SECTION I – TERMS AND CONDITIONS
Company Information
Company: Bookanty Software Services, S.L.
Registered address: Avenida Gaudí 58 1, 3. 08025 Barcelona Spain.Contact: legal@bookanty.com
Service Description
Bookanty is a cloud-based SaaS platform for reservation and availability management provided
exclusively to businesses.Subscription, Billing and Payments
Services are provided under a recurring subscription. Fees are billed in advance. Failure to pay
may result in suspension or termination.Availability and SLA
The service is provided on an “as is” and “as available” basis. Planned maintenance may cause
temporary interruptions.User Obligations
Customers shall ensure lawful use of the platform and the accuracy of data entered.Intellectual Property
All intellectual property rights belong exclusively to Bookanty Software Services, S.L.Limitation of Liability
Liability is limited to the amount paid by the Customer in the previous 12 months, except where
prohibited by law.Termination
Either party may terminate the contract. Upon termination, access is revoked and data handled per
the DPA.Governing Law
Spanish law. Courts of Barcelona, Spain.SECTION II – PRIVACY POLICY
Data Controller
Bookanty Software Services, S.L. acts as Data Controller for its own customer data.Categories of Data
Identification data, billing data, technical logs, and account usage data.Legal Bases
Contract performance, legal obligation, legitimate interest, and consent where applicable.Retention
Data is retained during the contractual relationship and thereafter as required by law (up to 6 years
for fiscal data).Rights
Data subjects may exercise GDPR rights via legal@bookanty.com or the AEPD.SECTION III – DATA PROCESSING AGREEMENT (ARTICLE 28 GDPR)
Roles
Customer: Data Controller. Bookanty: Data Processor.Processing Instructions
Processing is limited to providing the service, security, and support.Security Measures
Encryption, access controls, backups, monitoring, and incident response procedures are applied.Subprocessors
Bookanty may engage subprocessors under equivalent GDPR obligations.International Transfers
Transfers outside the EEA are safeguarded via SCCs or adequacy decisions.Data Deletion
Upon termination, data is deleted or returned unless legally required to retain it.
ANNEX I – Categories of Data and Data Subjects
Users, employees, and end customers; identification, reservation, and technical data.
ANNEX II – Technical and Organisational Measures
TLS encryption, logical data isolation, RBAC, backups, monitoring, and secure development
practices.