Privacy Policy

1. Data controller

In accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), we inform you that the personal data you provide will be processed by:

2. Personal data we collect

We collect the personal data you voluntarily provide through the forms on our website. Depending on the form used, the data collected may include:

2.1. Property enquiry forms

Name, email address, telephone (optional), message and type of enquiry.

2.2. Property valuation forms

Name, email address, telephone (optional), property type, location, area, number of bedrooms and bathrooms, additional features, comments and sale timeframe.

2.3. General contact form

Name, email address, telephone (optional), subject and message.

2.4. Job application form

Name, email address, telephone (optional), position applied for, years of experience, LinkedIn profile link (optional), cover letter and availability.

2.5. Newsletter

Email address and name (optional).

2.6. Exclusive property access (Secret Listing)

Name, email address and telephone (optional).

2.7. Consent records

When you accept our forms, we record your email address, the type of consent granted (privacy and/or marketing), the date and the source form. This data is stored to comply with our obligation to demonstrate consent in accordance with Article 7(1) of the GDPR.

3. Purpose of processing

The personal data we collect is processed for the following purposes:

• Property enquiry management: to respond to your requests for information about properties, schedule viewings and facilitate the buying/selling process.
• Property valuation: to carry out valuation studies and contact owners interested in selling.
• Job application management: to evaluate professional profiles for potential vacancies in our company.
• Commercial communications: sending newsletters and information about new exclusive properties, only when you have given your express consent.
• Customer service: to respond to general enquiries and facilitate contact with our team.
• Legal compliance: consent records and compliance with legal obligations regarding data protection.

4. Legal basis for processing

The processing of your personal data is based on the following legal grounds under Article 6(1) of the GDPR:

• Consent of the data subject (Art. 6(1)(a)): by ticking the privacy policy acceptance checkbox on our forms, you consent to the processing of your data for the stated purposes. For commercial communications, additional and specific consent is required.
• Performance of a contract or pre-contractual measures (Art. 6(1)(b)): when you request information about a property, a valuation or participate in a recruitment process, processing is necessary for the performance of pre-contractual measures.
• Legitimate interest (Art. 6(1)(f)): improvement of our services, website security and fraud prevention.

5. Data retention periods

We will retain your personal data for as long as necessary to fulfil the purpose for which it was collected:

• Property enquiries and valuations: during the commercial relationship and up to 5 years after your last interaction, unless a longer legal retention period applies.
• Job applications: a maximum of 24 months from receipt, unless the candidate requests earlier deletion.
• Newsletter: until you withdraw your consent or unsubscribe.
• Consent records: retained indefinitely as proof of legal compliance (Art. 7(1) GDPR).

6. Data recipients

Your personal data may be disclosed to the following recipients:

• Supabase Inc.: database and hosting service provider where data collected through forms is stored. Supabase operates under strict security measures and complies with applicable data protection standards.
• Google Analytics: if the user accepts analytics cookies, anonymised browsing data will be shared with Google for statistical purposes.

We do not sell, rent or share your personal data with third parties for their own commercial purposes.

7. International data transfers

Some of our service providers may have servers located outside the European Economic Area (EEA). In such cases, we ensure that transfers are made in accordance with the appropriate safeguards provided for in the GDPR, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.

8. Your rights

In accordance with the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): to obtain confirmation of whether your personal data is being processed and to access that data.
• Right to rectification (Art. 16 GDPR): to request the correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): to request the deletion of your data when it is no longer necessary for the purpose for which it was collected.
• Right to restriction of processing (Art. 18 GDPR): to request the restriction of processing in certain circumstances.
• Right to data portability (Art. 20 GDPR): to receive your data in a structured, commonly used format and to transmit it to another controller.
• Right to object (Art. 21 GDPR): to object to the processing of your data in certain situations, including direct marketing.
• Right to withdraw consent: you may withdraw your consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

To exercise any of these rights, you may contact us at:

We will respond within a maximum of one month from receipt of your request, in accordance with Article 12(3) of the GDPR.

9. Right to lodge a complaint with a supervisory authority

If you consider that the processing of your personal data infringes applicable legislation, you have the right to lodge a complaint with the competent supervisory authority:

If you are located in another EU/EEA country, you may also lodge a complaint with your local data protection supervisory authority.

10. Cookie policy

This website uses cookies. For detailed information about the cookies we use, their purposes and how to manage them, please see our Cookie Policy.

11. Data security

We have implemented appropriate technical and organisational measures to ensure the security of your personal data, including:

• Encrypted communications via SSL/TLS protocol.
• Database access control through Row Level Security policies.
• Secure data storage in infrastructure with recognised security certifications.
• Restricted access to authorised personnel only.

12. Changes to this policy

We reserve the right to amend this privacy policy to adapt to legislative or jurisprudential changes, as well as new industry practices. In the event of material changes, we will inform you through our website. We recommend reviewing this page periodically.

13. Applicable legislation

This privacy policy is governed by the following legislation:

• GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation).
• LOPDGDD — Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights.
• LSSI-CE — Spanish Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce.