MERLIN, in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of personal data, hereinafter GDPR, as well as in compliance with applicable national regulations on data protection, provides information below on the following aspects related to the processing of personal data through this Website:
| Basic data protection information | |
| Data controller | MERLIN PROPERTIES SOCIMI, S.A., (hereinafter, “MERLIN”). More info |
| Purpose | Your data shall be used to establish, maintain and manage the commercial, contractual or pre-contractual relationship in order to process your queries and to handle your requests for information and/or employment. More info |
| Legitimate basis | As applicable, the data will be processed on the basis of establishing pre-contractual measures or the legitimate interest of MERLIN. More info |
| Recipients | We will disclose your data only to third parties to whom MERLIN is compelled to do so, such as public authorities, and with service providers that help or support us, regardless of whether these are companies of the business group to which MERLIN belongs or external partners. More info |
| Rights | You may exercise the rights under articles 15 to 22 of Regulation (EU) 2016/679 as explained below. More info |
| Additional information | We invite you to read our full Privacy Policy below to gain a detailed understanding of how we will use your personal data and your rights over them. |
1. IDENTIFICATION OF THE DATA CONTROLLER
This document sets out the privacy policy of the website owned by MERLIN (hereinafter, the “Website”).
MERLIN is one of the leading real estate companies listed on the Spanish Stock Exchange (IBEX-35), mainly engaged in the acquisition and management of tertiary real estate assets in Spain and Portugal. Its business activity is in three major markets: offices, retail and logistics. For your information, the company’s identification details are set out below:
Company name: MERLIN PROPERTIES SOCIMI, S.A., (hereinafter “MERLIN”).
VAT no. (NIF): A-86977790
Address: Paseo de la Castellana, 257, 28046, Madrid (Spain).
Email: protecciondedatos@MERLINprop.com
Registry data: Registered in the Madrid Companies register in volume 32.065, folio 206, sheet M-577.086.
1.1. EXTENSION OF THIS PRIVACY POLICY
This Privacy Policy regulates the data processing carried out by MERLIN in relation to users who access the Website www.merlinproperties.com or who contact MERLIN via the Website. This would include the processing of personal data of (i) customers and/or potential customers, (ii) suppliers and/or potential suppliers, (iii) investors and/or potential investors, (iv) employees or applicants and (v) any other user accessing or sending information via the Website. Therefore, this Privacy Policy sets out the information relating to processing with respect to the different categories of data subjects indicated above.
2. PURPOSE AND LEGITIMATE BASIS FOR THE PROCESSING
You are hereby informed that all the data MERLIN requests or may request from you are required for the purposes described in this privacy policy, and failure to provide them would make it impossible to contact you or manage your request to MERLIN. Similarly, MERLIN reserves the right not to respond or process requests that do not include the data requested.
You guarantee the accuracy of the personal data provided to MERLIN. MERLIN may periodically request that you review and update the personal data that it holds about you.
On the Website, you may find information about MERLIN’s services that you may find useful. In this sense, MERLIN will only request and process the data that is needed in order to process the query, provide the contracted service, or establish and maintain a commercial, contractual, and/or pre-contractual relationship with you.
The various purposes for which your personal data are processed and the legitimate basis for such processing are outlined below:
- On the basis of the application of pre-contractual measures: Manage your participation in any company recruitment procedures and duly process your application.
- On the basis of MERLIN’s legitimate interest: Manage requests for information, queries or complaints that you may submit via the various forms on the Website, to allow us to respond to your request as effectively and appropriately as possible.
2.1. DATA PROCESSING RELATED TO SIMPLE WEBSITE BROWSING
In general, browsing the Website will not result in the processing of your personal data, with the exception of, in specific cases, your IP address and data relating to your browsing, for the purpose of managing and optimising the Website, legitimised by MERLIN’s legitimate interest in preserving the security and integrity of the Website. Please consult our Cookie Policy for further information.
3. THIRD PARTIES TO WHOM YOUR DATA MAY BE TRANSMITTED
The personal data you provide to MERLIN may be disclosed to the following categories of recipients:
- Third parties to whom MERLIN is compelled to disclose information, such as public authorities, in order to comply with the requirements of such authorities and applicable regulations, when required to do so.
- As a result of the centralisation of administrative and IT processes within the Group, companies that are part of the MERLIN PROPERTIES Group for the purpose of effectively managing their contractual or pre-contractual relationships.
- Auditors, lawyers, accounting firms and other external consultants and the company’s product or services suppliers.
4. DATA SECURITY
MERLIN has appropriate policies and technical and organisational measures in place to safeguard and protect your personal data from unauthorised or illegal access, accidental loss or destruction, damage, and unauthorised or illegal use and disclosure.
In addition, we will take all reasonable precautions to ensure that our personnel and employees who have access to your personal data have received the appropriate training.
In any case, the user is hereby informed that no data transmission over the Internet is completely secure and is therefore done at his/her own risk. Despite our best efforts to protect your personal data, MERLIN cannot guarantee the security of any personal data transmitted via our Website.
5. DATA STORAGE
The storage period of your data shall be determined based on the duration of your relationship with MERLIN and the statutory periods. Therefore, the criteria used by MERLIN to establish the data storage periods have been determined in accordance with the requirements set out in the applicable legislation, regulations, and policy guidelines, as well as MERLIN’s operational requirements pertaining to the correct management of the relationship with the various categories of data subjects.
Once your relationship has ended, your personal data will be deleted as soon as all necessary actions have been taken to manage and terminate any remaining obligations between the parties, during which period all necessary administrative procedures shall be carried out, with the exception of those cases where you have given your express consent to receive commercial communications, in which case your data will be stored until you express your opposition.
Regardless of the fact that we only process your data for as long as is strictly necessary to fulfil the corresponding purpose, we will subsequently duly store and protect them in accordance with the regulations applicable at any given time, for as long as liabilities may arise from the processing of said data. After the applicable statute of limitations has expired, we will proceed to erase the personal data.
6. YOUR DATA PROTECTION RIGHTS
You may contact MERLIN at any time to exercise your rights of access, rectification, erasure, limitation and/or opposition, as well as the right to data portability and not be subject to automated decisions, by sending a request to MERLIN PROPERTIES SOCIMI, S.A. at Paseo de la Castellana, 257, 28046, Madrid (Spain), or to the following email address: protecciondedatos@merlinprop.com.
Finally, should you require more information about your data protection rights or should you need to file a complaint, you may write to the Spanish Data Protection Agency, domiciled at Calle Jorge Juan, 6, 28001, Madrid, for the purpose of safeguarding your rights.
7. CHANGES TO THIS PRIVACY POLICY
MERLIN reserves the right to change this Privacy Policy to adapt it to new legislation or case law, as well as to industry practices. In such cases, any changes that are made will be announced on this page sufficiently far in advance of their implementation.
8. CONTACT MERLIN
If you have any doubts or questions regarding the processing of your personal data, please write to MERLIN PROPERTIES SOCIMI, S.A. at Paseo de la Castellana, 257, 28046, Madrid (Spain), or at the following e-mail address: protecciondedatos@merlinprop.com.
© 2022 MERLIN Properties SOCIMI, S.A. All rights reserved.
Last updated: 14 June 2022