Privacy policy

Controller and contact

NORDIK SMART LIVING, S.L. · CIF B21706452 · Pasaje Compositor Lehmberg Ruiz 4, 5º A, 29007 Málaga · Registro Mercantil de Málaga, hoja MA-188794.

Data protection: admin@nordikcompany.com. We have not appointed a data protection officer; for any question, write to admin@nordikcompany.com.

Data, purposes and legal grounds

We process data needed for searches, bookings, payments, stays, guest care, check-in, traveller registration, invoicing, access security, Nordik Tribe, newsletters, gift cards and legal duties. The legal grounds are contract performance, legal obligations, consent and legitimate interests in security, fraud prevention and service improvement. We do not store card details; Stripe handles them directly.

Retention

We retain booking and stay data during the relationship plus 5 years; invoices and accounting for 6 years; traveller records for 3 years; newsletters and Tribe data until unsubscribed; and abandoned bookings for no more than 30 days.

Recipients and international transfers

Our processors include Stripe, Smoobu, Chekin, Resend, Nuki, TTLock, Holded, Ringover, SVAE, Angreta, Paack Logistics, iWash, Google Workspace and Lovable/Supabase. Cleaning is handled by our own team. Stripe, Resend, Google and Lovable/Supabase may process data in the US under the EU–US Data Privacy Framework or Standard Contractual Clauses.

Your rights

Request access, correction, erasure, objection, restriction, portability or withdraw consent at admin@nordikcompany.com or by post to our address. We request ID only where reasonable doubts exist about identity. You may complain to the Spanish Data Protection Agency at aepd.es.