Privacy policy
This is a courtesy translation. The legally binding version is the Spanish text.
Information on the processing of personal data in accordance with the GDPR and the LOPDGDD.
Information on the processing of personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD, the Spanish Data Protection Act).
Data controller
The controller of the data processing is Ciudad Residencial Universitaria, S.A. (CRUSA), with registered office at Plaza San Diego, s/n, 28801 Alcalá de Henares (Madrid) and tax identification number (NIF) A-80991714.
Data Protection Officer: dpd@crusa.es.
Data we process and purpose
Through the forms on this website we process the data you provide (first name, surname(s), email address, telephone number and the content of your enquiry or booking request) for the purpose of managing your enquiry or your booking request at the San Ildefonso University Residence and of keeping in contact with you.
When you submit the form you also receive an automatic email at the address you entered, simply to confirm that your message or request has reached us and that we will reply as soon as we can. It is a courtesy, not an answer: in the case of a booking, the request is not confirmed until the Residence staff confirm it to you explicitly. For security reasons this automatic email is sent at most once per hour to the same address.
- Legal basis: the consent you give when submitting the form and the legitimate interest in dealing with your enquiry.
- Categories of data: identifying data and personal contact data.
- Retention: for as long as necessary to deal with your enquiry and, thereafter, for the periods legally required.
- Recipients: data is not disclosed to third parties, except where legally required.
- International transfers: no data transfers are made outside the European Union.
Your rights
You may exercise the following rights over your personal data:
- Access: to know what data of yours we process.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request that your data be deleted.
- Restriction: to request that processing be restricted in the cases provided for by law.
- Portability: to receive your data in a structured, commonly used format.
- Objection: to object to processing on grounds relating to your particular situation.
- Withdrawal of consent: to withdraw, at any time, the consent you have given.
To exercise them you may write by post to Ciudad Residencial Universitaria, S.A., Plaza San Diego, s/n, 28801 Alcalá de Henares (Madrid), or by email to the Data Protection Officer: dpd@crusa.es. For identification purposes, a copy of an identity document may be requested. You will receive a reply within a maximum of one month.
Complaint to the supervisory authority
If you consider that the processing of your data does not comply with the regulations, you may lodge a complaint with the Agencia Española de Protección de Datos (the Spanish Data Protection Agency, AEPD) (calle de Jorge Juan, 6, 28001 Madrid · telephone 901 100 099 · www.aepd.es).
Accuracy of the data
The data provided must be true, accurate and up to date; the user is responsible for its accuracy. In the case of minors, the consent of their parents, guardians or legal representatives is required.