1.      INTRODUCTION

DOMUS FLATS (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Notice explains how we collect, use, disclose, and safeguard your personal information when you visit our website at www.domusflats.com (the “Site”), use our mobile application (the “Domus Flats App”), or otherwise interact with our services (collectively, the “Services”). Please read this Privacy Notice carefully. By using the Site, the Domus Flats App, or any of our Services, you consent to the practices described in this Privacy Notice.

If you have any questions about this Privacy Notice, please contact us using the details provided in Section 10 below.

2.      PERSONAL INFORMATION COLLECTED

We may collect the following categories of personal information from you:

●        Identifiers and Contact Information: Name, email address, postal address, telephone number, and account credentials when you register with the Site or App;

●        Booking and Transaction Information: Details of any bookings or inquiries you make through the Site, the Domus Flats App, or through third-party booking platforms;

●        Contact Information: Your email address;

●        User-Generated Content: Information you voluntarily provide to us, including profile information, inquiry content submitted via the contact form, communications sent through the Domus Flats App messaging feature, reviews, ratings, testimonials, feedback, survey responses, support tickets, and any other content you submit through our Services or social media platforms.

●        SMS Communications: Phone numbers provided for SMS communications. SMS opt-in data and phone numbers collected for SMS communication purposes will not be shared with any third party or affiliates for marketing purposes.

●        Internet and Device Activity Information: IP address, device identifiers (including unique device identifiers such as IMEI and MAC address), mobile advertising identifiers, browser type and version, operating system version, device model/type/name, network provider, time zone, language settings, screen resolution, pages visited, time and duration of visits, referring URLs, clickstream data, interactions with content, and other usage information collected automatically when you access the Site or App.

●        Geolocation Data: Depending on your device permissions, when you access the Site or App, we may automatically collect and process information about your physical location. This may include non-precise location data (such as city, state, or zip code) derived from your IP address, as well as more precise location data if you grant permission through your device settings. We use various technologies to determine location, including IP address, GPS, Wi-Fi access points, and mobile towers.

●        Commercial Information: Products or services purchased, obtained, or considered; purchasing or consuming histories or tendencies; reservation history and preferences; transaction details including purchase amounts, dates, and fulfillment status; and records of your interactions with our Services.

●        Payment and Financial Information: Credit or debit card numbers, expiration dates, billing address, and other payment details necessary to process transactions. Please note that payment card information is collected and processed by our third-party payment processor; we do not store complete payment card numbers on our systems.

●        Inferences Drawn from Personal Information: We may derive inferences from the personal information we collect to create a profile about you reflecting your preferences, characteristics, behaviors, and tendencies. This may include consumer segmentation data, propensity scores, and affinity group categorizations used for marketing personalization and to improve our Services.

●        Audio, Visual, and Sensory Data: If you contact our customer service by phone, we may record the call for quality assurance and training purposes (where permitted by law and with appropriate notice). We may also collect photographs or images you upload to our Site or App, and video recordings from security cameras (CCTV) at our properties for safety and security purposes.

●        Professional or Employment-Related Information: If you are a business traveler or provide professional information, we may collect your job title, employer name, work contact details (phone, address, email), and business travel preferences.

 

Information Collected from Other Sources: We may receive or collect information from a variety of third parties in the normal course of serving you and operating our business. For example, we collect information from property records, public records, and other publicly available sources; government entities; our product suppliers and vendors; companies that help us process payments; service providers that operate on our behalf and collect information; security and fraud prevention providers; and booking and reservation records. If we do so, this Privacy Notice governs how we use that information, whether such use is independent of or in combination with information you have provided.

Sensitive Personal Information: Except as described above, we do not collect sensitive personal information from you while using the Site or App. If you elect to submit such information to us, it will be subject to this Privacy Notice. We do not use or disclose sensitive personal information for targeted advertising or for any purposes that would be considered a “sale” or “share” under applicable law.

Although it is not compulsory to give us this information, if you do not provide certain information, you may not be able to register as a member, make a booking, or use certain features of our Services.

3.      USE OF THIS INFORMATION

We (and our service providers) use your personal information for the following purposes:

●        Administer, process, and fulfill your bookings and reservations;

●        Collect payment of accommodation fees from you on behalf of our Hosts;

●        Collect payment for any services you obtain while staying in our Hosts’ accommodation;

●        Operate, maintain, and improve our Site, App, and Services;

●        Analyze how users interact with and make use of our Site and Services;

●        Notify you of certain offers and new products (subject to your right to unsubscribe or opt-out).

●        Respond to inquiries you submit via our contact form or the Domus Flats App messaging feature;

●        Ensure security and prevent fraud, unauthorized access, and other harmful activities;

●        Comply with applicable laws, regulations, and legal processes.

 

Profiling and Automated Decision-Making: We do not engage in profiling or the use of automated processing/decision-making on your personal information in furtherance of any decisions that produce legal or similarly significant effects within the meaning of applicable U.S. privacy laws.

We process your personal information on the following legal bases: (i) performance of a contract — where processing is necessary to fulfil your booking or provide services you have requested; (ii) legitimate interests — where we have a legitimate business interest in processing your data (for example, to improve our Site and services, or for fraud prevention) that is not overridden by your rights; and (iii) consent — where you have given us explicit consent to contact you for marketing purposes, which you may withdraw at any time.

 

4.      SHARING THIS INFORMATION

 

We may share your personal information with the following categories of third parties:

 

Payment Processors: We share payment card information with our payment processor to process transactions. You may need to provide payment details directly to our payment processing agent.

Third-Party Booking Platforms: When you make a booking through our Site, you may be redirected to a third-party booking engine that handles the reservation process. Although the interface may resemble the Domus Flats Site, the booking transaction is processed by a third-party service provider. Such third parties may collect personal information directly from you and process it in accordance with their own privacy policies.

Email Service Provider: We use Mailchimp to manage and deliver email communications sent via our contact form. Mailchimp may collect and process your email address and inquiry content on our behalf.

Website Platform Provider: Our Site is built on Ibexa CMS, which may process personal information submitted through contact forms and other Site features.

Third-Party Listing Platforms: We may share listing information with online travel agencies and hosting platforms (such as Airbnb, VRBO, Expedia, and similar services) to market accommodations on behalf of our Hosts.

Agents, Consultants and Related Third Parties: We may share personal information for business-related functions (such as mailings, database maintenance, and payment processing) but only to the extent such information is needed to perform their designated function.

When Legally Required: We may disclose your personal information to law enforcement authorities, regulators, courts and tribunals, governmental or public bodies, and other relevant third parties as we believe necessary or appropriate to protect people or property, to protect our services, rights or property, to comply with legal or regulatory requirements and to respond to legal process, law enforcement requests and requests from other public and government authorities.

Advertisers: DOMUS FLATS may partner with demand-side platforms who buy ad placements. When our disclosure to advertising partners constitutes a “sale” or “share” of personal information, we honor your right to opt out. To exercise this right, please contact us at [email protected].

We may transfer your personal information to a third party as part of a sale of some or all of our business and assets to any third party or as part of any business restructuring or reorganization, but we will take steps with the aim of ensuring that your privacy rights continue to be protected.

Other than as set out above, we will not disclose any of your personal information without your permission unless we are required by law to do so.

Disclosure of Other Information: In addition to collecting personal information, we may collect information that does not identify you and is not associated with your personal information. We may also de-identify, anonymize, or aggregate information so it no longer identifies you.

Analysis of Site Performance: We may use de-identified information and pool it with other information to track, for example, the total number of visitors to our Site, the number of visitors to each page of our Site, and the domain names of our visitors’ Internet service providers. It is important to note that no personal information is available or used in this process.

Customer Research: In order to better serve and understand the needs of our Site’s users, we may conduct research on user demographics, interests and behavior based on the personal information and other information provided to us. This research may be compiled and analyzed on an aggregate basis, and we may share this aggregate data with our affiliates, agents and business partners. This aggregate information does not identify you personally. DOMUS FLATS may also disclose aggregated user statistics in order to describe our services to current and prospective business partners, and to other third parties for other lawful purposes.

5.      COOKIES AND TRACKING TECHNOLOGIES

We and our third-party service providers (such as embedded content providers like YouTube or Google services) may use cookies and similar tracking technologies to enhance your experience, analyze usage, and assist with marketing efforts. These technologies may be set by us or by third parties whose services are embedded on our site.

Types of Cookies We Use:

·         Necessary Cookies: Essential cookies required for the Site to function properly, including session management and security.

·         Analytics Cookies: We use Google Analytics cookies to understand how visitors interact with our Site. These cookies collect information about your use of the Site, including pages visited, time spent, and navigation patterns.

·         Functional Cookies: We use Google reCAPTCHA to protect our Site from spam and abuse. reCAPTCHA sets cookies to verify that you are not a robot. For more information, please visit https://developers.google.com/recaptcha/docs/faq.

·         Third-Party Cookies: Our Site may embed content from YouTube and other Google services, which may set their own cookies to track your interactions with such content. These cookies are governed by Google’s privacy policy.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that if you disable cookies, some features of our Site may not function properly.

Cookies Preferences: To review and update your preferences for cookies on our Site, or to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising, please contact us by email at [email protected]. We will process your request in accordance with applicable law.

Third-Party Analytics: We collect data through third-party services and products, including Google Analytics, which use cookies and technologies to collect and analyze data about the use of our Site and Services. These services also collect data regarding the use of other websites, apps, and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners/ and opt out by downloading the Google Analytics opt out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Managing Cookies: Users can delete any cookies that have been installed in their browser cookie folder. Each browser follows different procedures to manage settings. In addition to your opt-out rights in this Notice, users may opt out of receiving targeted advertising on websites through participating members of the Network Advertising Initiative (USA) or the Digital Advertising Alliance (USA). Users of mobile applications may opt out of receiving targeted advertising in mobile applications through participating members of the Digital Advertising Alliance by installing the AppChoices mobile application and selecting the user’s choices.

Advertising Choices

We may use advertising partners and other third-party advertising companies to serve advertisements on our Site, App, and other websites regarding both DOMUS FLATS and third-party goods and services that may interest you when you access and use our Site and Services or other websites or online services. You may receive advertisements based on information relating to your access to and use of the Site and Services and other websites or online services on any of your devices, as well as on information received from third parties.

To serve such advertisements, these companies place or recognize a unique cookie on your browser (including through use of pixel tags). They also use these technologies, along with information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop. If you would like more information about this practice, and to learn about your choices in connection with it, please visit http://www.networkadvertising.org/managing/opt_out.asp and http://www.aboutads.info/, http://www.youronlinechoices.eu or https://business.safety.google/privacy/.

For any advertising in our App, you may download the AppChoices app at https://youradchoices.com/appchoices to opt out.

For the advertisements you see on our Site and Services, you can also opt out:

·         directly in the ad by clicking on the AdChoices icon;

·         by opting out of Advertising Cookies in our “Tracking Preferences” site; or

·         by visiting https://business.safety.google/privacy/.

For residents of certain U.S. states with privacy laws, such as California and Colorado, please see Section 6 (Your Rights) of this Privacy Notice to learn more about how we may sell and share personal data and other data for purposes of cross-context behavioral advertising and targeted advertising. You can exercise your rights for targeted advertising by contacting us at [email protected]

Apps and Mobile Devices

We collect certain data when you download and/or use the Domus Flats App, such as App usage data, the date and time the App on your device accesses our servers, and what data and files have been downloaded to the App based on your device ID. We use this data to ensure that our Services function properly.

Our App may also contain software development kits (SDKs) from third parties which may collect and transmit data to enable various features in the App.

With your consent if required by the operating system and/or applicable law, we may also collect mobile device advertising identifiers to enhance and personalize your experience and deliver relevant products, content, or ads to show you on our Site, App, or through external advertising.

If you use our automated chat functionalities or AI-powered chat technologies, we collect the personal data that you submit to provide, improve, or develop the chat functionality, so we can better respond to your and other customers’ future interactions. If you choose to use our automated chat functionalities, you understand that DOMUS FLATS and our third-party service providers will be using the information in the chat for quality and training purposes. If you do not wish to have your chat interactions used for these purposes, please do not use the chat features.

Optional App Features: Our App may contain optional features made available to developers by the device’s operating system. To improve your experience, we request your permission for the use of your device’s location, camera, or other functions (e.g., using your device’s camera to capture your credit card information). You may choose not to allow the use of such functions, in which case the App features relying on such functions may not be available to you. Go to your device settings to manage these permissions.

6.      SECURITY

 

We aim to protect your personal information through a system of organizational and technical security measures. We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

 

In the event that we are required by law to inform you of a breach of your personal information, we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

 

Our Site and the Domus Flats App may permit you to create an account. When you do, you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account by contacting us using the details provided in Section 10 below.

6.      YOUR RIGHTS

You have the following rights in relation to the personal information we hold about you:

●        Right of access: You may request a copy of the personal information we hold about you at any time.

 

●        Right to rectification: You may ask us to correct any inaccurate or incomplete personal information we hold about you.

 

●        Right to erasure: You may request that we delete your personal information where there is no compelling reason for us to continue processing it.

 

●        Right to object: You may object to us processing your personal information for direct marketing purposes or where we are relying on a legitimate interest to process your data.

 

●        Right to data portability: Where we process your data by automated means and with your consent or to perform a contract, you may request that we provide your data to you or to another organization in a structured, commonly used, machine-readable format.

●        Right to Limit Use of Sensitive Personal Information: You have the right to request that we limit the use and disclosure of your sensitive personal information to only those uses necessary to perform the Services or provide the goods reasonably expected by an average consumer.

●        Opt Out of “Sale,” “Shares,” and Targeted Advertising: You have the right to opt out of the “sale” of your personal information and the disclosure of your personal information for cross-context behavioral advertising (known as a “share” in California). To exercise this right, please contact us at [email protected] or submit a request through the contact information provided in this Privacy Notice. We will process your request within the timeframes required by applicable law. We honor legally recognized opt-out preference signals, including Global Privacy Control (GPC), to the extent technically feasible. Please note that we do not sell personal information for monetary consideration. More information about GPC is available at: https://globalprivacycontrol.org/.

●        Right to a Copy: You have the right to obtain a copy of your personal information that you have previously provided to us in a portable and readily usable format (if technically feasible).

●        Right to Know: You may request to access the following information we have collected and maintained about you: the specific pieces of personal information we collected about you; the categories of personal information we collected about you and the categories of sources; the business or commercial purpose for collecting, disclosing, or selling personal information about you; and the categories of personal information about you that we sold, shared, or otherwise disclosed and the categories of third parties to whom we sold, shared, or otherwise disclosed that personal information.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local data protection authority if you believe your rights have not been respected.

Right to Non-Discrimination: You have the right to be free from unlawful discrimination for exercising your rights listed above under applicable laws.

Right to Appeal: Depending on your state of residence, you may have the right to request an appeal of a denied consumer request. If you wish to appeal our decision regarding a privacy request, please contact us at [email protected].

Authorized Agent: You may designate an authorized agent to submit a request on your behalf to access or delete your personal information. To do so, you must (1) provide that authorized agent written and signed permission to submit such request, and (2) verify your own identity directly with us. We may deny a request from an authorized agent that does not submit proof that they have been authorized to submit such a request.

Marketing Opt-Out: You may opt out from receiving marketing-related communications from us on a going-forward basis by contacting us through the information provided in this Privacy Notice or by using the unsubscribe mechanism contained in each email. We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing-related emails from us, we may still send you important administrative messages, from which you cannot opt out.

Cookies Preferences: To review and update your preferences for cookies on our Site, please contact us at [email protected].

Location Information: You can choose whether or not to allow the Site or App to collect and use real-time information about your device’s location through your device’s privacy settings. To update your location preferences with us, please contact us at [email protected].

Account Deactivation: You can deactivate your account at any time by contacting us at [email protected]. However, you will not be able to access any part of the Services that are for registered users only once your account is deactivated. Please note that even if you request deactivation of your account, it may take some time to fulfill this request.

Verification: We must be able to verify your identity to make sure you are the person about whom we have collected personal information or an authorized representative. Depending on the type of request, we may conduct the verification process by email or phone using information that matches our records. The information you must provide as part of the verification process may include: name, contact information (such as email address or phone number), relationship with us, and residency.

How to Exercise Your Rights: To exercise any privacy rights described in this Privacy Notice, including opting out of cookies, targeted advertising, or the “sale” or “sharing” of personal information, you may contact us by:

Email: [email protected]

Response Timeline: We will acknowledge receipt of your request within 10 business days and will process your verifiable request within 45 days of receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing. If we cannot fulfill your request, we will explain the reasons in our response.

No Fee for Requests: We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, manifestly unfounded, otherwise creates a burden or workload in excess of standard requests, or is prohibited by law. If we determine that a fee is warranted by the request, we will inform you of the determination and provide both a written justification for the fee, as well as a cost estimate, prior to completing your request.

7.      DATA RETENTION

We will retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In particular:

●        Booking records and associated personal data will be retained for a period of 7 years following the date of your booking, in accordance with our legal and financial obligations;

●        Account profile information will be retained for as long as your account remains active. If you close your account, we will delete your profile data within 90 days, unless we are required to retain it for legal reasons;

 

●        Marketing communications opt-in records will be retained for the duration of your subscription and for a reasonable period thereafter to evidence your consent; and

●        Emails and contact form inquiries stored via Mailchimp will be retained for 30 days, after which they will be deleted unless required for legal or business purposes.

8.      INTERNATIONAL DATA TRANSFERS

Your personal information may be processed and stored in countries outside of your country of residence, including countries that may not have the same data protection laws as your home country. Where we transfer your data internationally, we take appropriate safeguards to ensure your personal information remains protected in accordance with this policy, including the use of standard contractual clauses approved by relevant data protection authorities where required. By using the Site, you consent to such transfers.

9.      AGE RESTRICTIONS

 

DOMUS FLATS does not knowingly collect any personal information from children under the age of 13. DOMUS FLATS encourages parents and legal guardians to monitor their children’s Internet usage and to help enforce this Privacy Notice by instructing their children never to provide personal information on this (or any) Site or App without parental permission. If a parent or guardian believes that DOMUS FLATS has personal information of a child under the age of 13 in its database, please contact [email protected] and DOMUS FLATS will take all reasonable efforts to promptly remove such information from our records.

 

10.  THIRD-PARTY LINKS

 

Our Services may contain links to third-party websites or apps. If you click on one of these links, please note that each one will have its own privacy notice. We do not control these websites or apps and are not responsible for their privacy policies. When you leave the Site, we encourage you to read the privacy notice of every website you visit.

 

We are not responsible for the privacy and data security practices of other organizations, such as Facebook, Instagram, Apple, Google, Microsoft, or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer. Please read their privacy policies and consider customized settings on your browser or through your mobile phone to limit disclosure of certain information, such as location data. Any personal information that you provide through these third-party websites, mobile applications, or social platforms will be subject to the privacy notice of its operator, and not this Privacy Notice.

 

11.   DO NOT TRACK SIGNALS

 

We do not monitor or follow “Do Not Track” (DNT) signals because there is no standard interpretation or practice for DNT signals. Therefore, we handle all user information consistent with this Privacy Notice.

 

12.  GLOBAL PRIVACY CONTROL (GPC)

 

We do honor legally recognized opt-out preference signals, including GPC. When we detect a valid GPC signal from your browser, we treat it as a request to opt out of “sale/share” for that browser and device and process it in a frictionless manner. Selecting “Do Not Sell or Share” or enabling GPC suppresses the firing of advertising/remarketing tags and prevents disclosure to ad networks and social media platforms for cross-context behavioral advertising. If you return using a different device or browser, you will need to set your preferences for that device or browser, unless you authenticate and we can associate your preferences with your account.

 

13.  MISCELLANEOUS TERMS AND CONDITIONS

 

This Privacy Notice is to be read in conjunction with any Terms of Use applicable to the Site or Services. Your access to and use of the Site or Services may also be subject to any separate agreements or terms and conditions you have signed or agreed to with DOMUS FLATS. Please refer to those agreements as needed.

 

Regardless of any other provision in this Privacy Notice, we reserve the right to disclose any personally identifiable or non-personally identifiable information about you to: (a) fulfill a government request; (b) conform with the requirements of the law or legal process; (c) protect or defend our legal rights or property, our Site, or other users; or (d) protect, in an emergency, the health and safety of our customers or the general public. This includes exchanging information with third parties and organizations in connection with credit risk reduction and fraud protection.

14.  ADDITIONAL INFORMATION FOR INTERNATIONAL VISITORS

 

DOMUS FLATS is a United States company. While the majority of our guests and Site visitors are located in the United States, we recognize that individuals may access our Site from other countries. This section provides additional information for those visitors.

 

European Economic Area and United Kingdom Visitors: If you are visiting our Site from the European Economic Area (EEA), United Kingdom, or Switzerland, you may have certain rights under applicable data protection laws, including the right to access, correct, or delete your personal information, and the right to withdraw consent. To exercise any of these rights, please contact us at [email protected]. We will respond to your request in accordance with applicable law.

 

Canadian Visitors: If you are visiting our Site from Canada, you may have certain rights under Canadian privacy laws, including the right to access and correct your personal information. Your personal data may be transferred to and processed in the United States. To exercise your rights or for questions about our privacy practices, please contact us at [email protected].

 

15.  CHANGES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by updating the “Last Updated” date at the bottom of this Privacy Notice and, where appropriate, by sending you an email notification. We encourage you to review this Privacy Notice periodically to stay informed about how we are protecting your information. Your continued use of the Site or Services after any changes constitutes your acceptance of the updated Privacy Notice.

16.  CONTACT US

If at any time you would like to contact us with your views about our privacy practices, or with any inquiry relating to your personal information, you can do so by:

Email: [email protected]

Last Updated: April 2026