Privacy statement

1. Who is responsible

Casa Pama Real Estate is the controller for the personal data processed through this website. If you have a question about this statement or about your data, please get in touch through the contact page.

2. Data protection officer

We have not appointed a data protection officer; given our size and activities we are not required to. Privacy questions reach our office directly, through the contact page.

3. Which data we process

What you give us yourself, through the contact form, a viewing request or the WhatsApp button:

• your first and last name;
• your email address and telephone number;
• the message or question you write;
• for a viewing request: the reference of the property it concerns.

What is recorded automatically as you use the site, without anything being stored on your device: which page you view and in which language, whether you arrived from another website and which one (the domain name only), the source labels an advertisement or newsletter link may carry, and a coarse location for your internet connection: country, region, city and network. No name, no email address and no precise location.

Only if you consent does one random number get added to that, stored on your device, which lets us see that the same device comes back. And if you click a link in an email from us, that link carries a code telling us that you were the one who opened it.

4. What we use it for, and on which legal basis

• Answering your question and arranging a viewing. Basis: necessary to do what you asked us to do.
• Staying in touch about properties that match what you are looking for. Basis: our legitimate interest as an estate agent. You can object to this at any time.
• Keeping track of how the site is used, in order to improve it. Basis: our legitimate interest. This measurement works without storing anything on your device.
• Recognising that you return on the same device. Basis: your consent. Without consent this does not happen.
• Protecting the forms against automated abuse. When a form is submitted, a technical signal goes to Cloudflare Turnstile, which assesses whether the submission comes from a human. Basis: our legitimate interest.

5. Who we share it with

• Tesoro, our customer system and our site statistics. Tesoro processes the data on our instructions and may not use it for its own purposes.
• Cloudflare, the network this website runs on, and its security and email handling.
• The colleague agency holding the property. Our portfolio consists of properties from colleague agencies. If you request a viewing, the agency holding that property is involved in handling it.

We do not sell your data and we do not pass it to advertising networks.

6. Transfers outside the European Union

Cloudflare processes data on a global network. Insofar as data is processed outside the European Economic Area, this happens on the basis of the European Commission's standard contractual clauses.

7. How long we keep it

• Your enquiry and contact details: for as long as we are in contact about your search or your property, and two years after that. Then we delete them.
• The cookies on your device: one year, or less if you withdraw your choice sooner.
• The measurement data: it contains no name or email address and is kept for as long as we need it for site statistics.

8. Your rights

You have the right to see your data, to have it corrected or deleted, to have the processing restricted, to object to processing based on our legitimate interest, and to receive your data in a common file format. If you have given consent, you may withdraw it at any time; that applies from the moment of withdrawal and not retroactively.

9. How to exercise those rights

Send us a message through the contact page. We respond within one month. To avoid handing data to the wrong person, we may ask you to establish that it is you.

10. Complaints to the supervisory authority

If you disagree with how we handle your data, you can lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (aepd.es). If you live in another EU country, you can also turn to the authority there.

11. Automated decisions and profiles

We do not take decisions about you that are made by a computer alone. If you consent to recognition on your device, we do build up a picture of which properties you viewed, so that an agent can help you more precisely. If you do not consent, that does not happen.

12. Security

Traffic with this website is encrypted (https). Access to our customer system is limited to staff who need it for their work.

13. Do you have to give your data?

No. But without your name and your email address or telephone number we cannot answer your question or arrange a viewing. What you fill in beyond that is up to you.

14. Accuracy, and other people's data

We assume the details you enter are correct; let us know if something needs changing. If you enter someone else's details, please do so only with their knowledge.

15. Cookies

What exactly is stored on your device, and how to withdraw it, is set out in the cookie statement.

16. Changes

If the way we handle data changes, we update this statement. The current version is always on this page, with the date below it.