Privacy Policy

How CasaViva Costa handles personal data on the website, in client follow-up, and in real estate documentation.

These pages explain how CasaViva Costa handles data, cookies, and legal obligations in a clear, practical way.

1. Data controller

Manu Jacobs, trading as CasaViva Costa
NIF/NIE: Y8461516Z
Physical attention point: Partida Lomas GP.2, 197, Albatera
Email: info@casavivacosta.com
Phone: +34 642 834 794
Website: casavivacosta.com

Most services are provided remotely or by electronic means, with in-person appointments by prior arrangement and a physical contact point for complaints.

No data protection officer has currently been appointed because, based on the information presently available, no mandatory appointment scenario appears to apply. If that changes, the relevant contact details will be published.

2. Data we may process

Identity and contact data such as name, email address, phone number, preferred language, and contact preferences.
Account and security data such as login credentials, remembered username, access logs, session continuity, saved items, and preference settings.
Enquiry and service data such as messages, viewed properties or projects, budget indications, seller-pricing requests, follow-up history, and appointment context.
Document and transaction data such as visit sheets, brokerage mandates, reservations, receipts, invoices, pre-contractual records, and transaction support files.
Technical and anti-abuse data such as IP address, browser metadata, security checks, rate limiting logs, and human-verification results.
Assistant and communication data such as chat content, continuity state, newsletter preferences, and live hand-off records where that functionality is enabled.

3. How we obtain the data

Most data is obtained directly from you through forms, account registration, email, phone, WhatsApp, newsletter signup, live chat, the digital assistant, or signed real estate documents.

Data may also arrive from third parties linked to a specific transaction or request, for example property owners, developers, landlords, tenants, co-buyers, representatives, or trusted professional partners. Where data is not obtained directly from the data subject, the information required by Article 14 GDPR will be provided unless a lawful exception applies.

4. Purposes, legal bases, and indicative retention

Activity	Purpose and legal basis	Indicative retention
Contact and property enquiries	To answer requests, organise pre-contractual follow-up, and continue the service conversation. Legal basis: requested pre-contractual steps and, where appropriate, legitimate interest in service continuity.	Retention: while the request remains active and afterwards for applicable limitation and defence periods.
Accounts, saved items, and preference settings	To operate the account area, protect access, and remember user-selected features. Legal basis: performance of the user relationship, requested pre-contractual steps, and legitimate security interests.	Retention: while the account remains active and afterwards for blocking, defence, and legal compliance periods where required.
Newsletter and promotional communications	To send updates, market messages, and relevant recommendations where consent or another valid legal basis applies. Legal basis: consent and the right to object at any time.	Retention: until unsubscribe, withdrawal, objection, or the point at which proof of consent no longer needs to be retained.
Assistant and chat continuity	To classify questions, keep the conversation coherent, route users to relevant pages, and enable human follow-up where activated. Legal basis: requested pre-contractual steps, consent for external services where applicable, and legitimate interest in efficient support.	Retention: for the period needed for continuity, security, incident review, and reasonable operational follow-up.
Indicative calculators and sale planning tools	To provide non-binding scenario guidance and help the user understand purchase, sale, or financing context. Legal basis: the user’s request. No solely automated decision with legal or similarly significant effect is made.	Retention: mainly in-browser. If the result is linked to a submitted enquiry, the enquiry retention logic applies.
Real estate documents, visits, reservations, receipts, and invoices	To document pre-contractual and contractual steps, coordinate parties, and support transaction execution. Legal basis: contract performance, requested pre-contractual steps, legal obligations, and defence of claims.	Retention: for the life of the matter and afterwards for legal, accounting, tax, and claims-related periods.
AML/KYC and enhanced compliance checks	To verify identity, beneficial ownership, source-of-funds context, and legally required documentation where a transaction triggers anti-money-laundering obligations. Legal basis: legal obligation.	Retention: up to 10 years where anti-money-laundering law requires it.
Security, human checks, anti-spam, and audit logs	To protect the site, users, and forms against abuse, fraud, unauthorised access, and operational failures. Legal basis: legitimate interest and, where applicable, legal security obligations.	Retention: only for the period proportionate to security, audit, and incident-response purposes.

5. Recipients, processors, and international transfers

Data may be accessed by hosting, security, email, CRM, document, newsletter, and support providers acting on CasaViva Costa’s instructions, as well as by professional partners involved in a specific matter where disclosure is necessary.

Where external service providers process data from outside the European Economic Area, CasaViva Costa aims to rely on an adequacy decision, standard contractual clauses, or another valid transfer mechanism, depending on the provider and the service actually used at that time.

The current website setup may involve providers such as Cloudflare for security checks, Google Maps when map embeds are allowed, Meta or WhatsApp when the user chooses those external links, and OpenAI when assistant functionality is enabled.

6. Rights

You may request access, rectification, erasure, objection, restriction, and portability where the applicable law recognises those rights. You may also withdraw consent at any time for consent-based processing, without affecting prior lawful processing.

Rights requests can be sent to the contact details shown in this policy. If you believe your data protection rights have been infringed, you may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

7. Cookies, storage, and updates

Cookie and local-storage details are described in the Cookie Policy. Operator identification details are described in the Legal Notice.

CasaViva Costa may update this policy where legal requirements, site features, providers, or operational practices change. The version published here applies from its publication date.

Last updated: April 2026