1. Responsible party

The controller within the meaning of the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data is:

Quintamar Inversiones 2.010, S.L.
Limited liability company under Spanish law.

Represented by the managing director: María Rico Arrebola

Entered in the commercial register:

Málaga Commercial Registry Volume: 6,369, Folio: 93, Page: MA-175,559

CIF: B-13995865

Company headquarters:

Torrox-Costa, Málaga, Spain

Urb. Laguna Beach, commercial module B, unit 14, 29793 Torrox-Costa, Málaga, Spain

Phone: +34 952 53 47 91
Email: info@quintamar.es

2. General information on data processing

We process personal data exclusively in accordance with the applicable legal data protection regulations.

Personal data is any information relating to an identified or identifiable natural person.

3. Purposes of processing

We process personal data for the following purposes:

• Processing contact requests

• Sending of exposés and real estate information

• Organization of visits

• Preparation and execution of real estate purchase processes

• Customer and contract management

• Sending newsletters (with consent)

• Marketing and advertising measures

• Analysis and optimization of our website

• IT security and abuse prevention

• Compliance with legal obligations

4. Categories of processed data

Depending on how you use our website, the following data may be processed:

• Last name and first name

• email address

• phone number

• address information

• Contract and payment data (for transactions)

• IP address

• Usage and navigation data

• Contents of message forms

• Information provided voluntarily

5. Legal basis for processing

Processing is based on:

• Art. 6 para. 1 lit. a GDPR (consent)

• Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures)

• Art. 6 para. 1 lit. c GDPR (legal obligation)

• Art. 6 para. 1 lit. f GDPR (legitimate interest)

6. Storage period

Personal data will only be stored for as long as is necessary for the respective purposes or as long as statutory retention periods apply.

After the deadlines have expired, the data will be deleted or blocked.

7. Disclosure to third parties

Personal data will only be disclosed if necessary.

Recipients may include, in particular:

• Hosting and IT service provider

• CRM and property management software

• Email marketing providers

• payment service provider

• notaries

• lawyers

• tax advisor

• Property developer or project developer

• Authorities within the scope of legal obligations

Appropriate data processing agreements in accordance with Art. 28 GDPR are in place with all external service providers.

8. International data transfer

If we use services from providers outside the European Union (e.g., Google, Meta, Microsoft, or similar platforms), data may be transferred to third countries.

This is done exclusively on the basis of appropriate safeguards in accordance with Art. 44 et seq. GDPR, in particular through EU standard contractual clauses.

9. Server log files

When you visit our website, information is automatically collected:

• IP address

• Date and time of access

• Browser type and version

• operating system

• referrer URL

This data is used for technical security purposes and is not used to identify individuals.

10. Contact form and email contact

If you contact us via form or email, your details will be stored for the purpose of processing your inquiry.

Processing is carried out on the basis of your consent or for the purpose of implementing pre-contractual measures.

11. Newsletter

If you subscribe to our newsletter, we will use your email address exclusively for sending you our information.

. You can revoke your consent at any time.

12. Use of analysis and tracking tools

Our website may use analytics and marketing tools, including:

• Google Analytics

• Google Ads

• Meta Pixel

• Remarketing technologies

These tools are used for statistical analysis and optimization of our offering.

Use is only permitted after consent has been given via our cookie banner.

13. Integration of external services

Our website may incorporate the following services:

• Google Maps

• YouTube or Vimeo

• Google reCAPTCHA

• Weglot (translation service)

• WhatsApp Business

• Online chat systems

When using these services, personal data may be transferred to third-party providers.

14. Social media

We maintain profiles on social networks.
Personal data is processed in accordance with the data protection regulations of the respective platform operators.

15. Automated decisions and profiling

There is no automated decision-making with legal effect.

However, statistical analyses or marketing segmentation may be carried out.

16. Rights of data subjects

You have the right to:

• information

• correction

• deletion

• Restriction of processing

• data portability

• objection

• Withdrawal of consent

To exercise your rights, please contact us at:
info@[domain].de

You also have the right to lodge a complaint with a data protection supervisory authority.

17. Data security

We use technical and organizational security measures to protect personal data against loss, manipulation, or unauthorized access.

18. Changes to this privacy policy

We reserve the right to amend this privacy policy in order to adapt it to changed legal requirements or changes to our services.