Privacy policy

PRIVACY POLICY ON PERSONAL DATA PROTECTION BY THE COMPANIES OF DAZIA CAPITAL, S.L.

In accordance with the provisions of current legislation on data protection, Regulation (EU) 2016 679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, (hereinafter  GDPR), as well as in Organic Law 3/2018 of 5 December on Data Protection and guarantee of digital rights  (hereinafter, LOPD-GDD), the user is informed in accordance with the provisions of Articles 13 of the GDPR and 11 of the LOPD-GDD:

CONTROLLER

Who is the controller that will be processing my personal data?

• DAZIA GROUP
  • DAZIA CAPITAL REAL ESTATE, S.L. – B87065520 – (as the group’s representative)
  • DAZIA CAPITAL OPERATING COMPANY SL – B88121447 –
  • Other commercial brands of the GROUP: DAZIA CAPITAL, DARYA HOMES, DARIA MODERN LIVING, DARYA ART COMMUNITY
• Address CALLE ALFONSO XII, 32, PLANTA 1ª, PTA IZQ – 28014, MADRID
• Email info@daziacapital.com / info@daryahomes.com / info@daryaliving.es /
• Data Protection Officer’s Email: JURIDICO@LEGALDPO.ES
• Websites:
  https://daziacapital.com/
  https://www.daryahomes.com/
  https://daryaliving.es/
  https://www.daryahomes.com/en/darya-art-community/

PURPOSE

For what purpose will we process your personal data?

DAZIA GROUP processes your information for:

1. Maintaining the business relationship and providing the contracted service.
2. Providing you with an estimate tailored to your needs.
3. Managing email communications with interested parties, as well as any type of query, complaint, question or need for information that you may need to carry out, from our web contact form, through our email address or by telephone.
4. Managing your candidacy in any contest that the DAZIA GROUP may carry out through its Darya Art Community business section.
5. Carrying out the company’s selection processes.
6. Managing the company’s employees and human resources.
7. Sending commercial information related to our sector: property development, renting and buying/selling of properties, real estate studies, among others, as well as periodic newsletters.
8. Performing statistical analyses and non-invasive market studies that allow us to improve our services offered to our clients.
9. Monitoring the security of the facilities (video surveillance) in which DAZIA GROUP provides or offers its services.

How long will we keep your data?

The personal data you provide us with will be kept for as long as the current business relationship is maintained. However, in order to be as transparent as possible with you, we would like to point out that the general calculations we work with are as follows:

• Generic identification data (e-mail, name, surnames, first name, telephone number, etc.): for the duration of the business relationship or until consent is revoked. In any case, they will be deleted when they are not going to be used for the purpose for which they were collected.
• Law on Offences and Penalties in the Social Order (obligations regarding affiliation, registrations, deregistrations, contributions, payment of wages, etc.); Arts. 66 et seq. General Tax Law (accounting records, etc.): four (4) years.
• Personal actions without special time limit (Article 1964 Civil Code): five (5) years.
• Accounting, tax and labour (Article 30 Commercial Code – accounting records, invoices, etc.): six (6) years.
• Labour: ten (10) years.
• Data subject to the Law on the Prevention of Money Laundering and Terrorist Financing (Article 25): ten (10) years.
• Selection processes: two (2) years from the delivery of the curriculum vitae.
• Video surveillance: thirty (30) days, unless recording an offence and/or crime. The video surveillance data are not located at the CONTROLLER’s facilities, only in those locations where certain services are provided.
• Likewise, given that commercial information is sent, even if the relationship between the parties is terminated, DAZIA GROUP will keep your information for sending newsletters related to our products and services[1]. You can always exercise the rights recognised by current regulations by contacting us through the most comfortable way. Likewise, given that commercial information is sent, even if the relationship between the parties is terminated, DAZIA GROUP will keep your information for sending newsletters related to our products and services[1]. You can always exercise the rights recognised by current regulations by contacting us through the most comfortable way.^[1]. You can always exercise the rights recognised by current regulations by contacting us through the most comfortable way.
• Disaggregated and anonymised data: no term

Despite the existence of these general terms, we inform you that we will periodically review our systems to delete data that is not legally required.

LEGITIMACY

What is the legitimacy for the processing of your data?

1. Manage the commercial relationship that you have signed and contracted with us.
   1. 1. Performance of a contract (enabled by Article 6(1)(b) GDPR)
      2. Consent of the data subject (enabled by Article 6(1)(a) GDPR)
2. Providing you with an estimate tailored to your needs.
   1. 1. Performance of a contract and/or pre-contractual relationship (enabled by Article 6(1)(b) GDPR)
3. Manage email communications with data subjects.
   1. Consent of the data subject (enabled by Article 6(1)(a) GDPR)
   2. Legitimate interest (enabled by Article 6(1)(f) GDPR)
4. Carrying out the company’s selection processes.
   1. Consent of the data subject (enabled by Article 6(1)(a) GDPR)
5. Managing the company’s internal employees and human resources
   1. 1. Performance of a contract (enabled by Article 6(1)(b) GDPR)
6. Sending commercial communications
   1. Consent of the data subject (enabled by Article 6(1) GDPR)
   2. Consent of the data subject (enabled by Article 20 Law on Information Society Services and E-Commerce (LSSICE))
   3. Legitimate interest (enabled by Article 6(1)(f) GDPR)
7. Providing assistance or healthcare
   1. Consent of the data subject (enabled by Article 6(1)(a) GDPR)
8. Monitoring the security of the facilities (video surveillance)
   1. Legitimate interest (enabled by Article 6(1)(f) GDPR)
9. Managing training activities
   1. Performance of a contract (enabled by Article 6(1)(b) GDPR)
   2. Consent of the data subject (enabled by Article 6(1)(a) GDPR)

Furthermore, all data collected are necessary for the provision of the service. However, those data marked with an asterisk (*) are mandatory. In the event that the mandatory data are not provided, DAZIA GROUP will not be able to provide the contracted service. DAZIA GROUP will not be able to provide the contracted service.

Finally, we would like to inform you that only persons over 14 years of age may provide personal data on this website. As required by the LOPD-GDD, in the case of minors under 14 years of age, the consent of their parents or guardians is a mandatory condition for us to process their personal data.

Furthermore, only persons over the age of 18 may use our services. In the case of minors under 18 years of age, the consent of their parents or legal guardians will be a mandatory condition for us to provide the services offered, unless the minor is emancipated.

RIGHTS OF DATA SUBJECTS

What rights do I have regarding data protection?

S In accordance with the contents of Articles 13 GDPR and 11.2.c) LOPD-GDD, you may exercise any of the following rights by contacting us at the postal address CALLE ALFONSO XII, 32, PLANTA 1ª, PTA IZQ – 28014, MADRID, or at the e-mail address JURIDICO@LEGALDPO.ES. In any case, according to current regulations, you have the following rights recognised in accordance with the contents of Articles 15 to 22 GDPR and 12 to 18 LOPD-GDD: CALLE ALFONSO XII, 32, PLANTA 1ª, PTA IZQ – 28014, MADRID or to the electronic address JURIDICO@LEGALDPO.ES In any case, according to current regulations, you have the following rights recognised in accordance with the contents of Articles 15 to 22 GDPR and 12 to 18 LOPD-GDD:

– The right to request access to personal data relating to the data subject.
– The right to request rectification or erasure.
– The right to request the restriction of processing.
– The right to request the restriction of processing.
– The right to portability.

You may request the forms to exercise your rights from the Data Controller, via the e-mail address indicated in the data controller’s details. Additionally, you may file a complaint with the Spanish Data Protection Agency (AEPD). More information in Section VII of this document.

RECIPIENTS

To which recipients will your data be communicated?

You will always be informed and, where appropriate, your express consent will be requested for the transfer of your personal data or for international transfers in accordance with the regulations in force (Arts. 13(1)(e) and 44 GDPR, as well as Art. 11.1 and 40 LOPD-GDD 3/2018). Therefore, we inform you that the third parties with which the Data Controller works have their servers located within the EU, EEA or Switzerland, with appropriate security measures to ensure confidentiality. This processing consists of:

• Contact forms/website data: third party maintainer of websites: https://persuadis.com/
• Mailing list / newsletter sign-up forms: https://persuadis.com/
• Instagram
• Facebook
• YouTube
• Linkedin
• communications with customers about the product and/or service: communications with customers about the product and/or service
• Chekin for managing bookings

Apart from the aforementioned cases and except for legal obligation, your data will not be transferred or communicated to any third party, except in the cases provided for by law or when it is strictly necessary for the provision of a service. Generally speaking, the data may be transferred to:

• Technology service providers.
• Payment service providers.
• Courier and parcel delivery companies.
• Third parties or intermediaries, as service providers, operating on our own behalf (agency, consultancy, etc.).
• Legally authorised public authorities or bodies when required to do so or when required to do so by law.

The transfer of data will take place in the strictest confidence, using the necessary measures, such as the signing of confidentiality agreements, or adherence to their privacy policies set out on their respective websites. The User may refuse the transfer of their data to Data Processors, by written request, by any of the aforementioned means. DAZIA GROUP will not transfer or communicate your data to any third party, except in the cases provided for by law or when the provision of a service implies the need for a contractual relationship with a Data Processor. Thus, the User accepts that some of the personal data collected are provided to these Data Processors (payment platforms, agency, intermediaries, etc.), when necessary for the effective performance of a contracted service or purchased product. The User also accepts that, in case of provision of services, these may be, totally or partially, subcontracted to other people or companies, which will be considered Data Processors, with whom the corresponding confidentiality agreement has been agreed, or their privacy policies set out on their respective web pages have been adhered to. The User may refuse the transfer of their data to Data Processors, by written request, by any of the aforementioned means. DAZIA GROUP will not transfer or communicate your data to any third party, except in the cases provided for by law or when the provision of a service implies the need for a contractual relationship with a Data Processor. Thus, the User accepts that some of the personal data collected are provided to these Data Processors (payment platforms, agency, intermediaries, etc.), when necessary for the effective performance of a contracted service or purchased product. The User also accepts that, in case of provision of services, these may be, totally or partially, subcontracted to other people or companies, which will be considered Data Processors, with whom the corresponding confidentiality agreement has been agreed, or their privacy policies set out on their respective web pages have been adhered to. The User may refuse the transfer of their data to Data Processors, by written request, by any of the aforementioned means.

WHERE YOUR DATA COMES FROM

How have we obtained your data?

The personal data used by DAZIA GROUP comes from the data subject, thus complying with the provisions of Articles 13 GDPR and 11 LOPD-GDD mentioned above, or from companies of the group or collaborating companies, about which you can obtain more information by writing to the e-mail address JURIDICO@LEGALDPO.ES or to the office of the Data Controller at the postal address indicated in this document.

DAZIA GROUP is made up of the companies listed below, as well as all its commercial brands:

• On behalf of the GROUP: DAZIA CAPITAL REAL ESTATE, S.L., with Tax ID Code (CIF) B87065520, with registered offices at C/ ALFONSO XII, Nº32 PLANTA 1ª PTA IZQ 28014 MADRID.
• DAZIA CAPITAL OPERATING COMPANY SL, with Tax ID Code (CIF) B88121447 y with registered offices at C/ ALFONSO XII, Nº32 PLANTA 1ª PTA IZQ 28014 MADRID.
• The GROUP’s commercial brands: DAZIA CAPITAL, DARYA HOMES, DARIA MODERN LIVING, DARYA ART COMMUNITY.

We also inform you that your data may be obtained from third party collaborators of DAZIA GROUP, about which you will be provided with information at the time of collecting your data.

What categories of data do we handle?

The categories of personal data that are processed:

Identification data

• Name
• Surnames
• National ID Document No. (DNI) / Foreign Residency Permit No. (NIE) / Passport or equivalent document
• Postal addresses
• Email addresses
• Sex
• Date of birth
• Place of birth
• Contact telephone (mobile / landline)

Commercial information: own and third party

Financial data

• Bank account number
• Credit card number

Curriculum vitae

• Academic data
• Degrees
• Hobbies
• Membership in associations or clubs

Other data

• Data subject to the Law on the Prevention of Money Laundering and Financing of Terrorism that DAZIA GROUP must process in order to comply with its legal obligation and, where appropriate, communicate to the competent authorities.

Sensitive data will be processed in accordance with the provisions of Articles 9 GDPR and 9 LOPD-GDD, informing the data subject in any case about which data will be used by the data controller.

ADDITIONAL INFORMATION

• Security measures: Users of the DAZIA GROUP website are informed that the technical and organisational security measures available to us have been adopted to prevent the loss, misuse, alteration, unauthorised access and theft of data, thus guaranteeing the confidentiality, integrity and quality of the information contained therein, in accordance with the provisions of current regulations on data protection. The personal data collected in the forms are only processed by the staff of DAZIA GROUP or the designated Data Processors. DAZIA GROUP’s Website also has SSL encryption that allows the User to securely send their personal data through the contact or sign-up forms on the website.
• Social Media: DAZIA GROUP has a profile on some of the main social media networks on the Internet (Facebook, Instagram), recognising itself in all cases as the Controller of the processing of the data of its followers, fans, subscribers, commentators and other User profiles (hereinafter, followers) published by DAZIA GROUP. The purpose of data processing by DAZIA GROUP, when the law does not prohibit it, will be to inform its followers about its activities and offers, by any means that the social media network allows, as well as to provide personalised service to the User. The legal basis that legitimises this processing will be the consent of the data subject, which may be revoked at any time. In no case shall DAZIA GROUP extract data from social media, unless the User’s consent to do so is specifically and expressly obtained (for example, to hold a contest).
• Confidentiality: The information provided by the User will, in any case, be considered confidential, and may not be used for purposes other than those described herein. DAZIA GROUP undertakes not to disclose or reveal information about the User’s claims, the reasons for the advice requested or the duration of its relationship with the User.
• Veracity of the data: The User declares that all the data provided by him/her are true and correct and undertakes to keep them up to date. The User will be responsible for the veracity of his or her data and will be solely liable for any conflicts or disputes that may arise as a result of false data. In order for us to keep personal data updated, it is important for the User to inform DAZIA GROUP whenever there has been any change in the data.
• Documentation by LegalDPO (https://legaldpo.es/), based on the information provided by the Data Controller. The content is in accordance with the regulations in force in February 2023, and may vary according to legislative changes or case law criteria, and it is the obligation of the holder to check that the regulations are in force at any given time.

SUPERVISORY AUTHORITY

DAZIA GROUP makes every effort to comply with data protection regulations, as this is our most valuable asset. However, we inform you that should you understand that your rights have been undermined, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos (AEPD)), located at C/ Jorge Juan, 6. 28001 – Madrid. More information on the AEPD. http://www.agpd.es/ Documentation by LegalDPO. https://legaldpo.es/

* For the purposes of this privacy policy, Dazia Capital Group is understood to be the following companies: Dazia Capital Spain, S.L., Dazia Capital Real Estate, S.L., Darya Homes.