Privacy policy

This policy explains how we process your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Data controller

Muffin74 — C/ La Magdalena 74, Avilés (Asturias), Spain. Contact: jcamero@gmail.com.

What data we process and why

• Visit bookings: name, phone, email and room of interest, to arrange and confirm the visit.
• Room applications: name, email, phone, move-in date and expected duration, to handle your application and the selection process.
• Screening form: the data you provide in our screening form (hosted on Google Forms), to assess the application.
• Tenants: contact details, contract, payments and incidents (including any photos you attach), to manage the tenancy.

Legal basis

Your consent when submitting the forms; performance of the rental contract; and our legitimate interest in managing the building and applications.

Recipients

We do not share your data with third parties except where legally required. We use providers acting as data processors:

• Stripe Payments Europe, Ltd. — processing the reservation deposit payment.
• Google (Google Forms): hosting the screening form.

Retention

Applicant and visitor data is kept only during the selection process and deleted when no longer needed. Tenant data is kept for the duration of the tenancy and any applicable legal periods.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to jcamero@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).