Privacy Policy
Data Controller Information
In compliance with the provisions of Regulation (EU) 2016/679, General Data Protection Regulation (GDPR), Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), Law 34/2002 of 11 July on Information Society Services and Electronic Commerce, and any other applicable regulations, the Controller of the personal data processed on the Website www.madridplazaapartments.com is:
Corporate Name: AUREA QUETZAL, S.L.
Address: Plaza de España, 6 – 5ºD – 28008 Madrid, Spain
Tax Identification Number (N.I.F): B12826087
Telephone: 915 41 10 39
Email: rgpd@aureaquetzal.es
We are committed to protecting the information you provide in order to mitigate risks of unauthorized access, manipulation, loss, destruction, or theft. We apply appropriate security measures as required by applicable law.
Purpose
This Privacy Policy informs you about how we process your personal data. If you do not agree with the terms herein, you may not continue using the website.
Scope of Application
This Policy applies to all website users and to all natural persons whose data are processed by the Controller.
Categories of Personal Data We Collect
We may request identifying data via our contact form, such as full name, address, telephone number, and free-text inquiries. Data from cookies may also be processed as detailed in our Cookies Policy.
Purposes and Legal Bases of Processing
Data collected through the website or during service contracting will be processed confidentially, according to the following:
PURPOSE | LEGITIMACY | DATA RETENTION PERIOD |
Website management and user security. | Legitimate interest (Art. 6.1.f GDPR). | We will preserve your data for the time necessary to fulfill the purposes for which it was collected, for the applicable legal periods, and for the periods necessary to address any potential claims. |
Website navigation and preference‑based cookies. | Legitimate interest and/or consent (Art. 6.1.f and 6.1.a GDPR). | We will preserve your data for the time necessary to fulfill the purposes for which it was collected, for the applicable legal periods, and for the periods necessary to address any potential claims. Preference cookies will be stored until you change your settings. |
Responding to inquiries and managing services. | Consent (Art. 6.1.a GDPR). | We will preserve your data for the time necessary to fulfill the purposes for which it was collected, for the applicable legal periods, and for the periods necessary to address any potential claims. |
Marketing related to previously contracted services. | Legitimate interest in the pre-contractual and post-contractual stages (Art. 6.1.f GDPR). | We will preserve your data for the time necessary to fulfill the purposes for which it was collected, for the applicable legal periods, and for the periods necessary to address any potential claims. |
Marketing of cultural/leisure activities and newsletters. | Consent in case of a stage prior to contracting (Art. 6.1.a GDPR). | We will preserve your data for the time necessary to fulfill the purposes for which it was collected, for the applicable legal periods, and for the periods necessary to address any potential claims. Your data may be deleted if you revoke your consent or request to unsubscribe from communications. |
Management of contracted services, including bookings, solvency assessments, and invoicing. | Performance of a contract or pre-contract (Art. 6.1.b GDPR). When data is not obtained from the data subject, they will be informed in accordance with Art. 14 of the GDPR about the processing as a result of the transfer. | We will preserve your data for the time necessary to fulfill the purposes for which it was collected, for the applicable legal periods, and for the periods necessary to address any potential claims. |
Inclusion in hiring processes (CV submission). | Pre‑contract execution (Art. 6.1.b GDPR). | We will retain your data only for the time necessary to achieve the purposes for which it was collected, in accordance with statutory retention obligations and the limitation periods applicable to potential legal claims. Following the conclusion of the recruitment process, your CV will be stored for a further two years for potential inclusion in future selection procedures consistent with your professional profile. After this period, you may submit an updated CV should you wish to do so. |
Handling complaints and reports. | Legal obligation (Art. 6.1.c GDPR). | We will preserve your data for the time necessary to fulfill the purposes for which it was collected, for the applicable legal periods, and for the periods necessary to address any potential claims. |
Data Not Obtained Directly from the Data Subject
DATA RECEIVED | SOURCE FROM WHICH IT WAS RECEIVED | PURPOSE | LEGITIMACY | DATA RETENTION PERIOD |
Identification, contact, and financial details. | Identification, contact, and financial details. Real estate agencies you have contacted for solvency checks and/or property or premises rentals. You can request the transferor’s tax details by emailing rgpd@aureaquetzal.es | Performing solvency checks and managing bookings and rentals. | Consent granted to the assignor (Art. 6.1.a GDPR) | We will preserve your data for the time necessary to fulfill the purposes for which it was collected, for the applicable legal periods, and for the periods necessary to address any potential claims. |
Data Recipients
No data will be transferred to third parties except to comply with legal obligations or when necessary to defend claims, or when your express consent is obtained.
User Rights
LOPDGDD and the GDPR set out a series of rights for individuals whose personal data is processed. You may exercise all of the rights listed below by sending your request by email as indicated in section 1. The maximum response time is one month from receipt of your request. Please note that we may ask you for additional information to verify your identity before proceeding with your request.
a) Right of Access
The right of access enables the User to know and obtain, free of charge, information regarding their personal data undergoing processing. You may request that we provide you with details of the information we hold about you.
b)Right to Rectification
This right allows for the correction of errors; the modification of data that proves to be inaccurate or incomplete and ensures the accuracy of the information being processed. You must inform us of any changes to your data and are responsible for keeping your information updated.
c) Right to Erasure
The right to erasure allows for the deletion of data that is inadequate or excessive, without prejudice to the obligation to block data as established in LOPDGDD.
d) Right to Object
The right to object allows the User to request that the processing of their personal data not be carried out, or that such processing be ceased for specific purposes. You may object to the processing of your data by specifying the purposes to which you object.
e) Right to Data Portability
The right to portability enables you to request a copy of your personal data in a structured, commonly used, and machine-readable format.
f) Right to Restriction of Processing
When exercising this right, your data may only be processed, except for storage, for the establishment, exercise, or defense of legal claims.
g)Right to Withdraw Consent
You may withdraw your consent at any time where consent is the lawful basis for processing; however, such withdrawal shall not have retroactive effect.
h) Right to Lodge a Complaint with the Supervisory Authority
You may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the exercise of your rights has not been properly addressed.
i) Right Not to Be Subject to Automated Individual Decision-Making
You have the right not to be subject to decisions based solely on automated processing of your data, including profiling, which produce legal effects concerning you or similarly significantly affect you.
j) Unsubscribe from advertising
Whatever the legitimate basis, you may unsubscribe at any time to stop receiving commercial communications.
Security Measures
When processing your personal information, we apply appropriate security measures according to the type of data and technical advances, our physical and legal resources. Our goal is to prevent unauthorized third-party access, theft, loss, or disclosure of your information. However, no environment is completely secure, so even though we apply security measures, the risk of an incident involving your information will never completely disappear. For this reason, we ask if you detect any incident or have any indication that your information may be at risk, you contact us so that we can investigate the matter and offer you solutions.
Amendments to the Privacy Policy
The Company may modify this Privacy Policy in the future. In the event of any changes, in addition to publishing the updated version, we will inform you of such changes via a pop-up window on the website. You must read these changes before continuing to use the website.
Applicable law and jurisdiction
This Policy, as well as the use of the Website, shall be governed by Spanish law. Any dispute shall be resolved before the courts corresponding to the domicile of the Data Controller.
In the event that any provision is unenforceable or void under applicable law or as a result of a judicial or administrative decision, such unenforceability or invalidity shall not render this Policy unenforceable or void. In such cases, the Company shall modify or replace said provision with another that is valid and enforceable and that, as far as possible, achieves the objective and intention reflected in the original provision.