MERLIN, in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of personal data, hereinafter GDPR, as well as in compliance with applicable national regulations on data protection, provides information below on the following aspects related to the processing of personal data through this Website:
|Basic data protection information
|MERLIN PROPERTIES SOCIMI, S.A., (hereinafter, “MERLIN”). More info
|Your data shall be used to establish, maintain and manage the commercial, contractual or pre-contractual relationship in order to process your queries and to handle your requests for information and/or employment. More info
|As applicable, the data will be processed on the basis of establishing pre-contractual measures or the legitimate interest of MERLIN. More info
|We will disclose your data only to third parties to whom MERLIN is compelled to do so, such as public authorities, and with service providers that help or support us, regardless of whether these are companies of the business group to which MERLIN belongs or external partners.
|You may exercise the rights under articles 15 to 22 of Regulation (EU) 2016/679 as explained below. More info
1. IDENTIFICATION OF THE DATA CONTROLLER
MERLIN is one of the leading real estate companies listed on the Spanish Stock Exchange (IBEX-35), mainly engaged in the acquisition and management of tertiary real estate assets in Spain and Portugal. Its business activity is in three major markets: offices, retail and logistics. For your information, the company’s identification details are set out below:
Company name: MERLIN PROPERTIES SOCIMI, S.A., (hereinafter «MERLIN»).
VAT no. (NIF): A-86977790
Address: Paseo de la Castellana, 257, 28046, Madrid (Spain).
Registry data: Registered in the Madrid Companies register in volume 32.065, folio 206, sheet M-577.086.
2. PURPOSE AND LEGITIMATE BASIS FOR THE PROCESSING
You guarantee the accuracy of the personal data provided to MERLIN. MERLIN may periodically request that you review and update the personal data that it holds about you.
On the Website, you may find information about MERLIN’s services that you may find useful. In this sense, MERLIN will only request and process the data that is needed in order to process the query, provide the contracted service, or establish and maintain a commercial, contractual, and/or pre-contractual relationship with you.
The various purposes for which your personal data are processed and the legitimate basis for such processing are outlined below:
- On the basis of the application of pre-contractual measures: Manage your participation in any company recruitment procedures and duly process your application.
- On the basis of MERLIN’s legitimate interest: Manage requests for information, queries or complaints that you may submit via the various forms on the Website, to allow us to respond to your request as effectively and appropriately as possible.
2.1. DATA PROCESSING RELATED TO SIMPLE WEBSITE BROWSING
3. THIRD PARTIES TO WHOM YOUR DATA MAY BE TRANSMITTED
The personal data you provide to MERLIN may be disclosed to the following categories of recipients:
- Third parties to whom MERLIN is compelled to disclose information, such as public authorities, in order to comply with the requirements of such authorities and applicable regulations, when required to do so.
- As a result of the centralisation of administrative and IT processes within the Group, companies that are part of the MERLIN PROPERTIES Group for the purpose of effectively managing their contractual or pre-contractual relationships.
- Auditors, lawyers, accounting firms and other external consultants and the company’s product or services suppliers.
4. DATA SECURITY
MERLIN has appropriate policies and technical and organisational measures in place to safeguard and protect your personal data from unauthorised or illegal access, accidental loss or destruction, damage, and unauthorised or illegal use and disclosure.
In addition, we will take all reasonable precautions to ensure that our personnel and employees who have access to your personal data have received the appropriate training.
In any case, the user is hereby informed that no data transmission over the Internet is completely secure and is therefore done at his/her own risk. Despite our best efforts to protect your personal data, MERLIN cannot guarantee the security of any personal data transmitted via our Website.
5. DATA STORAGE
The storage period of your data shall be determined based on the duration of your relationship with MERLIN and the statutory periods. Therefore, the criteria used by MERLIN to establish the data storage periods have been determined in accordance with the requirements set out in the applicable legislation, regulations, and policy guidelines, as well as MERLIN’s operational requirements pertaining to the correct management of the relationship with the various categories of data subjects.
Once your relationship has ended, your personal data will be deleted as soon as all necessary actions have been taken to manage and terminate any remaining obligations between the parties, during which period all necessary administrative procedures shall be carried out, with the exception of those cases where you have given your express consent to receive commercial communications, in which case your data will be stored until you express your opposition.
Regardless of the fact that we only process your data for as long as is strictly necessary to fulfil the corresponding purpose, we will subsequently duly store and protect them in accordance with the regulations applicable at any given time, for as long as liabilities may arise from the processing of said data. After the applicable statute of limitations has expired, we will proceed to erase the personal data.
6. YOUR DATA PROTECTION RIGHTS
You may contact MERLIN at any time to exercise your rights of access, rectification, erasure, limitation and/or opposition, as well as the right to data portability and not be subject to automated decisions, by sending a request to MERLIN PROPERTIES SOCIMI, S.A. at Paseo de la Castellana, 257, 28046, Madrid (Spain), or to the following email address: firstname.lastname@example.org.
Finally, should you require more information about your data protection rights or should you need to file a complaint, you may write to the Spanish Data Protection Agency, domiciled at Calle Jorge Juan, 6, 28001, Madrid, for the purpose of safeguarding your rights.
8. CONTACT MERLIN
If you have any doubts or questions regarding the processing of your personal data, please write to MERLIN PROPERTIES SOCIMI, S.A. at Paseo de la Castellana, 257, 28046, Madrid (Spain), or at the following e-mail address: email@example.com.
© 2022 MERLIN Properties SOCIMI, S.A. All rights reserved.
Last updated: 14 June 2022