Privacy Policy

I. PRIVACY POLICY AND DATA PROTECTION

In compliance with current legislation, Costa Blanca Conveyancing (hereinafter also referred to as the “Website”) undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security for the risk of the data collected.

Laws incorporated into this privacy policy

This privacy policy is adapted to the current Spanish and European regulations on the protection of personal data on the internet. Specifically, it complies with the following regulations:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons concerning the processing of personal data and the free movement of such data (GDPR).
  • Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPD-GDD).
  • Royal Decree 1720/2007, of December 21, approving the development regulation of Organic Law 15/1999, of December 13, on the Protection of Personal Data (RDLOPD).
  • Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSI-CE).

Identity of the person responsible for the processing of personal data

The person responsible for processing the personal data collected by Costa Blanca Conveyancing is: Costa Blanca Conveyancing S.L., with NIF/CIF: B56205784 and registered in the Commercial Registry of Alicante with the following registration details: , represented by Matthew Palframan Edwards (hereinafter, “Data Controller”). Their contact details are as follows:

  • Address: Calle Poeta Campos Vasallo, 24
  • Contact phone number: +34 865 888 888
  • Contact email: info@cbconveyancing.com

 

Personal Data Register

In compliance with the provisions of the GDPR and the LOPD-GDD, you are informed that the personal data collected by Costa Blanca Conveyancing through the forms provided on its pages will be incorporated and processed in our file to facilitate, expedite, and fulfill the commitments established between Costa Blanca Conveyancing and the User or the maintenance of the relationship established in the forms the User fills out, or to address a request or inquiry.

Furthermore, as provided in the GDPR and the LOPD-GDD, unless the exception provided in Article 30.5 of the GDPR applies, a record of processing activities is maintained, specifying, according to their purposes, the processing activities carried out and other circumstances established in the GDPR.

 

Principles applicable to the processing of personal data

The processing of the User’s personal data will be subject to the following principles set out in Article 5 of the GDPR and Article 4 and subsequent articles of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights:

  1. Lawfulness, fairness, and transparency: The User’s consent will be required at all times, following completely transparent information about the purposes for which personal data are collected.
  2. Purpose limitation: Personal data will be collected for specific, explicit, and legitimate purposes.
  3. Data minimization: Only the personal data strictly necessary in relation to the purposes for which they are processed will be collected.
  4. Accuracy: Personal data must be accurate and always kept up to date.
  5. Storage limitation: Personal data will only be retained in a manner that permits the identification of the User for as long as necessary for the purposes of their processing.
  6. Integrity and confidentiality: Personal data will be processed in a way that guarantees their security and confidentiality.
  7. Accountability: The Data Controller will be responsible for ensuring compliance with the above principles.

 

Categories of personal data

The categories of data processed by Costa Blanca Conveyancing are solely identification data. Special categories of personal data, as defined in Article 9 of the GDPR, are not processed.

 

Legal basis for the processing of personal data

The legal basis for the processing of personal data is consent. Costa Blanca Conveyancing undertakes to obtain the User’s express and verifiable consent for the processing of their personal data for one or more specific purposes.

The User has the right to withdraw their consent at any time. Withdrawing consent will be as easy as granting it. As a general rule, withdrawing consent will not condition the use of the Website.

In cases where the User must or may provide their data via forms to make inquiries, request information, or for reasons related to the content of the Website, they will be informed if filling out any of them is mandatory because they are essential for the proper execution of the operation carried out.

 

Purposes of the processing of personal data

Personal data are collected and managed by Costa Blanca Conveyancing to facilitate, expedite, and fulfill the commitments established between the Website and the User or maintain the relationship established in the forms the User fills out or to address a request or inquiry.

Additionally, the data may be used for commercial purposes, personalization, operational and statistical purposes, and activities related to Costa Blanca Conveyancing’s corporate purpose, as well as for data extraction, storage, and marketing studies to tailor the Content offered to the User and improve the quality, functionality, and navigation of the Website.

At the time personal data are obtained, the User will be informed about the specific purpose(s) of the processing to which the personal data will be allocated; that is, the use(s) that will be given to the information collected.

 

Retention periods for personal data

Personal data will only be retained for the minimum time necessary for the purposes of their processing and, in any case, only for the following period: 5 years, or until the User requests their deletion.

At the time personal data are obtained, the User will be informed about the period during which the personal data will be retained or, when that is not possible, the criteria used to determine this period.

 

Recipients of personal data

The User’s personal data will not be shared with third parties.

In any case, at the time personal data are obtained, the User will be informed about the recipients or categories of recipients of the personal data.

 

Personal data of minors

In compliance with Articles 8 of the GDPR and 7 of Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights, only those over 14 years of age may give their consent for the lawful processing of their personal data by Costa Blanca Conveyancing. If the User is under 14 years old, parental or guardian consent will be required for the processing, and this will only be considered lawful to the extent that they have authorized it.

 

Confidentiality and security of personal data

Costa Blanca Conveyancing undertakes to adopt the necessary technical and organizational measures, according to the appropriate level of security for the risk of the data collected, to ensure the security of personal data and prevent their accidental or unlawful destruction, loss, alteration, unauthorized communication, or access.

The Website has an SSL (Secure Socket Layer) certificate, which ensures that personal data are transmitted securely and confidentially, as the transmission of data between the server and the User, and in feedback, is fully encrypted.

However, since Costa Blanca Conveyancing cannot guarantee the invulnerability of the internet or the absence of hackers or other fraudulent accesses to personal data, the Data Controller undertakes to promptly notify the User when a breach of personal data security occurs that is likely to pose a high risk to the rights and freedoms of individuals.

 

Rights derived from the processing of personal data

The User has the following rights over Costa Blanca Conveyancing, which they may exercise before the Data Controller:

  1. Right of access: The right to obtain confirmation of whether Costa Blanca Conveyancing is processing their personal data.
  2. Right to rectification: The right to request modification of inaccurate or incomplete personal data.
  3. Right to erasure (“right to be forgotten”): The right to request deletion of personal data.
  4. Right to restriction of processing: The right to limit processing under specific circumstances.
  5. Right to data portability: The right to receive their data in a structured format and transmit them to another controller.
  6. Right to object: The right to oppose the processing of their data.
  7. Right not to be subject to automated decision-making: The right to avoid decisions based solely on automated processing.