Privacy policy

1. Data controller

Controller: Novapurta, registered at C/ Arquitectura, 3 - Torre 7. Contact: info@novapuerta.com. Phone: +34 621 226 564.

2. What data we process and where it comes from

We only process what you give us through the website:

• Contact form and property enquiries: name, phone, email and your message.
• Valuation request: additionally the property details (address, area, rooms, condition, features) and the photographs you upload.
• Visit booking: name, phone, email, preferred channel and the chosen date and time.
• Search alerts: email address and the criteria of the saved search.
• Technical connection data such as IP address and request time, kept for security and abuse prevention.

We do not collect special categories of data. If you include third-party data in a free-text message, you must have informed them first.

3. Why we use it and on what legal basis

• To answer your enquiry and contact you. Basis: your consent and pre-contractual steps at your request (art. 6.1.a and 6.1.b GDPR).
• To value your property and propose our services. Basis: pre-contractual steps at your request (art. 6.1.b GDPR).
• To arrange a booked visit. Basis: pre-contractual steps (art. 6.1.b GDPR).
• To send alerts matching your saved search. Basis: your consent (art. 6.1.a GDPR), withdrawable from the unsubscribe link in every email.
• To keep the site secure and prevent abuse. Basis: legitimate interest (art. 6.1.f GDPR).
• To meet legal, accounting and tax obligations. Basis: legal obligation (art. 6.1.c GDPR).

4. How long we keep it

• Enquiries that lead nowhere: up to one year from the last contact.
• Valuation requests and visits: for as long as the matter is open, then for the applicable limitation periods.
• Search alerts: until you unsubscribe.
• Data linked to a contract: six years under the Spanish Commercial Code, plus applicable tax periods.

5. Who we share it with

We do not sell or trade your data. Only the providers we need in order to run the service access it, as processors and under contract: our server hosting provider and our email provider.

Where a property belongs to a private owner, we pass on strictly what is needed to handle your interest in it. We also disclose data to public authorities where the law requires it.

6. International transfers

Our providers process data within the European Economic Area. Should a provider outside the EEA ever be needed, it will be done with the safeguards of chapter V GDPR, such as the European Commission's standard contractual clauses.

7. Automated decisions

The valuation estimate shown on the site is calculated automatically from comparable properties. It is indicative, produces no legal effects and does not replace the valuation made by a person at the agency, who reviews every request before replying.

8. Your rights

You may exercise access, rectification, erasure, objection, restriction and portability rights, and withdraw consent at any time, by writing to info@novapuerta.com stating which right you are exercising. If you believe your request was not handled properly, you may complain to the Spanish Data Protection Agency (www.aepd.es).

9. Children

This website is not aimed at children under 14 and we do not knowingly collect their data.

10. Security

The site is served over an encrypted connection (HTTPS) and we apply reasonable technical and organisational measures against unauthorised access, loss or alteration. Photographs sent with a valuation request are stored on our server and are accessible only to agency staff.

11. Changes to this policy

We may update this policy to reflect legal or service changes. The date of the last update appears at the top of the page.