Data protection

1. INFORMATION FOR THE USER

Proyecto Casa Servicios Inmobiliarios Personalizados, S.L. (Tufano Capital), with Spanish tax ID (NIF) B63083943, registered office at Carrer del Bruc, 10, 08960 Sant Just Desvern (Barcelona), business address at Carrer de París, 199, 4º-2ª, L'Eixample, 08036 Barcelona and email contact@tufanocapital.com, hereinafter the CONTROLLER, is the Controller of the processing of the User's personal data and informs you that this data will be processed in accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and therefore provides you with the following information about the processing:

Registered with the Barcelona Companies Registry (Registro Mercantil de Barcelona), volume 35,334, folio 92, sheet B-264,012, entry 1

Purpose of the processing: to maintain a commercial relationship with the User. The operations envisaged to carry out the processing are:

Sending commercial advertising communications by email, fax, SMS, MMS, social communities or any other electronic or physical means, present or future, that makes it possible to carry out commercial communications. These communications will be made by the CONTROLLER and related to its products and services, or those of its partners or suppliers with whom it has reached a promotion agreement. In this case, third parties will never have access to the personal data.

Carry out aggregate statistical analysis of site usage (page views and visits) through Google Analytics, only if the user has given express consent in the cookie banner. Without that consent, no tracking code is loaded.

Processing orders, requests or any type of petition made by the user through any of the contact methods made available to them.

Legal basis for processing: the data subject's consent, given when voluntarily contacting the CONTROLLER or when accepting analytics cookies (art. 6.1.a GDPR).

Data retention criteria: data will be kept while there is a mutual interest in maintaining the purpose of the processing and, when no longer necessary for that purpose, they will be deleted with appropriate security measures to guarantee the pseudonymisation of the data or their total destruction.

Communication of data: data will not be communicated to third parties, except under legal obligation.

Rights of the User:

Right to withdraw consent at any time.

Right of access, rectification, portability and erasure of their data and to the restriction of or objection to its processing.

Right to lodge a complaint with the supervisory authority (www.aepd.es) if they consider that the processing does not comply with current regulations.

The User may exercise these rights by writing to contact@tufanocapital.com.

Contact details to exercise your rights:

Tufano Capital

Carrer de París, 199, 4º-2ª, L'Eixample, 08036 Barcelona

2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

Users, by contacting the CONTROLLER through the contact channels made available to them (currently LinkedIn or other means of direct contact), provide their data freely and voluntarily so that their request can be dealt with. The User guarantees that the personal data provided to the CONTROLLER are truthful and is responsible for communicating any modification to them.

The CONTROLLER expressly informs and guarantees users that their personal data will not be transferred to third parties except where legally required or to data processors necessary for the provision of the service (such as web hosting or the analytics tool), always with the safeguards required by the GDPR, and that whenever any other type of transfer of personal data were to take place, the express, informed and unequivocal consent of the Users would be requested beforehand. The data provided through the contact channels will be limited to those strictly necessary to deal with the User's request.

3. SECURITY MEASURES

In accordance with the provisions of current personal data protection regulations, the CONTROLLER complies with all the provisions of Regulation (EU) 2016/679 of 27 April 2016 (GDPR) for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of Regulation (EU) 2016/679 of 27 April 2016 (GDPR), by which they are processed lawfully, fairly and transparently in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that it has implemented appropriate technical and organisational policies to apply the security measures established by Regulation (EU) 2016/679 of 27 April 2016 (GDPR) in order to protect the rights and freedoms of the Users and has communicated to them the appropriate information so that they can exercise them.