STEPHOUSE STUDENTS S.L.U. PARTNER, S.L.U. makes this Privacy Policy available to users of the website located at the URL https://stephouse.es/en/ (hereinafter, the “Website”) in order to provide information on how your personal data is processed and how your privacy and information are protected.

STEPHOUSE STUDENTS S.L.U. PARTNER, S.L.U. asks you to take a few minutes to carefully read this Privacy Policy.

1. INTRODUCTION
STEPHOUSE STUDENTS S.L.U. PARTNER, S.L.U., is a company based at Calle Villanueva 2B, Escalera 1, Planta SM, 28001 Madrid, with Tax Identification Number B84777465, registered in the Madrid Commercial Registry, Folio IRUS 1000435047979, Registration 1, Sheet M-836108 (hereinafter, “StepHouse“).

This Privacy Policy applies to the StepHouse website, available to the public at the URL https://stephouse.es/en/, as well as to any interactions you have with StepHouse via the website or email.

StepHouse may modify this Privacy Policy when necessary. If any changes are made, they will be communicated via the website or other means so that you are aware of the new Privacy conditions. Continuing to use the services provided by StepHouse after notification of such changes will imply your agreement, except in cases where explicit consent is required.

2. WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?
StepHouse is the entity responsible for the processing of personal data. To ensure proper management of your data, StepHouse has appointed a Data Protection Officer, who you can contact for any queries via email at privacy@stephouse.es

3. WHAT PURPOSES ARE YOUR PERSONAL DATA PROCESSED FOR?
The personal data you provide via the Website or by contacting StepHouse through other means may be processed by StepHouse for the following purposes, depending on the interactions you have with StepHouse:

•  Contact, manage, and process user queries and requests: The personal data of users who contact StepHouse via any available communication channels on the website to submit inquiries or requests will be processed to maintain contact, manage the users of the website, provide customer or user services, and process any inquiries or requests submitted through the communication channels.
• Commercial, promotional, or advertising communications: StepHouse may process your personal data to send you personalized commercial and advertising information regarding activities, products, services, offers, special promotions, as well as various types of documents, via postal, telephone, or electronic means (email, newsletter, SMS, messaging, and other forms of electronic communication).

You can oppose the processing of your data for advertising or promotional purposes at any time using the means provided by StepHouse.

• Develop the selection process: Personal data provided through the “Work with Us” section of the website or by contacting StepHouse through other means may be processed for the purpose of developing the selection process, which involves analyzing your professional profile through the information in your resume and other details shared during the selection process.

StepHouse manages its selection processes in a unified way, so your application could be considered by any of the companies within its corporate group. If this involves transferring data to an entity other than the one you initially applied to, you will be properly informed.

4. WHAT DATA IS PROCESSED BY STEPHOUSE AND WHERE DOES IT COME FROM?
The data processed by StepHouse as a result of interactions on the website comes from the following sources:

• Data you provide through the communication forms on the website or any other means of contact with StepHouse.
• Data generated as a result of the development, processing, and maintenance of the relationship between the user and StepHouse.

StepHouse may process the following types of personal data, depending on the relationship established with the user:

• Identification and contact data (e.g., name, email address, postal address, phone number, etc.)
• Academic or professional data and/or employment details (e.g., data in your CV).
• Other types of data: Only if you provide other types of data during interactions with StepHouse, these will only be processed if necessary for the purpose at hand.

5. WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?
StepHouse processes your personal data based on the following legal grounds:

• The processing of data for “Contact, manage, and process user queries and requests” is based on its necessity for the execution of a contract between the user and StepHouse, or for the application of pre-contractual measures at the request of the user.
• The processing of data for “Commercial, promotional, or advertising communications” is based on the legitimate interest of StepHouse to keep you informed about updates related to the organization, including services and activities similar to those published on the Website and related to an existing legal relationship with you. You can oppose this treatment at any time.
• Data provided for “Developing the selection process” is processed based on pre-contractual measures or the intention to conclude a contract.

6. TO WHOM IS YOUR DATA COMMUNICATED?
Your data may be shared with other StepHouse companies for purposes including management, human resources, compliance monitoring, and auditing. This communication of data is essential for managing the administrative procedures established by law within the group.

Your data will not be shared with third parties, unless required by law or with your explicit consent.

7. HOW LONG WILL YOUR DATA BE KEPT?
StepHouse will retain your personal data for as long as necessary to provide the requested service and/or to fulfill the processing purpose. After this period, your data will be kept for the applicable legal retention periods, depending on the type of data and processing purpose.

8. WHAT PERSONAL DATA MUST YOU PROVIDE?
When personal data is collected via a form on the Website, you must provide at least the required mandatory data. If you do not provide this necessary data, StepHouse will not be able to process the service or query.

9. WHAT SHOULD YOU GUARANTEE WHEN PROVIDING YOUR PERSONAL DATA?
You must ensure that the data you provide is true, accurate, complete, and up to date, and you are responsible for any damage that may arise from failure to fulfill this obligation.

If you provide data belonging to a third party, you guarantee that you have informed them of all aspects in this Privacy Policy and have obtained their consent to share their data for the specific processing purpose.

10. WHAT MEASURES ARE TAKEN TO PROTECT YOUR PERSONAL DATA?
StepHouse has adopted required security measures to protect your personal data and installed technical means to prevent loss, misuse, alteration, unauthorized access, and theft. However, please note that no security measures on the internet are completely impenetrable.

11. WHAT ARE YOUR RIGHTS REGARDING YOUR PERSONAL DATA?
You have the following rights regarding your personal data:

• Access to your data: You have the right to confirm whether your data is being processed and to access the data.
• Rectification of your data: You can request correction of any incorrect data.
• Deletion of your data: You may request the deletion of your data when it is no longer necessary for the purposes it was collected.
• Limitation of processing: You can request that the processing of your data be limited, where only certain data will be kept for the exercise or defense of claims.
• Portability of your data: You may request to receive your data in a structured, commonly used, and machine-readable format.
• Opposition to processing: You have the right to object to the processing of your data for specific reasons.

You can exercise your rights by sending a written request to StepHouse at the address privacy@stephouse.es.

12. CHANGES TO THE PRIVACY POLICY
The Privacy Policy may be updated, so it is recommended that you review it each time you access the Website to stay informed about how your personal data is treated and your privacy is protected.

Last update: March 2025.