Privacy Policy

PRIVACY POLICY

Confidentiality and security are core values of NESTIC. This means that we are committed to ensuring the privacy of our customers' and/or users' personal data at all times, and to collecting only the information we need.

Below you will find all the necessary information about how we handle your personal data and the security measures we implement to ensure your security at all times.

1.- Who is the Controller for the processing of your data?

This Privacy Policy regulates access to and use of the Website (hereinafter, the "Website") that NESTIC makes available to Internet users (hereinafter, the "Users") interested in the content (hereinafter, the "Content") and services (hereinafter, the "Services") offered by NESTIC.

The Controller for the processing of this website is NESTIC SPAIN, S.L. (hereinafter, "NESTIC"), with tax identification number B19782788, and address at C/Hermosilla, 48, 1º Dcha., 28001, Madrid (Spain). For any question related to data protection, you can send us your doubts to the following e-mail address: privacy@nestic.homes, and we will answer you as soon as possible.

NESTIC also has the following profiles on the main social networks: Instagram, LinkedIn, Spotify and Facebook, and we act as the party responsible for processing the data of users, followers or persons who make comments through them. Likewise, in accordance with the Law on information society services and electronic commerce, we are exonerated from any type of responsibility derived from the comments made by users and followers on our social networks.

NESTIC may use the profiles described above to inform its users of the topics it considers to be of interest to them.

2.- For what purposes and legitimacy do we use personal data?

The user is informed that the personal data obtained from our Customers and Users are collected for the following purposes:

  • Technical management of the Website to publicise and contract NESTIC's services and to develop and test new products and features, monitor performance indicators such as total number of visitors, traffic and demographic data patterns. The basis for processing your personal data derives from the fact that such processing is necessary to provide the proper functioning of the website you access, and we rely on the legitimate interest regulated in Article 6(1)(f) and the express consent in Article 6(1)(b) of the GDPR.
  • To detect, prevent and combat fraud and other unlawful activities. The basis for processing your personal data is legitimate interest (Art. 6, 1, f GDPR) and legal obligation (Art. 6, 1, c) GDPR).
  • Contact forms. In the event that you contact NESTIC through the contact form on the website, we will receive your personal data in order to contact you and provide you with information about our services. The basis for the processing of your personal data derives from your consent (Art. 6, 1, a) GDPR).
  • To give you access to the reservation system. In the event that you book a property through our website we will need your personal data to process your request, in which case the basis for the processing of your personal data derives from the fact that such processing is necessary to provide the website functionalities you request (art. 6, 1, b) GDPR).
  • Sending of newsletters. Through our newsletter you can receive information that is of interest to you, in this case, to process your personal data we need your consent, in accordance with article 6.1.b) RGPD.
  • Monitoring of the rental contract and provision of additional services by NESTIC. The basis of legitimacy for the processing of your personal data derives from the fact that such processing is necessary to conclude your rental contract (art. 6, 1, b) GDPR), and to provide the services offered by NESTIC.
  • Cookie management. We collect personal data through our website using cookies for analytical, statistical, marketing and other purposes necessary for the proper functioning of the website. You can obtain more information about this in our Cookies policy.

The personal data obtained through any of the channels of the Website will form part of the Register of Processing Activities (RAT) owned by NESTIC, which will be updated periodically in accordance with the provisions of the applicable data protection regulations. Users are informed of the possibility of withdrawing their consent in the event that it has been granted for a specific purpose through the e-mail privacy@nestic.homes, without affecting the lawfulness of the previous processing based on the consent prior to its withdrawal.

3.- Types of personal data processed

In order to carry out the purposes described in the previous section, we will need your personal data to manage them. At the time of the processing of each purpose you will be informed of the data we will collect, but in general we will collect the following data:

  • Name and surname.
  • Telephone number.
  • E-mail address
  • City
  • Subject and messages.
  • IP.
  • Date and time of access.
  • IP address and domain name.
  • Browser type and version, operating system and version, language used, and localisation.
  • Information on the device used (computer, mobile phone, smartphone, model information, unique identifier information).
  • Payment information.
  • Any other information or data you choose to share with us.

4.- Accuracy of the data provided by Users

As a user of our Website, you must guarantee that you are of legal age and that the information provided is true, and you undertake to notify NESTIC of any changes thereto.The User shall be responsible, in any case, for the truthfulness of the data provided, and NESTIC reserves the right to exclude from the services any User who has provided false data, without prejudice to any other actions that may be applicable by law.

It is recommended that Users protect their data with the utmost diligence by using appropriate security tools. NESTIC shall not be liable for any theft, illegal modification or loss of data.

Any modification or update of the data must be communicated to NESTIC through the means of communication provided for in this Privacy Policy.

5.- How long do we keep your personal data?

Protecting the privacy and personal data of Users is very important to NESTIC. Therefore, NESTIC makes every effort to prevent the User's data from being used inappropriately. Only authorised personnel have access to the User's data.

NESTIC will keep the personal data of data subjects for the duration of their relationship with us and, if applicable, for the period necessary for the formulation, exercise or defence of possible claims, or for compliance with the legal obligations determined by the applicable legislation. Subsequently, if necessary, NESTIC will keep the information blocked for the legally established periods.

NESTIC undertakes to comply with its obligation of secrecy and confidentiality of personal data in accordance with the provisions of the applicable legislation.

If you would like more information about our Data Retention Policy, please contact us at the email address indicated in the heading of this Privacy Policy.

6.- How can I exercise my rights?

We would like to inform you that you may exercise your privacy rights at any time in accordance with the applicable legislation. In this regard, you may exercise:

  • Right of access to your personal data;
  • Request the rectification of any inaccurate data;
  • Request the deletion of your data;
  • Request to restrict the processing of your data;
  • Oppose the processing of your data;
  • Request the portability of your data.
  • Users shall also have the right not to be subject to decisions based solely on automated data processing.

These rights can be exercised at the following e-mail address: privacy@nestic.homes indicating the reason for your request and providing a copy of your ID card to verify your identity.

Without prejudice to any other administrative or judicial remedy, the User shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which he/she has his/her habitual residence, place of work or place of the alleged infringement, in case he/she considers that the processing of his/her personal data is not lawful, as well as in the event that the exercise of his/her rights is not satisfied. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint.

7.- Security measures

Protecting the privacy and personal data of Users is very important to NESTIC. Therefore, we implement all necessary measures to prevent your data from being misused, allowing access to them only to authorised personnel.

NESTIC maintains adequate security for the protection of personal data in accordance with applicable legislation, and has established all the technical means at its disposal to prevent the loss, misuse, alteration, unauthorised access and theft of the data provided by the User through the Website, without prejudice to informing you that Internet security measures are not impregnable.

NESTIC shall not be liable for any damages that may arise from the User's failure to comply with this obligation.

7.1 Links to other websites

NESTIC is not responsible for the practices of services linked to our application/website or the information or content they provide to you. Please note that when you use a link from our site to another service, our Privacy Policy does not extend to such third party services and your contact will be subject to that third party's own rules and policies.

8.- How are international transfers processed?

In general, NESTIC will not disclose personal data to third parties, except in those situations where it is required by law or where a service has been outsourced for the normal operation of the company and/or the website.

NESTIC endeavours to ensure the security of personal data when it is sent outside the company and ensures that third-party service providers respect confidentiality and have appropriate measures in place to protect personal data. These third parties are obliged to ensure that the information is handled in accordance with data privacy regulations.

Also, in some cases, personal data may be required by law to be disclosed to public bodies or other parties, but only to the extent necessary to comply with such legal obligations.

9. Additional information and policy changes.

We may change the information contained in this Privacy Policy from time to time as we deem appropriate. If we do so, we will notify you via email, or we will notify you at your email address when the change in question is significant to your privacy, so that you can review the changes, assess them and, if appropriate, object or unsubscribe to any service or functionality.

In any case, we suggest that you review this Privacy Policy from time to time in case there are minor changes or we introduce any interactive improvements, taking advantage of the fact that you will always find it as a permanent point of information on our website.