Privacy policy

Last updated: 3 November 2026

This policy explains how Chiarapp processes the personal data of people who visit chiarapp.com or contact us. It is governed by Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

1. Data controller

Chiarapp is not required to appoint a data protection officer. For any privacy question, write to the email above.

2. What data we process, why, and on what legal basis

SituationDataPurposeLegal basisRetention
Contact by email, including a request for a getmorex pilotName, email, company or hotel and whatever you include in your messageAnswering your enquiry and, if you ask for a pilot, assessing and arranging it with youLegitimate interest in answering the messages we receive (art. 6.1.f GDPR) and, for the pilot, steps taken at your request before entering into a contract (art. 6.1.b GDPR)As long as needed to resolve the enquiry and up to 1 year afterwards; if a business relationship starts, for as long as it lasts and, if no contract follows, up to 2 years after the last contact
Browsing the websiteIP address and technical browser data in server logsProviding the website, keeping it secure and preventing abuseLegitimate interest in the security and operation of the site (art. 6.1.f GDPR)According to the hosting provider’s retention periods, 30 days at most

The website has no forms, uses no cookies and does not measure visits. We do not use your data for profiling or make automated decisions that affect you. We will not send you newsletters or marketing unrelated to your enquiry unless you give separate consent.

The data you give us must be accurate. If you give us data about other people, such as a colleague at your hotel, you must have told them first.

3. Who we share data with

We do not sell or disclose personal data to third parties unless required by law. To provide the service we use these providers, which process data on Chiarapp’s behalf as processors under a contract that complies with article 28 GDPR:

ProviderServiceLocationTransfer safeguard
Cloudflare, Inc.Website hostingUnited States, with a server network in the European UnionEU-US Data Privacy Framework and standard contractual clauses
Microsoft Ireland Operations LimitedEmailEuropean Union (Spain)EU-US Data Privacy Framework and standard contractual clauses, for any access from the United States

4. Your rights

You can exercise these rights at any time by writing to hello@chiarapp.com and stating which right you are exercising:

We will reply within one month, which may be extended by two further months in complex cases; we will tell you if that happens. If we cannot verify your identity, we may ask you for more information.

If you believe we have not handled your rights properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

5. Security

We apply appropriate technical and organisational measures to protect data, such as an encrypted connection (HTTPS) across the whole website, restricted access to data and the choice of providers with security guarantees.

6. Minors

The website is aimed at hospitality professionals. We do not knowingly collect data from children under 14.

7. Changes to this policy

We may update this policy to reflect changes in the law or in the service. The date of the last update is always shown at the top.

This English version is provided for convenience. If it differs from the Spanish version, the Spanish version prevails.