Privacy Policy

STEPHOUSE STUDENTS, S.L.U., provides this Privacy Policy to users of the website located at the URL www.stephouse.es (hereinafter, the “Website”) in order to inform you about how your personal data is processed and how your privacy and information are protected.

STEPHOUSE STUDENTS, S.L.U., asks that you take a few minutes to carefully read this Privacy Policy.

1. INTRODUCTION
STEPHOUSE STUDENTS, S.L.U., is a company with registered office at Calle Villanueva 2B, Escalera 1, Planta SM, 28001 Madrid, with Tax Identification Number B84777465, registered in the Madrid Commercial Registry, Electronic Folio IRUS 1000435047979, Entry 1, Page M-836108 (hereinafter, “StepHouse”).

This Privacy Policy applies to the StepHouse website, available to the public at the URL www.stephouse.es, as well as to your interactions with StepHouse through said website or via email at
. StepHouse may modify this Privacy Policy as necessary. In the event of any changes, they will be communicated via the website or by other means so that you may be aware of the new privacy terms. Your continued use of the features provided by StepHouse after being notified of such changes will constitute your acceptance of them, except in cases where your express consent is required.

2. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA
StepHouse is responsible for processing your personal data. To ensure that your data is processed properly, StepHouse has appointed a Data Protection Officer, whom you can contact with any questions you may have at privacy@stephouse.es.

3. FOR WHAT PURPOSES IS YOUR PERSONAL DATA PROCESSED
The personal data you provide through the Website or by contacting StepHouse through other means may be processed by StepHouse for the following purposes, depending on your interactions with StepHouse.

•Contacting, managing, and processing user inquiries and requests: The personal data of users who contact StepHouse through any of the contact channels made available for the purpose of receiving inquiries and/or requests will be processed for the purposes of maintaining contact between the parties, managing website users, providing customer or user support services, and managing and processing the requests or inquiries you submit through the channels enabled for this purpose by StepHouse. In this regard, we inform you that, in certain cases, StepHouse may contact you via instant messaging apps (e.g., WhatsApp) to facilitate and streamline communication.

•Sending commercial, promotional, or advertising communications: StepHouse may process users’ personal data for the purpose of sending you personalized commercial and advertising information regarding activities, products, services, offers, and special promotions, as well as various types of documentation, via mail, telephone, or electronic means (email, newsletters, SMS, instant messaging services, and other electronic communication channels).

You may object at any time to the processing of your data for advertising or promotional purposes by StepHouse using the channels provided for this purpose by StepHouse, as detailed further in this document.

•Improving the quality of customer service: Calls made to StepHouse and calls made by StepHouse will be recorded for the purpose of improving the quality of customer service, as indicated in the message played at the beginning of the call.

•Conducting the recruitment process: The personal data you provide through the “Careers” section of the Website or by contacting StepHouse through other means, such as email, job recruitment websites, or other channels, may be processed by StepHouse for the purpose of conducting the recruitment process, which involves analyzing your professional profile based on the information contained in your resume, as well as information provided during the recruitment process through interviews, group exercises, and exchanged emails.

StepHouse maintains unified management of its selection processes, which is why your application may be considered in relation to any of the entities that form part of its business group. If this involves the transfer of data to an entity other than the one you have applied to, you will be duly notified and informed of such data transfer.

4. WHAT DATA DOES STEPHOUSE PROCESS AND WHERE DOES IT COME FROM?
The data that StepHouse processes as a result of your interactions through its website comes from the following sources:

•Information you provide by filling out the fields used to manage communication with users, as made available by StepHouse, or through any other means by which you communicate with StepHouse.

•Data generated as a result of the establishment, management, and maintenance of the relationship between the user and StepHouse.
StepHouse may process the following types of personal data, depending on the nature of the relationship established with the user:

•Identifying and contact information (e.g., first and last name, email address, mailing address, phone number, etc.).
•Academic or professional information and/or employment details (e.g., information contained in your resume).
•Data regarding personal characteristics and social circumstances associated with your preferences and interests regarding the residences offered by StepHouse (e.g., preferences regarding room type, etc.).
•Other types of data. Only if you provide other types of data during your interactions with StepHouse will such data be processed by StepHouse, provided that such processing is necessary to achieve the intended purpose. Otherwise, the data will be destroyed without having been stored or processed by StepHouse.

5. WHAT IS THE LEGAL BASIS FOR THE PROCESSING OF YOUR DATA
StepHouse processes the personal data you provide in accordance with the following legal bases, depending on the type of data provided and your interactions with StepHouse:

•The processing of your data for the purpose of “contacting, managing, and handling inquiries and requests from Website users” is based on the necessity of such processing for the performance of a contract between the user and StepHouse to which the data subject is a party, or for the implementation of pre-contractual measures at the data subject’s request; that is, in the management of your request, in maintaining contact between the parties, and, where applicable, in the provision of the service you have requested.

•Furthermore, the processing of your data for the purpose of “sending commercial, promotional, or advertising communications” is based on your consent.

•The processing of your data for the purpose of “improving the quality of customer service” is based on StepHouse’s legitimate interest in strengthening its customer service to resolve any issues that arise and improve current processes.

•The personal data you provide for the purpose of “conducting the selection process” will be processed in connection with pre-contractual measures or with a view to entering into a contract (Article 6(1)(b) of the GDPR).

StepHouse informs you that it will only process personal data for the purposes based on your consent in cases where you have consented to each of the processing operations, through the means of obtaining consent made available by StepHouse.

6. TO WHOM YOUR DATA IS DISCLOSED
Your data may be disclosed to other StepHouse companies that perform functions within the organization, including, but not limited to, management, oversight, human resources management, regulatory compliance monitoring, or auditing. The purpose of this data sharing is to facilitate the management and processing of the necessary procedures established by law, as other companies within the business group may be the entities required to handle the inquiry. The legal basis for this data sharing is StepHouse’s legitimate interest in organizing the human and technical resources of its business group.
Your data will not be disclosed to other third parties, unless expressly required by law or with your consent.

7. HOW LONG YOUR DATA IS STORED
StepHouse will retain your personal data for as long as necessary to provide the requested service and/or to achieve the intended purpose of the processing.
Thereafter, provided you have not exercised your right to erasure, your data will be retained for the statutory periods applicable in each case, taking into account the type of data as well as the purpose of the processing.
In any case, you may request detailed information regarding the data retention periods applied at StepHouse by contacting StepHouse’s Data Protection Officer, who can be reached at privacy@stephouse.es.

8. WHAT PERSONAL DATA YOU MUST PROVIDE TO
When personal data is collected via a form made available on the Website, you must provide at least the information marked as required on the form in question. If you do not provide at least this information, which is considered necessary, StepHouse will not be able to process the service or inquiry you have submitted.

9. WHAT YOU MUST GUARANTEE WHEN PROVIDING YOUR PERSONAL DATA
You must guarantee that the data you provide is true, accurate, complete, and up-to-date, and you are liable for any direct or indirect damage or harm that may result from a breach of this obligation.
If you provide data belonging to a third party, you warrant that you have informed said third party of all aspects contained in this Privacy Policy and obtained their consent to provide their data for the specific processing purpose in question. All of this must be done prior to providing a third party’s data through the Website.

10. WHAT MEASURES ARE TAKEN TO PROTECT YOUR PERSONAL DATA
In response to StepHouse’s commitment to ensuring the security and confidentiality of your data, the necessary security measures have been implemented to protect personal data, and the technical means available have been installed to prevent the loss, misuse, alteration, unauthorized access, and theft of personal data provided through the Website. In any case, please keep in mind that security measures on the Internet are not impregnable.

11. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA
StepHouse informs you that you have the following rights regarding your personal data:

•Accessing your data: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and to access your data to find out what personal data is being processed.

•Request the correction of your data: Under certain circumstances, you have the right to request the correction of any personal data concerning you that you believe to be inaccurate and that is being processed by StepHouse,

•Request the deletion of your data: When, among other reasons, the data is no longer necessary for the purposes for which it was collected, you have the right to request the deletion of your data.

•Request the restriction of the processing of your data: Under certain circumstances, you have the right to request the restriction of the processing of your data; in such cases, only the data for which you have requested a restriction will be retained for the purpose of asserting or defending legal claims.

•Data portability: Under certain circumstances, you have the right to receive the personal data concerning you that you have provided in a commonly used, machine-readable, structured format, as well as to have StepHouse transmit that data to another data controller.

•Object to the processing of your data: Under certain circumstances and for reasons related to your particular situation, you have the right to object to the processing of your data. In such cases, the processing will cease unless it must continue for compelling legitimate grounds or for the establishment, exercise, or defense of legal claims.
You also have the right to withdraw any consent you may have given for the processing of your data, without this affecting the lawfulness of the processing based on the consent given prior to its withdrawal.

You may exercise your rights regarding your personal data by sending a written request to StepHouse, marked with the reference “Data Protection,” to one of the following addresses: Calle Villanueva 2B, Escalera 1, Planta SM, 28001 Madrid; privacy@stephouse.es;
If your request is not addressed, you may file a complaint with the Data Protection Officer at the email address privacy@stephouse.es, or with the competent data protection supervisory authority.

12. CHANGES TO THE PRIVACY POLICY
The Website’s Privacy Policy may be updated. Therefore, we recommend that you review this policy each time you visit the Website to ensure you are fully informed about how your personal data is processed and how your privacy and information are protected.

Last updated: March 2026.