Last updated: 26 June 2026
Data Processing Agreement
This Data Processing Agreement (DPA) applies when you use the RG Casas SaaS platform as a manager. It supplements our terms and governs how we process personal data on your behalf in accordance with GDPR Article 28.
Parties
The controller is you as the customer (the manager using the platform). The processor is R-G Invest AS (company no. 937 861 621), Bergen, Norway, which operates the RG Casas platform. For RG Casas's own property management, R-G Invest AS is itself the controller — see the privacy policy.
Purpose and scope
We process personal data solely to provide the platform service: contact details of owners and guests, property and booking data, and guest data required for rentals and SES Hospedajes reporting. We never process the data for our own purposes, and only on your documented instructions.
Sub-processors
We use carefully selected sub-processors: Supabase (database, EU/Frankfurt), Vercel (hosting, EU), Stripe Payments Europe (payments, Ireland), Resend (email, USA — with SCCs) and Anthropic (AI, USA — with SCCs and zero retention; we never send passport or national ID numbers or bank data to AI). Each has its own data processing agreement. We notify you of any change of sub-processors so you may object.
Security
Data is stored encrypted in an EU region with access control, role-based access (RLS) per organisation and encrypted transmission (TLS). Only authorised personnel have access, and data is logically separated between organisations.
Breach notification
In the event of a personal data breach, we notify you without undue delay and no later than 72 hours after becoming aware of it, so that you can meet your obligations to the supervisory authority. See also our internal incident procedure.
Deletion and return
On termination of the agreement, we delete or return all personal data we process on your behalf, at your choice, unless law requires continued storage (e.g. three-year retention of SES Hospedajes guest data under Spanish law).
Audit rights
You are entitled to documentation that we comply with this agreement and to carry out audits, including inspections, of the processing — in practice by us making the necessary documentation available.
Contact
Questions about data processing or a request for a signed DPA? Contact us at hola@rgcasas.com.