Privacy policy

Who is responsible for your data

• Controller: Andalusian Stay (trading as Andalusian Estates)
• Contact for privacy matters: info@andalusianestates.com

What we collect

When you submit one of our forms (the buyer mandate, the owner valuation request or the general enquiry) we collect:

• Your name, email address and, if you provide it, telephone number and company.
• The content of your request: for buyers, the acquisition range, preferred level of privacy and lifestyle; for owners, the property zone, estimated value, timing and level of discretion you choose.
• A short campaign tag taken from the link you followed (for example the channel and campaign), so we know which of our channels reached you.
• Your consent, which you give by ticking the box on the form.

Why we use it and on what legal basis

• To answer your request, prepare a private dossier or a confidential valuation and contact you about it. Basis: your consent (GDPR Art. 6.1.a) and, where you ask us to act, steps taken at your request before an agreement (Art. 6.1.b).
• To assess and manage enquiries internally, including prioritising them and preparing draft replies that a member of our team reviews before anything is sent. Basis: our legitimate interest in running the service efficiently (Art. 6.1.f).
• To understand which channels bring relevant enquiries, using the campaign tag only. Basis: legitimate interest.

Automated tools

We may use software, including AI-assisted tools, to score enquiries and draft replies. A person reviews every draft and decides whether and how to respond. We do not take decisions that have legal or similarly significant effects on you solely by automated means.

Who receives your data

Only our team has access to your enquiry. We do not sell your data and we do not share your requirements or property details with third parties, including partner agencies, without your agreement.

We rely on service providers who process data on our behalf. They act under contract and only on our instructions. Where a provider is located outside the European Economic Area, transfers are covered by appropriate safeguards such as the European Commission’s standard contractual clauses.

Where your data is stored

Enquiries are stored in a private database hosted on Cloudflare’s infrastructure, which also serves this website. The internal tools we use to score enquiries and draft replies run on a dedicated private server hosted by Hostinger. Access to both is restricted to authorised members of our team, protected by authentication, and kept to what each person needs.

We also use email services to correspond with you.

How long we keep it

We keep your enquiry while we are dealing with it and, if no relationship results, for up to 24 months after our last contact. After that we delete or anonymise it. If a mandate or agreement is concluded, we keep the data for the period required by law.

Your rights

You can ask us at any time, at info@andalusianestates.com, to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, or to withdraw your consent. Withdrawing consent does not affect what we did before.

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the authority in your country of residence.

Cookies and third-party content

This website does not use analytics or advertising cookies. To display the page, your browser requests fonts from Google Fonts and some images from Unsplash; those providers may receive your IP address and technical browser data for that purpose.

If we introduce analytics or advertising tools in future, we will update this policy and ask for your consent where the law requires it.

Minors

Our services are directed at adults. We do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy. The date at the top shows when it last changed.