Privacy policy

1. Details of the joint data controllers

  • Company Name: Kategora Rentals, S.L.U.
  • NIF: B01893577
  • Address: Gran Vía Don Diego López de Haro 2 – 8º, 48001 Bilbao
  • Email: info@koraliving.com
  • Website: www.koraliving.com
  • Company Name: Kora Living Vitoria, S.L.U.
  • NIF: Kora Living Vitoria, S.L.U.
  • Address: Plaza del Renacimiento 12, 01004 Vitoria-Gasteiz
  • Email: info@koraliving.com
  • Website: www.korakiliki.com

Data Protection Officer: dpd@data-consulting.es

2. Applicable law

Our Privacy Policy has been designed in accordance with the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), with Organic Law 3/2018 of 5 December 2018 on the Protection of Personal Data and the Guarantee of Digital Rights, and its implementing regulations. The company may modify this privacy policy in order to adapt it to new legislation, jurisprudence or interpretations of the Spanish Data Protection Agency. These privacy conditions may be complemented by the Legal Notice, Cookies Policy and the General Conditions which, where appropriate, are included for the sale of certain products or services, if such access involves any speciality in terms of personal data protection.

3. Purpose of the processing of personal data

We process your personal data for the following purposes:

  • Execution of the booking contract. Data controller: Kora Living Vitoria, S.L.U.
  • Sending of commercial information about our own or affiliated entities’ apartment rentals, holiday rentals or information related to the sector, based on the legitimate interest generated by our previous commercial relationship. Data controller: Kategora Rentals, S.L.U.

4. Legitimation to process the data collected

  • Booking form: The legitimacy for the processing of your data is the execution of the booking contract.
  • Sending commercial communications: The legal basis is the existing legitimate interest, based on our previous contractual relationship.

5. How long will we keep your data?

  • Booking form: We will retain your personal data for as long as necessary to fulfil the legal obligations arising from the booking process.
  • Sending of commercial communications: We will retain your personal data for this processing until you object to it.

6. Transfers

Your data will not be transferred, except when it is for:

  • Compliance with legal obligations.

7. International transfers

No international transfers will be carried out

8. Security measures

As part of our commitment to guarantee the security and confidentiality of your personal data, we inform you that we have adopted the necessary technical and organisational measures to guarantee the security of your personal data and to avoid its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed. Notwithstanding the above, the user should be aware that security measures on the internet are not impregnable. You can obtain more information about the security measures we apply by contacting us through the channels indicated at the beginning of this Privacy Policy in the section on identification of the data controller.

9. Rights of the data subject

The data subject has the following rights regarding the processing of his or her personal data, which he or she may exercise by contacting the data controller:

  • If the legal basis for processing is consent, you have the right to withdraw consent at any time, without this affecting the processing prior to its withdrawal.
  • The right to request access to your personal data.
  • The right to request their rectification if they are inaccurate, or to request their deletion (e.g. if you consider that they are no longer necessary for the purposes for which they were collected).
  • The right to request the limitation of their processing, provided that any of the conditions provided for in the regulations are met, in which case we will only keep them for the exercise or defence of claims.
  • The right to object to processing, for example, with regard to the sending of commercial information by us, in which case we will no longer process your data for this purpose, except for compelling legitimate reasons, or for the exercise or defence of any claims.
  • The right to data portability.
  • The right to lodge a complaint with the Spanish Data Protection Agency (competent data protection supervisory authority), especially when you have not been able to exercise your rights: www.aepd.es