Privacy Policy
Last updated 2 October 2026
This policy explains what personal data Homebase collects on globalhomebase.com and in our work with buyers, owners, guests and partners. It covers:
- why we collect it
- the legal basis for each use
- who we share it with
- how long we keep it
- what you can do about it
It follows the EU General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 on data protection (LOPDGDD).
Who is responsible
Global Homebase S.L., CIF B75259960, Joaquim Fuster 95, 07006 Palma de Mallorca, Spain, is the controller for this website and for the enquiries, applications and newsletter handled through it. Its registered name is Beverage Group Mallorca S.L. until its change of name is entered in the Mercantile Register.
Mallorca Homebase S.L., CIF B75793141, Joaquim Fuster 95, 07006 Palma de Mallorca, Spain, is the controller for rental bookings, seasonal leases and agreements with owners and partners in Mallorca.
When you enter into an agreement about a specific home, the company that signs it with you is the controller for that relationship, and the agreement names it.
The owner of a rented home holds the tourist licence. Guest registration and the tourist tax are carried out for the stays we arrange, on the owner's behalf where the owner is the registered operator.
We are not required to appoint a Data Protection Officer. Torben Aagaard is responsible for data protection and answers every request personally. Write to privacy@globalhomebase.com about anything in this policy.
What we collect, why, and on what basis
| Why | What | Legal basis | How long |
|---|---|---|---|
| Answering an enquiry or arranging a viewing | Name, email, phone, country, the home you ask about, your message | Steps you ask for before a possible agreement (GDPR art. 6(1)(b)); our legitimate interest in replying (art. 6(1)(f)) | Up to two years after our last contact, unless a transaction follows |
| Rental requests and bookings, including bookings made through Airbnb, Booking.com or other platforms | Name, email, phone, country, dates, number of guests, your message, payment records, deposit and any damage claim. For platform bookings, what the platform passes to us | Performing the booking (art. 6(1)(b)); legal obligations for accounting and tax (art. 6(1)(c)) | Six years after your stay (Commercial Code), longer only for an open claim |
| Guest registration required by law | For each guest: name, ID or passport details, nationality, date of birth, address, phone or email, the relationship of minors to an adult in the group, payment method | Legal obligation (art. 6(1)(c)) under Royal Decree 933/2021. Sent to the Ministry of the Interior through SES.Hospedajes | Three years, as the Decree requires |
| Balearic tourism tax | Number of guests aged 16 or over, nights | Legal obligation (art. 6(1)(c)), Balearic Law 2/2016 | The tax limitation period |
| Seasonal leases (more than 31 days, up to 11 months) | As for bookings, plus the reason for your stay, proof of your home elsewhere and what is needed to prepare the lease | Performing the lease (art. 6(1)(b)); legal obligations (art. 6(1)(c)) | The life of the lease plus six years |
| Business enquiries and company bookings | Company name and VAT or company number, your name, role and contact details, the group and programme | Steps before an agreement (art. 6(1)(b)); legitimate interest in checking who we contract with (art. 6(1)(f)) | Two years if no booking follows; otherwise six years |
| Owners who let or sell through us | Contact details, ID or company number, the property, licence and insurance documents, agreed rates, signed agreements and signatures, documents you upload | Performing the agreement (art. 6(1)(b)); legal obligations (art. 6(1)(c)) | The life of the agreement plus six years |
| Partner applications (Agent, Collaboration, Network, Referral) | Contact details, company, website and social links, specialism, area, audience size and what you tell us about your work | Steps before a partner agreement (art. 6(1)(b)); legitimate interest in assessing a partnership (art. 6(1)(f)) | Two years if no agreement follows; otherwise the life of the agreement plus six years |
| Buying, selling or co-owning a home | Identity documents, NIE, address, financial information, agreements, correspondence | Performing the agreement (art. 6(1)(b)); legal obligations, including anti-money-laundering law 10/2010 where it applies (art. 6(1)(c)) | Ten years where anti-money-laundering law applies; otherwise six years (Commercial Code) and the tax limitation period |
| Newsletter | Email and, if given, your name | Your consent (art. 6(1)(a)), which you can withdraw with the unsubscribe link in every issue | Until you unsubscribe |
| Website statistics | Pages visited, device and approximate location, collected through cookies | Your consent, given in the cookie banner (art. 6(1)(a) and art. 22.2 LSSI) | See the Cookie Policy |
| Crediting the agent who referred you | The agent code in the link you arrived with, attached to your enquiry | Performing the agreement with that agent and our legitimate interest in paying the right person (art. 6(1)(b) and (f)); the reminder cookie only with your consent | 24 months from your enquiry |
| Keeping the site secure | IP address, browser, server logs, failed log-ins | Legitimate interest in security (art. 6(1)(f)) | Normally up to 90 days |
We do not keep card numbers. Card payments are handled by our payment provider, which is responsible for that data under its own terms.
Who we share it with
We never sell personal data. We share it only where it is needed for the purposes above:
- Service providers who process data on our instructions under a data processing agreement. These cover website hosting, our CRM and form automation, email and document storage, newsletter delivery, spam protection for our forms, website statistics and payments.
- People involved in your transaction, and only with your knowledge: the partner agent or agency holding the home you ask about, notaries, lawyers, tax advisers, banks, and the other co-owners where a structure requires it.
- For rentals:
- the owner of the home, and the house manager and housekeepers who look after it, who get only what they need: names, arrival and departure times and the number of guests
- providers of any extras you book, such as a chef, transfers or a car, who get only what they need to deliver them
- if you choose a damage protection product, the insurer, who gets the details of your booking
- Network partners you ask us to connect you with, such as an architect, builder or property manager.
- Public authorities where the law requires it, including the Ministry of the Interior for guest registration and the Balearic tax agency for the tourism tax.
A list of the providers we use is available on request.
Transfers outside the EU
Some of our providers are based in the United States. Where they are, transfers rely on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses. The Commission found the Framework adequate in 2023, and the EU General Court upheld it in September 2025. If that framework changes, we will move to another lawful safeguard and update this policy. Guest registration data stays in the EU.
Your rights
You can ask us at any time to:
- access your data
- correct it
- delete it
- restrict or object to its use
- receive a copy to take elsewhere
Where we rely on your consent, you can withdraw it at any time, without affecting what was done before. Data we must keep by law, such as guest registration records, cannot be deleted before the legal period ends.
Email privacy@globalhomebase.com. We answer within one month. We may ask you to confirm who you are before we act.
If you are not satisfied, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or to the data protection authority where you live.
Automated decisions and AI
We do not make decisions about you that have legal or similarly significant effects by automated means alone. We use software tools, including AI assistants, to help us draft documents and organise enquiries. People make every decision.
Security, children and changes
We use access controls, encrypted connections and reputable providers. Only the people who need your data can see it.
This site is not directed at anyone under 18, and we do not knowingly collect their data from them. When a family rents a home, the law requires us to register children as guests. We collect those details from the adult who books.
If we change this policy, the date at the top changes with it. Material changes will be flagged on the site.
