Privacy policy
Last updated: October 2026
At Jaen Inmobiliaria we take the protection of your personal data seriously. This policy explains what data we process through this website, why, for how long and what rights you have, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Owner: Jaen Inmobiliaria
- Tax ID (NIF/CIF): [pending]
- Address: [pending]
- Email: [pending]
- Phone: [pending]
- Website: https://jaenrealestate.es
2. What data we process
We only process data that you provide voluntarily or that is generated while you browse the site:
- Identification and contact data (name, email, phone) entered in our contact forms, property enquiry forms or valuation / sell-your-property forms.
- The content of your message and, where applicable, details of the property you describe (location, type, features).
- Communication data when you contact us by email, phone or WhatsApp.
- Technical and browsing data (IP address, browser, pages visited), only as described in our Cookie policy.
We do not ask for special categories of data. Please do not include them in your messages.
3. Purposes and legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Answering your enquiries and requests for information about properties, viewings or services. | Pre-contractual steps at your request (6.1.b) and your consent when submitting the form (6.1.a). |
| Managing the sale or rental mandate of your property, valuations and the relationship with owners, buyers and tenants. | Performance of a contract or pre-contractual steps (6.1.b). |
| Complying with legal obligations (tax, accounting and, where applicable, anti-money-laundering rules — Spanish Law 10/2010). | Legal obligation (6.1.c). |
| Sending you information about properties matching your search, when you have asked for it. | Consent (6.1.a), which you may withdraw at any time. |
| Anonymous or aggregated measurement of site usage (analytics). | Consent given through the cookie panel (6.1.a). |
| Site security and prevention of fraud and form spam. | Legitimate interest (6.1.f). |
We do not make automated decisions or create profiles that have legal effects on you.
4. Retention period
- Enquiries that do not lead to a business relationship: up to 2 years from the last contact, unless you ask us to delete them earlier.
- Clients (owners, buyers, tenants): for the duration of the relationship and afterwards for the statutory limitation periods (generally 6 years for commercial and tax purposes; 10 years for documentation required by anti-money-laundering rules).
- Marketing communications: until you withdraw your consent.
- Analytics data: as set out in the Cookie policy.
After these periods the data is blocked and then securely deleted.
5. Recipients
We do not disclose your data to third parties unless required by law or necessary to provide the service you request, for example:
- Owners, buyers or tenants involved in the transaction, strictly as needed; notaries, land registries, banks or partner agencies, only at your request or where necessary for the transaction.
- Public authorities and courts where there is a legal obligation.
- Service providers (web hosting, email, IT maintenance) acting as data processors under a contract compliant with Art. 28 GDPR.
6. International transfers
As a rule your data is processed within the European Economic Area. Only if you accept analytics cookies do we use Google Analytics (Google Ireland Ltd. / Google LLC), which may involve transfers of data to the United States. Google LLC is certified under the EU-US Data Privacy Framework and also applies the standard contractual clauses approved by the European Commission.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw any consent given (without affecting the lawfulness of prior processing), by writing to [pending] or by post to [pending], stating the right you wish to exercise and proving your identity.
If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — www.aepd.es, C/ Jorge Juan 6, 28001 Madrid) or with the supervisory authority of your country of residence.
8. Accuracy and minors
You guarantee that the data you provide is accurate and undertake to inform us of any changes. This website is not aimed at children under 14 and we do not knowingly collect their data.
9. Security
We apply appropriate technical and organisational measures (encrypted HTTPS connection, access control, backups) to ensure the confidentiality, integrity and availability of your data.
10. Changes to this policy
We may update this policy to reflect legal changes or changes in our activity. The version in force is always the one published on this page. In case of discrepancy, the Spanish version prevails.