Privacy policy

Who is responsible for processing your data?

• Xenia Spain Real Estate Finance, S.L. (Xenia Capital)
• CIF: B88308168
• Glorieta de Rubén Darío, nº 3, 1.º izquierda, 28010 Madrid
• Data Protection Officer: dpo@xenia-cap.com

This Privacy Policy is governed by the provisions of Regulation (EU) 2016/679, of 27 April (GDPR), and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

We reserve the right to modify or adapt this Privacy Policy at any time. We recommend that you review it periodically to stay up to date.

Details of the data processing according to the group to which you belong are set out below.

Clients

What personal data do we process?

We will process the identification and contact details of the representatives of our clients, for the purpose of managing the contractual relationship we maintain with the legal entities they represent. If the client is a natural person, we will process their identification, contact and financial data solely to manage the contractual relationship we maintain with you.

For what purposes will we process your personal data?

• Preparing the budget and following up through communications between the parties.
• Providing information by electronic means regarding your requests.
• Sending commercial or event-related information by electronic means, provided that express authorisation exists or it falls within our legitimate interest.
• Invoicing and filing the corresponding taxes.

What is the legal basis for processing your data?

The existence of a contractual relationship between the parties.

How long will we keep your personal data?

For the duration of the relationship between the parties and, once it has ended, duly blocked for the limitation periods arising from it.

Website or email contacts

What personal data do we process?

If you provide us with data through the contact form, we will process your identification and contact details and any other information you share with us in the form. In addition, we may process your IP address, the operating system or browser you use, and the duration of your visit, on a pseudonymised basis.

For what purposes will we process your personal data?

• Managing the requested service, responding to your enquiry or processing your request.
• Sending commercial or event-related information by electronic means.
• Carrying out analysis and improvements to the website.

What is the legal basis for processing your data?

The consent of the user or the existence of a contractual relationship between the parties.

How long will we keep your personal data?

For as long as you remain linked with us or until you exercise a right that entails the deletion of your data.

Suppliers

What personal data do we process?

We will process the identification and contact details of the representatives of our suppliers, for the purpose of managing the contractual relationship we maintain with the legal entities they represent.

For what purposes will we process your personal data?

• Preparing the budget and following up through communications between the parties.
• Providing information by electronic means regarding your requests.
• Sending commercial or event-related information by electronic means, provided that express authorisation exists or it falls within our legitimate interest.
• Invoicing and filing the corresponding taxes.

What is the legal basis for processing your data?

The existence of a contractual relationship between the parties.

How long will we keep your personal data?

For the duration of the relationship between the parties and, once it has ended, duly blocked for the limitation periods arising from it.

Job applicants

What personal data do we process?

We will process the data you share with us in the context of a recruitment process or an unsolicited application. In general, we will process your identification and contact details and data relating to your professional or academic experience.

For what purposes will we process your personal data?

• Organising recruitment processes for hiring employees.
• Inviting you to job interviews and assessing your application.

What is the legal basis for processing your data?

The necessity of the processing for the performance of an employment contract, the recruitment process being a pre-contractual measure.

How long will we keep your personal data?

Until the recruitment process has ended and, in any case, for a maximum period of one year.

Additional information about the processing of your data

Do we include personal data of third parties?

No. As a general rule, we only process the data provided to us by the data subjects themselves. If you provide us with data belonging to third parties, you must inform such persons in advance and obtain their consent; failure to do so releases us from any liability for non-compliance with this requirement.

What about data belonging to minors?

We do not process data belonging to minors under the age of 14. You should therefore refrain from providing your data if you have not yet reached that age or, where applicable, from providing the data of third parties who have not reached that age. The data controller is released from any liability for non-compliance with this provision.

What security measures do we apply?

We have adopted an optimal level of protection for the personal data we handle and have implemented all the means and technical measures at our disposal, in line with the state of the art, to prevent its loss, misuse, alteration, unauthorised access and theft.

To which recipients will your data be disclosed?

Your data will not be disclosed to third parties, except where legally required. However, it may be disclosed to the State Tax Administration Agency (Agencia Estatal de Administración Tributaria) and to banks and financial institutions for the collection of payment for the service provided or product purchased, as well as to the data processors necessary for the performance of the agreement, with whom we will enter into the corresponding agreement under the terms of Article 28 of the GDPR.

What rights do you have?

You have the right to:

• Access your personal data.
• Request the rectification of your data if it is inaccurate.
• Request the erasure of your data.
• Withdraw any consent given.
• Request the restriction of the processing of your data.
• Not be subject to automated decisions.
• Obtain the portability of your data, which will be provided to you in a structured, commonly used and machine-readable format.

Lodge a complaint with the Spanish Data Protection Agency.

If you change any of your data, we would be grateful if you would inform us so that we can keep it up to date.

How to exercise your rights?

We have forms available for exercising your rights; you may request them by email or, if you prefer, use those prepared by the Spanish Data Protection Agency or by third parties.

The forms may be submitted in person, or sent by post or email to the address of the data controller indicated at the beginning of this text.

In the event of reasonable doubt as to your identity, we may ask you to provide identification in order to process your request.

How long do we take to respond to the exercise of rights?

One month from receipt of the request, extendable by a further two months where the complexity of exercising the right so requires, with due notice given to you in due time and form.

Do we use cookies?

If we use any type of cookies other than strictly necessary ones, you can find out more in the Cookie Policy.