Legal notice

1. Data Controller

In compliance with the provisions of the General Data Protection Regulation —Regulation EU 2016/679— and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights, users are informed that the personal data provided through this website will be processed by:

Data Controller: Carmen Martínez Moya
Trade name: Carmen Martinez – Consultant & Advising Services
Tax ID / NIF: 52517728B
Address: Calle Narváez, 7, ático, 18800 Baza, Granada, Spain
Telephone: +34 655 333 602
Email: info@cmpropertyadvisor.com
Website: cmpropertyadvisor.com

2. Purpose of Data Processing

The personal data provided by users through the contact form will be processed for the following purposes:

• To respond to information requests submitted by the user.
• To answer enquiries related to the services offered.
• To manage communications arising from a professional or pre-contractual relationship.
• To maintain the security of the website and prevent automated submissions, spam or fraudulent use of the form.

Personal data will not be used to send commercial communications unless the user has requested or expressly authorised them.

3. Personal Data Processed

Through the contact form, this website may process the following data:

• Name and surname.
• Email address.
• Telephone number, if requested in the form.
• Message or enquiry sent by the user.
• Technical data necessary for the security of the form, such as IP address, browser, device used or information related to the anti-spam system.

The user undertakes to provide truthful, up-to-date data that is appropriate for the enquiry made.

4. Legal Basis for Processing

The legal basis for processing the data is:

• The user’s consent, when voluntarily submitting an enquiry through the contact form.
• The application of pre-contractual measures, when the enquiry is related to the possible provision of services.
• The legitimate interest of the data controller, in order to maintain website security, avoid spam, prevent abuse and protect the proper functioning of the form.

When processing is based on consent, the user may withdraw it at any time, without affecting the lawfulness of the processing carried out beforehand.

5. Data Retention

Personal data provided through the contact form will be kept for the time necessary to respond to the enquiry or request made by the user.

Once the enquiry has been dealt with, the data may be retained for the period necessary to address possible legal or administrative liabilities.

As a general rule, enquiries received through the form will be kept for a maximum period of 12 months, unless there is a subsequent contractual relationship or a legal obligation requiring the data to be retained for a longer period.

6. Data Recipients

Personal data will not be disclosed to third parties, except where legally required or when necessary for the provision of services linked to the operation of the website.

Certain providers acting as data processors may have access to the data, such as:

• Web hosting provider.
• Email service provider.
• Technical website maintenance services.
• Anti-spam security services, such as Google reCAPTCHA.

These providers will only access the data when necessary to provide their services and must apply the guarantees required by data protection regulations.

7. Use of Google reCAPTCHA

This website may use Google reCAPTCHA in the contact form in order to protect the website against spam, bots, automated submissions and abusive use.

Google describes reCAPTCHA as a tool for protection against fraud and abuse, capable of analysing interactions in order to distinguish legitimate users from automated or malicious traffic.

The use of reCAPTCHA may involve the processing of technical user data, such as IP address, browser information, device used, interaction behaviour and other data necessary to assess the risk of the request.

Google indicates that the _GRECAPTCHA cookie continues to exist within the operation of reCAPTCHA and recommends that websites review their privacy notices to cover the processing carried out for security, fraud prevention and abuse prevention purposes.

8. International Data Transfers

As a general rule, no international data transfers are expected to be carried out by the data controller, except those that may arise from the use of technological providers located outside the European Economic Area or that process data from outside it, as may occur with certain Google services.

In such cases, the processing will be carried out in accordance with the safeguards established by current data protection regulations.

9. User Rights

The user may exercise the following rights:

• Right of access to their personal data.
• Right to rectification of inaccurate data.
• Right to erasure of their data.
• Right to object to processing.
• Right to restriction of processing.
• Right to data portability, where applicable.
• Right to withdraw consent given.

To exercise these rights, the user may send a request to:

Email: info@cmpropertyadvisor.com
Postal address: Calle Narváez, 7, ático, 18800 Baza, Granada, Spain

The request must clearly indicate the right the user wishes to exercise and allow the user to be identified.

Likewise, the user has the right to lodge a complaint with the Spanish Data Protection Agency if they consider that the processing of their personal data does not comply with current regulations.

10. Data Security

The data controller will apply the necessary technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

However, the user should bear in mind that no data transmission over the Internet can be guaranteed as completely secure.

11. Accuracy of Data

The user guarantees that the personal data provided is truthful, accurate and up to date.

The data controller shall not be liable for any damages or losses arising from incorrect, incomplete or outdated data provided by the user.

12. Minors

This website is not specifically aimed at minors.

If a minor provides personal data through the form, they must have the authorisation of their parents, guardians or legal representatives.

13. Commercial Communications

Commercial communications will not be sent by electronic means unless the user has requested or expressly authorised them.

If a newsletter, subscription form or commercial communications system is enabled in the future, the corresponding consent will be requested separately and clearly.

14. Changes to the Privacy Policy

The data controller reserves the right to modify this Privacy Policy in order to adapt it to legislative changes, criteria issued by the Spanish Data Protection Agency, technical changes to the website or modifications to the services offered.

Users are advised to review this policy periodically in order to stay informed about how their personal data is processed.