Privacy policy

This policy explains how we process your personal data under Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

What data we process

• Data you give us through our forms: name, email address, phone number, message, preferred viewing dates, the property you are interested in, details of a property you would like valued, and your search preferences.
• Newsletter data: email address, language and when you confirmed your subscription.
• Technical data: to protect our forms from abuse we keep IP addresses only as a hash, and only for a short time. Our hosting provider may log technical access data (IP address, date and time, browser).
• Cookie consent record: a random identifier and the choices you made, with nothing that identifies you.

We do not process special categories of personal data, or data about children.

Purposes and legal bases

• Answering enquiries, viewing and video-call requests, and valuation requests. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering the enquiries we receive (Art. 6(1)(f) GDPR).
• Registration for off-market properties. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Newsletter. Legal basis: your consent (Art. 6(1)(a) GDPR), confirmed by double opt-in. Every issue contains an unsubscribe link.
• Website security and spam prevention (rate limiting, spam checks). Legal basis: our legitimate interest in protecting the site and its users (Art. 6(1)(f) GDPR).
• Legal obligations, in particular the anti-money-laundering duties that apply to estate agents involved in a transaction. Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
• Keeping a record of your cookie choices. Legal basis: legal obligation (Art. 6(1)(c) and Art. 7(1) GDPR).

We do not make decisions based solely on automated processing, and we do not profile you in ways that have legal effects.

How long we keep data

• Enquiries and requests: up to 24 months after our last contact, unless a contract follows.
• Data relating to a transaction: for as long as the law requires (for example tax and anti-money-laundering rules).
• Newsletter and off-market registration: until you withdraw your consent.
• Cookie consent records: for as long as needed to demonstrate consent.

After that, the data is deleted or anonymised.

Who receives your data

We do not sell or share your data. Service providers acting as our processors have access only as far as needed:

• website and database hosting: IONOS Cloud, S.L.U. (registered office in Logroño, Spain), which hosts the site within the European Union;
• email delivery: IONOS, through its email/SMTP service, with servers in the European Union;
• spam protection for forms: Cloudflare (Turnstile), when enabled;
• maps: the map provider receives your IP address when a map loads.

At your request, or where a transaction requires it, we may pass data to property owners, notaries, lawyers or banks, and to public authorities where the law requires.

International transfers

We aim to use providers with servers in the European Economic Area. If a provider processes data outside it, the transfer relies on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or on standard contractual clauses.

Your rights

You may at any time ask for access to your data, its rectification or erasure, restriction of processing, data portability, or object to processing, and you may withdraw any consent you have given without affecting the lawfulness of earlier processing. Write to the email address shown above with the subject “Data protection”. If we have reasonable doubts about your identity, we may ask you to confirm it. We will reply within one month.

Complaints

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es, or to the supervisory authority in the country where you live.

Do you have to give us your data?

Fields marked as required in our forms are needed to deal with your request. Without them we cannot reply.

Changes to this policy

We update this policy when our services or the law change. The date of the last update is shown at the top of this page.