PRIVACY POLICY

The Privacy Policy forms part of the General Conditions governing this website. 

DETAILS OF THE CONTROLLER:

Responsible for processing: NIOMER VILAMARINA - CENTRO COMERCIAL VILAMARINA

Address: Paseo de la Castellana, nº 216, 28046-Madrid

VAT NO: B-75249409

You can contact us in any way through the following email address: vilamarina.clientes@ccvilamarina.com

We reserve the right to modify or adapt this Privacy Policy at any time. We encourage you to review it.

PURPOSES OF THE PROCESSING CARRIED OUT BY THE PROPERTY:

If you are one of the following groups, please see the information below:

1. a) Data Collected through the website

Purpose: Respond to requests for information and contact sent via e-mails and contact forms on the website.

Conservation: The personal data of the data subject shall be kept for the duration of the relations between the parties and, once these relations have ended, shall be duly blocked for the limitation periods arising therefrom.

Legitimation: The existence of a contractual relationship between the parties.

Target group: The communication of personal data is not envisaged except in the cases established by a legal obligation.

Ways of Obtaining: The personal data we process has been obtained from the data subject.

The categories of data processed are as follows:

- Identification data

- Contact details 

1. b) Lease Contracts

Purpose: Management and execution of leasing contracts for business premises and common areas.

Conservation: The data will be kept for the duration of the lease contract and for fifteen years thereafter in accordance with the statute of limitations established in the Urban Leases Act.

Legitimation: Execution of the lease contract between both parties

Target group: The communication of personal data is not envisaged except in the cases established by a legal obligation.

Ways of Obtaining: The personal data we process have been obtained from the data subject or the legal representative of the lessee.

The categories of data processed are as follows:

- Identification data

- Contact details

- Income and bank details.

1. c) Suggestions and Complaints

Purpose:  The data provided through the suggestions or complaints forms will be processed for the management of the suggestion or complaint made by the interested party.

Conservation: The data will be kept for the legally established periods, unless such data are necessary to deal with a claim or exercise of rights, in which case they will be kept until the end of such claim or exercise of rights.

Legitimation: The legitimacy of the processing is based on the satisfaction of the legitimate interest of the Data Controller, consisting of the response and improvement of the satisfaction of the users of the centre who make their complaints.

With regard to claims involving personal or financial damage, the legitimacy for processing is based on the fulfilment of a legal obligation (art. 1902 of the Civil Code) and Law 50/1980 on Insurance Contracts.

Target group: The data obtained from complaints and suggestions will not be communicated to third parties except in the cases expressly provided for by current legislation.

The data obtained from claims will be communicated to the insurance companies and insurance brokers necessary for the processing of the claim, as well as in all other cases established by a legal obligation.

Ways of Obtaining: The personal data that we process has been obtained from the data subject.

The categories of data processed are as follows:

- Identification data

- Contact details

- Details of the complaint or claim

- Personal injuries suffered (only for personal injury claims) 

1. d) Events, competitions, offers or promotions

Purpose: The personal data collected through the forms for participation in events, competitions or promotions will be processed for the purpose of managing the participation of the interested party in the same.

Likewise, if you give us your consent, we will use the data provided to send you information by post and/or e-mail about the activities, offers and promotions of the property or the businesses located there.

Conservation: Personal data for the sending of information will be kept until the interested party requests its deletion. The rest of the information will be kept for the legally established periods.

Legitimation: The legitimacy of the processing is based on the existence of a contractual relationship and on the consent of the data subject provided during the data collection process.

Target group: No data will be passed on to third parties unless legally obliged to do so.

Ways of Obtaining: The personal data that we process has been obtained from the data subject.

The categories of data processed are as follows:

- Identification and contact details 

1. e) Video surveillance

Purpose: the personal data collected by our video surveillance system will be processed for the purpose of preserving the security of the premises, property and persons on the property.

Conservation: The data subject's personal data will be kept for a maximum period of 1 month, unless such data are necessary to deal with a complaint or exercise of rights, in which case they will be kept until the end of the complaint or exercise of rights.

Legitimation: The legitimacy of the processing is based on the public interest of the controller (protection of premises, property, goods and persons).

Target group: In the event of the commission of criminal acts, the images obtained will be communicated to the state security forces and bodies. Apart from these cases, data will not be transferred to third parties unless legally obliged to do so.

Ways of Obtaining:

The personal data processed were obtained from the data subject through the video surveillance system.

The categories of data processed are as follows:

- Images 

1. (f) Employee Identity Card

Purpose: Property management and access control

Conservation: The data will be kept until the employee leaves the company, and in any case for the legally stipulated periods of time.

Legitimation: Legitimate Interest

Target group: The communication of data to third parties is not foreseen, except in the case of compliance with a legal obligation.

1. g) Car park users

Purpose: We will process your personal data for the purpose of managing the car park service.

Conservation: The data will be kept until you unsubscribe or within a maximum period of 1 month.

Legitimation: Execution of the contract for the provision of the services requested by the interested party.

Target group: The communication of personal data is not envisaged except in the cases established by a legal obligation.

Ways of Obtaining: The personal data that we process has been obtained from the data subject.

The categories of data processed are as follows:

- Vehicle data

- Subscriber identification data

1. h) Newsletter subscribers:

Purpose:

Send you information of your interest about activities, offers and promotions of the property or the businesses located there. 

Conservation: The personal data of the data subject shall be retained until the data subject requests deletion.

Legitimation: Stakeholder Consent

Target group: The communication of personal data is not envisaged except in the cases established by a legal obligation.

Ways of Obtaining: The personal data we process has been obtained from the data subject.

The categories of data processed are as follows:

- Identification data

- Contact details 

SECURITY MEASURES APPLIED ON THE PROPERTY:

You can rest assured: We have adopted an optimal level of protection for the Personal Data we handle, and we have installed all the technical means and measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorised access and theft of Personal Data.

RECIPIENTS TO WHOM WE DISCLOSE THE DATA:

Your data will not be passed on to third parties, unless legally obliged to do so. Specifically, they will be communicated to the State Agency for Tax Administration and to banks and financial institutions for the collection of the service provided or product purchased, as well as to the data processors necessary for the execution of the agreement.

In case of purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed in its environment, always with maximum security.

When ordered by us, the web development and maintenance, web hosting/hosting company will have access to our website. They will have signed a service contract that obliges them to maintain the same level of privacy as we do.

Any international transfer of data when using American applications will adhere to the Privacy Shield agreement, which ensures that American software companies comply with European data protection policies on privacy.

RIGHTS OF INTERESTED PARTIES:

• To know whether we are processing your data or not.
• To access your personal data.
• To request the rectification of your data if it is inaccurate.
• To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
• To request the limitation of the processing of your data, in certain cases, in which case we will only keep them in accordance with the regulations in force.
• To submit your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new person in charge that you designate. This is only valid in certain cases.
• To file a complaint with the Spanish Data Protection Agency or competent supervisory authority if you believe that we have not dealt with you correctly.
• To withdraw consent to any processing for which you have consented, at any time.

If you change any data, please let us know so that we can keep them up to date.

FORM FOR THE EXERCISE OF RIGHTS:

• We have forms for the exercise of your rights, ask us for them by email or if you prefer, you can use the forms prepared by the Spanish Data Protection Agency or third parties.
• These forms must be electronically signed.
• If you are represented by someone, it must be electronically signed.
• The forms can be submitted in person, sent by letter or by mail to the address of the Responsible at the beginning of this text.

RESPONSE PERIOD FOR THE EXERCISE OF RIGHTS:

It depends on the law, but at the most within one month from your request, and two months if the issue is very complex and we notify you that we need more time.

TREATMENT OF COOKIES:

If we use other types of cookies that are not necessary, you can consult the cookie policy in the corresponding link at the top of our website.

The Privacy Policy forms part of the General Conditions that govern this website.

 DADES DEL RESPONSABLE DEL TRACTAMENT:

Responsible for the treatment: NIOMER VILAMARINA - CENTRE COMERCIAL VILAMARINA

Domicili: Passeig de la Castellana, núm. 216, 28046-Madrid

VAT NO: B-75249409

You can contact us in any way to communicate with us through the following email address: vilamarina.clientes@ccvilamarina.com

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it.

PURPOSES OF THE TREATMENT CARRIED OUT BY THE OWNER:

If you are one of the following groups, see the information below:

1. a) Data collected through the website

Finalitat: Answering requests for information and contacts sent through the e-mail addresses and contact forms on the website..

Conservació: The personal data of the interested party will be kept for the duration of the relationship between the parties and, once it has ended, will be duly blocked for the duration of the statute of limitations deriving from it.

Legitimacy: The existence of a contractual relationship between the parties.

Addressees: The communication of personal data is not foreseen except in the cases established by a legal obligation.

Formes d'Obtenció: The personal data we process have been obtained from the interested party.

The categories of data processed are as follows:

- Identification data

- Contact details

1. b) Lease contracts

Finalitat: Management and execution of leasing contracts for business premises and common areas..

Conservació: The data will be kept for the duration of the lease contract and the following fifteen years according to the statute of limitations established in the Urban Lease Law..

Legitimacy: Execució del contracte d'arrendament subscrit entre totes dues parts.

Addressees: The communication of personal data is not foreseen except in the cases established by a legal obligation.

Formes d'Obtenció: The personal data we process have been obtained from the interested party or the legal representative of the lessee.

The categories of data processed are as follows:
- Identification data

- Contact details

- Income and banking data.

1. c) Suggestions and Complaints

Finalitat: The data provided through the suggestion or complaint forms will be processed for the management of the suggestion or complaint made by the interested party.

Conservació: The data will be kept for the legally established periods, unless these data are necessary to make a claim or exercise rights, in which case they will be kept until the end of the claim or exercise of rights.

Legitimacy: The legitimacy of the processing is based on the satisfaction of a legitimate interest of the Data Controller, consisting of the response and improvement of the satisfaction of the users of the centre who make their complaints. With respect to claims involving any type of personal or financial harm, the legitimacy for the processing is based on the fulfilment of a legal obligation (art. 1902 of the Civil Code) and Law 50/1980 of the Insurance Contract.

Addressees: The data obtained from complaints and suggestions will not be communicated to third parties except in the cases expressly provided for in current legislation.
The data obtained from claims will be communicated to the insurance companies and brokers necessary for the processing of the claim, as well as in the rest of the cases established by a legal obligation.

Formes d'Obtenció: The personal data we process have been obtained from the interested party.

The categories of data processed are as follows:

- Identification data

- Contact details

- Data relating to the complaint or claim

- Personal damages (only in claims with personal damages)

1. d) Events, competitions, offers or promotions

Finalitat: The personal data collected through the forms for participation in events, competitions or promotions will be processed for the purpose of managing the participation of the interested party in these events, competitions or promotions.
Similarly, if you give us your consent, we will use the data provided to send you information by post and/or e-mail about the activities, offers and promotions of the property or the businesses located there.

Conservació: Personal data for sending information will be kept until the interested party requests its deletion. The rest of the information will be kept for the legally established periods.

Legitimacy: The legitimacy of the processing is based on the existence of a contractual relationship and on the consent of the interested party provided during the process of collecting their data.

Addressees: No data will be transferred to third parties except under legal obligation..

Formes d'Obtenció: The personal data we process have been obtained from the interested party.

The categories of data processed are as follows:

- Identification and contact details

1. e) Video surveillance

Finalitat: the personal data collected by our video surveillance system will be treated with the aim of preserving the security of the facilities, goods and people of the property.

Conservació: The personal data of the interested party will be kept for a maximum period of 1 month, unless these data are necessary to make a claim or exercise of rights and in this case they will be kept until the end of the claim or exercise of rights.

Legitimacy: The legitimacy of the processing is based on the public interest of the person responsible for the processing (protection of facilities, property and persons of the owner).

Addressees: In the event of the commission of criminal offences, the images obtained will be communicated to the state security forces and bodies. In such cases, data will not be disclosed to third parties except where legally obliged to do so..

Formes d'Obtenció:

The personal data processed will be obtained from the interested party through the video surveillance system.

The categories of data processed are as follows:

- Images 

1. f) Employee Identification Card

Finalitat: Ownership management and access control.

Conservació: The data will be kept until the employee leaves the company, and in any case for the legally stipulated period of time.

Legitimacy: Legitimate Interest

Addressees: The communication of data to third parties is not foreseen, except in the case of compliance with a legal obligation.

1. g) Parking users

Finalitat: We will process your personal data for the purpose of managing the parking service.

Conservació: The data will be kept until you leave as a user or within a maximum period of 1 month.

Legitimacy: Execució del contracte de prestació dels serveis sol-licitats per l'interessat.

Addressees: The communication of personal data is not foreseen except in the cases established by a legal obligation..

Formes d'Obtenció: The personal data we process have been obtained from the interested party.

The categories of data processed are as follows:

- Vehicle data

- Subscriber identification data

1. h) Subscribers for the sending of newsletters:

Finalitat: Send you information of your interest about activities, offers and promotions of the property or the businesses located in this area..

Conservació: The personal data of the interested party will be kept until the deletion is requested by the interested party.

Legitimacy: Consent of the Interested Party

Addressees: The communication of personal data is not foreseen except in the cases established by a legal obligation.

Formes d'Obtenció: The personal data we process have been obtained from the interested party.

The categories of data processed are as follows:

- Identification data

- Contact details

SECURITY MEASURES APPLIED IN THE PROPERTY:

You can rest assured: We have adopted an optimum level of protection for the Personal Data we handle, and we have installed all the means and technical measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorised access and theft of Personal Data.

 ADDRESSEES TO WHOM WE COMMUNICATE THE DATA:

Your data will not be disclosed to third parties, unless legally obliged to do so. Specifically, they will be communicated to the State Tax Administration Agency and to banks and financial institutions for the collection of the service provided or product purchased, as well as to those responsible for the processing necessary for the execution of the agreement.

In case of purchase or payment, if you try any application, web, platform, bank card, or any other online service, your data will be transferred to this platform or will be processed in its environment, always with maximum security. When we order it, the web development and maintenance company, web hosting/hosting, will have access to our website. They will have signed a service contract that obliges them to maintain the same level of privacy as we do. Any international transfer of data using American applications will be subject to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies in terms of privacy.

DRETS DELS INTERESSATS:

• To know if we are processing your data or not.
• To access your personal data.
• To request the rectification of your data if they are inaccurate.
• To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
• To request the limitation of the processing of their data, in some cases, and in this case we will keep them in accordance with current legislation.
• You can send your data, which will be provided to you in a structured format, for common use or machine-readable. If you prefer, we can send them to the new person in charge that you designate. This is only valid in certain cases.
• To file a complaint with the Spanish Data Protection Agency or competent supervisory authority if you believe that we have not dealt with you correctly.
• To revoke consent for any treatment to which you have consented, at any time.

If you modify any data, please let us know so that we can keep them updated.

FORM FOR THE EXERCISE OF RIGHTS:

• We have forms for exercising your rights. You can request them by email or, if you prefer, you can use the forms prepared by the Spanish Data Protection Agency or third parties.
• These forms must be signed electronically.
• If you are represented by someone, it must be signed electronically.
• Forms can be submitted in person, by letter or by mail to the address of the person in charge at the beginning of this text.

RESPONSE PERIOD FOR THE EXERCISE OF RIGHTS:

It depends on the law, but at most one month from the date of your application, and two months if the matter is very complex and we notify you that we need more time.

TRACTAMENT DE COOKIES:

If we use other types of cookies that are not necessary, you can consult the cookies policy on the corresponding link at the beginning of our website.