PRIVACY POLICY

At Skypark Valdebebas, we are committed to ensuring that your personal data is protected and not misused. By providing us with your personal data and using our website, we understand that you have read and understood the terms related to the protection of personal data set forth below.

This Privacy Policy has been drafted in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

Given the real estate asset management model, we distinguish between the Legal Representative and the Management Entity:

  • Data Controller:

    • Identity: HEVF 2 Valdebebas, S.L. (Property owner).

    • Tax ID Number: B-88509096

    • Mailing Address: Paseo de la Castellana 110, 2nd Floor, Apartment B, 28046 Madrid.

  • Data Controller (Administrator):

    • Identity: SAVILLS RE SPAIN S.A.

    • Tax ID Number: A-78909900

    • Responsibilities: Commercial, administrative, and operational management of the property on behalf of the person in charge.

2. FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

Depending on how you interact with us (web form, rental agreement, in-person visit), we will process your data for the following purposes:

  1. Handling Inquiries: Respond to inquiries submitted via the website’s contact form or chat regarding the availability, prices, and features of the properties.

  2. Visitor Management: Organize and schedule in-person or virtual property tours.

  3. Rental Arrangements: If you decide to rent a home, we will handle the “scoring” process (credit check), as well as the drafting and signing of the lease agreement.

  4. Marketing Communications: If you have given us your explicit consent (by checking the corresponding box) to send you information about news, offers, or events at Skypark Valdebebas.

  5. Maintenance and Security: Manage technical issues on the website and ensure IT security.

3. WHAT IS THE LEGAL BASIS FOR THE PROCESSING OF YOUR DATA?

The legal basis that allows us to process your data depends on the purpose:

  • Consent of the data subject (Art. 6.1.a GDPR): To respond to your inquiries submitted via the web form and to send marketing communications. You may withdraw this consent at any time.

  • Performance of a contract or preliminary contract (Art. 6.1.b GDPR): For managing visits, conducting a pre-lease credit check, and finalizing the lease agreement.

  • Legitimate interest (Art. 6.1.f GDPR): To ensure the security of the website and improve our services.

  • Legal Obligation (Art. 6.1.c GDPR): To comply with tax, accounting, or administrative regulations (e.g., depositing the security deposit with the competent authority).

4. HOW LONG WILL WE RETAIN YOUR DATA?

Your data will be retained:

  • Inquiries and Contact: For as long as necessary to resolve your request and, thereafter, for 1 year for quality control purposes, unless a contractual relationship is established.

  • Contractual Relationship (Tenants): For the duration of the lease agreement and, thereafter, for the required statutory periods (generally 5 years for tax and civil liability purposes).

  • Marketing Communications: Until you request to unsubscribe or “opt out” of our newsletters.

5. TO WHOM WILL YOUR DATA BE DISCLOSED?

Your data will not be disclosed to third parties unless required by law, with the following exceptions necessary for the provision of the service:

  1. Management Company: SAVILLS RE SPAIN S.A., which acts as the Data Processor for the operation of the building.

  2. Service Providers (Data Processors): Technology providers (web hosting, CRM), building maintenance services, security services, or legal/tax advisory services. All of them are contractually obligated to maintain confidentiality.

  3. Public Agencies: the Tax Agency, IVIMA (for the deposit of security deposits), or law enforcement agencies if legally required.

No international data transfers outside the European Economic Area (EEA) are planned. If such transfers were to take place (e.g., to technology providers in the U.S.), they would be carried out under the Standard Contractual Clauses (SCCs) approved by the European Commission.

6. WHAT ARE YOUR RIGHTS?

As the data subject, you have the right to:

  • Right of Access: To know what personal data of yours we are processing.

  • Correction: To correct inaccurate or incomplete information.

  • Erasure (“Right to Be Forgotten”): Request the deletion of your data when it is no longer necessary.

  • Right to Object: To object to the processing of your data under certain circumstances (e.g., receiving marketing materials).

  • Restriction of Processing: Request that the processing of your data be suspended while its accuracy or legitimacy is verified.

  • Portability: Receive your data in a structured format so that you can transfer it to another data controller.

You may exercise these rights by sending a written request to info@skyparkvaldebebas.es or to the mailing address indicated in Section 1, along with a copy of your ID card or equivalent document to verify your identity.

Furthermore, if you believe that your rights have not been respected, you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. ACCURACY OF THE DATA

The user warrants that the personal data provided is accurate and is responsible for notifying us of any changes to such data. The user shall be solely liable for any direct or indirect damage or harm that may be caused to the Data Controller or any third party as a result of filling out forms with false, inaccurate, incomplete, or outdated information.