VR Homes
Privacy policy
This translation is provided for information. If there is any discrepancy, the Spanish version prevails.
This page explains what personal data we process when you visit this website, get in touch with us or rent one of our flats, what we use it for, how long we keep it and what your rights are. It is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the protection of personal data and the guarantee of digital rights (LOPDGDD).
Summary
| Controller | Viure Ribas CB (VR Homes) |
|---|---|
| Purpose | To answer your enquiries, prepare and sign the seasonal rental contract, and look after you while you live in the flat, including any incidents and repairs. |
| Legal basis | Pre-contractual steps and performance of the contract, compliance with legal obligations, your consent for health data if you come for medical treatment and, for security, our legitimate interest. |
| Recipients | Only those who need to be involved to perform the contract (the insurer if there is a claim, whoever repairs a fault, the building's concierge service) and our providers, which process data on our behalf. |
| Retention | Twelve months if the enquiry does not lead to a booking; sixty days for the documents of anyone who does not go on to sign; if you sign, for as long as the contract lasts and the legal periods afterwards. |
| Your rights | Access, rectification, erasure, objection, restriction and portability, and the right to complain to the Spanish Data Protection Authority. |
1. Who the controller is
The controller of your data is Viure Ribas CB, trading as VR Homes.
- Tax ID (NIF): E71247670
- Address: Carrer del Camp 69, 08022 Barcelona
- Email: info@viureribashomes.com
We have not appointed a data protection officer because our activity and size do not require one. For any question about your data, write to the email address above.
2. What data we process
If you write to us through the form
Your full name, email address, phone number (if you give it), the area you're interested in, your move-in and move-out dates, the number of people, the language of the page you write from and whatever you tell us in your message.
If you contact us by other means
The data you give us when you write or call: your email address or phone number, the content of your messages and any files you send.
If you rent one of our flats
To prepare the contract we ask you, through a personal link to our portal, for: your full name, the type and number of your identity document, your permanent address, your contact details (WhatsApp number and email address), the dates of your stay and its purpose.
We also ask for a copy of your identity document and the documents showing that the stay is temporary: your enrolment or admission letter if you are coming to study, or your employment contract or a letter from your employer if you are coming for work. If you are coming for medical treatment, the supporting document may contain health data: we only process it with your explicit consent and solely to show the reason for the stay.
While you live in the flat we also process what you tell us on WhatsApp or through the tenant area of the portal: your messages, the incidents you report and the photos and videos you send us so that we can resolve them. To sign in to the tenant area we send a one-time code to your WhatsApp.
While you browse the website
This website uses no cookies and no analytics, advertising or tracking tools, and it loads no third-party content. Like any web server, our hosting provider's server automatically logs some technical data about each visit (IP address, date and time, page requested and browser type) in order to serve the website and protect it against attacks.
To prevent mass submissions through the form, we calculate an encrypted fingerprint of your IP address that cannot be turned back into it, and we delete it within 24 hours at most. We do not store your IP address with your enquiry.
Data we don't need
Please don't include health data or other special categories of data in your messages, or copies of identity documents. When we need documents for the contract, we will ask for them through our portal.
If you give us data about other people (for example, those who will live with you), make sure they agree and pass this information on to them.
3. What we use it for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and telling you about the availability and price of our flats. | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). If your enquiry is not about a rental, our legitimate interest in replying to you (Art. 6(1)(f) GDPR). |
| Preparing and signing the seasonal contract, checking your identity and showing that the stay is temporary. | Performance of a contract to which you are a party, or of pre-contractual steps (Art. 6(1)(b) GDPR), and compliance with legal obligations (Art. 6(1)(c) GDPR). |
| Showing medical treatment as the reason for the stay, where that applies. | Your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw at any time. If you withdraw it, the reason for the stay will have to be shown in another way. |
| Looking after you during your stay: answering your messages, handling incidents and faults, arranging repairs and, if there is a claim, notifying the insurer. | Performance of the contract (Art. 6(1)(b) GDPR). |
| Keeping the website, the portal and the form secure, and preventing abuse. | Legitimate interest in protecting our systems and the people who use them (Art. 6(1)(f) GDPR). |
| Meeting our legal obligations and responding to requests from the authorities. | Compliance with legal obligations (Art. 6(1)(c) GDPR). |
We do not use your data to send you advertising and we do not build profiles.
How we look after you. We use an artificial intelligence assistant that reads your messages and suggests a reply to us. No message goes out until a member of our team has reviewed and approved it, so we do not take decisions based solely on automated processing. We only give the assistant what it needs to understand your request: we do not send it your identity document, your phone number or your bank details.
On the form, your name, email address and the box confirming you have read this information are required: without them we cannot reply. All other fields are optional.
4. How long we keep it
- Enquiries that don't lead to a booking: twelve months from the last contact. After that we delete them.
- Documents from anyone who does not go on to sign the contract: sixty days from when they send them to us. After that we delete them, together with the rest of their data on the portal.
- If we sign a contract: for as long as the relationship lasts and, afterwards, for the limitation periods for legal claims and those required by tax and accounting rules.
- Photos, videos and communications about incidents: for as long as the contract lasts and, afterwards, for the periods during which damage or insurance claims can be brought.
- Sign-in codes for the tenant area: they expire after ten minutes.
- Backups: they are encrypted, and the oldest are deleted automatically after thirty days at most.
- Encrypted fingerprint of the form's IP address: 24 hours at most.
- Server technical logs: the limited period for which our hosting provider keeps them for security reasons.
5. Who we share it with
We neither sell nor share your data. We only disclose it where this is needed to perform the contract or to meet a legal obligation, and only what is strictly necessary:
- The owner of the flat, where the owner signs the contract as landlord.
- The insurance broker and the building's insurer, if a claim has to be made: the address, your name and phone number, and a description of what happened.
- The professionals who repair a fault and the building's concierge service, whatever they need to access the flat and fix it: your name, your phone number and a description of the incident.
- Public authorities, courts and tribunals, where the law requires us to hand it over.
Apart from that, the following providers process data on our behalf, as data processors and under a contract that requires them to protect it and to use it only on our instructions. They work for us: they are not recipients that can use your data for their own purposes.
- Hostinger International Ltd. (Cyprus): hosting for the website, the portal and our servers, located in data centres in the European Union.
- Google Ireland Limited (Ireland): email, through Google Workspace. Enquiries sent through the form reach us by email.
- WhatsApp Ireland Limited (Ireland), part of the Meta group: the WhatsApp messaging we use to communicate with the people who live in our flats.
- Anthropic: the artificial intelligence assistant that helps us prepare our replies. Under its contract, it does not use your data to train its models.
6. International transfers
The website, the portal and our servers are in data centres in the European Union.
Google and the Meta group, which owns WhatsApp, may process data in the United States. Both companies participate in the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission, and they also apply the standard contractual clauses approved by the Commission.
Anthropic, which provides our artificial intelligence assistant, may also process data in the United States, with the standard contractual clauses approved by the European Commission as the safeguard.
7. Your rights
You can exercise the following rights at any time, free of charge:
- Access: find out whether we process your data and get a copy.
- Rectification: correct data that is inaccurate or incomplete.
- Erasure: ask us to delete your data, for example when it is no longer needed.
- Objection: object to processing based on our legitimate interest.
- Restriction: ask us to keep your data without using it, in the cases provided for by law.
- Portability: receive the data you gave us in a structured, commonly used format, or have us send it to another controller.
If you gave us your consent to process a medical document, you can withdraw it at any time, without affecting anything done before you withdrew it.
To exercise them, write to info@viureribashomes.com or by post to Carrer del Camp 69, 08022 Barcelona, saying which right you wish to exercise. If we have reasonable doubts about your identity, we may ask for additional information to confirm it. We will reply within one month, which may be extended by two further months for complex requests; if so, we will tell you within the first month.
If you believe we have not handled your request properly, or that we process your data unlawfully, you can lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, www.aepd.es), C/ Jorge Juan, 6, 28001 Madrid. We would appreciate it if you told us first, so that we can try to resolve it.
8. Minors
Our flats are let to adults. We do not knowingly collect data from children under 14; if we find that such data has been sent to us, we will delete it.
9. Security
We apply technical and organisational measures appropriate to the risk: the website and the portal are served only over an encrypted connection (HTTPS); enquiries and documents are stored outside the public part of the server and are only released to someone who has signed in; the tenant area is accessed with a one-time code; backups are encrypted; access to data is limited to the people who need it for their work, and we only work with providers that offer sufficient guarantees.
10. Changes to this policy
We will update this policy when our processing or the law changes. The date of the last update appears at the top of the page. If a change is significant, we will say so clearly on the website.