CCTV policy

📑 Informational translation This page is an informational translation of our Spanish legal documents. The legally binding version is the Spanish original hosted on this website. For any legal interpretation, the Spanish text prevails.

Pursuant to article 13 of Regulation (EU) 2016/679 (GDPR) and article 22 of the Spanish data protection law (LOPDGDD), we inform you about the processing of images through the CCTV system installed at our premises.

1. Data controller

2. Purpose of processing

The capture and processing of images has the sole purpose of ensuring the safety of people, property and premises at the Apartamentos Natur León complex. Cameras are not used for workplace monitoring or commercial purposes.

3. Legal basis

Processing is based on the controller’s legitimate interest (GDPR art. 6.1.f), in accordance with article 22 of the Spanish data protection law for the use of CCTV systems for security purposes.

4. Camera locations

Cameras are installed exclusively at:

There are no cameras inside the apartments, nor in areas that would compromise guests’ privacy (bathrooms, bedrooms, changing areas).

The premises display visible information signs in areas under CCTV, in accordance with the model approved by the Spanish Data Protection Agency (AEPD).

5. Retention period

Images are kept for a maximum of 30 days from capture, after which they are destroyed automatically. Only when images are needed to evidence acts against the integrity of persons, property or premises may they be kept for as long as necessary to be made available to the competent authorities.

6. Recipients

Images will not be shared with third parties, except:

7. Your rights

As the data subject you can exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to apartamentosnaturleon@gmail.com, attaching a copy of your ID and, where applicable, the approximate date and time of the image capture to help locate it.

8. Complaints

You may at any time lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing does not comply with the regulations.