Legal notice

PRIVACY POLICY

Our goal is to be as transparent as possible with our users and customers regarding the personal data we collect. Your privacy is important to us.

By reading this Privacy Policy, the user is informed about how GESTIÓ LLÚRIA collects, processes, and protects the personal data provided through the website - https://www.rentroombarcelona.com/en/ (hereinafter, the website) and any other data that may be provided to GESTIÓ LLÚRIA through other means in the future.

The User must carefully read this Privacy Policy, which has been written clearly and simply to facilitate its understanding, and freely and voluntarily decide whether they wish to provide their personal data to GESTIÓ LLÚRIA.

By filling out any form on the corporate website and clicking on the box "I have read the privacy policy" or a similar option, the user expressly states that they have read this privacy policy, where the data processing activities and purposes are described, among other information, thus complying with the duty to inform as required by data protection regulations.

In cases where consent is requested on the corporate website for a specific purpose, by clicking the box “I agree” or similar, or selecting the checkbox, the user provides unequivocal and explicit consent for the relevant data processing.

Who is responsible for processing your data?

• Identity: GESTIÓ LLÚRIA, S.L. - CIF: B67580050

• Address: Calle de Roger de Llúria, 42 Principal, 08009 BARCELONA

• Phone: (+34) 670 914 781

• Email: contact@rentroombarcelona.com

Processing of data collected through the WEBSITE

For what purpose do we process your personal data?

At GESTIÓ LLÚRIA, we process the information provided by interested parties to address their requests and, where applicable, send information about our products or services, as well as our newsletters.

Automated decisions will not be made based on the data provided.

How long will we keep your data?

The data will be retained as long as the interested party does not request its deletion or as long as the business relationship lasts, always respecting the statute of limitations for liabilities.

What is the legal basis for processing your data?

• Consent of the interested party (by marking the checkbox): To address your request and, where applicable, send you commercial communications and newsletters.

To whom will your data be disclosed?

Data will not be disclosed to third parties unless legally required.

Are data transfers to third countries planned?

No data transfers to third countries are planned.

How did we obtain your data?

The personal data we process at GESTIÓ LLÚRIA comes from the interested party.

Processing of IMAGE USE data

For what purpose do we process your personal data?

At GESTIÓ LLÚRIA, we process the obtained data (image and, where applicable, voice) to publish these images on websites or social media, as well as other dissemination media such as magazines, publications, etc., to carry out advertising or promotional activities.

Automated decisions will not be made based on the data provided.

How long will we keep your data?

Data will be retained from the time the user provides consent until such consent is withdrawn.

What is the legal basis for processing your data?

• Express consent of the interested party: The use of photographs and, where applicable, videos showing the image of the interested parties.

It is also informed that by giving consent, the images may be published on the company's website, social media, and any other medium the company deems appropriate to promote its activities, events, and services.

To whom will your data be disclosed?

The data will be published on the company's website and/or social media or other media.

Are data transfers to third countries planned?

The use of images on social media may involve international data transfers.

Processing of CUSTOMER data

For what purpose do we process your personal data?

At GESTIÓ LLÚRIA, we process the information provided by interested parties mainly to provide the requested services, as well as to carry out the administrative, accounting, and tax management derived from these services or product sales, and, where applicable, to send commercial communications about our products and services.

Automated decisions will not be made based on the data provided.

How long will we keep your data?

Data will be retained as long as the interested party does not request its deletion and, if applicable, for the years necessary to comply with legal obligations.

What is the legal basis for processing your data?

• Execution of a contract: To provide the requested services.

• Legal obligation: To carry out the administrative, accounting, and tax management of the requested services.

• Legitimate interest of the data controller: To send commercial communications about our products and services.

To whom will your data be disclosed?

Data will be disclosed to the following recipients:

• Tax Agency, for compliance with legal obligations (Legal requirement).

• Financial entities, for issuing the corresponding receipts, where applicable (Contractual requirement).

Are data transfers to third countries planned?

No data transfers to third countries are planned.

How did we obtain your data?

The personal data we process at GESTIÓ LLÚRIA comes from the interested party or their legal representative.

The categories of data processed are:

• Identification data

• Postal and email addresses

• Commercial information

• Banking information, where applicable

Processing of data for ADVERTISING

For what purpose do we process your personal data?

At GESTIÓ LLÚRIA, we process the information provided by interested parties to manage the sending of commercial communications about our products and/or services through electronic means (email, WhatsApp, SMS, etc.).

Automated decisions will not be made based on the data provided.

How long will we keep your data?

Data will be retained from the time the user provides consent until such consent is withdrawn.

What is the legal basis for processing your data?

• Consent of the interested party (by signing the consent form, marking or ticking the checkbox, or any other valid means of obtaining this): To send commercial communications.

To whom will your data be disclosed?

Platforms for sending advertising through electronic means, to ensure delivery with guarantees and obtain statistical data.

Are data transfers to third countries planned?

No data transfers to third countries are planned.

How did we obtain your data?

The personal data we process at GESTIÓ LLÚRIA comes from the interested party.

The categories of data processed are:

• Identification data and postal and email addresses

• Commercial information

No special categories of personal data are processed (such as those revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership; genetic data; biometric data uniquely identifying a natural person; data concerning health or data concerning a natural person's sex life or sexual orientation).

Processing of VIDEO SURVEILLANCE data

Basic information on data protection

• Data controller: GESTIÓ LLÚRIA

• Purpose: To ensure the security of people, property, and facilities.

• Legal basis: Task carried out in the public interest.

• Recipients: Data may be disclosed to law enforcement authorities and courts, if necessary.

• Rights: You have the right to access, rectify, and delete your data, as well as other rights indicated in the additional information, which you can exercise by contacting the data controller.

Full information on data protection

For what purpose do we process your personal data?

At GESTIÓ LLÚRIA, we process the images captured by cameras to ensure the security of people, property, and facilities.

Automated decisions will not be made based on the data provided.

How long will we keep your data?

Data will be retained for a maximum of 30 days, except when disclosed to law enforcement authorities and/or courts.

What is the legal basis for processing your data?

• Task carried out in the public interest: To ensure the security of people, property, and facilities.

To whom will your data be disclosed?

If necessary, data will be disclosed to law enforcement authorities and courts to provide images in case a crime or infraction has been committed.

Are data transfers to third countries planned?

No data transfers to third countries are planned.

What category of personal data do we process?

• Image

RIGHTS OF THE DATA SUBJECT

What are your rights when you provide us with your data?

Any person has the right to obtain confirmation as to whether GESTIÓ LLÚRIA is processing personal data concerning them.

Interested parties have the right to access (Art. 15 GDPR) their personal data, request rectification (Art. 16 GDPR) of inaccurate data, or request deletion (Art. 17 GDPR) when, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, data subjects may request the restriction (Art. 18 GDPR) of data processing, in which case we will only retain the data for the exercise or defense of legal claims.

In certain circumstances and for reasons related to their particular situation, data subjects may object to (Art. 21 GDPR) the processing of their data. In this case, GESTIÓ LLÚRIA will stop processing the data unless there are compelling legitimate grounds or for the exercise or defense of possible claims.

You will also have the right to data portability (Art. 20 GDPR). This means you have the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format to transmit it to another entity directly, where technically feasible.

If you have given consent for a specific purpose, you have the right to withdraw consent (Art. 7 GDPR) at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You may exercise your rights by contacting the controller in person, by postal mail, or by email to the address of the controller, submitting the request form. Forms for exercising rights can be found on the website of the Spanish Data Protection Agency:

https://www.aepd.es/reglamento/derechos/index.html#section1

If you feel your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Authority by accessing the electronic headquarters of the Spanish Data Protection Agency:

https://sedeagpd.gob.es/sede-electronica-web/vistas/infoSede/queSede.jsf

OBLIGATION TO PROVIDE DATA

The data requested in the forms accessible from the GESTIÓ LLÚRIA Website and, in general, those requested by the company for the provision of the service/product sale, are generally mandatory (unless otherwise specified in the required field) to fulfill the established purposes. Therefore, if they are not provided or are not provided accurately, requests may not be properly addressed.

If the interested party provides third-party data, they declare that they have the consent of such parties and commit to communicating the information contained in this Privacy Policy to the data subject, holding GESTIÓ LLÚRIA harmless from any liability in this regard.

SECURITY MEASURES

Personal data will be processed lawfully, fairly, and transparently concerning the data subject ("lawfulness, fairness, and transparency"); collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes; adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed; maintained in a form that permits identification of data subjects for no longer than is necessary for the purposes of the processing of personal data (respecting the statute of limitations for liabilities); processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures ("integrity and confidentiality").

We follow strict criteria for selecting service providers with access to personal data to fulfill their obligations under data protection regulations, as well as formalizing with them the corresponding data processor contract (Art. 28 GDPR), imposing, among others, the following obligations: to apply appropriate technical and organizational measures; to process data following our instructions; and to delete or return data once the services have been provided.