Privacy Policy

1- WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The entity responsible for the processing of your personal data and the owner of the website https://umasuites.com
is YURBBAN CORPORATION S.L.U. (B67920710), YURBBAN IBERIA OPCO S.L.U. (B56987415), as well as YURBBAN WORLDWIDE, S.L., registered in the Mercantile Registry of BARCELONA, Volume 43.188, Folio 213, Sheet B426216, Entry 1, with CIF B-65786378 and registered address at Vía Laietana 45, 6º 1ª, 08003, Barcelona.

YURBBAN CORPORATION S.L.U. and YURBBAN IBERIA OPCO S.L.U. are brands owned by YURBBAN WORLDWIDE, S.L., through which it manages its own or third-party tourist establishments under the COLECTIA brand.

YURBBAN WORLDWIDE, S.L. has taken the necessary technical and organizational measures to comply with data protection regulations.

The contact details of YURBBAN WORLDWIDE, S.L., regarding privacy and the protection of your personal data are:

Phone: +34-93 160 03 03
Email: gdpr@yurbban.com

2- WHAT TYPE OF PERSONAL DATA DO WE PROCESS AND FOR WHAT PURPOSE?
1- Types of personal data we process

For confidentiality reasons, we collect the minimum amount of data possible from our clients, beyond what is voluntarily provided or required by law for reservations made through booking engines.

We may collect and process the following categories of personal data:

a. Name, title, and gender.

b. Contact details and address, phone number if you make a reservation by phone and provide it, email address if you make a reservation via email, or data required by the booking engine to make a reservation. Reservation data and date, information about your stay and preferences, as well as credit card information. In case of electronic reservations, the system may request a selfie to verify the authenticity of the documents provided. Your image will only be used for these purposes and retained only for the strictly necessary time.

c. For our employees: identification data, social security data, bank details, and all information necessary for the employment relationship.

d. Identification data of our suppliers and their contact persons in case of companies.

e. Images captured by our video surveillance cameras.

f. Communications with us via email or other channels. Telephone communications may be recorded by our customer service to register your queries in our database.

g. Information collected when using our website and other digital media. This may include your IP address, browser type, operating system, referring website, and web browsing behavior.

h. If you connect to the TV available in any of our rooms, we will request your ID, and your browsing history will be recorded.

i. Information you choose to share with us, for example by commenting on LinkedIn or Facebook.

2- Purpose of processing

Your personal data will only be used for the following purposes:

a. Registering you in our database if you make a reservation and provide your information or use a booking engine.

b. Conducting commercial and administrative management with users of our website and our clients or potential clients.

c. At YURBBAN WORLDWIDE, S.L., we process the information you provide to respond to your inquiries, provide information about our services, manage reservations internally and externally, manage purchases from suppliers, and fulfill legal obligations arising from these activities.

d. Communicating with you to respond to queries, handle complaints, or obtain feedback on the quality of our accommodations, services, or treatment received.

e. Sending commercial advertising communications via email, social media, or other electronic means if you have expressly consented. For recurring clients, we may send commercial information, updates, or news without prior consent. You can withdraw your marketing consent at any time following the instructions in the marketing communication or by contacting gdpr@yurbban.com
.

f. Recording images from our video surveillance cameras for security purposes. These images may be shared with the police or judicial authorities upon request.

g. Data collected during website navigation may be used to provide access to online content, respond to user requests, keep statistical visit records (IP addresses, browser data, country, visited pages, etc.), improve services and products, optimize offers, enhance customer service, and improve website design and content.

h. Client and supplier data will be processed within contractual relationships to comply with administrative, tax, accounting, and, if applicable, citizen security law obligations.

i. Complying with applicable legal obligations.

According to LSSICE, YURBBAN WORLDWIDE, S.L. does not engage in spam practices; commercial emails are only sent if legally justified. You can always withdraw consent to receive communications.

Your personal data will not be used for purposes other than those described in this policy unless required by law or judicial order.

Your personal data will not be subject to automated decision-making that produces effects on you.

3- WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis for processing your personal data is your express consent granted for the purposes described above, requested when you contact us.

If a commercial relationship exists between you and YURBBAN WORLDWIDE, S.L. (as a client, supplier, or employee), the legal basis will be the execution of the contractual relationship and compliance with applicable legal obligations.

The legal basis for processing images captured by our surveillance cameras is our legitimate interest in maintaining the security of our facilities.

If you do not provide your personal data or do not accept this privacy policy, YURBBAN WORLDWIDE, S.L. will not process your data, which may prevent us from sending information or providing services.

Commercial information: Any communication sent will be included in YURBBAN WORLDWIDE, S.L.’s information systems.

If you provide your personal data and accept this privacy policy, YURBBAN WORLDWIDE, S.L. may carry out the following actions unless you indicate otherwise:

Sending commercial and/or promotional communications in response to your information request. The legal basis is your express consent.

Sending information about news, updates, and activities or services contracted by our clients. The legal basis is our legitimate interest within the established commercial relationship.

Objection or revocation: You can object or withdraw consent to marketing communications at any time following the instructions in the marketing communication or by contacting gdpr@yurbban.com
.

Curricula (CVs): If a user submits their CV, the data will be processed to participate in selection processes, analyze the profile, and select the best candidate. Only electronic CVs are accepted. Please update us in writing if your data changes. CVs are kept for a maximum of one year; if hired, they are retained along with your employment file during your contract.

4- RETENTION PERIOD: How long will we keep your data?

Personal data will be retained as long as necessary to manage your information requests, reservations, or to comply with contracts between YURBBAN WORLDWIDE, S.L. and third parties.

Video surveillance images are retained for 30 days unless required longer by police or judicial authorities.

Once data has served its purpose, it will be permanently deleted, except when required to comply with legal obligations or legal liability periods.

CVs for selection processes are kept for up to one year; after that, they are deleted unless you submit an updated CV to continue participating in selection processes.

Employee personal data is retained during the employment relationship and afterward as legally required.

5- TO WHOM WILL YOUR DATA BE DISCLOSED?

Within our organization, personal data will be processed by authorized personnel and, if necessary, by third parties to fulfill the purposes described above.

Recipient categories include:

Operational purposes with YURBBAN WORLDWIDE, S.L. or GRUPO SOGAMAN and their companies. Data may be accessed by the owner of specific establishments, e.g., Apartamentos Laforja, SL.

Third-party processors, such as IT providers, consultants, advisors, and auxiliary service companies.

Public entities and authorities, exclusively to fulfill legal obligations, including the police to communicate the identity of guests in our establishments.

Other service providers such as financial institutions or fraud detection providers.

Video surveillance management companies.

All third parties will have signed confidentiality agreements, will be bound by professional secrecy, or act under legal obligation in accordance with data protection law.

The information you provide via this website will be hosted on YURBBAN WORLDWIDE, S.L.’s servers.

6- WHAT ARE YOUR RIGHTS WHEN YOU PROVIDE US WITH YOUR DATA?

If you wish to exercise the rights granted by data protection regulations, please send an email to gdpr@smartroomscompany.com
, indicating in the subject line the right you wish to exercise and attaching a copy of your national identity card or passport.

The rights recognized by current legislation that you may exercise, where applicable, are:

Right of Access:
You have the right to obtain confirmation from YURBBAN WORLDWIDE, S.L. as to whether your personal data is being processed. If so, you can access the following information:

The purposes of the processing.

The categories of personal data involved.

The retention period or criteria for storing the data.

Right to Rectification:
You have the right to have YURBBAN WORLDWIDE, S.L. rectify inaccurate or incomplete data through an additional corrective statement.

Right to Erasure:
You may request the deletion of your data when:

The processing is unlawful.

You have withdrawn your consent.

The data is no longer necessary for the purposes for which it was collected or processed.

You have exercised your right to object and no overriding legitimate reasons exist for processing.

The data must be deleted to comply with a legal obligation.

You do not have the right to erasure when the processing is necessary:

For exercising the right to freedom of expression and information.

To comply with a legal obligation.

For the establishment, exercise, or defense of legal claims.

For reasons of public interest in the fields of public health, historical, statistical, or scientific research.

Right to Data Portability:
You have the right to receive your data in a structured, commonly used, and machine-readable format and transmit it to another controller when processing is automated and based on:

Your consent for specific purposes.

The performance of a contract or pre-contract with you.

This right does not apply when:

Transmission is technically impossible.

It negatively affects the rights and freedoms of others.

The processing is carried out for public interest reasons under applicable law.

Right to Restriction of Processing:
You may request restriction of processing for reasons related to your particular situation when processing is based on:

Direct marketing.

Profiling.

Legitimate interests of the controller or third parties, unless overridden by your rights and freedoms, particularly if you are a child.

Historical, statistical, or scientific research unless processing is necessary for public interest reasons.

Even if you object, YURBBAN WORLDWIDE, S.L. may continue processing if its legitimate interest overrides your rights in a justified legal procedure.

Right to Object:
You have the right to object to processing when it is based on a legitimate interest, provided it is not required by law.

Right not to be subject to automated profiling:
You have the right not to be subject to automated decisions, including profiling, that significantly affect:

Professional performance.

Financial situation.

Health.

Personal preferences or interests.

Reliability.

Behavior.

Location or movements.

If profiling is fully automated, you have the right to:

Be informed if decisions may produce significant legal effects.

Obtain human intervention, express your viewpoint, and challenge decisions based on:

Your explicit consent.

A contract with YURBBAN WORLDWIDE, S.L.

This right does not apply when the decision is authorized by law, explicit consent, or a contract with the controller.

7- COMPLAINT TO THE SUPERVISORY AUTHORITY

If you believe that YURBBAN WORLDWIDE, S.L. has violated your data protection rights or any obligation under applicable data protection law, you have the right to file a complaint with the competent supervisory authority in Spain: Agencia Española de Protección de Datos (AEPD), Calle Jorge Juan, 6, 28001 Madrid.

Phone: 901 100 099 / 912 663 517
You may also submit an electronic complaint via the AEPD website: https://www.aepd.es

8- APPLICABLE LAW AND JURISDICTION

This Privacy Policy is governed in all respects by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, regarding the protection of natural persons concerning the processing of personal data and the free movement of such data.

It is also governed by Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights, as well as Law 34/2002 of 11 July on Information Society Services and Electronic Commerce.

Users of this website are subject to Spanish law and jurisdiction, expressly submitting to the courts of BARCELONA for the resolution of any disputes arising from or related to the use of the website.

9- ADDITIONAL INFORMATION

Social Networks (Privacy Policy):
UMA SUITES may have a presence on social networks. Data processing for followers or interactions with official YURBBAN WORLDWIDE, S.L. social media accounts is governed by this policy and the terms, privacy policies, and rules of the respective social network accepted by the user.

YURBBAN WORLDWIDE, S.L. will process your data to manage its social media presence, inform you of activities, products, or services, and for other purposes permitted by social network regulations.

Prohibited content includes:

Illegally or improperly published content under national, EU, or international law.

Content infringing fundamental rights, courtesy, or disturbing other users.

Content violating legality, honesty, responsibility, human dignity, protection of minors, public order, privacy, consumer rights, or intellectual property rights.

YURBBAN WORLDWIDE, S.L. may remove inappropriate content without prior notice. Communications sent via social networks will be included in the company’s files.

For personal data shared via social networks, YURBBAN WORLDWIDE, S.L. is not responsible for security measures on these platforms; users should consult the social network’s specific conditions.

Security Measures:
All provided data will be treated confidentially. YURBBAN WORLDWIDE, S.L. has adopted all technical and organizational measures to ensure data security and prevent unauthorized access, alteration, loss, or theft, in accordance with current technology and applicable law.

SSL Certificate (Secure Sockets Layer):
An SSL certificate ensures authentication, privacy, and data security between YURBBAN WORLDWIDE, S.L. and the user, encrypting data transmitted until the connection is closed.

Language:
The applicable language of this Privacy Policy is Spanish. In case of contradictions in translations, the Spanish version prevails.

10- UPDATES

This Privacy Policy was last updated in June 2024 but may be updated at any time. We recommend reviewing it each time you access our website.

Si quieres, puedo unir toda la traducción completa de los apartados 1 a 10 en un solo documento en inglés listo para publicar para que no tengas que manejar varias secciones por separado. ¿Quieres que lo haga?