Privacy policy

Controller

The controller for the processing of personal data on this website is:

[AUSFÜLLEN: company name, address, email — as in the legal notice]

[AUSFÜLLEN: state whether a data protection officer has been appointed, and their contact details.]

What we collect

When you complete the contact form or the partner form we collect: your name, your email address, optionally your telephone number, your message, the language of the site and — depending on the form — the property you are asking about, a partner reference, your company and your region.

The telephone field is optional. All other fields are needed so that we can reply.

We do not require registration and we keep no visitor accounts.

Purpose and legal basis

We use what you send us solely to answer your enquiry and to deal with the matter you raised.

[AUSFÜLLEN: name the legal basis — usually Art. 6(1)(b) GDPR for pre-contractual steps, possibly (f) for legitimate interests. Have this confirmed by a lawyer.]

Who processes your data on our behalf

We use the following providers to run this website:

· Vercel Inc. — hosting and delivery of the site. · Supabase — database and file storage. This is where your form entries are stored. · Resend — sending the notification to our office and the acknowledgement to you.

[AUSFÜLLEN: state the server location or region of each service and confirm that data processing agreements under Art. 28 GDPR are in place. If anything is processed outside the EU, state the basis for the transfer.]

Maps on property pages

On individual property pages we embed a map from OpenStreetMap. It is loaded directly from the servers of the OpenStreetMap Foundation, which transmits your IP address to them.

We set no cookies for this and pass on no other data about you. The map loads only once it is scrolled into view.

[AUSFÜLLEN: have the legal basis for this embed reviewed.]

Protecting the forms from abuse

To stop automated bulk submissions we count how often one sender uses the form.

We do not store your IP address. What is stored is an irreversible hash derived from your address and a secret key, together with a counter and a timestamp. Your address cannot be recovered from it.

[AUSFÜLLEN: set a retention period for this counter data.]

How long we keep it

[AUSFÜLLEN: how long are enquiries kept? Take commercial and tax retention obligations into account.]

Your rights

You have the right to obtain information about the data held about you, to have inaccurate data corrected, to have it erased, to restrict processing, to data portability, and to object to processing.

To exercise any of these, an informal message is enough: [AUSFÜLLEN: email address for data protection requests]

We will delete your enquiry on request, unless a statutory retention obligation prevents it.

Right to complain

You have the right to lodge a complaint with a data protection supervisory authority.

[AUSFÜLLEN: name the competent authority and its address — in Spain the Agencia Española de Protección de Datos (AEPD).]