GDPR - Your data protection rights

You use Booquela, and we process your data. GDPR guarantees that you have control over it. Here is what that means in practice.

What data we store

Booquela processes data necessary to provide the booking service:

• Profile data - first name, last name, email address, phone number
• Bookings - booking history, dates, times, selected rooms
• Payments - transaction information (card details are stored exclusively by Stripe, not by us)
• Reviews - reviews you have left for studios
• Messages - correspondence with studios through the platform
• Favorites - your list of favorite rooms

Your 6 rights

1. Right of access

You can request a copy of all personal data we hold about you. You will receive it in a readable format.

2. Right to rectification

If your data is inaccurate or incomplete, you can request corrections. Basic data - name, email, phone - can be changed directly in your profile.

3. Right to erasure

You can request the deletion of your data. After anonymization, your name will be replaced with an identifier (e.g., "Anonymous user #123"), your email changed to an inactive address, your phone removed, and your account deactivated.

Some data may be retained due to legal obligations - e.g., transaction data for tax purposes.

4. Right to data portability

You can request an export of your data in a format that allows transfer to another service.

5. Right to restriction of processing

You can request a restriction on how we use your data - for example, while a dispute is being resolved.

6. Right to object

You can object to the processing of your data for specific purposes, such as marketing.

How long does processing take

Under GDPR, we have 30 days from submission to process your request. In exceptional cases, the deadline may be extended by another 60 days - you will be informed if this happens.

How to submit a request

You can submit a request directly from your account. Detailed instructions are in the article about submitting DSAR requests.