SECTION I – TERMS AND CONDITIONS

  1. Company Information
    Company: Bookanty Software Services, S.L.
    Registered address: Avenida Gaudí 58 1, 3. 08025 Barcelona Spain.

    Contact: legal@bookanty.com

  2. Service Description
    Bookanty is a cloud-based SaaS platform for reservation and availability management provided
    exclusively to businesses.

  3. Subscription, Billing and Payments
    Services are provided under a recurring subscription. Fees are billed in advance. Failure to pay
    may result in suspension or termination.

  4. Availability and SLA
    The service is provided on an “as is” and “as available” basis. Planned maintenance may cause
    temporary interruptions.

  5. User Obligations
    Customers shall ensure lawful use of the platform and the accuracy of data entered.

  6. Intellectual Property
    All intellectual property rights belong exclusively to Bookanty Software Services, S.L.

  7. Limitation of Liability
    Liability is limited to the amount paid by the Customer in the previous 12 months, except where
    prohibited by law.

  8. Termination
    Either party may terminate the contract. Upon termination, access is revoked and data handled per
    the DPA.

  9. Governing Law
    Spanish law. Courts of Barcelona, Spain.

    SECTION II – PRIVACY POLICY

  10. Data Controller
    Bookanty Software Services, S.L. acts as Data Controller for its own customer data.

  11. Categories of Data
    Identification data, billing data, technical logs, and account usage data.

  12. Legal Bases
    Contract performance, legal obligation, legitimate interest, and consent where applicable.

  13. Retention
    Data is retained during the contractual relationship and thereafter as required by law (up to 6 years
    for fiscal data).

  14. Rights
    Data subjects may exercise GDPR rights via legal@bookanty.com or the AEPD.

    SECTION III – DATA PROCESSING AGREEMENT (ARTICLE 28 GDPR)

  15. Roles
    Customer: Data Controller. Bookanty: Data Processor.

  16. Processing Instructions
    Processing is limited to providing the service, security, and support.

  17. Security Measures
    Encryption, access controls, backups, monitoring, and incident response procedures are applied.

  18. Subprocessors
    Bookanty may engage subprocessors under equivalent GDPR obligations.

  19. International Transfers
    Transfers outside the EEA are safeguarded via SCCs or adequacy decisions.

  20. Data Deletion
    Upon termination, data is deleted or returned unless legally required to retain it.


    ANNEX I – Categories of Data and Data Subjects
    Users, employees, and end customers; identification, reservation, and technical data.
    ANNEX II – Technical and Organisational Measures
    TLS encryption, logical data isolation, RBAC, backups, monitoring, and secure development
    practices.