1Data controller
The controller of your personal data is Esdevita Costa Del Sol S.L., registered office at Alejandro Dumas 17, 29004 Málaga, Spain (the “Controller”).
Contact with the Controller: info@esdevita.com, phone +34 744 653 770.
2What data we collect
We collect the following categories of personal data:
- Contact details: first and last name, e-mail address, phone number — provided voluntarily through the contact forms on the website.
- Enquiry data: message content, property preferences (budget, location, type), ID of the listing from which the enquiry was sent.
- Technical data: IP address, browser type, operating system, device information — collected automatically by the server and analytics tools.
3Purposes of processing
We process your data in order to:
- Respond to enquiries and correspond with you (Art. 6(1)(b) GDPR — performance of a contract or steps taken before entering into a contract).
- Present property listings matching your preferences.
- Analyse website traffic and optimise how the website works (Art. 6(1)(f) GDPR — legitimate interest).
- Comply with legal obligations (Art. 6(1)(c) GDPR).
4Recipients of data
Your data may be shared with the following categories of recipients:
- IT service providers (hosting, e-mail, HubSpot CRM).
- Developers and partners we work with to handle your enquiry — only to the extent necessary to present an offer.
- Public authorities, where required by law.
We do not sell or share personal data with third parties for marketing purposes without your consent.
5Retention period
We keep data for as long as necessary to achieve the purposes for which it was collected and, afterwards, for the period required by law (e.g. 5 years for tax purposes) or until consent is withdrawn.
6Your rights
You have the right to access your data, to rectify and erase it (the “right to be forgotten”), to restrict processing, to data portability and to object to processing.
To exercise these rights, contact us: info@esdevita.com.
You have the right to lodge a complaint with a supervisory authority — in Spain: the Agencia Española de Protección de Datos (AEPD); in Poland: the President of the Personal Data Protection Office (UODO).
7Transfers outside the EEA
As a rule, we do not transfer data outside the European Economic Area. If we use providers based outside the EEA (e.g. HubSpot), we ensure an adequate level of data protection in accordance with Art. 46 GDPR (standard contractual clauses).
8Data security
We apply appropriate technical and organisational measures to protect your data, including SSL encryption, access control and regular system updates.
9Changes to this policy
We reserve the right to update this Privacy Policy. We will inform you of significant changes through a notice on the website.
