Legal information

Privacy policy

This Privacy Policy provides information on the processing of the personal data of the users (the “Users”) of the website huelgaporlavivienda.org and its versions in other languages, including those accessible from the domains vagaperlhabitatge.cat, folgapolavivenda.gal and etxebizitzagreba.eus (the “Website”), managed by the Madrid Tenants’ Union. The Website provides information about the general strike called for 11 November 2026 (the “General Strike”) and enables groups to communicate their endorsement of it.

The processing of personal data is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights) (“LOPDGDD”) and any other applicable legislation.

The Participa platform for calls to action (participa.huelgaporlavivienda.org) has its own privacy policy, which governs the data processed on it.

1. Identification of the controller and the joint controller

Controller for the processing operations it determines individually, and owner and main manager of the Website:

Owner: Sindicato Social de Inquilinas e Inquilinos de la Comunidad de Madrid (hereinafter, the “Madrid Tenants’ Union”).
Tax ID (N.I.F.): G-88083712.
Registered office: Calle Tres Peces, 3, 28012 Madrid, Spain.
Contact email: [email protected].
Registration details: entered in the Registry of Associations of the Community of Madrid under number 38229.

Joint controller solely in respect of the processing operations whose purposes and means it determines jointly with the Madrid Tenants’ Union:

Entity: Associació Sindicat de Llogaters i Llogateres (hereinafter, the “Sindicat de Llogateres”).
Tax ID (N.I.F.): G-66992280.
Registered office: c/ Casp, 43, bajos, 08010 Barcelona, Spain.
Contact email: [email protected].

This Privacy Policy distinguishes between the processing operations that these entities determine jointly and those that each entity manages independently (jointly, the “Unions”). Users may request further information about the joint controllership arrangement through the contact channels indicated in this Policy, and may exercise their rights against any of the joint controllers.

The Madrid Tenants’ Union is responsible for the general management of the Website, its security and the handling of queries.

2. Information and consent

This Privacy Policy explains which data are processed, for what purposes and on what legal bases, who may receive them, any international transfers, the retention periods or criteria, and the rights of data subjects.

Browsing the Website does not require providing identifying data. Where a form requests data, the mandatory fields will be marked as such; failure to provide them may prevent the request from being completed. Acceptance of this Policy does not replace the specific consents that must be obtained for optional communications.

3. Source, purpose and legal basis

The main processing operations carried out through the Website are described below.

Activity: browsing and security of the Website

Source	From the User’s device when visiting the Website.
Legal basis	Art. 6(1)(f) GDPR: legitimate interest in providing the Website, displaying it in the requested language and ensuring its security and proper operation.
Purposes of processing	Displaying the Website, preventing abuse and attacks, and detecting and resolving technical incidents.
Data subjects	People who visit the Website.
Categories of data	Technical connection data, such as the IP address, browser and device type, date and time of access and pages requested.
Recipients	The web hosting provider, as processor. To display the fonts, the User’s browser connects to Google Fonts (Google), which receives the IP address.
International transfers	Google may process data outside the European Economic Area. Where applicable, the transfer is covered by the safeguards provided for in Chapter V of the GDPR, such as the EU-U.S. Data Privacy Framework or standard contractual clauses.
Retention periods	Technical logs are kept only for as long as necessary for security and incident management.

Activity: groups’ endorsements of the General Strike

Source	From the person who, on behalf of a group, fills in the endorsement form on the Website.
Legal basis	Art. 6(1)(a) GDPR: consent of the person submitting the form.
Purposes of processing	Recording the group’s endorsement of the General Strike; where applicable, publishing the group’s name in the list of endorsements on the Website; and contacting the contact person to coordinate their participation and inform them about the General Strike.
Data subjects	Contact persons of the groups communicating their endorsement.
Categories of data	The data requested in the form, such as the group’s name, the name and email address of the contact person, their telephone number if provided, and the group’s town or area.
Recipients	The Unions and Action Network, as provider of form management and mailing services on behalf of the Unions. The group’s name may be made public in the list of endorsements; the contact person’s details will not be published.
International transfers	Action Network may process or access data from outside the European Economic Area. Where applicable, the transfer will be carried out with the safeguards provided for in Chapter V of the GDPR.
Retention periods	For as long as necessary to coordinate participation in the General Strike and its follow-up actions, or until consent is withdrawn. Thereafter, only the minimum data necessary to evidence consent will be kept for the applicable statutory periods.

Activity: newsletter

Source	From the User, through a separate, optional and unticked checkbox to subscribe to the Unions’ newsletter.
Legal basis	Art. 6(1)(a) GDPR: consent. Mailings will be sent in accordance with the legislation applicable to electronic communications.
Purposes of processing	Sending information by email about activities, campaigns, initiatives, legislation and rights relating to housing, including communications related to the General Strike. Subscription is voluntary and is not a condition for submitting an endorsement.
Data subjects	People who expressly subscribe to the Unions’ newsletter.
Categories of data	Email address.
Recipients	The Unions and Action Network, as provider of newsletter management and mailing services on behalf of the entity.
International transfers	The mailing provider may involve processing of or access to data from outside the European Economic Area. Where applicable, the transfer will be carried out with the safeguards provided for in Chapter V of the GDPR.
Retention periods	Until the User withdraws their consent or unsubscribes. Thereafter, only the minimum data necessary to manage the unsubscription and evidence consent will be kept for the applicable periods.

Activity: handling of queries

Source	From people who write to the contact email addresses indicated on the Website.
Legal basis	Art. 6(1)(a) GDPR: consent of the person writing to us; and Art. 6(1)(f) GDPR: legitimate interest in responding to the communications received.
Purposes of processing	Answering queries, correcting information on the Website where appropriate and handling incidents. If a query needs to be forwarded to another entity, such as the organiser of an activity, only the necessary information will be shared and the person will be informed where appropriate.
Data subjects	People who submit queries, requests or incident reports.
Categories of data	Name, email address and any data the person includes in their message.
Recipients	No data will be disclosed to third parties, except to the entity that needs to handle the query where necessary, or where required by law.
International transfers	No transfer is envisaged merely as a result of handling a query. If the email providers used access the data from outside the European Economic Area, the safeguards required by Chapter V of the GDPR will apply.
Retention periods	For as long as necessary to respond to and handle the request and, thereafter, for the applicable periods to address any possible liabilities or claims.

Activity: donations

Source	From people who make a donation by bank transfer and provide their details to receive a receipt.
Legal basis	Art. 6(1)(b) GDPR: management of the donation and issuing of the requested receipt; and Art. 6(1)(c) GDPR: compliance with the applicable legal, accounting and tax obligations.
Purposes of processing	Managing the donation and issuing the corresponding receipt.
Data subjects	Donors.
Categories of data	First name and surname(s), Tax ID (N.I.F.), email address, amount and date of the donation.
Recipients	The bank and, where required by law, the tax authorities.
International transfers	None envisaged.
Retention periods	For the periods required by accounting and tax legislation.

4. Cookie policy and similar technologies

The use of cookies and similar technologies is described in the Website’s Cookie Policy. Technologies that require consent will only be used once it has been obtained beforehand, in the cases required by the applicable legislation.

5. Exercising your rights

Data subjects may exercise, where applicable, their rights of access, rectification, erasure, objection, restriction of processing and portability. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out beforehand. Users may also unsubscribe from the newsletter via the link included in each message.

To exercise these rights, a request may be sent to [email protected] or [email protected]. For processing carried out under joint controllership, requests may also be sent to [email protected].

The receiving entity will, as a general rule, respond within one (1) month. This period may be extended in the cases provided for by law, in which case the data subject will be informed of the extension and the reasons for it within the initial period.

If you consider that the processing of your personal data does not comply with the legislation and the response obtained is not satisfactory, you may lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es) or with the competent supervisory authority.

6. Acceptance and availability of the Privacy Policy

When submitting a form on the Website, the User must tick the checkbox provided to declare that they have read and accept this Privacy Policy. This checkbox does not in itself provide a legal basis for processing that must be based on consent, which will be requested specifically and separately, such as subscribing to the newsletter or publishing the group’s name.

The current version of this Policy will always be available on this page.