1- WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
The entity responsible for processing personal data and managing the website: candoliving.com is LORNIN IBÉRICA, SL, a business entity with its registered office at C/ L'Emancipació, 21-23, Ground Floor, 08022 Barcelona, and Tax ID number B42891630, registered in the Mercantile Registry of Barcelona, Volume 48058, Folio 90, Section 8, Page B 570971, Entry 9 (hereinafter referred to as "LORNIN IBÉRICA").
LORNIN IBÉRICA has implemented the necessary technical and organizational measures to comply with data protection regulations concerning the personal data it processes.
For data protection-related inquiries, you may contact LORNIN IBÉRICA at:
Phone: +34 931 600 303
Email: gdpr@yurbban.com
2. WHAT TYPE OF PERSONAL DATA DO WE PROCESS, AND FOR WHAT PURPOSE?
1. Types of Personal Data We Process
To maintain confidentiality, we collect only the minimum amount of data necessary for our interactions, limited to what you voluntarily provide, what is required for the development of the contractual relationship, or what is mandated by law.
We may collect and process the following categories of personal data:
a. Names, titles, gender of our clients and their family members, as well as all data necessary for contracting our services.
b. Contact information and email addresses of individuals who leave their data in our contact form or request information via email.
c. Identification details of our employees, CVs, social security data, banking information, and all data required for the development of the employment relationship. This also includes information from candidates’ CVs.
d. Identification details of our suppliers and their contact persons if they are companies.
e. Images captured by our video surveillance cameras.
f. Information collected when you use our website and other digital platforms, if applicable.
When you use our website, we may record your IP address, browser type, operating system, referring website, and browsing behavior.
2. Your personal data will only be used for the following purposes:
a. To register you in our database if you are a client or potential client.
b. To carry out the necessary commercial and administrative processes with users of our website and our clients or potential clients.
c. At LORNIN IBÉRICA, we process the information you provide to respond to your inquiries, provide information about our services, manage your stays or service provisions, handle purchases from our suppliers, and comply with legal obligations arising from these activities.
d. To communicate with you to respond to your inquiries, handle your complaints, or obtain your feedback on the quality of our facilities, services, or customer care.
e. To record images captured by our video surveillance cameras for security purposes. These images may be shared with law enforcement or judicial authorities upon request.
f. Data collected during your navigation on our website may be processed to provide access to online content, respond to user inquiries, maintain statistical records of visits (e.g., IP addresses, browser data, country, accessed pages), enhance our services and products, optimize our offerings, provide more efficient customer service, and improve the design and content of our websites.
g. Data from our clients and suppliers will be processed as part of the contractual relationship binding them to us, to comply with administrative, tax, and accounting obligations, as well as, where applicable, with public security regulations.
h. Data from our employees will be processed for HR management, development of the employment relationship, and compliance with the corresponding legal obligations.
In accordance with the Spanish Law on Information Society Services and Electronic Commerce (LSSICE), we inform you that LORNIN IBÉRICA does not engage in SPAM practices and does not send unsolicited commercial emails without proper authorization. In any case, you will always have the option to withdraw your consent to receive our communications.
We will not process your personal data for any purposes other than those described in this Policy, unless legally required or upon judicial request.
Your personal data will not be subject to automated decision-making processes that produce effects on you.
3. WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
The legal basis for processing your personal data is your explicit consent, which will be requested when you ask us for information, allowing us to carry out the purposes described above.
If a commercial relationship arises between you and LORNIN IBÉRICA, whether as a client, supplier, or employee, the legal basis for processing your personal data will be the execution of the contractual relationship established, as well as compliance with the corresponding legal obligations, if applicable.
The legal basis for processing images captured by our video surveillance cameras is our legitimate interest in maintaining the security of our facilities.
4. DATA RETENTION PERIOD: HOW LONG WILL WE KEEP YOUR DATA?
The personal data you provide will be retained for as long as necessary to manage the information you request, to handle the stays of our clients, or to fulfill any contract established between LORNIN IBÉRICA and third parties.
Video Surveillance Images: Images recorded by our surveillance cameras will be kept for 30 days unless the police or judicial authorities request their retention for a longer period. In such cases, they will be securely locked.
Once the data has served the purpose for which it was collected, it will be permanently deleted. However, we may retain your data longer if necessary to comply with legal obligations or for the time required for the statute of limitations for legal liabilities that may arise.
Job Application Data: Data provided for a recruitment process will be kept for a maximum of one year. If you are not hired by LORNIN IBÉRICA and are not part of an ongoing recruitment process, your data will be deleted, and no copies will be retained.
Employee Data: The personal data of our employees will be retained for the duration of their employment relationship with LORNIN IBÉRICA and subsequently for the legally established timeframes.
5. WHO WILL YOUR DATA BE SHARED WITH?
Within our organization, your personal data will be processed by duly authorized personnel. If necessary or practical to fulfill the purposes described above, your data may also be shared with third parties.
The categories of recipients who may have access to your personal data include:
a. Operational Management:
Data of the residents in our facilities may be shared with JV20 YURBBAN SENIOR S.L. and YURBBAN WORLDWIDE S.L., the company responsible for the administrative management of the facilities.
b. Commercial Management:
Data of the residents in our facilities may be shared with CBRE REAL ESTATE SA, the company responsible for the commercial management of the facilities.
c. Service Providers:
Third-party data processors, such as IT providers, consultants, advisors, and other companies providing auxiliary services.
d. Public Entities and Authorities:
Data may be shared with public entities and authorities exclusively to comply with legal obligations.
e. Other Providers:
Where applicable, data may be shared with financial institutions, fraud detection service providers, and other relevant entities.
f. Video Surveillance Management:
Data may be shared with the company managing our video surveillance systems.
In all cases, the aforementioned third parties will have signed the appropriate confidentiality agreement beforehand, follow our instructions in compliance with current personal data protection regulations, and be subject to a professional secrecy obligation or act in compliance with a legal requirement.
The information you provide through this website will be hosted on the servers of YURBBAN WORLDWIDE S.L.
6. WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?
If you wish to exercise the rights granted to you under data protection regulations, please send an email to gdpr@yurbban.com, indicating the specific right you wish to exercise in the subject line and attaching a copy of your national ID or passport.
The rights recognized under current legislation that you may exercise are:
Right of Access to Data
You have the right to ask LORNIN IBÉRICA whether your personal data is being processed and, if confirmed, to access the following information:
The purposes of the processing.
The categories of data being processed.
The retention period or criteria for determining it.
Right to Rectification of Data
You have the right to have LORNIN IBÉRICA correct your data if it is inaccurate or incomplete, by providing additional corrective statements.
Right to Erasure of Data (Right to be Forgotten)
You have the right to request the deletion of your data by LORNIN IBÉRICA when:
The processing is unlawful.
You have withdrawn your consent.
The data is no longer necessary for the purposes for which it was collected or processed.
You have exercised your right to object, and there are no overriding legitimate grounds for the processing.
The data must be deleted to comply with a legal obligation of LORNIN IBÉRICA.
This right does not apply when processing is necessary:
To exercise the right to freedom of expression and information.
To comply with a legal obligation of LORNIN IBÉRICA.
For the establishment, exercise, or defense of legal claims.
For reasons of public interest, public health, or historical, statistical, or scientific research.
Right to Data Portability
You have the right to have LORNIN IBÉRICA transfer your data to another data controller or directly to you in a structured, commonly used, and machine-readable format, where the processing is automated and based on:
Your consent for specific purposes.
The execution of a contract or pre-contract with you.
This right does not apply when:
The transfer is technically impossible.
It could negatively impact the rights and freedoms of others.
The processing is for a public interest mission under current legislation.
Right to Restriction of Processing
You have the right to request that LORNIN IBÉRICA restrict the processing of your data in the following cases:
While the accuracy of the data is being verified.
If the processing is unlawful, but you oppose its deletion.
If the data is no longer needed, but you need it for the establishment, exercise, or defense of legal claims.
If you have objected to the processing and it is pending verification of whether LORNIN IBÉRICA's legitimate grounds override your own.
Right to Object
You have the right to object to the processing of your data for reasons related to your particular situation when processing is based on:
Direct marketing.
Profiling.
The legitimate interest of LORNIN IBÉRICA or third parties unless overriding legitimate grounds are demonstrated.
Historical, statistical, or scientific research, unless the processing is required for reasons of public interest.
Even if you object, LORNIN IBÉRICA may continue processing your data if its legitimate interest overrides your interests, rights, and freedoms or in cases of legal claims.
Right Not to Be Subject to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on you.
When profiling is based solely on automated processing, you have the right to:
Be informed if the decision could significantly affect you.
Obtain human intervention from LORNIN IBÉRICA.
Express your point of view and contest the decision.
This right does not apply when:
You have explicitly consented to the automated processing.
It is necessary for a contract between you and LORNIN IBÉRICA.
The processing is authorized by current legislation.
7. COMPLAINT TO THE SUPERVISORY AUTHORITY:
If you believe that LORNIN IBÉRICA has violated any of your rights protected under personal data protection regulations or has breached any obligation regarding the protection of personal data, you have the right to file a complaint with the competent supervisory authority.
In Spain, this is the Spanish Data Protection Agency (Agencia Española de Protección de Datos) located at:
Calle Jorge Juan, 6. 28001 – Madrid
You may also file an electronic complaint through the online portal available on their website: https://www.aepd.es.
8. LEGISLATION AND JURISDICTION:
This Privacy Policy is governed in all respects by Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, regarding the protection of natural persons concerning the processing of personal data and the free movement of such data.
It is also governed by Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights. Additionally, our website adheres to Law 34/2002, of July 11, on Information Society Services and Electronic Commerce.
Users of this website expressly submit to Spanish legislation and jurisdiction, with the courts and tribunals of BARCELONA being the competent authorities to resolve any disputes arising from or related to the use of this website.
9. ADDITIONAL INFORMATION:
SECURITY MEASURES
The data you provide will be treated confidentially. LORNIN IBÉRICA has implemented all necessary technical and organizational measures and protection levels to ensure the security of data processing and to prevent alteration, loss, theft, unauthorized access, or processing of your data, in line with current technology and the nature of the stored data.
Additionally, it ensures that the processing and registration of data in files, programs, systems, equipment, premises, and facilities meet the integrity and security requirements established by applicable regulations.
SSL CERTIFICATE (SECURE SOCKETS LAYER)
The SSL Certificate provides authentication, privacy, and security for the information exchanged between LORNIN IBÉRICA and the user. LORNIN IBÉRICA has a security certificate used to establish secure connections. This is achieved using pre-set keys that encrypt and decrypt all transmitted data until the connection is closed.
LANGUAGE
The applicable language for this Privacy Policy is Spanish. Therefore, in case of any contradiction between versions provided in other languages, the Spanish version will prevail.
10. UPDATE:
This Privacy Policy was last updated in January 2025 but may be updated at any time. We recommend reviewing it each time you access our website to stay informed of any changes.