PRIVACY POLICY

The Privacy Policy forms part of the General Conditions governing this website.

DETAILS OF THE CONTROLLER:

Responsible for processing: NIOMER VILAMARINA - CENTRO COMERCIAL VILAMARINA

Address: Paseo de la Castellana, nº 216, 28046-Madrid

VAT NO: B-75249409

You can contact us in any way through the following email address: vilamarina.clientes@ccvilamarina.com

We reserve the right to modify or adapt this Privacy Policy at any time. We encourage you to review it.

PURPOSES OF THE PROCESSING CARRIED OUT BY THE PROPERTY:

If you are one of the following groups, please see the information below:

  1. a) Data Collected through the website

Purpose: Respond to requests for information and contact sent via e-mails and contact forms on the website.

Conservation: The personal data of the data subject shall be kept for the duration of the relations between the parties and, once these relations have ended, shall be duly blocked for the limitation periods arising therefrom.

Legitimation: The existence of a contractual relationship between the parties.

Target group: The communication of personal data is not envisaged except in the cases established by a legal obligation.

Ways of Obtaining: The personal data we process has been obtained from the data subject.

The categories of data processed are as follows:

- Identification data

- Contact details

  1. b) Lease Contracts

Purpose: Management and execution of leasing contracts for business premises and common areas.

Conservation: The data will be kept for the duration of the lease contract and for fifteen years thereafter in accordance with the statute of limitations established in the Urban Leases Act.

Legitimation: Execution of the lease contract between both parties

Target group: The communication of personal data is not envisaged except in the cases established by a legal obligation.

Ways of Obtaining: The personal data we process have been obtained from the data subject or the legal representative of the lessee.

The categories of data processed are as follows:

- Identification data

- Contact details

- Income and bank details.

  1. c) Suggestions and Complaints

Purpose:  The data provided through the suggestions or complaints forms will be processed for the management of the suggestion or complaint made by the interested party.

Conservation: The data will be kept for the legally established periods, unless such data are necessary to deal with a claim or exercise of rights, in which case they will be kept until the end of such claim or exercise of rights.

Legitimation: The legitimacy of the processing is based on the satisfaction of the legitimate interest of the Data Controller, consisting of the response and improvement of the satisfaction of the users of the centre who make their complaints.

With regard to claims involving personal or financial damage, the legitimacy for processing is based on the fulfilment of a legal obligation (art. 1902 of the Civil Code) and Law 50/1980 on Insurance Contracts.

Target group: The data obtained from complaints and suggestions will not be communicated to third parties except in the cases expressly provided for by current legislation.

The data obtained from claims will be communicated to the insurance companies and insurance brokers necessary for the processing of the claim, as well as in all other cases established by a legal obligation.

Ways of Obtaining: The personal data that we process has been obtained from the data subject.

The categories of data processed are as follows:

- Identification data

- Contact details

- Details of the complaint or claim

- Personal injuries suffered (only for personal injury claims)

  1. d) Events, competitions, offers or promotions

Purpose: The personal data collected through the forms for participation in events, competitions or promotions will be processed for the purpose of managing the participation of the interested party in the same.

Likewise, if you give us your consent, we will use the data provided to send you information by post and/or e-mail about the activities, offers and promotions of the property or the businesses located there.

Conservation: Personal data for the sending of information will be kept until the interested party requests its deletion. The rest of the information will be kept for the legally established periods.

Legitimation: The legitimacy of the processing is based on the existence of a contractual relationship and on the consent of the data subject provided during the data collection process.

Target group: No data will be passed on to third parties unless legally obliged to do so.

Ways of Obtaining: The personal data that we process has been obtained from the data subject.

The categories of data processed are as follows:

- Identification and contact details

  1. e) Video surveillance

Purpose: the personal data collected by our video surveillance system will be processed for the purpose of preserving the security of the premises, property and persons on the property.

Conservation: The data subject's personal data will be kept for a maximum period of 1 month, unless such data are necessary to deal with a complaint or exercise of rights, in which case they will be kept until the end of the complaint or exercise of rights.

Legitimation: The legitimacy of the processing is based on the public interest of the controller (protection of premises, property, goods and persons).

Target group: In the event of the commission of criminal acts, the images obtained will be communicated to the state security forces and bodies. Apart from these cases, data will not be transferred to third parties unless legally obliged to do so.

Ways of Obtaining:

The personal data processed were obtained from the data subject through the video surveillance system.

The categories of data processed are as follows:

- Images

  1. (f) Employee Identity Card

Purpose: Property management and access control

Conservation: The data will be kept until the employee leaves the company, and in any case for the legally stipulated periods of time.

Legitimation: Legitimate Interest

Target group: The communication of data to third parties is not foreseen, except in the case of compliance with a legal obligation.

  1. g) Car park users

Purpose: We will process your personal data for the purpose of managing the car park service.

Conservation: The data will be kept until you unsubscribe or within a maximum period of 1 month.

Legitimation: Execution of the contract for the provision of the services requested by the interested party.

Target group: The communication of personal data is not envisaged except in the cases established by a legal obligation.

Ways of Obtaining: The personal data that we process has been obtained from the data subject.

The categories of data processed are as follows:

- Vehicle data

- Subscriber identification data

  1. h) Newsletter subscribers:

Purpose:

Send you information of your interest about activities, offers and promotions of the property or the businesses located there.

Conservation: The personal data of the data subject shall be retained until the data subject requests deletion.

Legitimation: Stakeholder Consent

Target group: The communication of personal data is not envisaged except in the cases established by a legal obligation.

Ways of Obtaining: The personal data we process has been obtained from the data subject.

The categories of data processed are as follows:

- Identification data

- Contact details

 

SECURITY MEASURES APPLIED ON THE PROPERTY:

You can rest assured: We have adopted an optimal level of protection for the Personal Data we handle, and we have installed all the technical means and measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorised access and theft of Personal Data.

RECIPIENTS TO WHOM WE DISCLOSE THE DATA:

Your data will not be passed on to third parties, unless legally obliged to do so. Specifically, they will be communicated to the State Agency for Tax Administration and to banks and financial institutions for the collection of the service provided or product purchased, as well as to the data processors necessary for the execution of the agreement.

In case of purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or processed in its environment, always with maximum security.

When ordered by us, the web development and maintenance, web hosting/hosting company will have access to our website. They will have signed a service contract that obliges them to maintain the same level of privacy as we do.

Any international transfer of data when using American applications will adhere to the Privacy Shield agreement, which ensures that American software companies comply with European data protection policies on privacy.

RIGHTS OF INTERESTED PARTIES:

  • To know whether we are processing your data or not.
  • To access your personal data.
  • To request the rectification of your data if it is inaccurate.
  • To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
  • To request the limitation of the processing of your data, in certain cases, in which case we will only keep them in accordance with the regulations in force.
  • To submit your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send them to the new person in charge that you designate. This is only valid in certain cases.
  • To file a complaint with the Spanish Data Protection Agency or competent supervisory authority if you believe that we have not dealt with you correctly.
  • To withdraw consent to any processing for which you have consented, at any time.

If you change any data, please let us know so that we can keep them up to date.

FORM FOR THE EXERCISE OF RIGHTS:

  • We have forms for the exercise of your rights, ask us for them by email or if you prefer, you can use the forms prepared by the Spanish Data Protection Agency or third parties.
  • These forms must be electronically signed.
  • If you are represented by someone, it must be electronically signed.
  • The forms can be submitted in person, sent by letter or by mail to the address of the Responsible at the beginning of this text.

RESPONSE PERIOD FOR THE EXERCISE OF RIGHTS:

It depends on the law, but at the most within one month from your request, and two months if the issue is very complex and we notify you that we need more time.

TREATMENT OF COOKIES:

If we use other types of cookies that are not necessary, you can consult the cookie policy in the corresponding link at the top of our website.

 

en_GBEnglish
es_ESSpanish caCatalan en_GBEnglish