Privacy policy

1. Controller

This policy describes how we collect, use, store and share your personal data when you use the "Vecinly" platform, operated by Home Digital Iberia SLU. Home Digital Iberia SLU is the data controller for your account, billing, security and service-analytics data. As regards the data we process on behalf of your community for its management (for example, minutes, votes, fees, incidents and internal communications), the community of owners —represented by its president or administrator— is the data controller and Home Digital Iberia SLU acts as a data processor in accordance with Article 28 of the GDPR.

2. Data we collect

• Registration and profile data: name, surname, email, identification document (NIF/CIF/NIE or equivalent depending on country) and one-way encrypted passwords.
• Community usage data: associated properties, participation fees, payment history, meeting minutes and direction of votes cast in surveys and assemblies.
• Information technical:IP address, browser type, operating system and analytical information obtained through our own cookies and from trusted suppliers.

3. Purpose and legal basis of processing

• Contractual execution: to provide the Vecinly service, manage your account and facilitate communication between neighbors.
• Legal obligation: to comply with tax, accounting regulations or requirements of the competent authorities.
• Legitimate interest: for the prevention of fraud and improvements techniques.
• Consent: for the use of non-essential cookies or the sending of marketing communications.

4. Data recipients

Your data may be visible to the president and/or administrator of your community within the strict scope of their functions. We share data processing with processors (cloud infrastructure, payment gateways, messaging and analytics) under data protection agreements. As a general rule we process data within the European Economic Area (EEA); some providers (such as Google, for authentication and for the analytics of our public marketing pages) may process it in the USA, relying on the EU-US Data Privacy Framework or on Standard Contractual Clauses. Third-party analytics is limited to the marketing pages and is only activated with your consent. We do not sell or rent your data to third parties.

5. Data retention

The data is kept as long as you keep your account active. Once the relationship ends, the data is blocked and kept for the time required by applicable legal regulations. After that period, they are permanently deleted or anonymized.

6. Security

We apply advanced technical and organizational measures: encryption in transit (TLS) and database encryption at rest. Personal data is stored encrypted, so that the information in the database is unreadable: even with direct access to the database it could not be interpreted without the encryption keys, which are managed independently and with restricted access. We periodically review our security practices in accordance with the state of the art.

7. Your rights

You have the right to access, rectify, delete (right to be forgotten), limit, oppose and carry your personal data. You can exercise them from your profile settings or by contacting our support. You can also file a complaint with the competent data protection authority in your country.