Privacy policy - Checkin online 360

Last updated: November 6, 2025

1. Introduction

CheckinOnline360 is a digital service designed to help tourist accommodations comply with their legal obligations to register guests in compliance with the Royal Decree 933/2021, of November 2, 2011..
This policy transparently details how we process personal data, under what legal basis, who is responsible in each case, and what rights the data subjects have.

Identity and responsibility

Responsible for the treatment (clients):

Name: Xavi Hidalgo
TAX ID: XXXXXXX
Address: Carretera engolaster, 20 1º 3ª - Escaldes de Engordany (Andorra)
Contact us: [email protected]

Xavi Hidalgoas the CheckinOnline360 service provider, acts as a person in charge of the treatment with respect to the customer data (accommodation owners or managers), insofar as they decide on the purposes and means of processing related to the provision of the service (invoicing, support, account management, etc.).

Treatment manager (guests):

With respect to the guest data, Xavi Hidalgo acts as data processor.since the accommodation (client) is, by law, responsible for the registration of its guests (Art. 4.1 of RD 933/2021).

Therefore:

The customer (accommodation) is responsible for ensuring the accuracy, legality and legitimacy of the collection of data from its guests.
CheckinOnline360 only treats such data on behalf of and under instructions from the customerby means of a Data Processor Agreement implied or expressed when using the platform.

3. Data processed and purposes

A. Client data (accommodations)


Service provision (registration, management, support)	Name, NIF, email, telephone, address, lodging information	Execution of contract (Art. 6.1.b RGPD)
Billing and accounting	Tax and bank details (only if provided)	Legal obligation (Art. 6.1.c RGPD)
Operational communications (incidents, updates)	Email, phone	Legitimate interest (Art. 6.1.f RGPD)
Sending news or promotions	Email (only if consent is given)	Consent (Art. 6.1.a RGPD)

B. Guest Data


Fulfillment of the legal obligation to register (RD 933/2021)	First name, last name, type and number of document, date of birth, country of birth, sex, address, telephone, email, signature, relationship to minor children	Fulfillment of legal obligation (Art. 6.1.c RGPD)
Identity verification (if guest attaches ID card/passport)	Identity document image	Compliance with legal obligation (Art. 4.3 RD 933/2021: the accommodation must guarantee the accuracy of the data).
Sending the report to the competent police body	Data required by police regulations	Legal obligation derived from RD 933/2021
Custody of the report by the lodging	Copy of the report in PDF	Legal conservation obligation (3 years)

Note: CheckinOnline360 no profiling or make automated decisions about guests. The treatment is exclusively instrumental and legal.

4. Conservation periods

Clients:
- For the duration of the contractual relationship.
- After discharge: 5 years for invoicing (mercantile obligation), and until 10 years if there is pending litigation.
Guests:
- 3 years from the date of departure, in accordance with Art. 9 of RD 933/2021 (custody period of the parts).
- Document images:
  - Face-to-face check-in: eliminated immediately after data extraction.
  - Online check-in: stored maximum 3 calendar daysunless the company is eliminated early.

5. Data recipients

The data is communicated only in the following cases:

To the State Security Forces and Corpsas required by RD 933/2021 and the applicable regional regulations.
To technical suppliers (hosting, payment gateways, support):
- All are linked by processing assignment clauses.
- They do not perform treatments outside the instructions received.
To the client (accommodation):
- Guest data and copies of the reports are sent to the lodging email for legal custody.

No data is disclosed to third parties for advertising or credit purposes or outside the European Economic Area.except in compliance with a court order.

6. Obligations and responsibilities

From the client (accommodation):

It is legally responsible of the treatment of the data of its guests.
You must inform guests of the collection of their data (usually by means of a sign at reception or a link to the check-in form).
You must ensure that the data entered are accurate and truthful.
You must ensure that the use of CheckinOnline360 complies with the applicable regulations.

From CheckinOnline360 (Xavi Hidalgo):

Processes guest data exclusively at the customer's expense and under his instructions.
Implements technical and organizational security measures (encryption, restricted access, audits).
Notifies the customer of any security breach affecting guest data within the legal deadline (72 hours if there is a risk to rights).
Collaborates with the customer in the exercise of guests' rights (access, rectification, deletion), provided that the customer is liable as the responsible party.

7. Rights of the interested parties

Clients:

You can exercise your rights of access, rectification, deletion, limitation, opposition, portability and withdrawal of consent by writing to [email protected] .

Guests:

You should address your requests to directly to the accommodation (customer)as it is the person in charge of the treatment.
CheckinOnline360, as manager, will collaborate with housing to meet your request, but does not answer directly to you unless expressly instructed by the person in charge.

In all cases:

No charges are applied, except for repetitive or unfounded requests.
We may request proof of identity to ensure confidentiality.

8. Policy changes

This policy may be updated to adapt to legal changes or service improvements. Any relevant modification will be published on the website and, if it affects active customers, will be communicated by email.

This policy reflects our commitment to transparency, legality and data protection in the hotel and tourist accommodation environment.

Contact for inquiries or exercise of rights:
📧 [email protected]