MRF RENTAL, S.L., which operates under the trade name Madrid Rental Flats, provides information on the processing of personal data received through this website, enquiries, bookings, job applications and the management of stays.
This policy applies in accordance with the General Data Protection Regulation (GDPR), Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights, and any other applicable rules.
1. Data controller
- Company name
- MRF RENTAL, S.L.
- Trade name
- Madrid Rental Flats
- Tax ID
- B87933552
- Address
- Calle Miguel Ángel, 3, 28010 Madrid
- Telephone
- 91 700 03 88
- contacto@madridrentalflats.com
- Website
- https://madridrentalflats.com
For any enquiry about the processing of your personal data or to exercise your data protection rights, you may contact MRF RENTAL, S.L. at contacto@madridrentalflats.com.
2. Data we may process
The data processed will depend on the request or the relationship with MRF RENTAL, S.L. It may include:
Identification and contact details.
Information needed to prepare proposals and manage bookings, contracts, occupants and stays.
Billing, payment and company-relationship data.
Communications relating to requests, maintenance, incidents or complaints.
Information required by the rules applicable to occupant registration and communications to the authorities.
Academic and professional data included in job applications.
Technical data derived from use of the website, in accordance with the information on cookies and the services used.
Only the data needed for each purpose will be requested. Health data or other especially sensitive information that is not necessary to handle the request should not be sent.
3. Purposes and legal bases
Handling of enquiries and requests
We use the data to respond to enquiries, check availability and prepare proposals. The legal basis is the taking of pre-contractual steps requested by the data subject or, where the enquiry is not contractual in nature, the legitimate interest in dealing with it.
Management of bookings and stays
We process the data needed to enter into and perform contracts, manage occupants, arrivals, departures, extensions, payments and invoices, and to meet needs related to the stay. The legal basis is the performance of the contract or the taking of pre-contractual steps.
Where a company books accommodation for other people, occupants’ data will be processed on the applicable legal basis, including the legitimate interest in arranging and providing the requested accommodation, without prejudice to any applicable legal obligations.
Compliance with legal obligations
We process the data required by tax, accounting and administrative obligations and, where applicable, by occupant-registration and reporting duties towards the competent authorities.
Professional relationships
We manage relationships with client companies, agencies, owners and suppliers on the basis of the contractual relationship and, where applicable, the legitimate interest in maintaining the professional contacts needed.
Marketing communications
We may send information about our services where consent has been given or where the legal conditions for informing customers about our own similar services to those already contracted are met.
Claims and defence of rights
We may use the data needed to handle complaints, prevent fraudulent activity and defend rights, on the basis of legitimate interest and any applicable legal obligations.
Job applications
Data provided by candidates will be used to assess their participation in selection processes and to take the pre-contractual steps requested when submitting an application.
CVs will be kept only during the selection process and will be securely destroyed when the application is discarded or the process ends.
4. Data required to handle the request
The fields marked as mandatory and the information required to enter into a contract or to comply with legal obligations are necessary to handle the corresponding request.
Failure to provide that data may prevent us from responding properly, entering into the contract or providing the requested service. Optional data will be identified as such.
5. Recipients and providers
Data may be accessed by authorised staff and by providers who need to take part in the management of the service, with access limited to the information required.
Depending on the case, providers of IT and communications systems, administrative management, collections, professional advice, cleaning, maintenance and guest assistance during the stay may be involved.
Providers that process data on behalf of MRF RENTAL, S.L. will be subject to the contracts and obligations required by data protection law.
Data may also be disclosed to public authorities, courts and other authorities where there is a legal obligation or a valid request.
MRF RENTAL, S.L. does not sell personal data or provide it to third parties for use in their own marketing campaigns without a legal basis allowing it.
6. Google reCAPTCHA and international transfers
This website uses Google reCAPTCHA to protect forms against spam, automated submissions and fraudulent use.
To carry out this check, the service processes technical data that may constitute personal data, such as the IP address, browser and device information, and signals of interaction with the page.
The use of reCAPTCHA involves the disclosure of information to Google and may entail its processing outside the European Economic Area, including the United States. Google acts as a data processor in accordance with the data protection terms applicable to the service.
International transfers are subject to the mechanisms provided for in Google Cloud’s terms, including, where applicable, the standard contractual clauses approved by the European Commission. You may consult these terms at https://cloud.google.com/terms/data-processing-addendum or request information at contacto@madridrentalflats.com.
Where consent is required to activate reCAPTCHA and its associated technologies, it will be requested in advance and may be withdrawn through the website’s privacy settings mechanism.
7. Marketing communications
Reading this policy and sending an enquiry do not amount to authorisation to receive advertising.
Where consent is required for marketing communications, it will be requested separately. If information is sent to customers about our own similar services, the conditions laid down by applicable law will be respected.
Each communication will include a simple and free way to stop receiving it. You may also request this by writing to contacto@madridrentalflats.com.
8. Data retention
Data will be retained for as long as necessary to fulfil the purpose for which it was collected.
Contractual, tax and accounting records will be kept for the periods required by law and those needed to deal with possible liabilities. When deletion is due, data that must be retained because of legal liability will remain blocked, without being used for other purposes, until it can be destroyed.
Guest-registration data subject to Royal Decree 933/2021 will be retained for three years from the end of the service.
Job applications will be managed in accordance with the specific period indicated in section 3.
9. Rights of data subjects
You may request access to your data, its rectification or erasure, restriction of processing, objection and portability, where applicable.
If processing is based on your consent, you may withdraw it at any time. This does not affect processing carried out lawfully before withdrawal.
To exercise your rights, write to contacto@madridrentalflats.com or send your request to MRF RENTAL, S.L., Calle Miguel Ángel, 3, 28010 Madrid, stating the right you wish to exercise.
Additional information to verify your identity will only be requested where there are reasonable doubts about it.
The request will be handled within the time limits laid down by law. If you consider that your rights have not been adequately addressed, you may lodge a complaint with the Spanish Data Protection Agency at https://www.aepd.es.
10. Automated decisions
MRF RENTAL, S.L. does not use decisions based solely on automated processing that produce legal effects concerning individuals or similarly significantly affect them.
If processing of this nature were introduced, the information required by law would be provided in advance.
11. Security and confidentiality
MRF RENTAL, S.L. applies security measures adapted to the nature of the data and the risks of the processing in order to prevent unauthorised access, loss, alteration or undue disclosure.
Access to the information is limited to those who need to know it to perform their duties, subject to the corresponding confidentiality obligations.
12. Data received from companies, agencies and other persons
Data may be provided directly by the data subject or received from companies, domestic or foreign agencies and persons who arrange a stay on their behalf.
In these cases, identification and contact data and the data needed to manage the booking and the stay may be received.
Anyone who discloses data relating to other people must be authorised to do so and must provide them with this policy. MRF RENTAL, S.L. will fulfil the information obligations that apply to it in respect of the individuals concerned.
13. Minors
Where it is necessary to process data of accompanying minors, it must be provided by their legal representatives or by the responsible adult, in accordance with applicable law.
The website is not intended for minors to contract services independently.
14. Cookies and web services
Information on cookies and similar technologies is set out in the Cookie Policy available on this website.
Where their use requires consent, it will be requested before they are activated. Preferences may be changed through the configuration mechanism provided.
15. Updates
This policy may be amended when data processing, services or applicable legal requirements change.
The update date will be indicated on the page. Where a change requires specific information to be given to the individuals concerned or a new consent, this will be done in accordance with the applicable rules.