Privacy policy

Controller and contact

Data controller: Christian Daniel Cavaco.

NIE: Y8603312S.

Address: Calle Lora del Río, 17, 29620 Torremolinos, Málaga, Spain.

Privacy and data-subject rights channel: privacidad.valorcostadelsol@gmail.com.

No data protection officer has been designated for this project.

Data processed

The questionnaire may collect ownership role, municipality, area, optional address, property characteristics, sale intention, listing status, name, phone prefix and phone number, together with the recorded acknowledgement and timestamps.

The system may generate a preliminary result, factual flags, commercial status, manual priority and internal notes to manage the request.

Data source

Data is obtained directly from the user through the questionnaire and, for internal management, from actions performed in the administration panel.

Purposes

• Process a request for property guidance.
• Contact the user by phone about that request where appropriate.
• Manage the related lead internally.
• Authenticate and protect the administration panel.

Legal basis

The legal basis for the main processing is the data subject’s consent under Article 6(1)(a) GDPR. This consent is limited to preparing the requested initial estimate and contacting the user by phone regarding this request.

Recipients, transfers and retention

Supabase is technically confirmed as a provider, but the contractual and production region, DPA, subprocessors and international transfers remain pending. For leads that do not result in a subsequent professional relationship, the operational maximum is 12 months from the last relevant interaction related to the request; afterwards, data will be deleted or anonymised where appropriate, or restricted solely where needed to address potential legal liabilities. If a professional or contractual relationship is established, this 12-month rule does not automatically apply to documentation that must be retained under other legal obligations. No automatic deletion is implemented.

Rights, complaints and security

Access, rectification, erasure, objection, restriction and portability rights where applicable may be exercised through privacidad.valorcostadelsol@gmail.com. A complaint may also be lodged with the Spanish Data Protection Agency where applicable. Consent may be withdrawn at any time through the channel above; withdrawal does not affect the lawfulness of processing carried out beforehand. Server-side validation, RLS, restricted admin access and server-side secrets are in place.

Profiling and automated decisions

There is no automated scoring. Lead priority is manual and `is_urgent_sale` is a factual value supplied in the questionnaire.