Privacy Policy

1. General Information

This Privacy Policy sets out the rules for the processing and protection of personal data provided by users in connection with the use of the EspañaSol website.

2. What data do we collect?

• Name and surname (via contact form)
• Email address (newsletter, contact and privacy matters: ...)
• Phone number (optional for contact purposes)
• Information about property interests (type, location)
• Analytical and technical data (IP address, cookies)

3. Purpose and legal basis for data processing

Your data is processed to handle inquiries, present offers and provide services based on:

• Performance of a contract or actions taken prior to entering into a contract (Art. 6(1)(b) GDPR) – to handle your property inquiry,
• Consent (Art. 6(1)(a) GDPR) – in the case of newsletter subscription,
• Legitimate interest of the administrator (Art. 6(1)(f) GDPR) – for analytical, statistical purposes and ensuring website security.

4. Data recipients and data transfer

Users' personal data may be transferred to entities cooperating with the administrator, in particular entities operating in the real estate industry and providers of technical and hosting services.

Data transfer takes place only to the extent necessary to handle your inquiries, present offers and implement services ordered by you.

5. Your rights

You have the right to:

• Access your data and receive a copy of it,
• Rectify (correct) your data,
• Delete data ("right to be forgotten"),
• Restrict data processing,
• Data portability to another administrator (Art. 20 GDPR),
• Object to processing,
• Withdraw consent at any time,
• Lodge a complaint with a supervisory authority (President of the Personal Data Protection Office or their equivalent in the country of residence).

6. Data transfer outside the EEA (UK)

Due to the administrator's registered office in the United Kingdom (UK), your personal data may be transferred outside the European Economic Area.

We inform you that the European Commission has determined that the United Kingdom ensures an adequate level of personal data protection (adequacy decision of June 28, 2021), which guarantees the security of your information at a level consistent with EU regulations.

7. Data retention period

We store your personal data for the period:

• Contact forms: for the time necessary to handle the inquiry, and then for the period of limitation of possible claims (maximum 6 years).
• Newsletter: until consent is withdrawn (unsubscribing from the subscriber list).
• Analytical data: in accordance with the policy of tool providers (Google Analytics – up to 26 months).

8. Automated decision making

We inform you that we do not use automated decision making or profiling within the meaning of Art. 22 GDPR. All decisions regarding the handling of your inquiries are made by our employees.

9. Security

We make every effort to protect your data against unauthorized access by third parties. The website uses an SSL certificate, and access to data is granted only to authorized persons. We use the services of proven hosting providers and analytical tools (Google, Meta), who apply high standards of data protection.