Privacy policy · Elite Smart Build

1. Information for users

Who controls your personal data?

GRUPO GRL, S.L. is the CONTROLLER of the USER's personal data and informs the USER that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD).

Owner: GRUPO GRL, S.L.
Trade name: ELITE
Tax ID (NIF): B70328208
Registered address: Rúa Zeppelin 21-23, parcela 9, nave 13, Polígono Industrial Espíritu Santo, 15650 Cambre (A Coruña), Spain
Registry: Commercial Registry of A Coruña, volume 3445, folio 156, section 8, sheet C 48637, 1st entry
Email: info@elitesmartbuild.com
Phone: +34 981 276 459
Website: www.elitesmartbuild.com

What data do we collect?

Only what you type into the website's two forms. In the visit request: the hotel name, the chain if you give it, the city and country, the number of rooms, what you want to refurbish, anything you tell us, your name if you give it, your email and your phone number if you give it. In the contact form: your name, your company and phone number if you give them, your email, what you are writing about and your message. Each submission also includes the language of the page you write from and whether or not you agree to receive commercial communications. The website creates no accounts and installs no cookies or analytics tools of its own.

To stop mass submissions, the function that receives the forms keeps an encrypted fingerprint of your IP address for one hour, from which the address cannot be recovered. It lives only in the server's memory and is never stored.

What do we process your personal data for, and on what basis?

Depending on the form through which we obtained your personal data, we will process it confidentially for the following purposes:

In the contact form

To answer queries or any other request the user makes through any of the contact methods available on the controller's website (on the basis of the controller's legitimate interest, Article 6(1)(f) GDPR).
To send commercial and advertising communications by email, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that allows commercial communications to be sent. These communications will be sent by the controller and will relate to its own products and services, or to those of its partners or suppliers with which it has reached a promotion agreement. In that case, those third parties will never have access to the personal data (on the basis of the data subject's consent, Article 6(1)(a) GDPR).
To carry out statistical analysis and market research (on the basis of the controller's legitimate interest, Article 6(1)(f) GDPR).

In the visit request form (request for a quote)

To send commercial quotes for products and services (for the performance of a contract or pre-contractual steps, Article 6(1)(b) GDPR).
To send commercial and advertising communications by email, fax, SMS, MMS, social networks or any other electronic or physical means, present or future, that allows commercial communications to be sent. These communications will be sent by the controller and will relate to its own products and services, or to those of its partners or suppliers with which it has reached a promotion agreement. In that case, those third parties will never have access to the personal data (on the basis of the data subject's consent, Article 6(1)(a) GDPR).

Commercial communications are only sent to people who tick the box on the form agreeing to their data being processed to send commercial communications. The box is not required to send the form. No automated decisions are made with your data.

How long will we keep your personal data?

Data will be kept for no longer than necessary to fulfil the purpose of the processing or for as long as legal requirements call for it to be kept. When it is no longer needed, it will be erased with appropriate security measures to ensure it is anonymised or completely destroyed.

The website does not keep form data: it reaches Elite by email.

Who do we share your personal data with?

No personal data is expected to be disclosed to third parties except, where necessary to carry out the purposes of the processing, to our communications service providers, with which the CONTROLLER has signed the confidentiality and data processing agreements required by current privacy law.

Those providers, acting on the CONTROLLER's behalf, are the website's hosting (Vercel) and the email service that carries what you send us (Resend). They may process data outside the European Economic Area, with the safeguards the GDPR requires, such as the European Commission's standard contractual clauses.

3D tours

Matterport 3D tours load only when you choose to enter. Opening a tour connects your browser to that provider, which receives technical and usage data from the viewer and stores in your browser what is listed in the cookie policy. If you are already signed into Matterport, it may also use its session cookie. See its privacy information: Matterport viewer privacy.

What are your rights?

The USER has the following rights:

The right to withdraw consent at any time.
The right to access, rectify, port and erase your data, and to restrict or object to its processing.
The right to lodge a complaint with the Spanish supervisory authority (www.aepd.es) if you consider that the processing does not comply with current legislation.

Contact details for exercising your rights: GRUPO GRL, S.L., Rúa Zeppelin 21-23, parcela 9, nave 13, Polígono Industrial Espíritu Santo, 15650 Cambre (A Coruña), Spain. Email: info@elitesmartbuild.com.

2. Required and optional information

By ticking the relevant boxes and entering data in the fields not marked as optional on the forms, USERS expressly, freely and unequivocally accept that their data is needed for their request to be handled, while providing data in the remaining fields is voluntary. The USER guarantees that the personal data provided to the CONTROLLER is accurate and is responsible for reporting any changes to it.

The CONTROLLER states that the data not marked as optional is required, as it is needed to provide the USER with the best service. If not all the data is provided, the information and services provided cannot be guaranteed to fully match the USER's needs.

3. Security measures

In accordance with current personal data protection law, the CONTROLLER complies with all the provisions of the GDPR and the LOPDGDD in processing the personal data for which it is responsible, and expressly with the principles set out in Article 5 of the GDPR, under which data is processed lawfully, fairly and transparently in relation to the data subject, and is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

The CONTROLLER guarantees that it has put in place appropriate technical and organisational policies to apply the security measures set out in the GDPR and the LOPDGDD in order to protect the rights and freedoms of USERS, and has given them the information they need to exercise them.

For more information about privacy safeguards, you can contact the CONTROLLER at GRUPO GRL, S.L., Rúa Zeppelin 21-23, parcela 9, nave 13, Polígono Industrial Espíritu Santo, 15650 Cambre (A Coruña), Spain. Email: info@elitesmartbuild.com.

4. Privacy on social networks

GRUPO GRL, S.L., referred to below as the CONTROLLER, informs the USER that it has created a profile on the social network LinkedIn, that it is the controller of the personal data processing that takes place on that network, and that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April (GDPR) and Spanish Organic Law 3/2018 of 5 December (LOPDGDD). The processing information follows.

What do we process your data on the social network for?

Purpose of the processing: to maintain a relationship between the USER and the CONTROLLER, which may include the following:

Handling requests and queries sent to the controller.
Reporting on activities and events organised by the controller.
Reporting on products or services offered by the controller.
Interacting through the official profiles.

On what basis can we process your personal data?

Legal basis for the processing: Article 6(1)(a) GDPR, the data subject has given consent to the processing of their personal data for one or more specific purposes. The USER has a profile on the same social network and has chosen to join the CONTROLLER's network, showing interest in what it publishes there. By asking to follow our official profiles, the USER therefore consents to the processing of the personal data published on their profile.

The USER can consult the social network's own privacy policies at any time and set up their profile to protect their privacy.

The CONTROLLER has access to and processes the USER's public information, in particular their contact name. This data is only used within the social network and will only be added to a CONTROLLER file when needed to handle the USER's request.

How long will we keep social network data?

Retention criteria: data will be kept for as long as the USER does not withdraw the consent given, as set out in this privacy policy.

Who do we share social network data with?

Disclosure of data: the information the USER provides through the CONTROLLER's social network, including personal data, may be published, depending on the services the USER uses, and may therefore be publicly available to other users of the social network. From their profile, the USER can choose what information to make public in each case, see the permissions granted, and delete or deactivate them, as with any third-party application they no longer wish to use.

No personal data is expected to be disclosed to third parties outside the social network except, where essential to carry out the purposes of the processing, to our communications service providers, with which the CONTROLLER has signed the confidentiality and data processing agreements required by current privacy law.

What are your rights on the social network?

Rights of the USER: they can only be met in relation to information under the CONTROLLER's control.

The right to withdraw consent at any time.
The right to access, rectify, port and erase your data, and to restrict or object to its processing.
The right to lodge a complaint with the Spanish supervisory authority (www.aepd.es) if you consider that the processing does not comply with current legislation.

Use of the profile

The CONTROLLER will carry out the following actions:

Access to the public information on the profile.
Publication on the USER's profile of any information already published on the CONTROLLER's social network.
Sending personal, individual messages through the social network's channels.
Page status updates that will be published on the USER's profile.

The USER can always control their connections, delete content that no longer interests them and restrict who they share their connections with, through their privacy settings.

Posts

Once the USER follows or has joined the CONTROLLER's social network, they may post comments, links, images, photographs or any other type of multimedia content the network supports. In all cases, the USER must own the content posted, hold the copyright and intellectual property rights or have the consent of any third parties affected.

Any post on the social network, whether text, graphics, photographs, videos or other content, that undermines or may undermine morals, ethics, good taste or decency, and/or that infringes, violates or breaches intellectual or industrial property rights, image rights or the law, is expressly prohibited.

In such cases, the CONTROLLER reserves the right to remove the content immediately, without prior notice, and may request that the USER be permanently blocked.

The CONTROLLER is not responsible for content freely posted by a USER.

The USER should bear in mind that their posts will be seen by other users, so they are primarily responsible for their own privacy.

Images that may be posted on the social network will not be stored in any file by the CONTROLLER, but will remain on the social network.

Data of minors or people with disabilities

Access to and registration through the CONTROLLER's social network is prohibited for children under 14. If the USER has a disability, the involvement of the person holding parental authority or guardianship, or of their legal representative, will be required, with a valid document proving that representation.

The CONTROLLER is expressly released from any liability that may arise from the use of its social network by minors or people with disabilities. The CONTROLLER's social network does not knowingly collect any personal information from minors, so a USER who is a minor must not register, use the CONTROLLER's social network or provide any personal information.

Cookies

This website installs no cookies of its own. Technical browser storage and what the optional Matterport viewer stores are explained in the cookie policy.