1. Data controller
EmaHome S.à r.l., registered in Luxembourg, is the data controller for all personal data processed via the EmaHome marketplace. Contact: privacy@emahome.eu.
2. What we collect
- Identity: name, email, phone, profile photo.
- Booking data: reservation history, dates, guests, payments.
- Usage: device, IP (hashed), pages visited, cookie preferences.
- Hosts: address, banking details (for payouts), property media.
3. Legal basis (Art. 6 GDPR)
Contract performance (bookings, payouts), legal obligation (DAC7 tax reporting, DSA content moderation), legitimate interest (fraud prevention, security) and consent (marketing, optional cookies).
4. Your rights
You may at any time access, rectify, delete, port your data, restrict or object to processing, and withdraw consent. Email privacy@emahome.eu — we respond within 30 days. You can also file a complaint with the CNPD (Luxembourg DPA).
5. Retention
Account data: until deletion + 30 days backup window. Booking & invoice data: 10 years (Luxembourg accounting law). Audit logs: 12 months. Marketing data: 24 months from last interaction.
6. Transfers
Data is hosted in the EU. Any transfer outside the EEA uses EU Standard Contractual Clauses.
7. Security
TLS encryption in transit, AES-256 at rest, role-based access, audit logs, MFA for staff, regular penetration testing.