Privacy Policy

PERSONAL DATA PROTECTION POLICY

PROPIEDADES TERCER MILENIO SL is an organization that collects personal data through various means, which gives it a significant responsibility in designing and organizing procedures to ensure compliance with data protection laws. Therefore, PROPIEDADES TERCER MILENIO SL will adopt all necessary security measures to guarantee the protection of the data collected.

In exercising these responsibilities, and with the aim of establishing the general principles that must govern the processing of personal data in the Organization, PROPIEDADES TERCER MILENIO SL approves this Personal Data Protection Policy, which it notifies and makes available to all its stakeholders, also respecting the following rules:

1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

2. Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD). 3. Law 34/2002, of July 11, on Information Society Services and Electronic Commerce (LSSI-CE).

I. SCOPE OF APPLICATION

This Personal Data Protection Policy will apply to PROPIEDADES TERCER MILENIO SL, its administrative, management and staff bodies, as well as all persons related to the Organization, including service providers with access to data (“Data Processors”).

The data controller for the personal data collected by the Organization is: PROPIEDADES TERCER MILENIO SL, with Tax Identification Number (NIF): B83709931, whose representative is: MUNA KREWI DE URQUIJO (hereinafter, the Data Controller). Their contact details are as follows:

Address: C/ SANTIAGO BERNABEU, 8, 6th Floor, Right, Madrid, Madrid, 28036

Contact phone number: 629828780

Contact email: ptm@ptm-inmo.com

II. INFORMATION ON THE CONTROLLER AND PROCESSING OF PERSONAL DATA AT PROPIEDADES TERCER MILENIO SL

Additional information on data processing is a set of more specific and expanded details that entities must provide to data subjects about how their personal data is managed. This concept stems from the transparency principle of the General Data Protection Regulation (GDPR) and complements the basic information initially provided, offering a greater level of detail on the processing activities.

PROPIEDADES TERCER MILENIO SL then provides additional information about the data processing it carries out:

New Paragraph

RIGHTS THAT BELONG TO THEM AND MEANS AT THEIR DISPOSAL

Anyone has the right to obtain confirmation as to whether PROPIEDADES TERCER MILENIO SL is processing personal data concerning them.

Interested parties have the right to access their personal data, as well as to request the rectification of inaccurate data, or, where appropriate, to request its erasure when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, interested parties may request the restriction of the processing of their data, in which case we will only retain it for the exercise or defense of legal claims, as well as to comply with legally established retention periods.

Furthermore, interested parties may object to the processing of their personal data. Therefore, PROPIEDADES TERCER MILENIO SL will cease processing their data, except for compelling legitimate grounds, or in the exercise of potential legal claims. Similarly, when certain circumstances exist and it is technically feasible, interested parties will have the right to have their personal data transmitted directly to another data controller or processor, upon request.

To exercise the aforementioned rights, you must contact us by sending a written request to:

● PROPIEDADES TERCER MILENIO SL C / SANTIAGO BERNABEU , 8. 6th RIGHT, MADRID, MADRID, 28036, or by email to ptm@ptm-inmo.com. We recommend attaching a copy of your ID to your application.

III. PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA The Personal Data Protection Policy is a proactive responsibility measure, intended to ensure compliance with applicable legislation in this area and, in relation to this, respect for the right to honor and privacy in the processing of personal data of all individuals who interact with PROPIEDADES TERCER MILENIO S.L. In accordance with the provisions of this Policy, the principles governing data processing within the organization are established, and consequently, the procedures and organizational and security measures that those affected by this Policy undertake to implement within their area of responsibility. In this regard, PROPIEDADES TERCER MILENIO S.L. will ensure compliance with the following principles: – Lawfulness, fairness, transparency, and purpose limitation. Data processing must always be communicated to the data subject through established clauses and procedures; and will only be considered legitimate if there is consent for the processing of data (with special attention to that given by minors), or it has another valid legal basis, and the purpose of the processing is in accordance with the applicable regulations. – Data minimization. The data processed must be adequate, relevant, and limited to what is necessary in relation to the various purposes of the processing. – Accuracy. The data must be accurate and, where necessary, kept up to date. In this respect, the necessary measures will be taken to ensure that personal data that are inaccurate with regard to the purposes of the processing are erased or rectified without delay. – Storage limitation. Data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purpose of the processing in question. – Integrity and confidentiality. Personal data will be processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organizational measures.

 – Data transfers. The purchase or acquisition of personal data from illegitimate sources is prohibited, or in cases where such data has been collected or transferred in violation of the law or its legitimate origin is not sufficiently guaranteed.

 – Contracting of suppliers with access to data. Only suppliers offering sufficient guarantees to implement appropriate technical and security measures in data processing will be selected for contracting. A formal contract will be drawn up with these suppliers to this effect.

 – International data transfers. All processing of personal data subject to European Union regulations that involves a transfer of data outside the European Economic Area must be carried out in strict compliance with the requirements established in the applicable law.

 – Rights of the affected persons. The Organization will facilitate the exercise of the rights of access, rectification, erasure, limitation of processing, objection and portability by the affected persons, establishing for this purpose the internal procedures, and in particular, the models that are necessary and appropriate for their exercise, which must satisfy, at least, the legal requirements applicable in each case.

PROPIEDADES TERCER MILENIO SL will promote that the principles set out in this Personal Data Protection Policy are taken into account:

1. In the design and implementation of all work procedures.
2. In the products and services offered.
3. In all contracts and obligations that they formalize or assume.
4. In the implementation of any systems and platforms that allow access to your plan by employees or third parties and/or the collection or processing of personal data.

 IV. PERSONAL DATA OF MINORS Respecting the provisions of Articles 8 of the GDPR and 7 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and the guarantee of digital rights, only those over 14 years of age may give their consent for the lawful processing of their personal data by PROPIEDADES TERCER MILENIO S.L. If the data subject is under 14 years of age, the consent of the parents or guardians will be necessary for the processing, and this will only be considered lawful to the extent that they have authorized it.

 V. PRIVACY AND SECURITY OF PERSONAL DATA. PROPIEDADES TERCER MILENIO S.L. undertakes to inform the user, without undue delay, when a personal data breach occurs that is likely to pose a high risk to their rights and freedoms. In accordance with Article 4 of the GDPR, a personal data breach is defined as any breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed. Personal data will be treated as confidential by the Data Controller, who undertakes to inform and ensure, through a legal or contractual obligation, that such confidentiality is respected by its employees, associates, and any person to whom the information is made accessible.

 VI. COMMITMENT OF THE STAFF OF PROPIEDADES TERCER MILENIO S.L. Therefore, we state that the employees of PROPIEDADES TERCER MILENIO SL are informed of this Policy, and declare themselves aware that personal information is an asset of PROPIEDADES TERCER MILENIO SL, and in this respect they adhere to it, committing to the following: – To carry out the awareness training in Data Protection that PROPIEDADES TERCER MILENIO S.L makes available to them. – Apply the user-level security measures applicable to your job, without prejudice to any responsibilities for their design and implementation that may be assigned to you based on your role within PROPIEDADES TERCER MILENIO S.L. – Use the established forms for exercising rights by affected users and inform PROPIEDADES TERCER MILENIO SL immediately so that a response can be provided. – Inform PROPIEDADES TERCER MILENIO S.L, as soon as you become aware of any deviations from this Policy, particularly “Personal Data Security Breaches,” using the established form.

 VII. CONTROL AND EVALUATION PROPIEDADES TERCER MILENIO S.L will carry out an annual verification, evaluation and assessment, as well as whenever there are significant changes in data processing, of the effectiveness of the technical and organizational measures to guarantee the security of the processing.