GDPR Compliance

Data Collection

We collect email, name, booking data, and temporarily passport images. All processing has a legal basis (contract performance, legitimate interest).

Storage & Encryption

European servers (German VPS). All data encrypted in transit (SSL/TLS). Database access restricted to application layer.

Automatic Deletion

Passport images auto-purged 24 hours after guest checkout. Booking data retained for tax reporting period then available for deletion on request.

Data Portability

Full CSV export of all your data via Settings. ZIP export of all documents and reports. Available anytime.

Right to Erasure

Contact commercial@operium.store to request complete data deletion. Processed within 30 days.

Sub-Processors

Stripe Inc (payments, US, EU-US DPF certified), Resend Inc (email delivery, US, DPA available).

Data Controller

ONE MARKET LTD, registered in England and Wales, Company #11161336. Contact: commercial@operium.store, WhatsApp: +44 7925 367011.