Your exchange platform.

We welcome you to our platform for exchanges between travelers and hosts. We care about protecting the privacy of our users and value the trust they place in us when using our services.

This privacy policy aims to provide clear and transparent information on how we collect, use, share and protect the personal data of our users.

We value privacy and transparency in the handling of personal data, and we always give users the option to manage their privacy preferences and control the information they wish to share on our platform.

In accordance with the provisions of EU Regulation 2016/679, of the European Parliament and of the Council of April 27, 2016. (RGPD) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, NOT ONLY AUPAIRS informs you that, by accepting this Privacy Policy, you give your informed, express, free and unequivocal consent for the data you provide to be processed by NOT ONLY AUPAIRS, as data controller, and on which the security,

technical and organizational measures provided for in current regulations are applied.

Warning about minors

Respecting the provisions of articles 8 of the RGPD and 7 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, only those over 14 years of age may grant their consent for the processing of your personal

data lawfully by NOT ONLY AUPAIRS. If it is a minor under 14 years of age, the consent of the parents or guardians will be necessary for the treatment, and this will only be considered lawful to the extent that they have authorized it.

If you are under 14 years of age and have accessed this website without notifying your parents, you should not register as a user.

Responsible for the processing of personal data

MARIA AMPARO SEBASTIA RODRIGUEZ

Commercial Name: NOT ONLY AUPAIRS

Address: CALLE SAN JUAN 116 2 PUZOL (VALENCIA) 46530

NIF: 24374375X

Email: [email protected]

How do we obtain your data?

NOT ONLY AUPAIRS is a traveler/host exchange experience web platform. The

personal data that we process in each of them comes from our own users, which we collect through:

• Contact
• Registration form (travelers).
• Host registration forms (for families, individuals or companies).
• Form to leave opinions and testimonials on To contact, consent with this privacy policy is required.

We process your personal information for purposes related to marketing and sales activities on the basis of consent.

The legal basis for the processing of data of people who contract products and/or services offered by NOT ONLY AUPAIRS is the execution of the online sales contract.

When indicated on our sites, at the time in which personal information is collected from clients in accordance with our legitimate interest to promote our products and services,

NOT ONLY AUPAIRS undertakes to obtain the express and verifiable consent of the user for the processing of your personal data for one or more specific purposes.

The user will have the right to withdraw their consent at any time. It will be as easy to withdraw consent as it is to give it. As a general rule, withdrawal of consent will not condition the use of the platform.

On occasions in which the user must or can provide their data through forms to make queries, request information for reasons related to the content of the platform, they will be informed if the completion of any of them is mandatory due to that they are essential for the correct development of the operation carried out.

Category of data we process

The categories of data processed in NOT ONLY AUPAIRS are only identification data and transaction data carried out on our platform. Under no circumstances are special categories of personal data processed within the meaning of Article 9 of the GDPR.

The personal information that NOT ONLY AUPAIRS collects and processes includes: To contact and messaging systems: name and email.

To publish a traveler profile:

• Contact Information: We request contact information such as full name, email address, and phone This data allows us to communicate with you and facilitate the process of contacting hosts.
• Personal information: We collect personal data such as date of birth, gender and photograph, nationality, education, professional ability, language, etc. This data helps hosts have a better understanding of who you are as a traveler and create a more personalized connection with the host allowing them to select the profiles that best fit their requirements.
• Exchange Travel Preferences and Requirements: We will ask you to provide information about your travel preferences and requirements, such as destination, travel dates, desired type of exchange, and any special needs. This helps us show you offers from hosts that fit your needs and preferences.

• Financial information: In the case of users who subscribe to publish profiles, data related to financial transactions is collected, such as credit card or bank account information, Paypal and Stripe accounts, among others, to process payments or
• Interests and experiences: You can provide additional information about your interests, hobbies and expectations. This helps hosts understand travelers’ interests and offer enriching experiences during their stay.
• Identity verification and security: In some cases, we may request additional information to verify your identity and ensure the security of our This may include checking identification documents, references or criminal records, etc. depending on local policies and regulations.

To publish host profile:

• Contact Information: We request contact information such as full name, email address, and phone This data allows us to communicate with you and provide a contact form for guests interested in your offer.
• Financial information: In the case of users who subscribe to publish profiles, data related to financial transactions is collected, such as credit card or bank account information, Paypal and Stripe accounts, among others to process payments or refunds
• Personal information: We collect personal data such as age, gender and photograph, type of host, company, individual or family, in this case, we request family unit data, number of children, ages, etc. This data helps guests get a better understanding of who you are as a host and create a more personalized connection.

• Accommodation Description and Details: We will ask you to provide a detailed description of your accommodation or exchange location(s), including geographic area, location data, features, amenities, rules and any relevant guest This helps guests make informed decisions and find the exchange that fits their needs.
• Identity verification and security: In some cases, we may request additional information to verify your identity and ensure the security of our This may include checking identification documents, references or criminal records, depending on local policies and regulations.

Additional information that we may collect on the platform:

• IP address and information derived from the IP address, such as geographic
• Information about a device you use, such as the browser, device type, operating system, presence or use of applications, screen resolution, and preferred

For what purpose do we process your personal data?

Personal data is collected and managed by NOT ONLY AUPAIRS in order to facilitate, expedite and fulfill the commitments established between the platform and the users of the platform, or to maintain the relationship established in the forms that the latter fill out, or to respond to a request or query.

We also process personal information to help travelers and hosts who want to establish direct contact according to the type of service. In this case, NOT ONLY AUPAIRS will

show personal data that users voluntarily enter in each profile file. The information about users to which each of the profiles has access may only be used for the purpose of responding to requests generated in NOT ONLY AUPAIRS, and must not be used by any of them for advertising or promotional purposes or other unrelated activities. with

NOT ONLY AUPAIRS, except for the express authorization of the user.

We may use personal information of users to improve our commercial and promotional initiatives and analyze the pages visited, the searches carried out by users, etc. to improve our content offering, personalize said content, its presentation and services.

Likewise, the data may be used for commercial personalization, operational and statistical purposes, and activities specific to the corporate purpose of NOT ONLY

AUPAIRS, as well as for the extraction, storage of data and marketing studies to adapt the content offered to the user. as well as to improve the quality, operation and navigation of the platform.

At the time the personal data is obtained in the different forms included in the platform, the user will be informed about the specific purpose or purposes of the processing to which the personal data will be used, that is, the use or uses that will be given to it. the information collected.

It is important to note that, in all cases, data collection is carried out in accordance with applicable data protection laws and regulations. We are committed to using the information collected securely and confidentially, and only for the purposes described above.

There are other purposes for which we process your personal data:

• To comply with our legal obligations: we will process your data to comply with a legal obligation that requires it, for example, to respond to a legal process or a request from a competent supervisory authority.
• To protect the rights and safety of our users and third parties, as well as our
• To comply with legal requirements, including compliance with court orders, requests and other appropriate legal mechanisms.
• To provide information to representatives and advisors, including lawyers and tax advisors to help us comply with legal, tax or security requirements.
• To support and improve the services offered by this
• Other non-identifying data is also collected, obtained through some cookies that are downloaded to the user’s computer when browsing this website, which is detailed in the cookie policy.
• To manage social The different domains associated with NOT ONLY AUPAIRS have a presence on social networks. The processing of data carried out on people who become followers on the social networks of the official pages of NOT ONLY AUPAIRS will be governed by this section, as well as by those conditions of use, privacy policies and access regulations. that belong to the social network that is appropriate in each case and previously accepted by the user. NOT ONLY AUPAIRS will process your data for the purposes of correctly managing your presence on the social network, informing about activities, products or services, as well as for any other purpose that the regulations of social networks allow. In no case will we use the profiles of followers on social networks to send advertising individually.

NOT ONLY AUPAIRS does not sell, rent or transfer personal data that may identify the user, nor will it do so in the future, to third parties without prior consent. However, in some cases, personal data of users may be sent to the businesses that advertise on our platform. In these cases, consent will be required from the users, informing about the business data and the identity of the person responsible and the purpose for which that

the business is going to use your information. It will always be carried out with the strictest safety standards.

What are your rights when you provide us with your data?

We understand that informed consent is essential to process your data and we are committed to providing you with transparency and control over your personal data at all times.

We want you to be fully informed about your rights regarding the processing of your personal data.

Anyone has the right to obtain confirmation as to whether at NOT ONLY AUPAIRS we are processing personal data that concerns them or not.

It is expressly agreed that at any time the user registered with NOT ONLY AUPAIRS may request the cancellation or closure of their registration request and/or the closure of their account or deletion of their account and information from the NOT ONLY AUPAIRS database. Please review the “Rights of access, cancellation and rectification of personal
information” section.

Interested persons have the right to:

•  Request access to personal data relating to the interested party.
• Request its rectification or deletion.
• Request its cancellation
• Request the limitation of your treatment.
• Oppose treatment.
• Request data portability.

The interested parties may access their personal data, as well as request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the limitation of the processing of their data, in which case I will only keep them for the exercise or defense of claims.

In certain circumstances and for reasons related to their particular situation, interested parties may object to the processing of their data by NOT ONLY AUPAIRS, at which time, NOT ONLY AUPAIRS will stop processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims. As an interested party, you have the right to receive the personal data that concerns you, that you have provided to us and in a structured, commonly used and machine-readable format, and to transmit them to another data controller when:

• The treatment is based on consent.
• The data has been provided by the interested person.
•  The treatment is carried out by automated means.

By exercising your right to data portability, you will have the right to have personal data
transmitted directly from controller to controller when technically possible.

The interested parties will also have the right to effective judicial protection and to file a claim with the supervisory authority, in this case, the Spanish Data Protection Agency, if
they consider that the processing of personal data that concerns them infringes the Regulation.

To exercise your rights, you must contact: [email protected]
How long will we keep your data?
The platform will retain users’ personal data in accordance with the principles established in the GDPR.

Personal data will only be retained for as long as necessary to fulfill the purposes for
which it was collected or as required by applicable law.

The processed data will be maintained as long as the legal periods established for the conservation of data do not expire, if there is a legal obligation to maintain it, or if this
legal period does not exist, until the interested party requests its deletion or revokes the consent granted.

Therefore, the personal data provided will be kept following this criterion:

Registration data: Registration data, such as your name, email address and password, is usually retained as long as you maintain an active account on the platform. If you decide to delete your account, we may retain certain information for an additional period of time to comply with our legal obligations or resolve disputes.