Data Processing: Employees

Who is responsible for processing your data?

– Identity: MASTERHOME RESIDENCIA S.L.U.

– Tax ID: B87284899

– Postal address: C\ Edgar Neville, 24 bis – 28020 – Madrid

– Phone: 911920092

– Email: info@masterhome.es

What is the purpose of processing your data?

At MASTERHOME RESIDENCIA S.L.U. we process your data in order to manage employment, professional, and service provision relationships.

The processing consists of:

– Proper management of personnel.

– Preparation and payment of employee payrolls.

– Preparation of salary receipts.

– Creation of employment contracts.

– Social security settlements.

– Occupational risk prevention aimed at protecting the safety and health of personnel.

– Management of an employee file with the history of their performance in the organization.

– Other employment procedures necessary for the proper functioning of the company.

Social media management: The data controller may have a presence on social networks. The processing of data from persons who become followers on the official social media pages of the data controller will be governed by this section.

As well as by the terms of use, privacy policies, and access rules that belong to the respective social network and are previously accepted by the data controller user. Your data will be processed to properly manage the presence on the social network, informing about activities, products, or services provided by the data controller.

And for any other purpose permitted by social network regulations. Under no circumstances will follower profiles on social networks be used to send advertising individually.

What categories of data do we process?

All the data we process is basic level. Specifically, we handle the following personal data:

– Identifying data: name, surnames, N.I.F. / D.N.I., postal address, email address, phone number, Social Security number, Mutual insurance number

– Personal characteristics: sex, nationality, date of birth, place of birth, age

– Academic and professional: education, qualifications, student history, professional experience

– Employment details: profession, job positions, non-financial payroll data, employee history

– Economic-financial: bank accounts

Are there automated decisions?

No automated decisions or automatic profiling are made.

How long will we keep your data?

Data used for time control will be kept for 4 years as required by the Workers’ Statute, after which they will be destroyed. The rest of the data will be kept as long as a contractual relationship is maintained.

What is the legal basis for processing your data?

The legal bases for processing personal data are the consent of the data subject, as well as the execution of the employment contract according to the terms and conditions stated in the clauses of the document signed by both parties.

The data subject is not obliged to provide their personal data, but if the required and necessary information is not provided, we will not be able to carry out the employment relationship.

The data subject may revoke consent for the collection and processing of their personal data at any time through the procedure we establish for this purpose, without affecting the lawfulness of processing based on prior consent. Under no circumstances will the withdrawal of consent condition the execution of other purposes.

To which third-party recipients will your data be communicated?

No data will be communicated to third parties, except for legal obligation.

To which data processors will your data be communicated?

To provide strictly necessary services for the development of the activity, MASTERHOME RESIDENCIA S.L.U. shares data with the following service providers:

– Data processor located in Madrid for IT system maintenance service.

– Data processor located in GijĂłn (Asturias) for maintenance service of the GREEN SOFTWARE application.

– Data processor located in Zaragoza for fiscal and accounting advisory service.

– Data processor located in Madrid for labor advisory service.

– Data processor located in Madrid for catering, cafeteria, cleaning, and night reception services.

– Data processor located in Madrid for health surveillance service.

All data processors comply with current data protection regulations.

Are there international transfers of your data?

International data transfers are considered as the transfer of data to data processors, co-controllers, or third-party recipients from countries or international organizations not established in the European Union.

Your personal data may be transferred to the following organizations not established in the European Union:

Service Company Guarantee
Facebook, Inc. – Social network to connect with individuals Account: MasterHomeResidencia Meta Platforms, Inc. (United States) – Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000GnywAAC) and invalidated by the Court of Justice of the European Union (CJEU), however, its certification is maintained to demonstrate compliance with generally accepted privacy principles. – Compliance with Standard Contractual Clauses: https://www.facebook.com/legal/EU_data_transfer_addendum
Twitter – Social network to connect with individuals Account: MasterHomeResi Twitter, Inc. (United States) – Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000TORzAAO) and invalidated by the Court of Justice of the European Union (CJEU), however, its certification is maintained to demonstrate compliance with generally accepted privacy principles. – Compliance with Standard Contractual Clauses: https://gdpr.twitter.com/en/controller-to-controller-transfers.html
Instagram – Social network and app to upload photos and videos Account: masterhomeresidencia Meta Platforms, Inc. (United States) – Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000GnywAAC) and invalidated by the Court of Justice of the European Union (CJEU), however, its certification is maintained to demonstrate compliance with generally accepted privacy principles. – Compliance with Standard Contractual Clauses: https://www.facebook.com/legal/EU_data_transfer_addendum
Youtube – Website dedicated to sharing videos Account: https://www.youtube.com/channel/UC8Wfj60-OrErzUO-awIlWHw Google LLC (United States) – Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt000000001L5AAI) and invalidated by the Court of Justice of the European Union (CJEU), however, its certification is maintained to demonstrate compliance with generally accepted privacy principles. – Compliance with Standard Contractual Clauses: https://policies.google.com/privacy/frameworks?hl=es
WhatsApp – Instant messaging service used as a communication channel Meta Platforms, Inc. (United States) – Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000TSnwAAG) and invalidated by the Court of Justice of the European Union (CJEU), however, its certification is maintained to demonstrate compliance with generally accepted privacy principles. – Compliance with Standard Contractual Clauses: https://www.facebook.com/legal/EU_data_transfer_addendum
Google Drive – Cloud file storage service Google LLC (United States) – Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt000000001L5AAI) and invalidated by the Court of Justice of the European Union (CJEU), however, its certification is maintained to demonstrate compliance with generally accepted privacy principles. – Compliance with Standard Contractual Clauses: https://policies.google.com/privacy/frameworks?hl=es
OneDrive – Cloud file storage service Microsoft Corporation (United States) – Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK) and invalidated by the Court of Justice of the European Union (CJEU), however, its certification is maintained to demonstrate compliance with generally accepted privacy principles. – Compliance with Standard Contractual Clauses: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA

What security measures do we implement to protect your data?

We will always treat the data in an absolutely confidential manner and maintain the corresponding duty of secrecy regarding them, in accordance with applicable regulations, adopting the necessary technical and organizational measures to guarantee the security of your data and prevent their alteration, loss, unauthorized processing or access, considering the state of technology, the nature of the stored data and the risks to which they are exposed.

What are your rights when you provide us with your data?

1) Right of access: you may consult your personal data processed by the organization.

2) Right of rectification: you may modify your personal data when inaccurate.

3) Right to object: you may request that your personal data not be processed.

4) Right of erasure: you may request total or partial deletion of your personal data. This does not mean that your data is totally deleted, but that your data will be kept blocked to prevent processing, without prejudice to their availability to public administrations, judges and courts, to address possible liabilities that have arisen from processing during the statute of limitations. Once this period is exceeded, your data will be duly deleted or anonymized.

5) Right to data portability: you have the right to transfer the data you have provided and those obtained from your contractual relationship to another data controller. This right can only be exercised when processing is based on the execution of a contract or your consent and the processing is carried out by automated means.

6) Right to restriction of processing: you may request the restriction of your data processing in the following cases:

– While verifying the accuracy of your data is disputed

– When the processing is lawful, but you oppose the erasure of your data

– When the organization does not need to process your data, but you need them for the exercise or defense of claims

– When you have objected to the processing of your data for the performance of a task in the public interest or for the satisfaction of a legitimate interest, while it is verified whether the legitimate reasons for the processing prevail over yours.

You may exercise your rights free of charge by proving your identity with a copy of your ID or equivalent document, sending your request by email or postal mail to the contact details of the data controller.

You may also file a complaint with the Data Protection Agency (www.agpd.es).

Accuracy and truthfulness of the data

The data subject or their legal representative is solely responsible for the truthfulness and correctness of the provided data, exempting MASTERHOME RESIDENCIA S.L.U. from any responsibility in this regard.

The data subjects guarantee and respond, in any case, for the accuracy, validity and authenticity of the provided personal data, and commit to keeping them duly updated.

The data subject agrees to provide complete and correct information to the data controller.

Modifications

MASTERHOME RESIDENCIA S.L.U. reserves the right to modify this information to adapt it to legislative changes that may be appropriate or to new data processing that may be carried out in the future. In these cases, the changes introduced will be communicated to interested parties with reasonable advance notice before implementation.