POLÍTICA DE PRIVACIDAD

The Privacy Policy forms part of the General Conditions governing this website.

DETAILS OF THE DATA CONTROLLER:

Responsible for the treatment: NIOMER VILAMARINA – SHOPPING CENTRE VILAMARINA

Address: Paseo de la Castellana, nº 216, 28046-Madrid

CIF: B-75249409

You can contact us by sending an email to the following address: vilamarina.clientes@ccvilamarina.com

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it.

PURPOSES OF THE PROCESSING CARRIED OUT BY THE PROPERTY:

If you are one of the following groups, please consult the drop-down information:

1. a) Data collected through the website

Purpose: To answer requests for information and contact sent through e-mails and contact forms on the website.

Retention: The personal data of the interested party will be kept for the duration of the relations between the parties and once terminated, duly blocked during the statute of limitations derived from the same.

Legitimation: The existence of a contractual relationship between the parties.

Recipients: The communication of personal data is not foreseen except in the cases established by a legal obligation.

Ways of Obtaining: The personal data we process has been obtained from the data subject.

The categories of data processed are as follows:

– Identification data

– Contact data

 

1. b) Lease Contracts

Purpose: Management and execution of lease contracts for business units and common spaces

Conservation: The data will be kept for the duration of the lease contract and the fifteen years thereafter in accordance with the statute of limitations established in the Urban Leases Act.

Legitimation: Execution of the lease contract signed between both parties

Recipients: The communication of personal data is not foreseen except in the cases established by a legal obligation.

Ways of Obtaining: The personal data we process have been obtained from the interested party itself or the person legally responsible for the tenant entity

The categories of data processed are as follows:

– Identification data

– Contact data

– Income and bank details.

 

1. c) Suggestions and Complaints

Purpose: The data provided through the suggestions or complaints forms will be processed for the management of the suggestion or complaint made by the interested party.

Retention: The data will be kept for the legally established periods, unless such data are necessary to deal with a claim or exercise of rights in which case they will be kept until the end of the same.

Legitimation: The legitimacy of the processing is based on the satisfaction of legitimate interest by the Data Controller, consisting of responding to and improving the satisfaction of the users of the centre who make complaints.

With regards to complaints involving some kind of personal or financial damage, the legitimacy for processing is based on compliance with a legal obligation (art. 1902 of the Civil Code) and Law 50/1980 on Insurance Contracts

Destinatarios: Los datos obtenidos de quejas y sugerencias no serán comunicados a terceros salvo en los supuestos expresamente contemplados por la legislación vigente.

Los datos obtenidos de reclamaciones serán comunicados a las compañías y corredurías de seguros necesarias para la tramitación de la reclamación, así como en el resto de los supuestos establecidos por una obligación legal

Recipients: Data obtained from complaints and suggestions will not be communicated to third parties except in the cases expressly provided for by current legislation.

The data obtained from claims will be communicated to the insurance companies and brokers necessary for the processing of the claim, as well as in the rest of the cases established by legal obligation

Forms of Obtaining: The personal data we process have been obtained from the data subject himself/herself.

The categories of data processed are as follows:

– Identification data

– Contact data

– Data relating to the complaint or claim

– Personal damages suffered (only in the case of claims involving personal damages).

 

1. d) Events, competitions, offers or promotions

Purpose: The personal data collected through the forms for participation in events, competitions or promotions will be processed for the purpose of managing the participation of the interested party in them.

Likewise, if you provide us with your consent, we will use the data provided, for the purpose of sending you information by post and/or e-mail about the activities, offers and promotions of the property or the businesses installed therein.

Conservation: Personal data for the sending of information will be retained until such time as the interested party does not request deletion. The rest of the information will be kept for the legally established periods.

Legitimation: The legitimacy of the processing is based on the existence of a contractual relationship and on the consent of the data subject provided during the data collection process.

Recipients: No data will be transferred to third parties unless legally obliged to do so

Forms of Obtaining: The personal data we process have been obtained from the data subject himself/herself

The categories of data processed are as follows:

– Identification and contact data

1. e) Video surveillance

Purpose: the personal data collected by our video surveillance system will be processed for the purpose of preserving the security of the property’s installations, goods and persons.

Retention: The data subject’s personal data will be kept for a maximum period of 1 month, unless such data is necessary to deal with a claim or exercise of rights in which case it will be kept until the end of the claim or exercise of rights in which case it will be kept until the end of the claim or exercise of rights.

Legitimation: The legitimacy of the processing is based on the public interest of the controller (protection of property facilities, goods and persons).

Addressees: In the event of the commission of criminal offences, the images obtained will be communicated to the state security forces and bodies. Outside of these cases, data will not be transferred to third parties unless legally obliged to do so.

Forms of Obtaining: The personal data processed were obtained from the data subject himself/herself through the video surveillance system

The categories of data processed are as follows:

– Images

1. f) Employee Identification Card

Purpose: Property management and access control

Conservation: The data will be kept until the employee leaves the company, and in any case for the legally stipulated periods.

Legitimation: Legitimate interest

Recipients: The communication of data to third parties is not foreseen except in the event of compliance with a legal obligation.

1. g) Users of the car park

Purpose: We will process your personal data for the purpose of managing the car park service

Conservation: The data will be kept until you unsubscribe as a user or within a maximum period of 1 month.

Legitimation: Execution of the contract for the provision of the services requested by the interested party.

Recipients: The communication of personal data is not foreseen except in the cases established by a legal obligation.

Forms of Obtaining: The personal data we process have been obtained from the data subject him/herself

The categories of data processed are as follows:

– Vehicle data

– Identification data of subscribers.

 

1. h) Newsletter subscribers:

Purpose:To send you information of interest to you about activities, offers and promotions of the property or the businesses installed in it.

Retention: The personal data of the interested party will be kept until the deletion is not requested by the interested party.

Legitimation: Consent of the interested party

Recipients: The communication of personal data is not foreseen except in the cases established by a legal obligation.

Ways of Obtaining: The personal data we process has been obtained from the data subject.

The categories of data processed are as follows:

– Identification data

– Contact data

 

SECURITY MEASURES APPLIED ON THE PROPERTY:

You can rest assured: We have adopted an optimal level of protection for the Personal Data we handle, and we have installed all the technical means and measures at our disposal according to the state of technology to prevent the loss, misuse, alteration, unauthorised access and theft of Personal Data.

 

RECIPIENTS TO WHOM WE COMMUNICATE THE DATA:

Your data will not be passed on to third parties, unless legally obliged to do so. Specifically, they will be communicated to the State Agency of Tax Administration and to banks and financial institutions for the collection of the service provided or product purchased, as well as to the persons in charge of the processing necessary for the execution of the agreement.

In case of purchase or payment, if you choose any application, website, platform, bank card, or any other online service, your data will be transferred to that platform or will be processed in their environment, always with maximum security.

When we order it, the web development and maintenance company, web hosting/hosting, will have access to our website. They will have signed a service contract that obliges them to maintain the same level of privacy as we do.

Any international transfer of data when using American applications will adhere to the Privacy Shield agreement, which guarantees that American software companies comply with European data protection policies on privacy.

 

DATA SUBJECTS’ RIGHTS:

• To know whether or not we are processing your data.
• To access your personal data.
• To request rectification of your data if it is inaccurate.
• To request the deletion of your data if they are no longer necessary for the purposes for which they were collected or if you withdraw your consent.
• To request the limitation of the processing of your data, in certain cases, in which case we will only keep them in accordance with the regulations in force.
• To submit your data, which will be provided to you in a structured, commonly used or machine-readable format. If you prefer, we can send it to the new data controller you designate. This is only valid in certain cases.
• To file a complaint with the Spanish Data Protection Agency or competent supervisory authority if you believe that we have not dealt with you correctly.
• To revoke consent for any processing for which you have consented, at any time.

 

If you change any data, please let us know so that we can keep them up to date.

FORM FOR EXERCISING YOUR RIGHTS:

• We have forms for the exercise of your rights, ask us for them by email or if you prefer, you can use those prepared by the Spanish Data Protection Agency or third parties.
• These forms must be signed electronically.
• If you are represented by someone else, they must be signed electronically.
• The forms can be submitted in person, sent by letter or by mail to the address of the Data Controller at the beginning of this text.

 

RESPONSE TIME FOR THE EXERCISE OF RIGHTS:

It depends on the right, but at most within one month from your request, and two months if the issue is very complex and we notify you that we need more time.

 

TREATMENT OF COOKIES:

If we use other types of cookies that are not the necessary ones, you can consult the cookies policy in the corresponding link from the beginning of our website.