Privacy policy

Data controller

ADI Isla de León, SC (tax ID J09695420), Calle San Rafael 41, 11100 San Fernando (Cádiz), Spain. Privacy email: adicasainmobiliaria@gmail.com.

What data we process, why and on what legal basis

Website forms (contact, viewings, valuation): name, phone, email, message and, where applicable, property details, to handle your request. Basis: your consent and the pre-contractual steps you ask for (Art. 6.1.a and b GDPR).

Property alerts: email and what you are looking for, to let you know about matching properties. Basis: your consent. You can unsubscribe from every alert.

My account (if you create one): email, optional name, encrypted password, saved homes, saved searches and sign-in dates, to keep them and, if you turn it on, email you about price drops, reservations and new listings (at most one email a day). Your account is linked to your client record so the team can serve you better. Basis: your request when creating the account (art. 6.1.b) and your consent for alerts (art. 6.1.a). From My account you can withdraw permissions, download your data and delete the account.

«Your home, every month» (only if you tick it when requesting a valuation): once a month, the estimated value of your home and nearby sales. Basis: your consent. Unsubscribe in every email.

Anonymous demand profile (optional, only if you turn it on in My account): we could share with partner agencies what you are looking for (area, type and price), never your name or contact details. Basis: your consent, which you can withdraw at any time.

Clients and transactions: contact details, preferences, appointments, messages and transaction data, to provide the brokerage service. Basis: the contract (Art. 6.1.b).

Anti-money laundering: copy of your ID document, beneficial owner, activity and source of funds. Basis: legal obligation (Spanish Law 10/2010, Art. 6.1.c GDPR).

If you post in social networks or groups that you are selling, renting or looking for a home, we may contact you on the basis of legitimate interest (Art. 6.1.f). We will tell you in the first contact and you can object.

We do not make automated decisions that affect you or build profiles with legal effects (Art. 22 GDPR). The website home valuation is an indicative estimate.

Artificial intelligence

The website assistant is an artificial intelligence system and says so before you write. What you write is only used to answer you and is not stored.

We may use AI to prepare drafts (replies, listing translations) that are always reviewed by a person. More information on the «Use of AI» page.

Retention

Requests and contacts that do not lead to a transaction: 24 months from the last activity. Clients with a transaction: 6 years (Spanish Commercial Code). Anti-money laundering identification: 10 years from the last transaction (Law 10/2010). Alerts: until you unsubscribe. My account: until you delete it or after 24 months without use.

Recipients

We do not share your data unless required by law (tax authorities, SEPBLAC, courts) or when the service you request needs it and you authorise it (notary, lender).

Our technology providers act as data processors under contract (descriptions in Spanish):

  • Hetzner Online GmbH: alojamiento de la web, la app, la base de datos, los documentos y las copias de seguridad (Unión Europea; sin transferencias fuera del espacio económico europeo).
  • Anthropic (modelos Claude): inteligencia artificial: asistente de la web, borradores de respuesta, lectura de publicaciones y textos de redes (Estados Unidos; cláusulas contractuales tipo de la comisión europea. los datos enviados por la api no se usan para entrenar modelos).
  • Resend: envío de correos (avisos, respuestas, enlaces de acceso) (Estados Unidos; marco de privacidad de datos ue-ee. uu. y cláusulas contractuales tipo).
  • Meta Platforms Ireland (WhatsApp Business, Facebook, Instagram): recibir y enviar mensajes de whatsapp y publicar en redes (Irlanda, con transferencias a Estados Unidos; marco de privacidad de datos ue-ee. uu. y cláusulas contractuales tipo).
  • Google (Google Calendar): consultar si el agente está libre u ocupado para ofrecer horas de visita y, si lo autoriza, apuntar en su calendario las visitas confirmadas (fecha, inmueble y nombre de pila) (Estados Unidos; marco de privacidad de datos ue-ee. uu. y cláusulas contractuales tipo).
  • Servicios de notificaciones del navegador (Google, Apple, Mozilla, Microsoft): entregar los avisos push en los dispositivos del equipo. el contenido va cifrado de extremo a extremo y solo lleva el nombre de pila (Unión Europea y Estados Unidos; contenido cifrado (rfc 8291) que el servicio no puede leer; marco de privacidad de datos ue-ee. uu.).

Your rights

You can request access, rectification, erasure, objection, restriction and portability of your data, and withdraw your consent at any time, by writing to adicasainmobiliaria@gmail.com or at our office. We reply within one month.

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority of your country of residence in the EU.

Language

This is a courtesy translation. In case of discrepancy, the Spanish version prevails.