functionalities linked to the creation of accounts, publication of accommodations, contact forms and contracting of plans for hosts.
2. What personal data do we collect
- Identification and account details: name, surname, username and email address.
- Contact and support information: Information that the user sends us when writing to us or filling out forms.
- Profile and accommodation details: Listing information, photos, location, capacity, schedule, prices and services posted by the host.
- Billing and subscription information: Information needed to manage plans for hosts and issue invoices, where applicable.
- Usage and navigation data: IP address, technical identifiers, device type, browser, pages visited, and basic site usage events.
- Messaging data within the platform: content of communications between users when necessary to provide the service, prevent abuse or address incidents.
The Home Cake We do not manage booking payments between travelers and hosts. Therefore, we do not process payment data related to these bookings, except for what is strictly necessary if the user contacts us regarding an issue or inquiry.
3. What we use the data for and on what legal basis
| Purpose | Examples | Legal basis |
|---|---|---|
| Create and manage accounts | User registration, login, password recovery, and basic profile management. | Execution of the contractual or pre-contractual relationship. |
| Publish and display accommodations | Increase the visibility of the listing, display information about the accommodation, and facilitate searches. | Execution of the contractual or pre-contractual relationship. |
| Enable communication between users | Messaging and contact forms between host and traveler. | Execution of the contractual or pre-contractual relationship. |
| Manage plans for hosts | Contracting, renewal, billing and support associated with the plan. | Contract execution and compliance with legal obligations. |
| Answering inquiries and providing support | Response to incidents, questions or requests received through forms or email. | Legitimate interest and, where appropriate, pre-contractual measures. |
| Improve the site and prevent abuse | Basic analytics, security, fraud detection and control of platform misuse. | Legitimate interest. |
| Comply with legal obligations | Attention to legal requirements, claims, or tax and accounting obligations. | Compliance with legal obligation. |
When a purpose requires consent —for example, certain non-essential cookies or commercial communications, if activated— it will be requested separately and the user may withdraw it at any time.
4. Who can receive the data
- ProTechnological monitors necessary for the operation of the website, hosting, email, analytics or support.
- Probilling or payment monitors associated with host plans, if applicable.
- Public authorities, judges or administrations when there is a legal obligation.
The Home Cake It does not sell personal data to third parties and does not share information for commercial purposes unrelated to the service itself.
5. International transfers
In general, we will try to work with suppliers located within the European Economic Area. If any of the services used involve international data transfers, these will be carried out with the safeguards required by applicable regulations, such as adequacy decisions or standard contractual clauses.
ProObserver(s) and country(ies) to be completed before publishing: [Data pending completion].
6. How long do we keep the data?
- Account details: while the account remains active and afterwards, for the periods necessary to meet legal or contractual obligations.
- Contact or support information: for the time necessary to resolve the query and for the applicable retention periods.
- Billing information: during the periods required by tax and accounting regulations.
- Technical or safety data: for the time necessary for security purposes, fraud prevention and service maintenance.
Before publishing this policy, it is advisable to replace these general formulas with specific deadlines or, when that is not possible, with clear conservation criteria.
7. User rights
Any person may exercise, where appropriate, the rights of:
- access to your personal data,
- rectification of inaccurate data,
- suppression, where appropriate,
- opposition to treatment,
- limitation of treatment,
- data portability, and
- withdrawal of consent in consent-based treatments.
To exercise these rights, the user can write to [email protected]You can also file a complaint with the Spanish Agency for ProData Protection if you believe your request has not been handled correctly.
8. Security
The Home Cake We implement reasonable technical and organizational measures to protect personal information against unauthorized access, loss, alteration, or improper disclosure. However, no internet-connected system can guarantee absolute security.
9. Minors
The platform is not intended for minors who lack the legal capacity to contract for or use the service in accordance with applicable regulations. If we detect that a minor's data has been provided without the necessary authorization, we may delete or block it.
10. Changes to this policy
We may update this privacy policy to reflect legal, technical, or operational changes. The current version will always be available on this page and will indicate the date of the last update.
11. Recommended short text for the first layer in forms
Controller: José Francisco Andreu Gálvez.
Purpose: manage your query or relationship with the platform.
Legal basis: consent, performance of the contractual relationship or legitimate interest, as the case may be.
Target: Data will not be transferred to third parties except where legally required or to necessary service providers.
Rights: You can access, rectify and delete your data, as well as exercise other rights, by writing to [email protected].
Additional Information: See the full privacy policy.
