Privacy Policy

In accordance with data protection legislation and, more specifically, the General Data Protection Regulation (GDPR), this Privacy Policy fulfills the obligation to provide information to users regarding the website www.livensaliving.com (hereinafter, the “Website”) and the mobile app (hereinafter, the “App”), in clear, concise, and transparent language, through the following sections:   1. INTRODUCTION  Livensa Living is now part of the Nido family. Following Nido’s acquisition of Livensa, we are coming together to create a stronger, more connected student living experience. While Livensa and Nido will continue to operate their residences and services, they now form part of the same group (the “Group”) and are progressively integrating certain operations, systems and commercial activities under “Livensa Living”. As a result, you may occasionally receive communications that refer to either Livensa or Nido Group’s assets. Further information on how this relationship affects the processing of your personal data is provided in the relevant sections of this Privacy Policy below.  The user (hereinafter, the “Data Subject”) is hereby informed that their personal data will be processed through the Website or via the App associated with the services provided by LIVENSA LIVING, S.L., which will manage the various processes and any other matters related to our buildings on behalf of the relevant entities within its Group. Consequently, unless expressly stated otherwise, for the purposes of the reservation processes, the Data Controller will be the entity with which the pre-contractual or contractual relationship with the Data Subject is established.  Please find the list of Group entities involved in Annex I.  Where the Data Subject wishes to contact the Data Protection Officer (DPO) regarding any matter described in this privacy policy, they may submit their request, inquiry, or suggestion to <a href="/admui/dpo@livensaliving.com">dpo@livensaliving.com</a> . If the Data Subject prefers to contact the DPO by other means, they may do so at the following address: C/ Marqués de Mondejar, 21, Ground Floor, 28028 Madrid..   2. INFORMATION ON DATA PROTECTION IN RELATION TO SPECIFIC PURPOSES  The Data Controller identified below will process the Data Subject’s information, either manually or digitally, in a lawful, fair, and transparent manner. To this end, it is important that the Data Subject notify the Data Controller of any changes to their personal data in order to keep it up to date  The Data Controller will process personal data for a number of purposes. To facilitate reference, the table below lists the purposes of processing, the legal basis for each purpose, and the categories of personal data being processed.

Contact

<div id="docs-internal-guid-41a39971-7fff-4677-3c3f-c8e70406abae" dir="ltr" style="margin-left: 0pt;" align="left"> <table style="border: medium; border-collapse: collapse; width: 100%; height: 1911.92px;"><colgroup><col style="width: 82.2148%;" width="490"><col style="width: 77.8524%;" width="464"><col style="width: 45.6376%;" width="272"></colgroup> <tbody> <tr style="height: 23.5833px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 23.5833px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">DATA CONTROLLER </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 23.5833px;" colspan="2"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">LIVENSA LIVING S.L. </td> </tr> <tr style="height: 47.1667px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 47.1667px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Purposes for the processing </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 47.1667px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Legal basis </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 47.1667px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Categories of personal data </td> </tr> <tr style="height: 283px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 283px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">To respond to and manage inquiries through our channels and to understand your preferences.<span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> Based on the personal data provided in the corresponding form and/or survey, we will manage your inquiries and also use aggregated data to improve our future communication and marketing campaigns. Data subjects may contact the Data Controller through various channels, such as email, phone, social media (Instagram), and WhatsApp Business. </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 283px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Consent </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 283px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">·  Personal information provided in the corresponding form and/or survey. Identification and contact information </td> </tr> <tr style="height: 472.5px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 472.5px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">  <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">To schedule an appointment to tour our accommodations<span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">, for which we will share your information with the corresponding building, as well as to properly manage and track the visits. For these purposes, we may contact you through various means, including, but not limited to, email, phone, and WhatsApp. <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">The data subject will be required to provide information about the city and accommodation of interest, as well as their identifying information (first name, last name, nationality), contact information (phone number, email address), and the details of the appointment, in order to properly schedule the visit. <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">  </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 472.5px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Consent </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 472.5px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">·  Personal and contact information. <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">·  Information about the city and accommodations of interest. <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">  </td> </tr> <tr style="height: 141.5px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 141.5px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Whenever the data subject contacts the Data Controller by phone, the conversation with our team will be recorded in order<span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> to retain evidence of the conversation with the data subject in the event of a complaint. </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 141.5px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Legitimate interest* </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 141.5px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">·  Identifying and contact information (including voice recordings) </td> </tr> <tr style="height: 259.417px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 259.417px;" colspan="3"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: italic; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">*Legitimate interest of the Data Controller in recording telephone calls:<span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: italic; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> The Data Controller’s legitimate interest consists of being able to exercise the right of defense against potential claims, which is understood to take precedence over the rights and freedoms of the data subject, given that the likelihood of an adverse impact on the data subject is low—especially considering the nature, risks, and benefits of such processing, both for the Data Controller and, in general, for users, as both have effective means of evidence regarding processing that concerns them and that, ultimately, could support their right of defense. If you would like more information about the legitimate interest assessment conducted, you may contact our DPO at <a href="mailto:dpo@livensaliving.com">dpo@livensaliving.com</a>. </td> </tr> <tr style="height: 110.333px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 110.333px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Sending communications based on the data subject’s profile<span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">, which will be created based on the interests provided in the corresponding form. </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 110.333px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Consent </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 110.333px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">·  Identification and contact information <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">·   Identifiers </td> </tr> <tr style="height: 133.917px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 133.917px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Create custom audiences using <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Google Customer Match<span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> to display ads tailored to users' interests on Google platforms. </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 133.917px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Consent </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 133.917px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">· Identification information. <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">· Contact data<span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">· Digital identifier information </td> </tr> <tr style="height: 133.917px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 133.917px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Sending marketing communications related to the products and services marketed by the Data Controller across the Group. </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 133.917px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Consent </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 133.917px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">· Identification information. <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">· Contact data<span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">· Digital identifier information </td> </tr> <tr style="height: 23.5833px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 23.5833px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Data communications </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 23.5833px;" colspan="2"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Legal basis </td> </tr> <tr style="height: 141.5px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 141.5px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">If the Data Subject wishes to visit the facilities of our accommodations and residences of interest to them, their personal data will be disclosed to the relevant <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: bold; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">entity listed in Annex I<span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">, solely for the purpose of arranging said visit. </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 141.5px;" colspan="2"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Consent </td> </tr> <tr style="height: 141.5px;"> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 141.5px;"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">When the Data Controller deems it appropriate to exercise its right of defense or is required to do so in accordance with applicable regulations, your data may be disclosed to public authorities, judges, and/or courts. </td> <td style="vertical-align: top; padding: 11.25pt; overflow: hidden; overflow-wrap: break-word; border: 0.75pt solid rgb(206, 212, 217); height: 141.5px;" colspan="2"> <span style="font-size: 12pt; font-family: 'Noto Sans',sans-serif; color: #000000; background-color: transparent; font-weight: 400; font-style: normal; font-variant: normal; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Legal obligation and/or legitimate interest, as applicable </td> </tr> </tbody> </table> </div>

WEB AND APP REGISTRATION PROCESS

RESERVATION PROCESS

<table style="border-collapse: collapse; width: 100%; border-spacing: 10px; border: 1px solid rgb(206, 212, 217);" border="1"><colgroup><col style="width: 40%;"><col style="width: 37.8151%;"><col style="width: 22.1849%;"></colgroup> <tbody> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">DATA CONTROLLER</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="2">ENTITIES OF ANNEX I</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="3">Your personal data will be processed as the Data Controller by the entity with which the pre-contractual or contractual relationship with the data subject is established. The list of Group entities that are considered Data Controllers, as applicable, is set forth in Annex I.</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Data Protection Officer</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="2"><a href="mailto:dpo@livensaliving.com">dpo@livensaliving.com</a></td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Purposes of processing</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Legal basis</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Categories of personal data</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Manage and carry out the reservation process to secure a room in one of our buildings and finalize the contract with the Data Subject.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Performance of the contract</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> • Identifying information • Contact information • Personal characteristics • Academic information • Financial information </td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Contact the customer to invite them to continue with the reservation process once it has been started but is not completed. This communication may be helpful to the customer as a reminder that the process is still pending.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Legitimate interest*</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">• Contact information</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="3">* Legitimate interest of the Data Controller in contacting the data subject to invite them to continue with the booking process: The Data Controller’s legitimate interest consists of being able to guarantee to potential customers the availability of the accommodation in which they have expressed an interest by initiating the booking process. It is understood that the Data Controller’s interest outweighs the data subject’s rights and freedoms, considering that the processing could even be beneficial to the potential customer, given that accommodation booking processes are concentrated during certain periods of the year. If you would like more information about the legitimate interest assessment conducted, you may contact our DPO at <a href="mailto:dpo@livensaliving.com">dpo@livensaliving.com</a>.</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Whenever the Data Subject voluntarily provides special category data related to their health for any of the purposes identified in this policy, such data may be processed in order to meet the needs requested by the Data Subject.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Explicit consent</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">· Health data</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Whenever the Data Subject contacts the Data Controller by phone, the conversation with our team will be recorded in order to retain evidence of the conversation with the Data Subject in the event of a complaint.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Legitimate interest*</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">· Identifying information (voice)</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="3">* Legitimate interest of the data controller in recording telephone calls: The Data Controller’s legitimate interest consists of being able to exercise the right of defense against potential claims, which is understood to take precedence over the rights and freedoms of the data subject, given that the likelihood of an adverse impact on the data subject is low and, above all, considering the nature, risks, and benefits of such processing, both for the Data Controller and, in general, for users, as both have effective means of proof regarding processing that concerns them and that, ultimately, could support their right of defense. If you would like more information about the legitimate interest assessment that was conducted, you may contact our DPO at <a href="mailto:dpo@livensaliving.com">dpo@livensaliving.com</a></td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">To manage and execute the lodging contract (including App features that allow tenants to manage certain aspects of their tenancy agreement) for the purposes of billing, payment, direct debit arrangements (including SEPA mandates where applicable) refunds, security deposits, room assignments, and other contractual or legal requirements necessary to formalize the contract with the Data Subject, which may involve sending communications of a strictly transactional nature to manage said contract through any of the following communication channels: mail, telephone, or electronic means (WhatsApp, email, and SMS).</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Performance of the contract</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> · Identifying information · Contact information · Personal characteristics · Academic information · Financial information · Device and application usage information </td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">To manage the provision of additional services offered, such as parking, half-board or full-board, sports and/or recreational activities organized by the lodging facility and/or residence or Community Life, issuance of the hostel member card, etc. This may involve sending communications of a purely transactional nature to manage said contract.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Performance of the contract</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> · Identifying information (including the vehicle registration number) · Contact information · Financial information (account number) </td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Verify residents’ identities during the onboarding process (onboarding) and throughout their stay, in order to identify residents, ensure the safety of individuals and facilities, and enable the proper management of the services provided.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Legitimate interest*</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">• Identifying information (first name, last name, photo)</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="3">*Legitimate interest of the Data Controller in collecting and using a personal photograph of the resident during the residence admission process, for the purpose of verifying the resident’s identity, ensuring the safety of individuals and facilities, and facilitating the proper management of the services provided. This processing responds to the Data Controller’s need to ensure the proper management of the residence and associated services, allowing for the identification of the resident within the framework of the existing contractual relationship. The photograph is used exclusively for identification and routine management purposes and does not involve biometric processing aimed at automated identification or facial recognition. It is therefore understood that the Data Controller has a legitimate interest that outweighs the rights and freedoms of the data subjects, as this processing is necessary, proportionate, and in line with their reasonable expectations. If you would like more information about the legitimate interest assessment that was conducted, you may contact our DPO at <a href="mailto:dpo@livensaliving.com">dpo@livensaliving.com</a>.</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> Manage and update access logs (for both residents and visitors) to monitor and control the security of property, people, and facilities, as well as to ensure compliance with the provisions of the Code of Conduct. This purpose may include the processing of personal data through video surveillance systems, provided that applicable regulations permit it. </td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Public/legitimate interest*.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> · Identifying information (including a photo) · Contact information </td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="3">*Legitimate interest of the Data Controller in the use of video surveillance systems to ensure compliance with the code of conduct: The legal basis for the processing of personal data is the legitimate interest of the Data Controller to, on the one hand, prevent conduct that is not permitted under the building’s code of conduct—which could affect the safety of residents and, secondly, to serve as a means of defending the Data Controller’s interests, in accordance with its right to self-defense. It is understood that the aforementioned interests prevail over the rights and freedoms of the data subject, given that the likelihood of an adverse impact on the data subject is low and, above all, considering the nature, risks, and benefits of such processing—both for the Data Controller and, in general, for users—as both have effective means of providing evidence regarding processing that concerns them and which, ultimately, could support their right of defense. If you would like more information about the legitimate interest assessment conducted, you may contact our DPO at <a href="mailto:dpo@livensaliving.com">dpo@livensaliving.com</a>.</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Manage the appropriate communication channels to enable the Data Subject to report incidents at the facilities and request the necessary repairs.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Performance of the contract</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> · Identifying information · Contact information · Personal characteristics </td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> Sending marketing communications related to products or services offered by the Group. The data subject has the right, at any time and free of charge, to opt out of receiving such communications through a simple mechanism included in each commercial communication or, alternatively, by submitting a request to the Data Controller using the DPO’s contact information provided here. See the “Data Subject Rights” section </td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Consent</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> · Identifying information data · Contact information </td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> To request residents’ feedback on the products and services offered and/or contracted through surveys. Additionally, the Data Controller may analyze the information collected in this regard to improve services. Although responses will be collected individually for the purpose of analyzing opinions, the analysis will be conducted in general terms, without identifying specific users, using statistical data. In any case, residents may refuse to provide their opinions or evaluations, as well as refuse to be contacted for this purpose. </td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Legitimate interest</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> · Identifying information · Contact information </td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">To take photographs of residents as part of the activities carried out at the Residence for promotional purposes related to the activities organized by the Data Controller. More specifically, the Data Controller will process these images to incorporate them into the Site Web or the App, operated by the Data Controller, and to include them in its internal publications (whether digital or in print), in advertising and/or promotional materials, as well as on its social media platforms (YouTube, Instagram, Facebook, LinkedIn, TikTok).</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Consent/Legitimate interest*</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);"> · Identifying information (including photo) · ID Number. </td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="3"> *Legitimate interest in sending surveys and analyzing their content for the purpose of monitoring the quality of services and evaluating residents’ satisfaction with those services. This processing responds to the Data Controller’s need to adapt its operations and the services offered to residents’ preferences and expectations, for which it is necessary to know their opinions. This processing also contributes to improving the quality of the services provided. It is therefore understood that the Data Controller has a legitimate interest—which takes precedence over the rights and freedoms of the data subjects—in carrying out this processing of personal data in accordance with the intended purpose and the expectations of the data subject. *Legitimate interest regarding the use of data subjects’ images: With regard to the use of residents’ images when such use is clearly incidental or when residents are difficult to identify, it is understood that the Data Controller has a legitimate interest in using such material, in accordance with the intended promotional purpose, the data subject’s expectations regarding the conditions under which such images are captured, and, ultimately, the use to which they will be put (in compliance with the provisions of the regulations regarding the protection of the right to honor, privacy, and one’s own image), concluding that the interests of the Data Controller prevail over the rights and freedoms of the data subjects. If you would like more information about the legitimate interest assessment conducted, you may contact our DPO at <a href="mailto:dpo@livensaliving.com">dpo@livensaliving.com</a> </td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Data communications</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="2"> Lawful basis</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Financial institutions or third-party payment service providers.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="2">Performance of the contract</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Social media.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="2">Consent</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">When the Data Controller deems it appropriate to exercise its right to effective legal remedy or is obliged to do so, in accordance with the applicable regulations, your data may be communicated to public administrations, judges and/or courts.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="2">Legal obligation or legitimate interest, as applicable</td> </tr> <tr> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);">Third-party entities with which the Data Controller collaborates to provide some of the additional services to residents.</td> <td style="padding: 15px; border: 1px solid rgb(206, 212, 217);" colspan="2">Performance of the contract</td> </tr> </tbody> </table>

3. RETENTION PERIOD FOR PERSONAL DATA  The personal data will be retained for the aforementioned purposes for as long as the relationship with the Data Controller remains in effect and, thereafter, for the period required by applicable law and until any liability arising from such relationship has expired.  With regard to personal data arising from the contractual relationship, such data will be retained for the duration of the agreement and, once the agreement has ended, for the period corresponding to the statute of limitations for civil actions that may arise from it, in accordance with applicable law.  With regard to personal data derived from the Data Subject’s consent or the Data Controller’s legitimate interests, such personal data will be retained until consent is withdrawn or until the Data Subject exercises the right to object, without prejudice to the expiration of any potential liabilities to which the Data Controller may be subject. 4. MANDATORY INFORMATION AND THIRD-PARTY INFORMATION  Unless otherwise indicated, the provision of personal data is mandatory to achieve the aforementioned purposes.  When the Data Subject provides personal data relating to a third party, such as family members or contacts as part of the booking process, the Data Subject undertakes to provide personal data obtained from a lawful source and to inform the third party of the purposes of the processing of their personal data and the other information set out in this Privacy Policy. 5. DATA PROCESSORS The Data Controller follows strict criteria for selecting service providers in order to comply with its data protection obligations and undertakes to enter into a data processing agreement, as required by law, through which it will impose, among others, the following obligations on them: to implement appropriate technical and organizational measures to ensure the security of personal data; to process personal data only for the agreed-upon purposes and in accordance solely with the Data Controller’s documented instructions; and to delete the data and return it to the Data Controller once the services have been completed. 6. INTERNATIONAL DATA TRANSFERS  The personal data provided will be subject to international data transfers outside the European Economic Area (EEA) (for example, to the United States, India, and the Philippines), which will be governed in accordance with the mechanisms established in the GDPR in order to safeguard the rights and freedoms of the Data Subject and ensure an adequate level of security.  In this regard, the service providers through which international data transfers may occur are subject to an adequacy decision: the EU-U.S. Data Privacy Framework, which serves as a reliable mechanism for the transfer of personal data between the EEA and the United States. Furthermore, the Standard Contractual Clauses (SCCs) issued by the European Commission are considered a legal mechanism for transferring data outside the EEA, and, where applicable, the Data Controller undertakes to enter into such SCCs whenever necessary to protect the Data Subject’s personal data. If the Data Subject wishes to obtain a copy of the SCCs, they may contact the Data Protection Officer at the following email address: dpo@livensaliving.com.   7. RIGHTS OF THE DATA SUBJECT  In accordance with data protection regulations, the Data Subject may exercise the following rights: <ul> <li style="font-weight: 400;" aria-level="1">Withdraw consent at any time, without affecting the lawfulness of any processing carried out prior to such withdrawal.</li> <li style="font-weight: 400;" aria-level="1">Right of access: The Data Subject has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning them are being processed and, if so, to obtain information regarding the purposes of the processing, the categories of personal data involved, the recipients to whom the personal data are disclosed, and the anticipated retention period for the personal data, among other matters.</li> <li style="font-weight: 400;" aria-level="1">Right to rectification: The Data Subject has the right to obtain the rectification of inaccurate personal data concerning them.</li> <li style="font-weight: 400;" aria-level="1">Right to erasure: The Data Subject has the right to obtain from the Data Controller the erasure of personal data concerning them when, among other reasons, the data are no longer necessary for the purposes for which they were collected.</li> <li style="font-weight: 400;" aria-level="1">Right to object: The Data Subject has the right to object, at any time and for reasons related to their particular situation, to the processing of personal data concerning them that is based on the Data Controller’s legitimate interests (including processing for profiling and direct marketing purposes). In this case, the Data Controller will cease processing the personal data unless it demonstrates that there are compelling legitimate grounds for the processing.</li> <li style="font-weight: 400;" aria-level="1">Right to restriction of processing: The Data Subject may, under certain circumstances (for example, if the Data Subject contests the accuracy of their data while such accuracy is being verified), request the restriction of the processing of their personal data, which will then only be processed for the establishment, exercise, or defence of legal claims.</li> <li style="font-weight: 400;" aria-level="1">Right to data portability: The Data Subject has the right to receive the personal data concerning them in a structured, commonly used, machine-readable format, and to transmit that data to another Data Controller without hindrance from the current Data Controller, in the cases provided for by the applicable regulations.</li> </ul>  The rights mentioned above may be exercised by contacting the information provided in the header of this Privacy Policy, or by emailing the DPO at the following email address: dpo@livensaliving.com. However, the data subject may contact the DPO at any time to obtain further information.  In addition, the data subject may file a complaint regarding the processing of personal data with the competent supervisory authority if they believe their rights under applicable law have been violated.   8. COMMERCIAL COMMUNICATIONS  One of the purposes for which the Data Controller processes personal data is to send electronic marketing communications containing information about activities, services, contests, offers, and/or promotions related to the services provided by the Residences.  The data subject has the right, at any time and free of charge, to opt out of receiving such communications by using a simple mechanism included in each marketing communication or, alternatively, by sending an email to the following email address: dpo@livensaliving.com. 9. SAFETY MEASURES  In order to safeguard the security of personal data, we inform you that the Data Controller has adopted all necessary technical and organisational measures to ensure the security of the personal data provided, in order to prevent its alteration, loss, and/or unauthorised processing or access, as required by law; however, absolute security does not exist.  Furthermore, the Data Controller informs the Data Subject that all of our staff, regardless of the stage of processing in which they are involved, are committed to handling your personal data with the utmost care, discretion, and confidentiality, and that such processing will be carried out in accordance with data protection laws. Last update: September, 2026. ANNEX I SPAIN: <ul> <li style="font-weight: 400;" aria-level="1">Livensa Living Aravaca Madrid: Livensa Aravaca, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Barcelona Diagonal Alto: Livensa Bcn Diagonal Alto, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Barcelona Marina: Livensa Bcn Marina, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Barcelona Sants-Badal: Alba Spanish Propco 3, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Barcelona Parallel: Alba Spanish Propco 2, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living San Sebastián: Livensa San Sebastián, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Bilbao: Livensa Bilbao, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Pamplona: Livensa Pamplona, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Granada Cartuja: Livensa Granada Cartuja, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Málaga Feria: Livensa Málaga, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Salamanca: Livensa Salamanca, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Sevilla: Livensa Sevilla, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Getafe Madrid: Alba Spanish Propco 2, S.L.U</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Granada Fuentenueva: Livensa Granada Fuente Nueva, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Studios Bilbao: Livensa Bilbao, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Studios Málaga Feria: Livensa Málaga, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Studios San Sebastián: Livensa San Sebastián, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Studios Valencia: Livensa Valencia MR, S.L.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Studios Madrid Alcobendas: Livensa Madrid 1, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Studios Valencia Viveros: Livensa Valencia Viveros, S.L.U.</li> <li style="font-weight: 400;" aria-level="1">Nido Plaza Castila Madrid SL</li> <li style="font-weight: 400;" aria-level="1">Nido Principe Pio Madrid SL</li> <li style="font-weight: 400;" aria-level="1">Nido Malvarossa Valencia SL</li> <li style="font-weight: 400;" aria-level="1">Nido El Porvenir Seville SL</li> <li style="font-weight: 400;" aria-level="1">Nido Aravaca Madrid SL</li> </ul> PORTUGAL: <ul> <li style="font-weight: 400;" aria-level="1">Livensa Living Coimbra Rio: Livensa Coimbra, Unipessoal, Lda.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Lisboa Cidade Universitaria: Livensa Lisbon Cidade Universitaria, Unipessoal, Lda.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Lisboa Marques de Pombal: Livensa Lisbon Marques de Pombal , Unipessoal, Lda.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Porto Campus: Livensa Porto Campus, Unipessoal, Lda.</li> <li style="font-weight: 400;" aria-level="1">Livensa Living Porto Boavista: Livensa Porto Boavista, Unipessoal, Lda.</li> </ul>

Privacy Policy

Spain

Portugal

Italy

Policies

Contact Us