RECORDS OF PROCESSING ACTIVITIES
WEB PROCESSING ACTIVITIES RECORDS
|
PROCESSING |
ACCOUNTING |
|
PURPOSE OF PROCESSING |
Processing of the necessary documentation for the company’s accounting and taxation. |
|
LEGAL BASIS |
RGPD: 6.1.C) Processing necessary for compliance with a legal obligation applicable to the data controller. Royal Legislative Decree 2/2015 of October 23, approving the revised text of the Workers’ Statute Law. |
|
RETENTION PERIOD |
The data will be retained for as long as necessary to fulfill the purpose for which it was collected and to determine any potential liabilities arising from that purpose. The applicable regulations will be observed. Economic data will be retained in accordance with Law 58/2003 of December 17, the General Tax Law. |
|
CATEGORIES OF DATA SUBJECTS |
|
|
CATEGORIES OF PERSONAL DATA |
Email, Address, NIF or DNI, Full Name, Bank Details, Payroll Financial Data, Insurance, Goods and Services Received, Financial Transactions, Billing Financial Data of Clients and Suppliers. |
|
CATEGORIES OF DATA RECIPIENTS |
TAX ADMINISTRATION,BANKS,SAVINGS BANKS,AND RURAL SAVINGS BANKS, PUBLIC ADMINISTRATION WITH COMPETENCE IN THE MATTER.No data transfers are planned, except for those authorized by law. |
|
INTERNATIONAL TRANSFERS |
No international transfers are made. |
|
PROCESSING |
VIDEO SURVEILLANCE |
|
PURPOSE OF PROCESSING |
Ensuring the safety of individuals accessing the accommodation, monitoring assets and facilities, and controlling traveler access. |
|
LEGAL BASIS |
The legal basis for processing is the pursuit of the legitimate interests of the data controller, specifically ensuring the security of individuals and the assets within the video-surveilled premises. |
|
RETENTION PERIOD |
24 hours, which may be extended in cases where law enforcement authorities or a judicial body request an extension of the retention period under their legal powers. |
|
CATEGORIES OF DATA SUBJECTS |
Individuals and travelers accessing the apartment |
|
CATEGORIES OF PERSONAL DATA |
Image, Voice |
|
CATEGORIES OF DATA RECIPIENTS |
LAW ENFORCEMENT AUTHORITIES. No data transfers are planned, except for those authorized by law. |
|
INTERNATIONAL TRANSFERS |
The international transfer of personal data is not contemplated. |
|
PROCESSING |
WEBSITE CONTACTS |
|
PURPOSE OF PROCESSING |
Through the data collection forms included on the controller’s website, individuals can send their messages, information requests, inquiries, etc., regarding the products and/or services offered by the data controller. |
|
LEGAL BASIS |
The legal basis for this processing is the data subject’s consent. |
|
RETENTION PERIOD |
Personal data will be retained until the data subject withdraws their consent. |
|
CATEGORIES OF DATA SUBJECTS |
|
|
CATEGORIES OF PERSONAL DATA |
Email, Address, IP, Mobile, Full Name, Phone |
|
CATEGORIES OF DATA RECIPIENTS |
No data transfers to third parties are planned, except for those authorized by law. |
|
INTERNATIONAL TRANSFERS |
No international transfers are made. |
|
PROCESSING |
TRAVELER REGISTRATION BOOK |
|
PURPOSE OF PROCESSING |
To comply with Article 25 of Organic Law 4/2015, of March 30, on the protection of citizen security, and with Royal Decree 933/2021, of October 26, which establishes the obligations of documentary registration and information for individuals or legal entities engaged in hospitality and motor vehicle rental activities. |
|
LEGAL BASIS |
Article 25 of Organic Law 4/2015, of March 30, on the protection of citizen security, and Royal Decree 933/2021, of October 26, which establishes the obligations of documentary registration and information for individuals or legal entities engaged in hospitality and motor vehicle rental activities, state that natural or legal persons carrying out activities relevant to citizen security, including hospitality services, must undertake the documentary registration and information procedures established by the applicable regulations. |
|
RETENTION PERIOD |
In accordance with Article 5 of Royal Decree 933/2021, of October 26, establishments must retain the registration books for a period of three years from the date of completion of the contracted service or provision. |
|
CATEGORIES OF DATA SUBJECTS |
|
|
CATEGORIES OF PERSONAL DATA |
Email, Address, Handwritten Signature, Mobile, NIF or DNI, Full Name, Phone Number, Date of Birth, Gender, Nationality, Identity Document Issue Date and Type (Passport, Driver’s License, Identity Card, Spanish Residence Permit), Date and Time of Check-in and Check-out, Contract Reference Number, Number of Travelers, and Family Relationship Between Travelers (if any are minors).Payment Data: Type (Cash, Credit Card, Payment Platform, Bank Transfer, etc.), Payment Method Identification: Card Type and Number, Bank Account IBAN, Mobile Payment Solution, Other, Payment Method Holder, Card Expiration Date, Payment Date. |
|
CATEGORIES OF DATA RECIPIENTS |
Other Public Administration Bodies, Law Enforcement Authorities, Public Administration with Competence in the Matter.Personal data will be communicated to the Secretary of State for Security and Law Enforcement Authorities in the performance of their respective duties related to crime prevention, detection, and investigation. Additionally, in the exercise of their respective competencies, the Judicial Authority and the Public Prosecutor’s Office will have access to this data. |
|
INTERNATIONAL TRANSFERS |
No se realizan transferencias internacionales. |
|
PROCESSING |
ONLINE COMMERCE – https://coupdecoeurappartements.com/en/home/ |
|
PURPOSE OF PROCESSING |
Management of apartment reservations through the website https://coupdecoeurappartements.com/en/home/ and the complete commercial transaction for apartment bookings. |
|
LEGAL BASIS |
The legal basis for processing is the performance of a contract in which the data subject is a party, as well as compliance with a legal obligation applicable to the data controller. |
|
RETENTION PERIOD |
6 years or, in the case of a minor, the period required for the statute of limitations on liabilities in accordance with the applicable legal regulations, starting from the end of the legal relationship that legitimizes the processing. |
|
CATEGORIES OF DATA SUBJECTS |
|
|
CATEGORIES OF PERSONAL DATA |
Email, Address, Mobile, NIF or DNI, Full Name, Phone Number, Age, Marital Status, Date of Birth, Gender, Place of Birth, Nationality, Bank Details, Credit or Debit Cards, Goods and Services Received, Goods and Services Provided, Financial Transactions, and any data necessary for maintaining the commercial relationship.For invoicing, sending information by mail or email, after-sales service, and customer loyalty programs. |
|
CATEGORIES OF DATA RECIPIENTS |
TAX ADMINISTRATION, BANKS, SAVINGS BANKS, AND RURAL SAVINGS BANKS, PUBLIC ADMINISTRATION WITH COMPETENCE IN THE MATTER. No data transfers are planned, except for those authorized by law. |
|
INTERNATIONAL TRANSFERS |
The following platforms are used, which may involve the international transfer of personal data: – G SUITE (GMAIL, GOOGLE DRIVE, GOOGLE CALENDAR, GOOGLE CONTACTS…) operated by GOOGLE LLC, which describes its GDPR compliance at https://policies.google.com – DROPBOX operated by DROPBOX INTERNATIONAL UNLIMITED COMPANY, which describes its GDPR compliance at https://www.dropbox.com/es_ES/security/GDPR – OFFICE 365 operated by Microsoft, which describes its GDPR compliance at https://privacy.microsoft.com/es-es/privacystatement No other types of international data transfers are planned. |
|
PROCESSING |
AIRBNB TRAVELER CLIENTS AND OTHERS |
|
PURPOSE OF PROCESSING |
The purpose is the management of the commercial relationship, both from an administrative perspective and for compliance with tax obligations, as well as from a commercial and marketing standpoint. This includes managing apartment reservations through the AIRBNB platform and other channels, as well as handling the stay and communicating with travelers to ensure a satisfactory experience. |
|
LEGAL BASIS |
For clients considered natural persons or domestic users, the processing of their data is legitimized by Article 6.1(b) and 6.1(c) of RGPD 679/2016, meaning the execution of a contract and compliance with legal obligations. |
|
RETENTION PERIOD |
Once the contractual relationship or service provision has ended, the data retention period will be 6 years to comply with legal, tax, and commercial obligations. |
|
CATEGORIES OF DATA SUBJECTS |
Traveler Clients |
|
CATEGORIES OF PERSONAL DATA |
Email, Address, Mobile, NIF or DNI, Full Name, Phone Number, Bank Details, Credit or Debit Cards, Goods and Services Provided, Financial Transactions. |
|
CATEGORIES OF DATA RECIPIENTS |
TAX ADMINISTRATION, BANKS, SAVINGS BANKS, AND RURAL SAVINGS BANKS. No data transfers to third parties are planned, except for those authorized by law. |
|
INTERNATIONAL TRANSFERS |
WHATSAPP operated by WhatsApp Inc, with its privacy policy available on its website: https://business.whatsapp.com/policy |
