BnCheck - Personal Data Protection
Last update: 28/07/2026
Identity: Roberto Carlos Solís García
NIF (Spain): 48761636A
ABN (Australia): 49 279 306 227
Email: info@bncheck.com
Activity: Tourist accommodation management
BnCheck role: BnCheck acts as controller for account, billing, security, support, own communications and website cookie processing.
For guest data that a host enters or collects through digital check-in links to comply with accommodation obligations, the host is normally the controller and BnCheck acts as processor under the Terms of Use and the data processing agreement included there. If a guest exercises rights with BnCheck about a host-managed booking, we may forward the request to the responsible host or assist the host in answering it.
Data protection officer: no formal DPO has been appointed. Privacy requests are handled at info@bncheck.com.
We process your personal data for the following purposes:
BnCheck offers different public subscription plans with different capacities:
Free may appear as an internal account state, an account without an active subscription, or a legacy grace period, but it is not offered as a new public plan.
Personal data processing is carried out in the same way regardless of the contracted plan. Limits affect operational capacity only, not data protection.
We collect the following personal data from guests (all of this data is collected and stored encrypted during processing):
We collect the following host data (application users):
For users who register to test the application, we only collect their email address to manage access to trial versions and send related communications.
If you choose to sign up or log in using your Google account, we receive the following information from Google Ireland Limited:
This data is used exclusively to create and manage your user account in BnCheck and facilitate authentication.
Processing is based, depending on the specific purpose, on:
When a guest completes and submits a traveler report through BnCheck, the guest accepts the Privacy Policy and Terms of Use using the form checkbox. By doing so, the guest confirms being informed that the responsible host and BnCheck, as technical tool or processor, will process their data to manage check-in, comply with legal registration and traveler-reporting requirements, and handle related requests. Processing required for legal obligations does not rely exclusively on consent, but on the legal basis applicable in each case. For other relevant stay-related data disclosed in the listing, guide, or apartment conditions, the guest authorizes the responsible host, and BnCheck where it acts as technical tool or processor, to process that data as necessary to manage the booking, access, stay, operational communications, incidents or related claims.
Where processing is performed on behalf of the host, BnCheck processes data on documented host instructions unless a legal obligation applicable to BnCheck requires otherwise.
Before acceptance by SES Hospedajes: While a communication is pending or has been rejected, guest identification, contact, document and stay data is kept encrypted so that the host can review, correct or retry the submission.
Automatic deletion after submission: When SES Hospedajes confirms that the communication has been accepted, BnCheck automatically deletes the local copy of that guest personal data from its database.
Data retained after submission: BnCheck keeps the minimum booking and official-response metadata needed to evidence and manage the process, such as booking identifier, apartment, dates, status, number of guests, response code and SES batch number. The batch number is an official communication reference and does not contain, within BnCheck, a copy of the deleted personal data.
Unconfirmed bookings: Unconfirmed bookings are ordinarily cleaned once more than 7 days have passed since the exit date (exit_date).
Electronic signature evidence: BnCheck separately retains signature evidence (handwritten trace, timestamp, consent text and version, identity hash, and encrypted IP/User-Agent) for a maximum of 36 months for legal traceability, defence against claims and support to the responsible host. The evidence is deleted when its expiry date is reached.
Retrieval from SES Hospedajes: For up to 3 years after check-out, the responsible host and authorized accounts may request a report query or PDF. BnCheck then uses the retained batch number to obtain the data at that time from the official SES Hospedajes system. Retrieved data is processed temporarily for the requested operation; this retrieval does not mean that BnCheck retained a local history of the guest personal data after the accepted submission.
Host documentary duty: Royal Decree 933/2021 requires certain obliged parties to retain the electronic record for 3 years. BnCheck provides technical tools but does not replace the host's own duty or responsibility for copies downloaded by the host.
Access after completion: Once a report is marked as completed, signature evidence can be viewed in the panel by authenticated users with permission over that booking (primary account and authorized team accounts). The responsible host may also request this evidence from BnCheck subject to prior verification.
Retention: Host data (including API access credentials for the Ministry) is kept while the BnCheck account remains active, in order to provide continued service.
Billing: Editable billing tax details are retained while the account remains active and, after closure, for the periods required for tax, accounting, security or claim-related obligations. Issued invoices keep an immutable tax snapshot and are not changed by later billing-detail updates unless a corrective invoice or equivalent document is required.
Team accounts: Team account data is retained while linked to the primary account or until removed by the primary account.
Temporary retention: Chatbot messages and related technical conversation context may be retained temporarily to preserve continuity (approximately up to 30 minutes per session).
Mandatory communication: Your data will be communicated to the Ministry of the Interior (National Police) in compliance with Royal Decree 933/2021, which regulates communication of guest data in accommodation establishments.
Booking management: The host responsible for the booking will have access to guests' personal data to:
Purpose: This access is carried out within the framework of performance of the accommodation contract and compliance with the establishment's legal obligations.
Team accounts: If the primary account enables Teams, authorized team accounts may access operations for their assigned apartments according to their permissions, while the primary account remains responsible for access governance.
Guest signatures: While a report is pending confirmation, the host can review signatures in read-only mode. After completion, signature evidence can be viewed in the panel by users with authorized access to that booking (primary account and team accounts with permissions). In addition, the responsible host may request signature evidence from BnCheck for management or legal purposes, subject to prior validation.
Traveler report PDF export: The responsible host (and, where applicable, authorized team accounts) may generate and download a PDF copy for up to 3 years after check-out and exclusively for management and legal compliance purposes. For completed reports, BnCheck uses the retained batch number to retrieve the data from the official SES Hospedajes system and generate the document at that time. The host is responsible for safeguarding any downloaded copy.
Main server: Personal data of guests and hosts is stored on servers located in Madrid, Spain, within the European Economic Area (EEA).
Third-party services: The use of certain tools involves transfer of data to providers located outside the EEA:
Safeguards: Where an international transfer occurs, we rely on an applicable adequacy decision, the provider's EU-US Data Privacy Framework certification, Standard Contractual Clauses approved by the European Commission and/or supplementary measures where needed. You may request additional information about these safeguards at info@bncheck.com.
For payment and subscription management, we use specialized external providers:
In compliance with regulations, it is mandatory to identify all minors staying in the establishment. There must always be an adult responsible for the booking who authorizes the processing of the minor’s data.
We implement advanced technical and organizational security measures to guarantee confidentiality and integrity of your data:
You may exercise rights of access, rectification, erasure, objection, restriction of processing and portability where applicable, and withdraw consent for consent-based processing without affecting the lawfulness of prior processing.
Some rights may be limited where processing is necessary to comply with a legal obligation, handle a claim, retain records required by accommodation regulations or protect third-party rights. In those cases we will explain the reason for the limitation.
We will respond within the legal one-month period, extendable where the GDPR allows. If the request concerns data processed on behalf of a host, we may forward it to the responsible host or request instructions from that host.
Contact for inquiries and rights requests:
If you believe the processing of your data is not correct, you may file a complaint with the Spanish Data Protection Agency (AEPD):
Users may request deletion of their account and all associated personal data.
To request deletion of your account, you must contact us by email:
Email: info@bncheck.com
Subject: Account deletion request
Include: Full name and email associated with the account
Important: Account deletion is irreversible. Once deleted, you will not be able to recover your data or access previous bookings.
Contact: Roberto Carlos Solís García
Email: info@bncheck.com
We do not make automated decisions that produce legal effects or similarly significant effects for users or guests. Security, OCR, integrity and support tools may assist information processing, but they do not replace host review where review is necessary.
This platform uses cookies and local storage for proper operation and, only with consent, for analytics or marketing. You can accept, reject or configure optional cookies from the banner and change your choice through the floating cookie button.
These cookies are essential for site operation and cannot be disabled:
localStorage to remember your choice.We use analytics tools to understand how users interact with our platform and improve our services:
_ga and _ga_* with a typical duration of up to 2 years, and other measurement cookies such as _gid or _gat where applicable.If you grant consent, we use Meta Pixel to measure advertising campaign performance on Meta platforms and attribute conversions.
_fbp and _fbc to identify sessions and attribute visits from ads.You can manage your cookie preferences at any time from the cookie button in the lower-left corner of the page, or by configuring your browser to block or delete cookies. If you reject or withdraw a category, BnCheck blocks new events for that category and deletes the _ga*, _fbp and _fbc cookies accessible from the site.
Legal basis: Strictly necessary cookies are exempt from consent because they are required to provide the requested service. Optional cookies are based on your explicit consent and can be rejected without preventing basic site use.
BnCheck offers an optional Chrome extension (“BnCheck Setup Helper”) to facilitate initial account setup by reading, with the user's prior consent, landlord and establishment data visible in their own SES Hospedajes session (hospedajes.ses.mir.es).
sessionStorage, localStorage or session tokens; and it does not change web-services passwords.hospedajes.ses.mir.es only, with no cookies, webRequest or <all_urls> permissions.This privacy policy may be updated. The current version will always be available on our website bncheck.com.