AIaaS Hospitality Platform — UniProc Solutions, S.L. acts as data processor; the client hotel establishment acts as data controller.
The controller of the personal data is the hotel establishment or client entity that uses the AIaaS services provided by UniProc Solutions, S.L. The client determines:
This policy applies to operations carried out by hotel establishments and users located both within and outside the European Union. Where applicable local data protection law applies, including laws in force in Senegal or other international jurisdictions, UniProc Solutions, S.L. will collaborate with the controller to adapt the service and the organizational measures required under the applicable legislation.
UniProc Solutions, S.L. acts as data processor, providing technology services for automation, artificial intelligence, CRM and operational management for the hospitality sector.
UniProc processes the data exclusively in accordance with the client's documented instructions and applicable law.
To provide the service, UniProc may use specialized technology providers acting as sub-processors, including:
| Provider | Function |
|---|---|
| HubSpot Ireland Ltd. | CRM and commercial automation |
| Vercel Inc. | Frontend/backend infrastructure and APIs |
| Amazon Simple Email Service (SES) | Automated sending of communications and emails |
These providers operate under appropriate contractual agreements and reasonable security measures in accordance with applicable law.
The data processed by the AIaaS hospitality platform is used for the following purposes:
The platform does not make automated decisions with legal effects on users. The AIaaS systems used by the platform act as automation and operational assistance tools under human supervision. The platform does not carry out automated profiling or automated decisions with legal or similarly significant effects on guests.
The platform may process exclusively the following categories of data:
UniProc applies the principle of data minimization, limiting the processing to the data strictly necessary to provide the service.
The legal basis for the processing is the explicit consent of the guest, collected by the hotel establishment during the check-in process or equivalent operational interaction. UniProc does not rely on legitimate interest for the purposes described.
Data is captured and processed by means of:
These mechanisms enable operational traceability, flow integrity, automation control and verification of event origin.
| Type of data | Retention |
|---|---|
| Operational and CRM data | 24 months |
| Data linked to tax or accounting obligations | 6 years |
Once these periods have elapsed, the data will be deleted or anonymized where possible.
The technological infrastructure used by UniProc may operate through distributed networks and international cloud infrastructures, including services located both within and outside the European Economic Area.
Some technology providers used by UniProc may operate infrastructures outside the European Economic Area. In such cases, appropriate protection mechanisms will be applied in accordance with the GDPR, including Standard Contractual Clauses (SCC), complementary technical measures, and access and traceability controls.
UniProc applies reasonable technical and organizational measures to ensure information security, including: access control, secure authentication, environment segregation, operation traceability, HMAC validation of backend events, automation monitoring, and technology provider control.
Users may exercise their rights of access, rectification, erasure, objection, restriction and portability by addressing, preferably, the hotel establishment acting as controller. UniProc will collaborate with the controller to handle such requests in accordance with the instructions received.
The client establishment undertakes to:
UniProc may update this policy to adapt it to regulatory changes, technological evolution, new providers or operational improvements of the service. The current version will be available at https://uniprocai.com.
UniProc Solutions, S.L. — Calle Rioja 13, 1C, 41001 Sevilla, Spain.
Email: contact@uniprocai.com · Website: uniprocai.com