Privacy Policy

In compliance with the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Organic Law on the Protection of Personal Data and Guarantee of Digital Rights 3/2018 (LOPDGDD), MASTERHOME RESIDENCIA S.L.U., hereinafter the data controller, declares its policy regarding the processing and protection of personal data, which will apply to those persons who voluntarily communicate via email with the data controller, fill out data collection forms, formalize a contractual relationship with the data controller, or use any other service present on the website that implies the communication of data to the data controller or access to the use of the data controller’s services will imply the express acceptance of this policy.

Likewise, these conditions will apply subsidiarily to those others on the same matter established, with special character, and communicated without limitation through registration forms, contracts and/or conditions of particular services, the present policies being complementary to the previous ones in those matters not expressly foreseen and that are not contradicted.

Sending an email to the data controller, or communicating any other personal data to the data controller by any means, involves or implies the free, unequivocal, specific, informed and express consent for the processing of personal data by the data controller, which will be carried out with the purpose of attending the communications received.

MASTERHOME RESIDENCIA S.L.U. informs the website user of the existence of a personal data processing whose characteristics are detailed below:

Who is responsible for processing your data?

– Identity: MASTERHOME RESIDENCIA S.L.U.

– Tax ID (NIF): B87284899

– Postal address: C\ Edgar Neville, 24 bis – 28020 – Madrid

– Phone: 911920092

– Email: info@masterhome.es

 

For what purpose do we process your data?

At MASTERHOME RESIDENCIA S.L.U. we process your data for the purpose of offering accommodation aimed at master’s students, applicants, professionals, and university students.

The processing consists of:

– Management of the contracted service.

– Issuance and sending of sales invoices.

– Management of service payment.

– Preparation of accounting and other obligations necessary to comply with tax regulations.

– Use of telephone, electronic and postal contact methods provided by the client for notification of matters related to the service provided and its administrative management.

 

Social media management: The data controller may have a presence on social media. The processing of data from people who follow the official pages of the data controller on social networks will be governed by this section.

As well as by the terms of use, privacy policies, and access regulations belonging to the corresponding social network, previously accepted by the data controller’s user. Data will be processed to properly administer the presence on the social network, informing about activities, products, or services provided by the data controller.

Also for any other purpose permitted by the social network regulations. In no case will follower profiles on social networks be used to send individual advertising.

 

What categories of data do we process?

All data processed are basic level. Specifically, we handle the following personal data:

– Identifying: name, surname, Tax ID (N.I.F. / D.N.I.), postal address, email address, phone number

– Economic-financial: bank accounts

 

Are there automated decisions?

No automated decisions are made nor are profiles automatically generated.

 

How long will we keep your data?

As long as a commercial relationship is maintained and deletion of data is not requested.

 

What is the legal basis for processing your data?

The legal bases for the processing of personal data are the consent of the data subject or their legal representative, as well as the execution of a contract.

The data subject is not obliged to provide personal data, but if the required and necessary information for processing is not provided, the service cannot be provided.

The data subject may revoke consent for the collection and processing of personal data at any time, through the procedure established for this, without affecting the lawfulness of the processing based on prior consent before its withdrawal. In no case will the withdrawal of consent condition the execution of other purposes.

 

To which third-party recipients will your data be communicated?

Data will not be communicated to third parties except legal obligation.

 

To which data processors will your data be communicated?

To provide strictly necessary services for the development of the activity, MASTERHOME RESIDENCIA S.L.U. shares data with the following service providers:

– Data processor located in Madrid for IT system maintenance service.

– Data processor located in Gijón (Asturias) for maintenance of the GREEN SOFTWARE application.

– Data processor located in Zaragoza for tax and accounting advisory service.

– Data processor located in Madrid for catering, cafeteria, cleaning, and night reception services.

All data processors comply with the current data protection regulations.

 

Are there international transfers of your data?

International data transfers are considered the transfer of data to processors, co-controllers or third-party recipients from countries or international organizations not established in the European Union.

Your personal data may be transferred to the following organizations not established in the European Union:

Service Company Guarantee

Facebook, Inc. – Social network to contact individuals

Account: MasterHomeResidencia

Meta Platforms, Inc.

(United States)

– Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000GnywAAC) invalidated by the Court of Justice of the European Union (CJEU), nevertheless, its certification is maintained to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://www.facebook.com/legal/EU_data_transfer_addendum

Twitter – Social network to contact individuals

Account: MasterHomeResi

Twitter, Inc.

(United States)

– Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000TORzAAO) invalidated by the CJEU, nevertheless, its certification is maintained to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://gdpr.twitter.com/en/controller-to-controller-transfers.html

Instagram – Social network and app to upload photos and videos

Account: masterhomeresidencia

Meta Platforms, Inc.

(United States)

– Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000GnywAAC) invalidated by the CJEU, nevertheless, its certification is maintained to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://www.facebook.com/legal/EU_data_transfer_addendum

Youtube – Website dedicated to sharing videos

Account: https://www.youtube.com/channel/UC8Wfj60-OrErzUO-awIlWHw

Google LLC

(United States)

– Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt000000001L5AAI) invalidated by the CJEU, nevertheless, its certification is maintained to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://policies.google.com/privacy/frameworks?hl=es

Google Drive – Cloud file hosting service

Google LLC

(United States)

– Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt000000001L5AAI) invalidated by the CJEU, nevertheless, its certification is maintained to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://policies.google.com/privacy/frameworks?hl=es

Google Tag Manager – Simplifies insertion of scripts, HTML code and tracking pixels on websites

Google LLC

(United States)

– Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt000000001L5AAI) invalidated by the CJEU, nevertheless, its certification is maintained to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://policies.google.com/privacy/frameworks?hl=es

OneDrive – Cloud file hosting service

Microsoft Corporation

(United States)

– Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK) invalidated by the CJEU, nevertheless, its certification is maintained to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA

OneDrive – Cloud file hosting service

Microsoft Corporation

(United States)

– Participant in Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK) invalidated by the CJEU, nevertheless, its certification is maintained to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA

 

What security measures do we implement to protect your data?

We will treat the data at all times in an absolutely confidential manner, maintaining the corresponding duty of secrecy, in accordance with applicable regulations, adopting the necessary technical and organizational measures to guarantee the security of your data and avoid alteration, loss, unauthorized processing or access, taking into account the state of technology, the nature of the stored data, and the risks to which they are exposed.

 

What are your rights when you provide us with your data?

1) Right of access: you may consult your personal data processed by the organization.

2) Right of rectification: you may modify your personal data when inaccurate.

3) Right to object: you may request that your personal data not be processed.

4) Right of erasure: you may request total or partial deletion of your personal data. This does not mean your data will be completely deleted, but they will be blocked to prevent processing, without prejudice to being made available to public administrations, courts and tribunals to address possible responsibilities arising from the processing during the statute of limitations. Once this period expires, your data will be duly deleted or anonymized.

5) Right to data portability: you have the right to transfer data you have provided and those obtained from your contractual relationship to another data controller. This right can only be exercised when processing is based on contract execution or consent and carried out by automated means.

6) Right to restrict processing: you may request restriction of processing in the following cases:

– While the accuracy of your data is contested

– When processing is lawful but you oppose erasure of your data.

– When the organization does not need to process your data, but you need them for exercising or defending claims.

– When you have objected to data processing, for public interest mission or legitimate interest, while verifying if legitimate reasons prevail over yours.

 

You may exercise your rights free of charge, proving your identity by sending a copy of your ID or equivalent, by email or postal mail to the addresses of the data controller.

You may also file a complaint with the Data Protection Agency (www.agpd.es).

 

Accuracy and truthfulness of data

The data subject or their legal representative is solely responsible for the truthfulness and correctness of the data provided, releasing MASTERHOME RESIDENCIA S.L.U. from any liability in this regard.

Data subjects guarantee and respond for the accuracy, validity, and authenticity of the personal data provided and undertake to keep them duly updated.

The data subject agrees to provide complete and correct information to the data controller.

 

Types of processing

MASTERHOME RESIDENCIA S.L.U. is responsible for the following data processing:

– Clients (www.masterhome.es/RGPD-Clientes)

– Employees (www.masterhome.es/RGPD-Empleados)

– Suppliers (www.masterhome.es/RGPD-Proveedores)

– Video surveillance (www.masterhome.es/RGPD-Videovigilancia)

 

Modifications

MASTERHOME RESIDENCIA S.L.U. reserves the right to modify this information to adapt it to legislative developments or new data processing activities that may be carried out in the future. In such cases, the changes introduced will be communicated to the interested parties with reasonable advance notice before implementation.