Privacy policy

  1. Data Controller

    Data Controller: Deka Inmobilien Cristalia SLU (Edificio Alta Diagonal) en adelante (EDIFICIO ALTA DIAGONAL)
    Postal Address: Palacio Miraflores, Carrera de San Jerónimo 15
    Telephone: 93 419 97 00
    Email: joana.ruiz@cbre.com


  2. Processing

    EDIFICIO ALTA DIAGONAL only processes the personal data indicated below:

    1. Data collected through the website
      Purpose: Respond to requests for information and contacts sent through the emails and contact forms provided on the website.
      Storage::The Data Subject's personal data will be kept until its deletion is requested by the Data Subject and in any case for a maximum period of five years.
      Legitimacy of processing: Consent of the Data Subject.
      Recipients: Personal data will not be disclosed to or shared with other parties except where there is a legal obligation to do so.
      Means of Obtaining Data:The personal data that we process is obtained from the data subject.

      The categories of data that are processed are as follows: - Identifying data
      - Contact information
      - No special category data is processed


    2. Control of Accesses

      Purpose: Security and control of access to buildings.
      Storage: The personal data of the Data Subject will be kept for a maximum period of one month.
      Legitimacy of processing: Legitimate interest of the data controller.
      Recipients: Personal data will not be disclosed to or shared with other parties except where there is a legal obligation to do so.
      Means of Obtaining Data: The personal data that we process is obtained from the Data Subject.

      The categories of data that are processed are as follows:
      - Identifying data
      - No special category data is processed


    3. Issuance of Identification and Access Cards

      Purpose: Management of systems to control building access and for the identification of personnel working in the building
      Storage: The data is stored for the time necessary for the purposes for which the personal data is collected.
      Legitimacy of processing: Legitimate interest of the data controller.
      Recipients: Personal data will not be disclosed to or shared with other parties except where there is a legal obligation to do so.
      Means of Obtaining Data: The personal data that we process is obtained from the Data Subject or from the company officer with legal responsibility.

      The categories of data that are processed are as follows:
      - Identifying data
      - No special category data is processed


    4. Contact Persons of Companies located in the Building

      Purpose: Building management and communications with representatives of tenants in the building.
      Storage:strong> Cancellation once the data is no longer necessary for the purpose for which it was collected.
      Legitimacy of processing: Execution of obligations derived from the rental contract
      Recipients: Personal data will not be disclosed to or shared with other parties except where there is a legal obligation to do so.
      Forms of Obtaining: The personal data that we process has been obtained from the Data Subject or their legal representative.

      The categories of data that are processed are as follows:
      - Identifying data
      - Contact information
      - No special category data is processed


    5. Event Attendees

      Purpose: The personal data collected will be processed with the purpose of managing the Data Subject's participation in the events or activities requested. Likewise, if you provide us with your consent, by marking the boxes provided for this purpose, we will use the data provided to send you information by post and/or electronically about our products and services, activities, offers and promotions.
      Storage: The personal data processed for the sending of information will be kept until the Data Subject requests its deletion. The remaining information will be kept for a maximum period of one year.
      Legitimacy of processing: The legitimacy of processing is based on the consent of the Data Subject given during the process of collecting their data.
      Recipients: No data will be transferred to third parties except under legal obligation
      Means of Obtaining Data: The personal data that we process is obtained from the data subject.

      The categories of data that are processed are as follows:
      - Identification and contact data
      - No special category data is processed


    6. Video surveillance

      Purpose: The personal data collected by our video surveillance system is processed with the purpose of ensuring that the facilities and property of EDIFICIO ALTA DIAGONAL, as well as its personnel and visitors, are kept safe and secure.
      Storage: The personal data of the data subject will be kept for a maximum period of 30 days, unless said data is necessary to assert a claim or to exercise rights, in which case the data in question will be kept until the purpose is accomplished.
      Legitimacy of processing: The legal basis for the processing of your data is the fulfilment of a mission carried out in the public interest, i.e. the security and video surveillance of our premises.
      Recipients: In the event of the commission of criminal acts, the images obtained will be communicated to state law enforcement authorities. Otherwise, no data will be transferred to third parties except where there is a legal obligation to do so.
      Means of Obtaining Data: The personal data that we process is obtained from the Data Subject through the video surveillance system.

      The categories of data that are processed are as follows:
      - Images
      - No special category data is processed


    7. Subscribers to the email list

      Purpose:To send you information of interest about our activities and events, and to send news about the Alta Diagonal building
      Storage: The Data Subject's personal data will be kept until its deletion is requested by the Data Subject.
      Legitimacy of processing: Consent of the Data Subject
      Recipients: Personal data will not be disclosed to or shared with other parties except where there is a legal obligation to do so.
      Means of Obtaining Data: The personal data that we process is obtained from the Data Subject.

      The categories of data that are processed are as follows:
      - Identifying data
      - Contact information
      - No special category data is processed


    8. Suppliers

      Purpose: Supplier management
      Storage: The data will be kept for 5 years. (Art. 1964 of the Código Civil (Spanish Civil Code))
      Legitimacy of processing: Performance of a contract concluded with the supplier.
      Recipients: Personal data will not be disclosed to or shared with other parties except where there is a legal obligation to do so.
      Means of Obtaining Data: The personal data that we process is obtained from the Data Subject.

      The categories of data that are processed are as follows:
      - Identifying data
      - Contact information
      - Goods and services supplied by the supplier
      - No special category data is processed


    9. Reservation and Rental of Rooms and Common Spaces

      Purpose: Management of reservations and rental of rooms and common spaces of the building as venues for events organised by the Data Subject
      Storage: The data will be kept for 5 years after the end of the assignment or rental of the space.
      Legitimacy of processing: Execution of the rental contract or rental of rooms or spaces
      Recipients: Personal data will not be disclosed to or shared with other parties except where there is a legal obligation to do so.
      Forms of Obtaining: The personal data that we process is obtained from the Data Subject or their legal representative.

      The categories of data that are processed are as follows:
      - Identifying data
      - Contact information
      - No special category data is processed


  3. Rights of the Data Subject

    - As a Data Subject, you have the right to obtain confirmation about whether we are processing your personal data.
    - Data Subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, for example, the data is no longer necessary for the purposes for which it was collected.
    - In certain circumstances, Data Subjects may request limitation on the processing of their data, in which case we will only keep their data as required for the exercise or defence of claims.
    - In certain circumstances and for reasons related to the specific situation, Data Subjects may object to the processing of their data. In these cases, your data will not be processed except for legitimate purposes or for the exercise or defence of possible claims.
    - In certain circumstances, you will have the right to receive your personal data in a structured machine- readable format of common use. You may exercise your rights by contacting us at the following email address joana.ruiz@cbre.com  or personally at our premises, You may also obtain further information about your rights and on how to exercise your rights by visiting the following website: https://www.aepd.es/

    Likewise, we inform you of your right to file a complaint with Agencia Española de Protección de Datos (Spanish Data Protection Agency), if you consider that any request to exercise your rights has not been given a satisfactory response or if, for any other reason, you consider that your personal data is not being processed correctly. Complaints may be submitted through the following website
    https://sedeagpd.gob.es/sede-electronica-web/


  4. Version

    This privacy policy is dated 24 June 2020. Any amendment to its terms will be published on this website.