1. Data controller
Trading name: Plaza Estates
Tax ID (NIF): 52589642G
Address: Plaza de España nº 9, local 1, portal 2, 29780 Nerja, Málaga, Spain
Telephone: +34 952 524 191
Email: [email protected]
2. Purpose of processing
At Plaza Estates, we process personal data provided by users, as well as data arising from browsing our website or from any pre-contractual or contractual relationship maintained with us, for the following purposes:
- To answer enquiries, requests for information and any communication made through forms, email, telephone or any other contact method.
- To manage pre-contractual and contractual relationships with clients, property owners, buyers, sellers, landlords, tenants, guests and other users of our services.
- To manage viewings, bookings, property transactions, holiday rentals, intermediation services, marketing and related services.
- To carry out the administrative, accounting, tax, documentary and customer service management arising from the services provided.
- To send commercial communications regarding properties, real estate services, holiday rentals, news or related content where the user has consented or where legally permitted.
- To ensure website security, prevent misuse, fraud or unauthorised access, and improve our services.
- To comply with applicable legal obligations.
3. Categories of personal data processed
Depending on the relationship between the user and Plaza Estates, we may process the following categories of data:
- Identification data: name, surname, identification document where applicable.
- Contact details: telephone number, postal address, email address.
- Economic and transaction data: information required for quotations, bookings, payments, invoicing or contracting.
- Data relating to the property or transaction requested.
- Browsing data, website usage data, IP address, online identifiers and data obtained through cookies or similar technologies, in accordance with our Cookies Policy.
- Any other data voluntarily provided by the user in their communications.
4. Legal basis for processing
The legal bases that allow us to process your personal data are:
- Consent of the data subject, for sending marketing communications to users who have expressly authorised it, for accepting non-essential cookies and for any processing that specifically requires consent.
- Pre-contractual measures, where the user requests information, a valuation, a viewing, a proposal, a booking or any other action prior to entering into a contract.
- Performance of a contract, where processing is necessary for the provision of real estate services, intermediation, holiday rental services, marketing, management or customer support.
- Compliance with legal obligations, including tax, accounting, administrative, consumer protection, data protection and any other applicable legal obligations.
- Legitimate interest of Plaza Estates, for security purposes, fraud prevention, legal defence and, where permitted by law, for sending information about its own services similar to those previously contracted by existing clients, always with the right to object.
5. Source of the data
As a general rule, personal data is provided directly by the data subject. However, in certain cases it may come from property owners, clients, booking platforms, property portals, collaborators, representatives, website forms, telephone calls or publicly accessible sources where necessary to manage the requested service or transaction.
6. Data retention
Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and, afterwards, for the legally required periods or the limitation periods for liabilities. In particular:
- Data relating to enquiries or requests for information will be kept for the time necessary to deal with them and, where appropriate, while there is mutual interest or until the user requests its deletion.
- Data derived from a contractual or pre-contractual relationship will be kept while such relationship remains in force and, afterwards, for the legally required periods in tax, accounting, administrative or liability matters.
- Data used for commercial communications will be kept until the data subject withdraws consent or objects to the processing.
- Data obtained through cookies will be kept as indicated in the Cookies Policy and in the corresponding cookie settings panel.
7. Recipients of the data
Personal data may be disclosed to:
- Public authorities, official bodies, courts, tribunals and competent authorities where there is a legal obligation.
- Financial institutions, payment gateways and providers necessary for managing collections, payments, bookings or invoicing.
- Technology and service providers acting as data processors, such as web hosting, email, analytics, CRM, maintenance, technical support, electronic signature or management tools, under the relevant contractual safeguards.
- Collaborators, property owners, buyers, sellers, landlords, tenants, guests, platforms or third parties involved in the transaction, only where necessary to manage the requested service or contractual relationship.
Outside the cases mentioned above, personal data will not be disclosed to third parties unless there is a legal obligation or the explicit consent of the data subject.
8. International data transfers
Some of the technology providers used by Plaza Estates may be located outside the European Economic Area or may provide services involving international data transfers. In such cases, Plaza Estates will adopt the appropriate safeguards required by applicable law, such as adequacy decisions, standard contractual clauses or any other legally valid mechanism.
9. Rights of data subjects
Data subjects may exercise the following rights at any time:
- Right of access to their personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure where, among other reasons, the data is no longer necessary for the purposes for which it was collected.
- Right to object to the processing of their data.
- Right to restriction of processing in the cases provided by law.
- Right to data portability, where applicable.
- Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, the data subject may send a written request, together with a copy of an identification document, to the postal address indicated above or by email to [email protected].
The data subject also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if they believe that the processing of their personal data does not comply with applicable law.
10. Obligation to provide data and accuracy of data
The data requested in forms marked as mandatory is necessary in order to deal with the user’s request or to properly provide the requested service. Failure to provide such data may prevent the proper handling of the enquiry, booking, contract or transaction.
The user guarantees that the personal data provided is true, accurate, complete and up to date, and undertakes to notify Plaza Estates of any changes.
11. Minors
The services of Plaza Estates are not directed at children under 14 years of age. If a minor provides personal data without the authorisation of their parents or legal guardians, Plaza Estates may take the necessary steps to delete such data as soon as it becomes aware of the situation.
12. Data security
Plaza Estates implements reasonable technical and organisational measures to protect personal data against loss, alteration, unauthorised processing or access, taking into account the state of the art, the nature of the data processed and the risks to which it is exposed.
13. Changes to this Privacy Policy
Plaza Estates reserves the right to modify this Privacy Policy in order to adapt it to legislative, case law or operational developments. Where changes are relevant, users will be informed by appropriate means.