Privacy policy

1. Data controller

Controller

Edmond Vibes Operating Company, S.L. (brand “Sambara Living”)

Tax ID (NIF)

B22743603

Registered address

Calle Claudio Coello 125, 28006 Madrid, España

Email

reservas@edmondvibes.com

Phone

+34 650 80 92 49

No Data Protection Officer has been appointed, as it is not mandatory. For any matter relating to your data, you may contact the email address above.

2. What data do we process?

We only process the data you provide or that is necessary to manage your stay:

• Contact and identification data you provide when you write to us by email, phone or WhatsApp (name, phone, email and the content of your enquiry).
• Booking and stay data (dates, apartment, number of guests and billing details), managed through our booking engine.
• Identification data required by accommodation regulations for the guest register (ID document and other mandatory information), collected at check-in.
• Minimal technical browsing data generated by the web hosting provider for security and operational reasons (for example, IP address and access logs).

The Website has no data-collection forms of its own: contact and booking take place through the channels and services indicated.

3. Purposes and legal basis

• To respond to your enquiries and requests for information. Legal basis: your consent and/or pre-contractual measures taken at your request.
• To manage the booking, payment and provision of the accommodation service. Legal basis: performance of the contract to which you are a party.
• To comply with applicable legal obligations, in particular the registration and reporting of guest data to the competent authorities and tax and accounting obligations. Legal basis: compliance with legal obligations.
• To ensure the security and proper functioning of the Website. Legal basis: our legitimate interest.

4. How long do we keep your data?

We keep your data for as long as necessary to fulfil the purpose for which it was collected and, thereafter, for the periods required by law (for example, tax and accounting periods, or those laid down by accommodation and guest-register regulations). Enquiry data that does not lead to a booking is kept only for as long as needed to assist you.

5. Who do we share your data with?

We do not sell your data. To provide the service, we rely on providers that act as data processors and process the data solely on our instructions:

• Mews Systems B.V. — booking engine management (EU).
• Microsoft Ireland Operations Ltd. — email and storage (Microsoft 365 / OneDrive).
• Vercel Inc. — Website hosting (USA).
• Meta Platforms Ireland Ltd. (WhatsApp) — guest messaging.

We also share data with the competent authorities (for example, law enforcement and the tax administration) where there is a legal obligation to do so, such as the guest register.

6. International transfers

Some providers (such as Vercel or WhatsApp/Meta) may process data outside the European Economic Area. In such cases, those transfers rely on the safeguards provided by the GDPR, such as the Standard Contractual Clauses approved by the European Commission or adequacy decisions.

7. Your rights

You may exercise the following rights at any time by writing to reservas@edmondvibes.com, stating the right you wish to exercise:

• Access to your personal data.
• Rectification of inaccurate data.
• Erasure of data when it is no longer necessary.
• Objection to the processing.
• Restriction of the processing.
• Data portability.
• Withdrawal of consent, without affecting the lawfulness of prior processing.

If you believe the processing does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect your personal data against loss, misuse, alteration or unauthorised access.

9. Cookies

The use of cookies is described in our Cookie Policy.

10. Changes to this policy

We may update this policy to adapt it to regulatory changes or changes to our services. The version in force is always the one published on the Website, together with its last-updated date.