Privacy Policy
- Initial Information
ATTICCA REALITIES SL considers your personal information to be very important. For this reason, we treat it in a confidential and secure manner. We are committed to ensuring the privacy of personal data at all times and to not collecting unnecessary information.
You do not need to register in advance to access our website. If you need more information, you can contact us through the form available on our website, provided that you agree with our privacy policy, which you must accept to give your express consent to the processing of your data for the indicated purposes.
In accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR), and Organic Law 3/2018 of December 5, we provide information on data processing through this Privacy Policy.
- Who processes the data?
- Identity: ATTICCA REALITIES S.L.
- Tax ID (NIF): B72771066
- Address: Gran Vía Corts Catalanes, 360 – 4 08007 Barcelona (Barcelona) SPAIN
- Email: hello@atticca.io
- What data processing do we carry out, for what purposes, and for how long?
| DATA PROCESSING | PURPOSE AND LEGAL BASIS | RETENTION PERIOD |
| Website operation | To manage the proper functioning and use of the website: personal data will be processed strictly as necessary to provide and ensure the security of the application and information. The legal basis is the legitimate interest pursued by the controller, in accordance with Art. 6.1.f) of the GDPR. | The collected data will be retained for the strictly necessary time to fulfill the purpose for which it was collected, and in any case to determine potential liabilities arising from this purpose, considering the periods established by applicable regulations. |
| Contact / appointment request / quotation | To respond to requests and/or inquiries made by the user. The legal basis is the user’s express consent under Art. 6.1.a) of the GDPR. | Data will be retained until the request has been resolved. In any case, it may be retained to determine any potential liabilities derived from this purpose. |
| Contract | To prepare and validate the space reservation or contract, with the legal basis being the pre-contractual or contractual relationship, in accordance with Art. 6.1.b). | Data will be retained while the newsletter subscription is active or until the user exercises the right to object or request data deletion. In any case, it may be retained to determine any potential liabilities. |
| Sending informative communications and Newsletter | Subscription to the entity’s news, promotions, and offers. The legal basis is the express consent of the data subject, in accordance with Art. 6.1.a) of the GDPR. If a contractual relationship exists, commercial communications about similar products or services may be sent based on our legitimate interest under Art. 6.1.f) of the GDPR. | Data will be retained while the subscription is active or until the user exercises the right to object or request data deletion. In any case, it may be retained to determine any potential liabilities. |
| Email management | To respond to received inquiries and manage commercial and/or professional relationships. The legal basis is the contractual relationship between the Controller and the data subject, under Art. 6.1.b) of the GDPR. | Data will be retained for the time strictly necessary to fulfill the purpose for which it was collected, and in any case to determine potential liabilities, taking into account the periods established by law. |
| Join our team | Data will be processed to handle your application and analyze your profile for participation in recruitment processes. The legal basis is the data subject’s express consent under Art. 6.1.a) of the GDPR. If a job offer is published, processing will be lawful when necessary for pre-contractual measures or the intent to enter into a contract, under Art. 6.1.b) of the GDPR. | Data will not be kept longer than necessary for the purpose collected, unless a legal obligation exists. In that case, it will be retained for a maximum period of one year. |
| Activities, workshops, and events | Data collected through registration forms for activities, workshops, or events will be processed to manage these events. The legal basis is the express consent of the data subject in accordance with Art. 6.1.a) of the GDPR. | Data will be retained for the time strictly necessary to fulfill the purpose for which it was collected, and in any case to determine potential liabilities, considering legal timeframes. |
| Loyalty program management | Data collected through the ATTICCA loyalty program registration forms will be processed for program management. The legal basis is the express consent of the data subject under Art. 6.1.a) of the GDPR. | Data will be retained for the time strictly necessary to fulfill the purpose for which it was collected, and in any case to determine potential liabilities, considering applicable legal deadlines. |
- To whom will the data be disclosed?
Unless we are subject to a legal obligation or you give us express consent, we will not transfer your personal data to third parties.
- Are international data transfers made?
No international transfers to countries outside the EU are made.
- What rights do you have and how to exercise them?
Right of access
As a user, you can ask us to explain what we do with your personal data.
You may also request information on the purpose of processing your personal data, how long we retain it, your rights as a user, whether your data has been transferred to a third country or an international organization, the existence of automated decisions, or whether profiling occurs on the website, among others.
Right to rectification
If the personal data you have provided us is inaccurate or incomplete, you have the right to correct or complete it.
Contact us and we will rectify the requested data.
Right to restriction of processing
As a user, you may request the restriction of processing of your personal data when:
- You contest the accuracy of your personal data, for a period enabling us to verify the accuracy.
- The processing is unlawful and you oppose the erasure of your data and instead request the restriction of its use.
- We no longer need your data for processing purposes, but you require it to establish, exercise, or defend legal claims.
Right to erasure
You may request the immediate deletion of your personal data.
We are obligated to delete such data immediately when it is no longer necessary for the purposes for which it was collected.
You may also ask us to delete your data when:
- You withdraw your consent,
- You object and there are no overriding legitimate grounds for the processing,
- Your data is processed incorrectly,
- Erasure is required to comply with a legal obligation,
- Your data was collected in connection with a legal offer.
Right to information
If you have exercised your right to rectification, erasure, or restriction of processing, we are obliged to inform all recipients to whom your data has been disclosed about the correction, erasure, or restriction, unless this proves impossible or involves a disproportionate effort.
As a user, you have the right to be informed about these recipients.
Right to data portability
You have the right to receive the personal data you have provided us in a structured, commonly used, and machine-readable format.
You also have the right to transmit this data to another controller without hindrance from us.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
We will stop processing your personal data unless we have compelling legitimate grounds which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Right to withdraw consent
You have the right to change your consent declaration regarding data protection at any time.
Such a change will not affect the legality of prior processing carried out based on your consent.
Automated individual decisions, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or place of the alleged infringement, if you believe the processing of personal data constitutes a violation of the GDPR.
- Where can you exercise your rights?
You can request to exercise your rights via the following email address: hello@attica.io
- Is it mandatory to provide all the information requested in the data collection forms?
Regarding the forms on the website, you must complete the fields marked as “required.”
Failure to provide the required personal data, or doing so incompletely, may mean that ATTICCA REALITIES SL cannot respond to your requests. As a result, ATTICCA REALITIES SL is exempt from liability for not providing or partially providing the requested services.
The personal data you provide to ATTICCA REALITIES SL must be current so that the information in the records is updated and error-free. You are responsible for the accuracy of the data provided.
- What security measures do we have in place?
We inform you that we handle and use your personal data in accordance with current data protection and information society service regulations.
We have implemented the necessary technical and organizational security measures to ensure the security of the user’s personal data and to prevent its alteration, loss, processing, or unauthorized access, according to the state of technology, the nature of the data stored, and the risks to which they are exposed, whether from human action or physical or natural causes, in accordance with applicable regulations.