PRIVACY POLICY FOR TENANTS AND PROSPECTIVE TENANTS
Introduction
Truliving Vallecas, S.L.U. as the owner of the building (hereinafter referred to as "Truliving Vallecas", the "Company" or "we"), in accordance with the current legislation on the Protection of Personal Data, informs the individuals who have formalised a lease or reservation in the flexliving space or have shown interest in formalising one (hereinafter referred to as the "Tenant", the "Potential Tenant", "You" or "You"), of the Privacy and Data Protection Policy that applies to the processing of their personal data.
The Company undertakes to process the data of the Tenant and the Prospective Tenant in accordance with the personal data protection regulations applicable and in force from time to time. Specifically, the Company shall comply with the provisions of the General Data Protection Regulation ("GDPR") and the Organic Law on Data Protection and Guarantee of Digital Rights ("LOPDGDD") and any other applicable correlative regulations in force from time to time. The Company informs you of its Privacy Policy, in order to make you aware of the processing of your data, as well as the fundamental principles on personal data protection that it applies.
The Company informs you of its Privacy Policy, in order to make you aware of the processing of your data, as well as the fundamental principles on personal data protection that it applies.
You should read this policy carefully to find out what data we process about you, how it is processed, for what purposes, for how long, with whom it may be shared and what your rights are in this respect and how you can exercise them.
Who is responsible for the processing?
The person responsible for the processing of Tenants' personal data is Truliving, Vallecas S.L.U., a company with registered office at Luchana, 23, 7, 28010 Madrid and with tax identification number B-88476775.
Contact details of the data controller.
If you have any doubts about the processing of your Personal Data, you can contact us by sending your communication by (i) post to the address Luchana, 23, 7, 28010 Madrid; or by (ii) e-mail to the address privacidad@grupogmp.com .
What personal data do we collect and what do we use it for?
Based on this Privacy Policy, "Personal Data" is considered to be any information that identifies you or can be used to identify you, such as your name, telephone number or e-mail address, and which is necessary to provide the services properly.
These are processed when you interact with the Company for the management of your request for information or the management of your stay as described in this Privacy Policy.
The Company requests that you update your Personal Data as they change, and always provide accurate information, as the Company must have your current information.
- The Company will process the Tenant's Personal Data in accordance with the purposes set out below:
| Purpose | Basis of legitimacy | Category of Personal Data |
|---|---|---|
| Reservation management | Necessary for the performance of the contract or for the implementation of precontractual measures (art. 6.1.b of the GDPR) | Name, surname, telephone number, email address |
| To offer you the services included in the rental (wifi, electricity, water, gym, etc.) | Necessary for the execution of the contract or for the implementation of measures pre-contractual information (art. 6.1.b of the RGPD) | Name, surname, email address, card identifier |
| Control access to the building and common areas by card. | Necessary for the security of the Tenant based on the legitimate interest of the Company in maintaining the security and control of the premises (art. 6.1.f of the GDPR). GDPR) | Card identifier, access logs |
| Video surveillance | Necessary for the security of the Tenant based on the legitimate interest of the Company in maintaining the security and control of the premises (art. 6.1.f of the GDPR). More information on this processing is available at privacidad@grupogmp.com | Image |
| Send satisfaction surveys after using our services |
Necessary for the Company to improve the quality of the service it offers based on its legitimate interest (art. 6.1.f of the GDPR). | Name, surname, email |
| To send commercial communications about events, additional services and promotions. | Only if the Tenant has given his consent to it according to (art. 6.1.a of the GDPR or according to art. 21 of the LSSI) | Name, surname, email |
| To send important notices and updates about your stay or booking | Necessary for the execution of the contract or for the application of pre-contractual measures (art. 6.1.b of the RGPD) | Name, surname, email, contractual information |
- The Company will process the Personal Data of the Prospective Tenant in accordance with the purposes set out below:
| Purpose | Basis of legitimacy | Category of Personal Data |
|---|---|---|
| Reservation management | Necessary for the performance of the contract or for the application of precontractual measures (art. 6.1.b of the RGPD) | Name, surname, telephone, email, postal address, usual residence |
| Assess you as a prospective Tenant (pre-contractual assessment) | Necessary to assess whether the Prospective Tenant meets the requirements before entering into the contract on the basis of his/her legitimate interest/performance of the contract or for the application of pre-contractual measures (art. 6.1.f/art. 6.1.b of the GDPR). More information on this processing is available at recepcion@truliving.es | Name and surname, ID card/passport; scholarship/enrolment certificate in the case of students; payslips, employment contract in the case of employed persons; income tax return, bank statement and IAE registration in the case of self employed persons; official benefit decision for unemployment benefit, bank statement, guarantee in the case of from unemployed persons; pension certificate, bank account statement in the case of self-employed persons; official decision of unemployment benefit, bank account statement, guarantee in the on in the case of from unemployed persons |
| Send commercial communications about events, additional services and promotions |
Only if the Potential Tenant has provided his/her consent to this in accordance with (art. 6.1.a of the RGPD or in accordance with art. 21 of the LSSI) | Name, surname, email |
| Send notices and important updates on their potential reservation | Necessary for the execution of the contract or for the application of pre-crontractual measures (art. 6.1.b od the GDPR) | Name, surname, email, contractual info |
| To deal with requests made through our communication channels. | Necessary to attend to and manage the relationship entered into for the application of measures Name and surname, email pre-contractual (art. 6.1.b of the RGPD) or to attend to any request you have made to us you have made (on the legitimisation basis of art 6.1.a GDPR of your consent) |
Name, surname, email |
Retention periods
Your Personal Data will be kept for the time strictly necessary for the purposes of the processing for which they have been provided, provided that, to the extent applicable, you have not revoked your consent.
Thereafter, your Personal Data will be blocked as appropriate and will be retained until the expiry of the legal blocking periods related to the responsibilities to which Truliving Vallecas is subject.
Recipients of Personal Data
We inform you that your Personal Data will not be passed on to other persons or companies to be used for their own purposes.
Your Personal Data may be accessed by service providers or suppliers with whom the Company has entered into respective agreements when they need to have access to such data in order to preserve Truliving Vallecas' relationship with you. In any case, the necessary legal and organisational measures will be taken to ensure the security of and access to the Personal Data.
However, Truliving Vallecas will disclose to the competent authorities the Personal Data and any other information in its possession or accessible through its systems and required in accordance with the legal and regulatory provisions applicable to the case. In particular, it will provide, where appropriate, the data on hiring and overnight stays to the Ministry of the Interior in compliance with the obligations set out in Royal Decree 933/2021, of 26 October, on the basis of legitimisation consisting of compliance with a legal obligation (art. 6.1.c) RGPD).
Rights of Tenants and Potential Tenants
In accordance with data protection regulations, you have the following rights:
| Right | What does this consist of? |
|---|---|
| Right of access | Obtain confirmation as to whether or not Personal Data are being processed and, if so, access to the Personal Data and to information about the purposes of the processing, the categories of Personal Data concerned, the recipients to whom the Personal Data are disclosed and the intended period for which the Personal Data will be stored, among other information. |
| Right of rectification | To obtain the rectification of inaccurate Personal Data concerning him/her. |
| Right of portability | To receive the Personal Data concerning him/her, in a structured, commonly used and electronically readable format, as well as to share such data with another data controller, without hindrance, in the cases provided for in the regulations |
| Right to object | To withdraw consent at any time, without prejudice to the lawfulness of the processing previously carried out. Right to object to a processing activity based on legitimate interests |
| Right to erasure |
To erase Personal Data relating to him/her, when the data are no longer necessary for the purposes for which they were collected |
| Right of restriction |
To obtain the restriction of the processing of Personal Data, which will subsequently only be processed for the establishment, exercise or defence of legal claims. |
If you wish to exercise any of these rights, you may contact Truliving Vallecas, S.L.U. by
sending a written request to the address Luchana, 23, 7, 28010 Madrid or by e-mail to privacidad@grupogmp.com .
We inform you that Truliving Vallecas will deal with the right exercised within a maximum period of one month from the date of receipt of the request, although this period may exceptionally be extended to two months, taking into account the complexity of the request, in which case the Tenant or Potential Tenant who has exercised their right to data protection will be notified.
Likewise, if you consider that the processing of your Personal Data does not comply with the regulations in force, you have the right to lodge a complaint with the competent supervisory authority. In the case of Spain, you may address your complaint to the Spanish Data Protection Agency (AEPD) or any body that may replace it in the future.
International data transfers
The Company informs you that, although no international transfer is envisaged, the provision of services or the handling of requests for information by Truliving Vallecas to the Tenant and Prospective Tenant may be associated with implicit international data transfers.
If this is the case, such transfers will be regulated in accordance with the provisions of applicable data protection legislation, as indicated by such third parties.
Personal Data of third parties
In the event that you include Personal Data relating to another person, you must first inform such persons of the content of this Privacy Policy. In any case, you warrant that you have obtained the prior consent of such third parties for the communication of their Personal Data to the Company.
Security measures
Truliving Vallecas will treat your Personal Data as strictly confidential. Truliving Vallecas has implemented appropriate technical and organisational measures to ensure the security of your Personal Data and to prevent their destruction, loss, unlawful access or unlawful alteration. In determining these measures, criteria such as the scope, context and purposes of the processing, the state of the art and the existing risks have been taken into account.
Modification of the Privacy Policy
The Company reserves the right to modify and/or update this privacy policy at any time in order to adapt it to applicable legislation. In any case, you will be notified of any substantial change affecting the processing of your Personal Data, either by direct communication or by any other means that ensures that you are adequately informed.
Last update of this policy: 17 September 2025.