Privacy Policy

1. Data Controller

Alphateam Hackers GmbH Daimlerstr. 34, 69190 Walldorf, Germany Email: contact@alphateamhackers.com

2. Categories of Personal Data Processed

Depending on configuration, Enhanced Rentals may process:

• Guest communication data: reservation messages, emails, hotline calls, and support inquiries.
• Reservation & property data: guest name, stay dates, property identifiers, and booking metadata.
• Operational data: cleaning tasks, maintenance tasks, staff assignments, and automation logs.
• User account data: team emails, names, roles, and login activity.
• Technical data: IP addresses, browser metadata, error logs, and device information.
• Voice data: AI hotline audio provided by the Customer, transcriptions, and derived message content.

3. Purpose & Legal Basis of Processing

We process data for the following purposes:

• Providing the Enhanced Rentals SaaS platform
• Synchronizing reservations with PMS partners
• Automating guest messaging (text + voice)
• Creating cleaning or maintenance tasks
• Routing escalations via Slack or other channels
• Maintaining platform security and performance

Legal bases under the GDPR:

• Art. 6(1)(b) GDPR – performance of a contract
• Art. 6(1)(f) GDPR – legitimate interests in operating a secure SaaS platform
• Art. 6(1)(a) GDPR – consent (e.g., for optional analytics or recordings)

4. Source of Data

Enhanced Rentals receives data directly from Customers or from the systems they connect, such as:

• Hostaway or other PMS systems
• OTA message channels (Airbnb, Booking.com, etc.) via PMS
• Slack workspaces
• Telephony providers (e.g., Twilio, LiveKit)

5. Data Sharing & Sub-Processors

Personal data may be shared with the following categories of subprocessors:

• Cloud hosting providers (e.g., AWS, GCP)
• Database and storage providers
• Telephony and voice routing providers
• Analytics and error monitoring services
• PMS or messaging platforms depending on integrations

A full list of subprocessors can be provided upon request.

6. Data Retention

Data is retained only as long as necessary for service provision or compliance with legal obligations.

Customers may request deletion or export of their data at any time.

7. International Data Transfers

If data is transferred outside the EU/EEA, this is done using standard contractual clauses (SCCs) or equivalent safeguards in accordance with GDPR requirements.

8. Security Measures

Enhanced Rentals implements technical and organizational security measures including encryption, access control, audit logging, monitoring, and secure infrastructure operations.

9. Rights of Data Subjects

Under the GDPR, individuals have the right to:

• Access their personal data
• Rectification of inaccurate data
• Erasure (“right to be forgotten”)
• Restriction of processing
• Data portability
• Object to processing
• Withdraw consent (where applicable)

Requests can be submitted to the contact above.

10. Data Processing Agreement (DPA)

For customers acting as data controllers, a GDPR-compliant Data Processing Agreement is available upon request.

11. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services or legal requirements. Material updates will be communicated to customers.