At Fincas Marpa we handle your data with the same care as everything else you trust us with. Here we explain clearly what data we use, why, and what your rights are, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller: Fincas Marpa S.C.P. (Fincas Marpa), Tax ID J61913042.
- Address: Consell de Cent 306, 1st floor, door 1, 08007 Barcelona, Spain.
- Contact: info@fincasmarpa.com · +34 934 881 642
2. What data we process
- Website enquiry form: name, email, phone, the kind of help you need, the area or address of the property, your message and the website language.
- Personal Shopper form: the details you give us about the home you are looking for.
- Direct contact by email, phone or WhatsApp: the data you send us.
- Clients: what is needed to provide the service (property details, contracts, bank details for payments, etc.).
We do not ask for more data than we need. If you give us data about other people (for example, a co-owner), you must have informed them first.
3. Why we use it and on what legal basis
- To answer your enquiry and send you the information or quote you ask for. Basis: your consent when sending the form, and pre-contractual steps at your request (art. 6.1.a and 6.1.b GDPR).
- To provide the service you hire (management, sales, tax advice, insurance, maintenance). Basis: performance of a contract (art. 6.1.b GDPR).
- To meet legal obligations on tax, accounting and anti-money laundering. Basis: legal obligation (art. 6.1.c GDPR).
We do not send advertising without your permission or make automated decisions about you.
4. How long we keep it
Enquiries that do not lead to an engagement are kept for a maximum of one year. If you hire a service, for as long as the relationship lasts and then for the periods required by law (for example, six years for accounting records and ten for anti-money laundering records).
5. Who can see your data
We do not sell or share your data. We only disclose it when the law requires (tax authorities, courts) or when it is needed for your engagement and with your knowledge (notary, land registry, insurer, our maintenance partner).
We use providers that process data on our behalf under a data processing agreement: Google (email, the spreadsheet where website enquiries are stored, and forms) and FormSubmit (delivery of the website enquiry form to our inbox). Both may process data outside the European Economic Area, with the safeguards of the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. If you message us on WhatsApp, Meta processes your data under its own policy.
6. Your rights
You can ask us at any time to access, correct or delete your data, object to or restrict its use, or transfer it to another provider, and you can withdraw your consent without affecting what was done before. Write to info@fincasmarpa.com or to our address stating which right you wish to exercise; if we cannot identify you, we will ask for proof of identity.
If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply technical and organisational measures to protect your data: restricted access, strong passwords and providers with security guarantees. Paper records are kept locked at our office.
8. Changes
We may update this policy to reflect changes in the law or in our services. The date of the latest version appears at the top.