Last updated: April 20, 2026
1. Introduction
Door2Day ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our booking platform at door2day.es.
2. Data Controller
Door2Day is the data controller responsible for your personal data. For any privacy-related questions, contact us at: [privacy@door2day.es]
3. What Data We Collect
We collect the following categories of personal data:
Account Information: Name, email address, phone number, and password when you register
Booking Details: Service preferences, address, scheduling information
Payment Information: Billing details processed securely through our payment providers
Communication Records: Messages between you and service providers through our platform
Technical Data: IP address, browser type, device information, and cookies (see our Cookie Policy)
4. How We Use Your Data
We process your personal data to:
Facilitate bookings between you and service providers
Process payments and send invoices
Communicate regarding your bookings and account
Improve our platform and user experience
Ensure platform security and prevent fraud
Comply with legal obligations
Legal basis: Processing is necessary for the performance of our contract with you (Art. 6(1)(b) GDPR) and our legitimate interests in operating the platform (Art. 6(1)(f) GDPR). For marketing communications, we rely on your consent (Art. 6(1)(a) GDPR).
5. Data Sharing
We share your data only with:
Service Providers: Limited information necessary to fulfill your booking
Payment Processors: Secure handling of financial transactions
IT Service Providers: Hosting, cloud storage, and technical maintenance
Legal Authorities: When required by law or to protect our rights
All third parties are bound by data processing agreements ensuring GDPR compliance.
6. Data Retention
We retain your personal data only as long as necessary:
Active accounts: Data retained while your account is active
Completed bookings: 5 years for tax and legal compliance
Deleted accounts: Personal data anonymized or deleted within 30 days, except where legal obligations require retention
7. Your Rights
Under GDPR, you have the right to:
Access your personal data
Rectify inaccurate information
Erase your data ("right to be forgotten")
Restrict processing under certain conditions
Data portability – receive your data in a structured format
Object to processing based on legitimate interests
Withdraw consent at any time
To exercise your rights, contact us at [privacy@door2day.es]. We respond within 30 days.
8. Security Measures
We implement appropriate technical and organizational measures including:
SSL/TLS encryption for data transmission
Secure server infrastructure
Regular security audits
Staff training on data protection
9. International Transfers
If data is transferred outside the European Economic Area (EEA), we ensure adequate protection through Standard Contractual Clauses (SCCs) or equivalent safeguards.
10. Changes to This Policy
We may update this Privacy Policy periodically. Significant changes will be notified via email or platform announcements.