Privacy Policy

In compliance with the General Data Protection Regulation (EU) 2016/679 ( GDPR) and the Organic Law for the Protection of Personal Data and Guarantee of Digital Rights 3/2018 (LOPDGDD), MASTERHOME RESIDENCIA S.L.U., hereinafter responsible for the treatment, makes clear its policy, regarding the treatment and protection of personal data, which will apply to those people who voluntarily communicate via email with the data controller, fill out data collection forms, formalize a contractual relationship with the data controller or use any other service present on the website that involves the communication of data to the data controller or access to the use of the services of the data controller will imply the express acceptance of this policy.

 

Likewise, these conditions will be of subsidiary application of those others that are established on the same matter, of special nature, and are communicated without limiting character through the registration forms, contracts and/or conditions of the particular services, being the present policies complementary to the previous ones in matters not expressly foreseen and that do not contradict each other.

The sending of an e-mail to the data controller, or the communication to the data controller of any other personal data by any means, entails or implies the provision of free, unequivocal, specific, informed, and explicit consent for the processing of personal data by the data controller, which will be carried out for the purpose of handling the communications received.

 

MASTERHOME RESIDENCIA S.L.U. informs the user of the website about the existence of a personal data processing with the following characteristics:

Who is responsible for the processing of your data?

– Identity: MASTERHOME RESIDENCIA S.L.U.

– NIF: B87284899

– Postal Address: C\ Edgar Neville, 24 bis – 28020 – Madrid

– Telephone: 911920092

– E-mail: info@masterhome.es

 

For what purpose do we process your data?

At MASTERHOME RESIDENCIA S.L.U. we treat your data with the purpose of offering accommodation oriented to master’s degree students, students of competitive examinations, professionals, and university students.

The treatment consists of:

– The management of the contracted service.

– Issuing and sending sales invoices.

– Management of the collection of the services rendered.

– Preparation of accounting and other obligations necessary to comply with tax regulations.

– The use of telephone, electronic and postal means of contact provided by the client for the notification of matters related to the service provided and the administrative management of the service.

 

Management of social networks: The data controller may have a presence in social networks. The processing of data that is carried out of the people who become followers in social networks of the official pages of the controller, will be regulated by this section.

 

As well as by those conditions of use, privacy policies and access regulations that belong to the social network that applies in each case and previously accepted by the user of the data controller. It will treat your data for the purposes of properly managing its presence in the social network, informing of activities, products or services provided by the controller.

As well as for any other purpose that the regulations of social networks allow. In no case will the profiles of followers in social networks be used to send advertising individually.

 

What categories of data do we process?

All the data we process is basic level data. Specifically, we handle the following personal data:

– Identity data: name, surname, N.I.F. / D.N.I., postal address, e-mail address, telephone number.

– Economic-financial: bank accounts

 

Are there automated decisions?

No automated decisions are made, and no profiles are created automatically.

 

How long will we keep your data for?

As long as a commercial relationship is maintained, and the deletion of the data is not requested.

 

What is the legitimacy for the processing of your data?

The legal basis for the processing of personal data is the consent of the data subject or their legal representative, as well as the performance of a contract.

The data subject is not obliged to provide us with personal data, but if he/she does not provide us with the required information necessary for the processing, we will not be able to provide the service.

The data subject may revoke consent to the collection and processing of their personal data at any time, through the procedure we establish for this purpose, without affecting the lawfulness of the processing based on the consent prior to its withdrawal. In no case shall the withdrawal of consent condition the execution of other purposes.

 

To which third party recipients will your data be communicated?

No data will be communicated to third parties, unless required by law.

 

To which data processors will your data be communicated?

To provide services strictly necessary for the development of the activity, MASTERHOME RESIDENCIA S.L.U., shares data with the following service providers:

– Data processor located in Madrid for the maintenance service of computer systems.

– Data processor located in Gijón (Asturias) for the maintenance service of the computer application GREEN SOFTWARE.

– Foreman located in Zaragoza (Spain) for the tax and accounting advice service.

– Data processor located in Madrid for the catering, cafeteria, cleaning, and night reception services.

All data processors comply with current data protection regulations.

 

Are there any international transfers of your data?

International data transfers are considered to be the transfer of data to processors, joint controllers or recipients in third countries or international organizations not established in the European Union.

Your personal data may be transferred to the following organizations not established in the European Union:

 

Servicio Empresa Garantía
Facebook, Inc. – Social network to contact individuals

Account:      MasterHomeResidencia

Meta Platforms, Inc.

(United States)

– Belongs to Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000GnywAAC) and has been invalidated by the Court of Justice of the European Union (CJEU), however, it remains certified to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://www.facebook.com/legal/EU_data_transfer_addendum

Twitter – Social network to contact individuals

Account: MasterHomeResi

Twitter, Inc.

(United States)

– Belongs to Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000TORzAAO) and has been invalidated by the Court of Justice of the European Union (CJEU), however, it remains certified to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://gdpr.twitter.com/en/controller-to-controller-transfers.html

Instagram – Social network and application for uploading photos and videos

Account: masterhomeresidencia

Meta Platforms, Inc.

(United States)

– Belongs to Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000GnywAAC) and has been invalidated by the Court of Justice of the European Union (CJEU), however, it remains certified to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://www.facebook.com/legal/EU_data_transfer_addendum

Youtube – Website dedicated to video sharing

Account: https://www.youtube.com/channel/UC8Wfj60-OrErzUO-awIlWHw

Google LLC

(United States)

– Belongs to Privacy Shield (www.privacyshield.gov/participant?id=a2zt000000001L5AAI) and has been invalidated by the Court of Justice of the European Union (CJEU), however, it remains certified to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://policies.google.com/privacy/frameworks?hl=es

Google drive – Cloud file hosting service Google LLC

(United States)

– Belongs to Privacy Shield (www.privacyshield.gov/participant?id=a2zt000000001L5AAI) and has been invalidated by the Court of Justice of the European Union (CJEU), however, it remains certified to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://policies.google.com/privacy/frameworks?hl=es

Google Tag Manager – Simplifies the insertion of scripts, HTML code and tracking pixels into websites Google LLC

(United States)

– Belongs to Privacy Shield (www.privacyshield.gov/participant?id=a2zt000000001L5AAI) and has been invalidated by the Court of Justice of the European Union (CJEU), however, it remains certified to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://policies.google.com/privacy/frameworks?hl=es

OneDrive – Cloud file hosting service Microsoft Corporation

(United States)

– Belongs to Privacy Shield (www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK) and has been invalidated by the Court of Justice of the European Union (CJEU), however, it remains certified to demonstrate compliance with generally accepted privacy principles.

– Compliance with Standard Contractual Clauses: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA

 

What security measures do we implement to protect your data?

We will always treat the data with absolute confidentiality and keeping the corresponding duty of secrecy with respect to the data, in accordance with the provisions of the applicable regulations, adopting for this purpose the necessary technical and organizational measures to ensure the security of your data and avoid its alteration, loss, unauthorized access or processing, given the state of technology, the nature of the data stored and the risks to which they are exposed.

 

¿ What are your rights when you provide us with your data?

1) Right of access: you may consult your personal data processed by the organization.

2) Right of rectification: you may modify your personal data when they are inaccurate.

3) Right of opposition: you may request for your personal data to no longer be processed.

4) Right of deletion: you may request the total or partial deletion of your personal data. This does not mean that your data will be completely deleted, but that your data will be kept blocked in such a way as to prevent its processing, without prejudice to making them available to public administrations, judges, and courts, for the attention of possible liabilities that may have arisen from the processing during their statute of limitations period. Once this period expires, your data will be duly deleted or anonymized.

5) Right to data portability: you have the right to transfer the data you have provided to us and those obtained from your contractual relationship to another data controller. It is only possible to exercise this right when the processing is based on the performance of a contract or on your consent, and the processing is carried out by automated means.

6) Right to limitation of the processing: you may request the limitation of the processing of your data in the following cases:

– While checking the contestation of the accuracy of your data.

– When the processing is lawful, but you object to the deletion of your data.

– When the organization does not need to process your data, but you need it for the exercise or defense of claims.

– When you have objected to the processing of your data, for the fulfilment of a mission in the public interest or for the satisfaction of a legitimate interest, while verifying whether the legitimate grounds for the processing outweigh yours.

 

You may exercise your rights free of charge by proving your identity with a copy of your ID card or equivalent document, by sending us your request via e-mail or post to the details given in the section on the data controller’s details.

However, you may file a complaint with the Data Protection Agency (www.agpd.es)

 

Accuracy and veracity of the data

The owner of the data or his/her legal representative, is the only person responsible for the veracity and correctness of the data provided, exempting MASTERHOME RESIDENCIA S.L.U., from any responsibility in this regard.

The owners of the data guarantee and are responsible, in any case, for the accuracy, validity and authenticity of the personal data provided, and commit themselves to keep them duly updated.

The owner of the data agrees to provide complete and correct information to the data controller.

 

Types of treatment

MASTERHOME RESIDENCIA S.L.U. is responsible for the following data processing:

– Clients (www.masterhome.es/RGPD-Clientes)

– Employees (www.masterhome.es/RGPD-Empleados)

– Suppliers (www.masterhome.es/RGPD-Proveedores)

– Video surveillance (www.masterhome.es/RGPD-Videovigilancia)

 

Modifications

MASTERHOME RESIDENCIA S.L.U. reserves the right to modify the present information in order to adapt it to the new legislations that may be applicable or to the new data processing that may be carried out in the future. In these cases, the interested parties will be informed of the changes introduced with reasonable notice prior to its implementation.

 

 

[Updated January 18th 2022]