| Contact and property enquiries |
To answer requests, organise pre-contractual follow-up, and continue the service conversation.
Legal basis: requested pre-contractual steps and, where appropriate, legitimate interest in service continuity. |
Retention: while the request remains active and afterwards for applicable limitation and defence periods. |
| Holiday rental reservation requests |
To assess requested dates, prepare the stay agreement, verify guests at arrival, administer the booking, and comply with applicable accommodation registration and reporting duties.
Legal basis: requested pre-contractual steps and contract performance, plus legal obligations including applicable lodging-registration rules. The required checkbox only records that this notice was read; it is not consent to marketing. |
Retention: incomplete or declined requests are kept only for a proportionate operational and claims period. Where the statutory lodging register applies, required registration data is retained for the legally required period, currently three years from the end of the stay under Royal Decree 933/2021. |
| Accounts, saved items, and preference settings |
To operate the account area, protect access, and remember user-selected features.
Legal basis: performance of the user relationship, requested pre-contractual steps, and legitimate security interests. |
Retention: while the account remains active and afterwards for blocking, defence, and legal compliance periods where required. |
| Newsletter and promotional communications |
To send updates, market messages, and relevant recommendations where consent or another valid legal basis applies.
Legal basis: consent and the right to object at any time. |
Retention: until unsubscribe, withdrawal, objection, or the point at which proof of consent no longer needs to be retained. |
| Assistant and chat continuity |
To classify questions, keep the conversation coherent, help visitors find the right information or next step, and enable human follow-up where activated.
Legal basis: requested pre-contractual steps, consent for external services where applicable, and legitimate interest in efficient support. |
Retention: for the period needed for continuity, security, incident review, and reasonable operational follow-up. |
| AI-assisted translation, search, and content support |
To translate website or document text, normalise multilingual searches, prepare assistant answers, support property descriptions, and improve newsletter relevance where the feature is enabled.
Legal basis: the user’s request, legitimate interest in efficient multilingual service, and consent where an external optional service requires it. |
Retention: according to the linked enquiry, document, cache, security, or operational record; transient AI prompts are not used as a separate client file unless stored by the website workflow. |
| Indicative calculators and sale planning tools |
To provide non-binding scenario guidance and help the user understand purchase, sale, or financing context.
Legal basis: the user’s request. No solely automated decision with legal or similarly significant effect is made. |
Retention: mainly in-browser. If the result is linked to a submitted enquiry, the enquiry retention logic applies. |
| Real estate documents, visits, reservations, receipts, and invoices |
To document pre-contractual and contractual steps, coordinate parties, and support transaction execution.
Legal basis: contract performance, requested pre-contractual steps, legal obligations, and defence of claims. |
Retention: for the life of the matter and afterwards for legal, accounting, tax, and claims-related periods. |
| AML/KYC and enhanced compliance checks |
To verify identity, beneficial ownership, source-of-funds context, and legally required documentation where a transaction triggers anti-money-laundering obligations.
Legal basis: legal obligation. |
Retention: up to 10 years where anti-money-laundering law requires it. |
| Security, human checks, anti-spam, and audit logs |
To protect the site, users, and forms against abuse, fraud, unauthorised access, and operational failures.
Legal basis: legitimate interest and, where applicable, legal security obligations. |
Retention: only for the period proportionate to security, audit, and incident-response purposes. |