Privacy policy

1. Data Controller

In compliance with the General Data Protection Regulation —Regulation EU 2016/679— and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights, users are informed that the personal data provided through the website cmpropertyadvisor.com will be processed by:

Data Controller: Carmen Martínez Moya
Trade name: Carmen Martinez – Consultant & Advising Services
Tax ID / NIF: 52517728B
Address: Calle Narváez, 7, ático, 18800 Baza, Granada, Spain
Telephone: +34 655 333 602
Email: info@cmpropertyadvisor.com
Website: cmpropertyadvisor.com

2. Purpose of Data Processing

The personal data provided by users through the contact form on this website will be processed for the following purposes:

• To respond to information requests made by the user.
• To answer enquiries related to the services offered.
• To manage communications arising from a possible professional, contractual or pre-contractual relationship.
• To maintain the security of the website and prevent automated submissions, spam or fraudulent use of the form.

Personal data will not be used to send commercial communications unless the user has requested or expressly authorised them.

3. Personal Data Processed

Through the contact form, this website may process the following personal data:

• Name and surname.
• Email address.
• Telephone number, if requested in the form.
• Message or enquiry sent by the user.
• Technical data necessary for the security of the form, such as IP address, browser, device used or information related to anti-spam systems.

The user guarantees that the data provided is truthful, accurate, up to date and appropriate for the enquiry made.

4. Legal Basis for Processing

The legal basis for processing personal data will be:

• The user’s consent, when voluntarily submitting an enquiry through the contact form.
• The application of pre-contractual measures, when the enquiry is related to the possible provision of services.
• The legitimate interest of the data controller, in order to maintain website security, prevent spam, avoid abusive use of the form and ensure the proper functioning of the website.

When processing is based on consent, the user may withdraw it at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.

5. Data Retention

Personal data provided through the contact form will be kept for the time necessary to respond to the user’s enquiry or request.

Once the enquiry has been dealt with, the data may be kept for the period necessary to deal with possible legal, administrative or professional liabilities.

As a general rule, enquiries received through the contact form will be kept for a maximum period of 12 months, unless a subsequent contractual relationship exists or a legal obligation requires the data to be kept for a longer period.

6. Data Recipients

Personal data will not be disclosed to third parties, except where legally required or when necessary for the provision of services related to the operation of the website.

Certain providers acting as data processors may have access to the data, including:

• Web hosting provider.
• Email service provider.
• Technical website maintenance services.
• Anti-spam security services, such as Google reCAPTCHA, if installed on the form.

These providers will only access the data when necessary to provide their services and must apply the guarantees required by current data protection regulations.

7. Use of Anti-Spam or Captcha Systems

This website may use anti-spam or captcha verification systems in the contact form in order to protect the website against bots, automated submissions, spam or abusive use.

If Google reCAPTCHA is used, this service may analyse signals such as user behaviour, device information, IP address and interaction patterns in order to assess the risk of an action on the website.

The processing of this data will have the exclusive purpose of ensuring the security of the form and preventing abuse.

8. International Data Transfers

As a general rule, the data controller does not intend to carry out international data transfers.

However, if technological services provided by suppliers located outside the European Economic Area are used, such as certain Google services, international data transfers may take place. In such cases, these transfers will be carried out in accordance with the safeguards established by current data protection regulations.

9. User Rights

The user may exercise the following rights:

• Right of access to their personal data.
• Right to rectification of inaccurate data.
• Right to erasure of their data.
• Right to object to processing.
• Right to restriction of processing.
• Right to data portability, where applicable.
• Right to withdraw consent given.

The Spanish Data Protection Agency recognises these rights as rights established by data protection regulations.

To exercise these rights, the user may send a request to:

Email: info@cmpropertyadvisor.com
Postal address: Calle Narváez, 7, ático, 18800 Baza, Granada, Spain

The request must clearly indicate the right the user wishes to exercise and allow the user to be identified.

Likewise, the user has the right to lodge a complaint with the Spanish Data Protection Agency if they consider that the processing of their personal data does not comply with current regulations.

10. Data Security

The data controller will apply the necessary technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

However, users should be aware that no data transmission over the Internet can be guaranteed as completely secure.

11. Accuracy of Data

The user guarantees that the personal data provided is true, accurate and up to date.

The data controller shall not be liable for any damages or losses arising from incorrect, incomplete or outdated data provided by the user.

12. Minors

This website is not specifically aimed at minors.

If a minor provides personal data through the contact form, they must have the authorisation of their parents, guardians or legal representatives.

13. Commercial Communications

Commercial communications will not be sent by electronic means unless the user has requested or expressly authorised them.

If a newsletter, subscription form or commercial communications system is enabled in the future, the corresponding consent will be requested separately, clearly and independently.

14. Changes to the Privacy Policy

The data controller reserves the right to modify this Privacy Policy in order to adapt it to legislative changes, criteria issued by the Spanish Data Protection Agency, technical changes to the website or modifications to the services offered.

Users are advised to review this policy periodically in order to stay informed about how their personal data is processed.