Privacy Policy
1. Data controller
YOURSPACE TENERIFE SLU ("YOURSPACE COWORKING"), Spanish Tax ID (CIF) B75863885, registered at C/ Bethencourt Alfonso 2, planta 2, 38002 Santa Cruz de Tenerife, Spain, is the controller responsible for your personal data.
You may exercise your data protection rights at: privacy@yourspace.work
2. Data we process
Contact, registration and address details (name, email, phone, postal address).
National ID card, foreigner ID number, passport or tax ID (NIF/CIF), and an identity image or limited copy of the identity document for each user, provided to verify identity and formalise the contract.
Electronic signature of the contract and the space's internal rules.
Billing and payment details.
Usage data for the app.yourspace.work, hub.yourspace.work, key.yourspace.work and admin.yourspace.work platforms (credentials, access and network connection logs).
Footage captured by the video surveillance system.
3. Purpose and legal basis
We process your data for the following purposes:
• Managing sign-up, the contract and billing (app.yourspace.work) — performance of a contract.
• Managing the community and communication between users (hub.yourspace.work) — performance of a contract and legitimate interest.
• Managing digital physical access to the space (key.yourspace.work) — performance of a contract.
• Managing individual access to the corporate WiFi/Internet network via the Omada system (admin.yourspace.work) — performance of a contract and legitimate interest in network security.
• Verifying users' identity and formalising the contract (identity image or limited copy of the document and electronic signature) — compliance with legal obligations and performance of a contract.
• Ensuring the security of the premises through video surveillance — legitimate interest.
• Sending commercial communications, where you have given your consent.
4. CCTV / Video surveillance
Controller: YOURSPACE TENERIFE SLU — YOURSPACE COWORKING.
Coverage and operation: the space has video surveillance cameras in its indoor areas, operating 24 hours a day.
Purpose: security of the premises and access control, based on the controller's legitimate interest.
Retention: footage is kept for a maximum of 30 calendar days, in line with the legally established period, unless it must be kept available for law enforcement, judicial or administrative authorities investigating an incident.
Notice: the video surveillance system is signposted at the entrance to the space. Access to and use of the premises, as well as signing the space's usage contract, entail having been informed of this security measure.
You may exercise your data protection rights at: privacy@yourspace.work
5. Data retention
Data arising from the contract, the electronic signature, acceptance evidence and tax records will be kept for the duration of the contractual relationship and, afterwards, for the periods required by tax and commercial law.
The identity image or limited copy of the identity document will be kept only for the time needed for verification and will be automatically erased after 12 months, unless it must be kept because of an incident, claim or legal obligation.
CCTV footage is kept for a maximum of 30 calendar days, except for the exceptions noted above.
Data from the digital platforms is kept while the account remains active and for the periods legally required afterwards.
6. Recipients and processors
Your data will not be disclosed to unrelated third parties, except where legally required. To provide the service, we rely on providers acting as data processors under Article 28 GDPR, including: web hosting providers, the electronic signature platform, the digital access control system provider (TTLock locks, with infrastructure hosted within the European Union), and the Omada network management system provider. If you have given your consent to analytics cookies, we also share aggregated browsing data with Google Ireland Limited (Google Analytics), acting as a data processor.
7. International transfers
Some of our technology providers may be located outside the European Economic Area. In such cases, the transfer is carried out with the safeguards required by the GDPR (standard contractual clauses or other equivalent mechanisms). In particular, analytics data processed by Google Analytics (only if you have given your consent) may be processed by Google LLC in the United States, under the EU-US Data Privacy Framework.
8. Record of Processing Activities
YOURSPACE TENERIFE SLU keeps an up-to-date Record of Processing Activities (RPA), in accordance with Article 30 of the General Data Protection Regulation (GDPR), documenting the purposes, categories of data, retention periods and security measures of each processing activity described in this policy.
This record is for internal use, in application of the principle of proactive accountability (Article 5.2 GDPR), and is available for review by the Spanish Data Protection Agency (AEPD) and other competent supervisory authorities.
9. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to privacy@yourspace.work. If there are reasonable doubts about your identity, we may request only the information strictly necessary to verify it.
You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es) if you believe the processing does not comply with applicable law.
This document is a summary translation provided for convenience. In case of any discrepancy, the Spanish version published at www.yourspace.work shall prevail.