Privacy and data protection policy

Applicable rules

In accordance with applicable law, ATELAHOMES undertakes to adopt the technical and organizational measures necessary according to the level of security appropriate to the risk of the data collected.

This privacy policy is adapted to Spanish and European legislation on personal data protection online, including:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016.
• Spanish Organic Law 3/2018 of December 5 on Personal Data Protection and guarantee of digital rights.
• Royal Decree 1720/2007 of December 21 approving the implementing regulation of Organic Law 15/1999.
• Law 34/2002 of July 11 on Information Society Services and Electronic Commerce.

Identity of the data controller

Controller

Miren Fernández Atela

Tax ID

33521394K

Address

Valenzuela, 10. 28014 Madrid, Spain

Phone

650075747

Email

miren@atelahomes.com

The Data Protection Officer is responsible for overseeing compliance with the data protection rules to which ATELAHOMES is subject. The user may contact the officer designated by the controller using the details above.

Records and principles

Personal data collected by ATELAHOMES through website forms will be incorporated and processed in order to facilitate, streamline and fulfill commitments between ATELAHOMES and the user, maintain the relationship established through forms, or respond to requests and queries.

Processing will be subject to the principles of lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability.

The categories of data processed by ATELAHOMES are identification data only. Special categories of personal data under Article 9 GDPR are not processed.

Legal basis and purposes

The legal basis for processing personal data is consent. ATELAHOMES undertakes to obtain the user's express and verifiable consent for processing personal data for one or more specific purposes.

The user has the right to withdraw consent at any time. Withdrawal will be as easy as giving consent and, as a general rule, will not affect use of the website.

Personal data is collected and managed to facilitate, streamline and fulfill commitments between the website and the user, maintain the relationship established through forms, and respond to requests or queries.

Data may also be used for commercial personalization, operational and statistical purposes, activities related to ATELAHOMES' business purpose, data extraction and storage, and marketing studies to adapt content offered to the user and improve the quality, operation and browsing of the website.

Retention, recipients and minors

Personal data will be retained only for the minimum time necessary for the purposes of processing and, in any event, for a period of 3 years or until the user requests deletion.

The user's personal data will not be shared with third parties. If recipients or categories of recipients exist, the user will be informed when personal data is collected.

Only users over 14 may lawfully consent to the processing of their personal data by ATELAHOMES. If the user is under 14, consent from parents or guardians is required.

Confidentiality and security

ATELAHOMES undertakes to adopt the technical and organizational measures necessary to guarantee the security of personal data and prevent destruction, loss, accidental or unlawful alteration, or unauthorized access.

Because the internet cannot be guaranteed to be fully impregnable, the controller undertakes to notify the user without undue delay of any personal data breach likely to result in a high risk to the rights and freedoms of natural persons.

Personal data will be treated as confidential by the controller, who will ensure that confidentiality is respected by employees, associates and any person to whom the information is made accessible.

User rights

The user may exercise the rights recognized under GDPR before the data controller:

• Right of access.
• Right to rectification.
• Right to erasure or right to be forgotten.
• Right to restriction of processing.
• Right to data portability.
• Right to object.
• Right not to be subject to a decision based solely on automated processing, including profiling.

Rights may be exercised by written communication addressed to the controller with the reference "RGPD - AtelaHomes.com", specifying name and surname, copy of ID or equivalent document, specific request, address for notifications, date and signature, and any document supporting the request.

The request may be sent to Valenzuela, 10 - 28014 Madrid, Spain, or to miren@atelahomes.com.

Links, complaints and changes

The website may include links to third-party websites not operated by ATELAHOMES. Those websites have their own data protection policies and are responsible for their privacy practices.

If the user believes there is a problem or breach of applicable rules in the way personal data is processed, the user may file a complaint with a supervisory authority. In Spain, the supervisory authority is the Spanish Data Protection Agency: www.aepd.es.

ATELAHOMES reserves the right to modify this Privacy Policy at its own discretion or due to legislative, case-law or doctrinal changes. Users are advised to review this page periodically.