Privacy policy
Last updated: 22.08.2026
This is a translation for convenience. In case of discrepancy, the Spanish version prevails.
1. Data controller
- Controller: Paola Garrido
- Tax number (NIF): [PENDING]
- Address: [PENDING], Costa del Sol, Spain
- Email: [email protected]
2. What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering enquiries received by email or WhatsApp | Name, email, phone and the content of the message | Consent (art. 6.1.a GDPR) | Up to one year after the last contact, unless a contract follows |
| Carrying out the agreed brokerage | Identification and contact data, property details | Performance of a contract (art. 6.1.b GDPR) | For the duration of the relationship and the statutory limitation periods |
| Meeting tax and anti-money-laundering obligations | Identification data and documents required by Spanish Law 10/2010 | Legal obligation (art. 6.1.c GDPR) | Ten years as required by law |
3. Sharing of data
Data is not shared with third parties except where legally required or where necessary for a specific transaction, for example with the notary, bank or administrative agency involved. In such cases you will be informed beforehand.
Service providers such as the web host act as processors under a contract meeting the requirements of article 28 GDPR.
4. International transfers
No data is transferred outside the European Economic Area. Fonts and other assets are served from our own server, with no external providers involved.
5. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and data portability by writing to [email protected], stating which right you wish to exercise and enclosing a copy of an identity document.
You may withdraw consent at any time without affecting the lawfulness of processing carried out beforehand.
If you believe your data is not handled correctly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security
Technical and organisational measures are in place to protect data against loss, misuse and unauthorised access. Transmission always takes place over an encrypted connection.
7. Minors
The services offered on this site are not directed at children under fourteen.