In accordance with the General Data Protection Regulation EU 2016/679 (hereinafter, “GDPR”) and the Organic Law 3/2018, of 5 December, on Data Protection and guarantee of digital rights (“LOPDGDD”), we inform you about the collection, processing and use of your personal data through this website.
The Sociedad Residencias de Estudiantes S.L. (hereinafter, “RESA”), with registered address at Calle Serrano nº 41 4ª planta 28001 Madrid (Spain), with C.I.F. number B-60109188, and e-mail address firstname.lastname@example.org.
On the other hand, through this website, you will be able to contract accommodation owned by several companies. Therefore, depending on the accommodation you are interested in, the person responsible for the processing of the data collected may be one of the Owner Companies listed in section 2 of the Legal Notice. These Owner Companies will be considered as independent controllers in accordance with the provisions of article 4.7 of the RGPD and will process the data for the purpose of managing your booking request and/or visit in which you are interested and in accordance with their internal data protection policies.
En RESA utilizaremos los datos personales recabados a través de los formularios y los que deriven del uso de esta página web y de tu relación con el responsable del tratamiento de tus datos con las siguientes finalidades:
- Contact form and “Chat”: After receiving your request, we will contact you to manage your contact request, i.e., without limitation, to answer any questions or queries you may have in relation to the products or services made available on this website. The legal basis that legitimises this processing is the legitimate interest (art. 6.1 f) of the RGPD) in being able to respond to a request made by you so that, in no case, can it be considered that your interests will be affected.
- Booking request form: To process your accommodation booking request and, therefore, communicate the data to the company that owns the residence hall for the processing of your booking request, which, as an independent data controller, will process them for the admission process and, if applicable, for contracting. Once the resident-client has been admitted, the data collected in the booking form may be used for the activities of RESA HUB/RESA LIFE. And the contact data provided for emergency situations will be processed by the selected establishment and by the Company owning the same. The legal basis that legitimises this processing is the execution of a contract in accordance with article 6.1 b) of the RGPD, this being understood to be the booking conditions accepted at the time of formalising the booking for the accommodation. The processing of your data is necessary for the correct execution of the contracted service.
- Communication of data to companies of the Group: In the event of your consent, your data may be communicated to companies of the RESA Group so that they may send you commercial information, even by electronic means, about their products or services. You may consult the entities of the RESA Group at the following URL: https://resa.es/en/legal-notice/. The legal basis legitimising the processing of your personal data is your express consent (art. 6.1 a) of the RGPD). In the event that you wish to revoke your consent for this purpose, you may do so at any time by sending your request to email@example.com.
- Quality contact: We will contact you through any channel, for example by telephone, in order to know your opinion in relation to the products contracted and/or services provided by RESA. The legal basis that legitimises the processing of your data is the legitimate interest of RESA (art. 6.1 f) of the RGPD), in order to evaluate your level of satisfaction in relation to the products contracted and/or services provided, for the purpose of improving RESA’s processes and services.
In this sense, after carrying out the corresponding analysis, RESA has considered that your interests as an affected person are not harmed, since by means of the surveys you will be able to report your experience with RESA, which may benefit the attention received in the future.
In order to comply with the purposes detailed in the previous section, at RESA we will mainly process identifying and contact data, such as your name and surname, address, contact telephone number and e-mail address that you have provided us with, as well as any other information related to your booking request.
We inform you that RESA will not communicate your personal data to third parties, except in compliance with legal obligations. Likewise, we inform you that no international transfers of personal data will be carried out.
However, they may be communicated to those companies of the RESA Group so that they may send you commercial information, even by electronic means, about products or services similar to those contracted with your data controller, provided that you have consented to this. These companies offer accommodation services. You may consult the entities of the RESA Group at the following URL: https://resa.es/en/legal-notice/
On the other hand, in order to be able to provide you with our services, we must inform you that we require the support of service providers. These third parties may have access to your data and will act in our name and on our behalf, following our instructions, and in no case will they have your data for their own purposes.
RESA will keep your personal data for the time necessary to fulfil the purpose for which they were collected. Specifically:
The personal data provided solely for managing a query through a contact form or chat will be kept for a maximum period of 10 months, and except in cases in which, due to legal obligation, RESA must keep said data duly blocked for a longer period. Once this period has elapsed, in which no further legal responsibilities may be derived from the service offered, your data will be definitively deleted.
The personal data provided to manage the booking of accommodation will be kept for as long as the business relationship is maintained, and, once it has ended, duly blocked for as long as possible legal actions related to the booking may arise. Once this period has elapsed, in which no further legal responsibilities can be derived from the service offered, your data will be definitively deleted.
The data provided for managing the visits to the residence hall/establishment will be kept while said visit is being managed and, once the visit has been made, duly blocked while possible legal actions related to said visit may be derived. Once this period has elapsed, during which no further legal responsibilities may arise, your data will be definitively deleted.
Personal data provided for commercial purposes will be retained for as long as you do not revoke your consent.
We inform you that you have rights in relation to the processing of your personal data such as access to your personal data, and their rectification or deletion, or the limitation of their processing, to oppose their processing, as well as the right to data portability under the terms provided for in the data protection legislation in force. You can exercise your rights by contacting firstname.lastname@example.org clearly indicating the right you wish to exercise.
The exercise of these rights will be free of charge except when the requests are manifestly unfounded or excessive.
In the event that you consider that RESA has not processed your personal data in accordance with the applicable regulations, you will be able to file a complaint before the Spanish Data Protection Agency through the website www.aepd.es.