PRIVACY POLICY

Controller: EVARIA HOMES SL. Tax ID (NIF): B88744966. Registered address: Calle Guineueta nº 7, 1º-2ª, 08042 Barcelona, Spain. Registered in the Barcelona Commercial Registry, sheet B-657803, 1st entry. Contact and data protection rights email: info@evariahomes.com.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and other applicable legislation. This policy describes the processing linked to this website and to the usual relationships of our cleaning, housekeeping and operational services business.

Data: name, company, email, city, message and any other data you provide when writing to us. When you submit the form on this website, the data is transmitted securely to our server and forwarded by email to info@evariahomes.com through the email delivery provider Resend (Resend, Inc.), acting as a processor. Purpose: to respond to your request and, where applicable, handle pre-contractual communications; legal basis: taking steps at your request prior to entering into a contract, or our legitimate interest in responding to enquiries received. The read-confirmation checkbox is not consent to marketing communications. The website does not keep messages in its own database; they are kept in our mailbox. To prevent abuse, the server may temporarily use your IP address to limit repeated submissions, without storing it permanently.

Purpose: to handle and respond to your enquiry, request for information or quote. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and, for general enquiries, our legitimate interest in replying to communications received (Art. 6(1)(f) GDPR).

Retention: for as long as needed to handle the request; if no relationship is established, the data will be reviewed and deleted once no longer necessary, unless it must be kept to address potential liabilities. We will not use this data for newsletters or mass marketing communications.

Identification, contact, professional, billing and, where applicable, bank details of clients, suppliers and their contact persons.

Purpose: to manage the contractual relationship, service delivery, invoicing and administration. Legal basis: performance of a contract (Art. 6(1)(b) GDPR), compliance with tax and accounting legal obligations (Art. 6(1)(c) GDPR) and legitimate interest in maintaining professional contact with company contact persons (Art. 6(1)(f) GDPR).

Retention: for the duration of the relationship and thereafter for the applicable statutory periods (e.g. commercial and tax obligations) and limitation periods for potential liabilities.

When you voluntarily send us your CV or application (by email, WhatsApp or job platforms), we will process the data provided to manage the selection process. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and, if we wish to keep your application for future processes, your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Retention: during the selection process and, once completed, only for a reasonable period; if you do not consent to it being kept for future processes, it will be deleted.

We process the data needed to manage the employment relationship (contracts, payroll, schedules, holidays, absences, service organisation and occupational health and safety). Legal basis: performance of the employment contract (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR). Employees receive a specific privacy notice detailing this processing.

We use an internal web application, accessed through individual accounts with role-based permissions, to organise scheduling, service allocation, working-time records, incidents and operational photographs.

Working-time recording is a legal obligation (Art. 6(1)(c) GDPR; Art. 34.9 of the Spanish Workers' Statute). Where location is recorded, it is captured only at the specific moment of clocking in or out, in order to verify the record at the service location, on the basis of legitimate interest and employment supervision (Art. 6(1)(f) GDPR and Art. 20.3 of the Spanish Workers' Statute). There is no continuous location tracking during or outside working hours. Working-time records are kept for four years, as required by employment law.

Operational service history: we keep the history of cleaning services performed because traceability is needed with regard to clients, incidents and potential claims. We periodically review the identifiable personal data associated with that history to limit it to what is necessary.

During services, photographs may be taken to document the condition of a property, the work performed, damage, supplies or incidents. Legal basis: legitimate interest in documenting and evidencing proper service delivery (Art. 6(1)(f) GDPR) and performance of the contract with the client (Art. 6(1)(b) GDPR).

We try not to capture people or personal belongings when not necessary. Ordinary photographs are kept with a target of up to four years from the service, subject to necessity and proportionality; photographs linked to an incident or claim may be kept while it remains open and for the applicable limitation periods.

We do not disclose data to third parties except where legally required (e.g. tax authorities, Social Security, courts or competent authorities) or where necessary for the relationship (e.g. the client receiving a service may receive information or photographs relating to that service).

Service providers (web hosting, infrastructure and database for the internal app, email and delivery of form messages, employment, tax and accounting advisers) may access data as processors, to the extent necessary.

Some technology providers may process or access data outside the European Economic Area. In such cases, we seek to ensure the transfer is covered by an adequacy decision (such as the EU-US Data Privacy Framework for certified entities), European Commission standard contractual clauses or another safeguard provided for in the GDPR. You can request more information at info@evariahomes.com.

We apply reasonable technical and organisational measures proportionate to the risk, such as access control through individual accounts and role-based permissions. No system is completely infallible, but we keep these measures under ongoing review.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to info@evariahomes.com or to our registered address, stating the right you wish to exercise. We may ask for additional information to verify your identity.

If you believe the processing is not appropriate, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

We may update this policy to reflect legal changes or changes in our processing. The date of the latest update is shown at the top.