Privacypolicy

00At a glance

Controller

ARENZA · Calle de López de Hoyos, 10, 28006 Madrid.

Purpose

To answer your enquiries and manage the business relationship and, where applicable, the service you engage.

Legal basis

Your consent, steps taken at your request before entering into a contract, our legitimate interest and compliance with legal obligations.

Recipients

Providers who supply services to us, such as our CRM platform (HighLevel Inc., in the United States, with the safeguards required by Art. 46 GDPR). We do not sell your data or pass it on for marketing purposes.

Rights

Access, rectification, erasure, objection, restriction of processing and portability, and the right to complain to the Spanish Data Protection Agency (AEPD).

More information

In the sections below.

01Data controller

Trading name

ARENZA

Company name

[to be provided by ARENZA]

Tax ID (NIF)

[to be provided by ARENZA]

Address

Calle de López de Hoyos, 10, 28006 Madrid (Spain)

Privacy email

[to be provided by ARENZA]

Other channels

Contact form and WhatsApp +34 618 176 491

02What data we handle

• Identity and contact details: your name, email address and, if you give it to us, your WhatsApp number.
• Your enquiry: what you are looking for (buying, private advisory, asset management or something else), your budget range, timeframe, the areas and use you are interested in, the property you are asking about, your message, your preferred contact method and, if you choose one, a slot for a call or video call.
• Communications: the messages we exchange by WhatsApp, email, phone or video call.
• Browsing: only the technical data strictly needed for the website to work. Analytics or marketing data only if you accept it (see the cookie policy).

Please do not include special category data (for example, health information) in your messages, or data about other people without their permission. Our services are intended for adults.

03What we use it for

1. To answer your enquiry and reply in the way you prefer.
2. To manage the business relationship: recording your enquiry and its follow-up in our CRM, preparing proposals in line with what you have asked for and, if you engage us, providing the service.
3. To comply with the legal obligations that apply to us; for example, anti-money laundering rules when we are involved in a transaction, or tax and accounting requirements.
4. If you accept them, to measure in aggregate how the website is used.

We do not make automated decisions that produce legal effects concerning you or similarly significantly affect you.

04Legal basis

• Consent (Art. 6(1)(a) GDPR): when you send us the form or write to us, so that we can answer your enquiry. You may withdraw it at any time, without affecting anything done before.
• Pre-contractual steps and contract (Art. 6(1)(b) GDPR): when you ask us for a proposal or engage our services.
• Legitimate interest (Art. 6(1)(f) GDPR): to follow up your enquiry reasonably in our CRM and stay in touch about what you asked for. You may object at any time.
• Legal obligation (Art. 6(1)(c) GDPR): to comply with the regulations that apply to us.

05How long we keep it

For as long as it is needed to answer your enquiry and, if a relationship begins, for as long as it lasts. If the enquiry goes no further, we delete your data once it is no longer needed for that purpose, unless you ask us to stay in touch.

After that, we keep it blocked only for the limitation periods of any legal liabilities that may arise (for example, ten years for the documentation required by anti-money laundering rules, where they apply), and then we delete it.

06Recipients

We do not sell your data or pass it on for marketing purposes. It is accessed, as processors and under the corresponding contract, by the providers who supply services to us:

• HighLevel Inc. (GoHighLevel), based in the United States: the CRM platform in which we record and manage enquiries.
• Our website hosting and technical service providers.

If you write to us on WhatsApp, the conversation is carried by that service (WhatsApp Ireland Limited, part of the Meta group), which handles the data under its own terms and privacy policy.

Where it is needed for your transaction, and with your knowledge, we will share the essential data with the professionals involved (notary, lawyers, tax advisers, surveyors or lenders). We will also disclose it to public authorities, courts and tribunals where there is a legal obligation to do so.

07International transfers

Using HighLevel Inc. involves an international transfer of data to the United States. It will be made with the appropriate safeguards under Art. 46 GDPR [specific mechanism to be confirmed by ARENZA], together with any supplementary measures required. You can ask us for information about these safeguards.

08Your rights

You can ask us at any time to:

• access your data and find out how we handle it;
• rectify it if it is inaccurate, or erase it;
• object to its processing or ask us to restrict it;
• receive it in a structured format to take it to another controller (portability);
• withdraw your consent, without affecting anything done before.

Write to our privacy email [to be provided by ARENZA] or use the contact form, stating which right you wish to exercise. We may ask you to prove your identity. We will reply within one month, which may be extended by two further months for complex requests (Art. 12 GDPR).

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es · C/ Jorge Juan, 6, 28001 Madrid).

09Security

We apply technical and organisational measures appropriate to the risk to protect your data against loss, unauthorised access or alteration, and we require the same of our providers.

10Changes to this policy

We may update this policy to reflect changes in the law or in our services. The date of the last update is shown at the top of the page.