What happens to your identity data.

Who is responsible?

The requesting operator is normally the controller for its booking, guest register, application or tenancy. Hausu normally acts as its processor for that request. Hausu may act as a separate controller for maintaining your reusable Passport, security and account records.

What we process

Account identifiers, verified identity claims, verification status, provider references, request details, approval records and security logs. Raw document and biometric evidence should remain isolated and be deleted or retained by the verification provider for the shortest justified period.

Why it is processed

The legal basis depends on the request. Spanish accommodation registration may rely on a legal obligation. Rental applications may involve steps before a contract; tenancy signing may involve performance of a contract. Biometric processing requires an additional documented condition when Article 9 GDPR applies.

What the operator receives

Only claims allowed by the applicable policy and approved for the named purpose. The ID image, selfie and biometric template are not disclosed by default. Spanish accommodation requests still include identity-document fields required for guest registration.

Retention

• Spanish professional guest-register presentations: configured for three years.
• Uncompleted request links: expire within the configured request period.
• Tenancy applications: default presentation retention of 180 days unless another justified period applies.
• Raw identity evidence: separate, shorter schedule.

Your choices and rights

You can ask for access, correction and restriction, and in applicable cases deletion or objection. Some statutory records cannot be deleted immediately. If you cannot use digital or biometric verification, contact the operator for a manual route.