Privacy policy
Last updated: 19 October 2026
This policy explains how [COMPANY NAME] (“Consortium Collection”, “we”) collects and uses personal data when you visit consortiumcollection.com, send us a brief or contact us. We follow the EU General Data Protection Regulation (GDPR), the Spanish data protection law (LOPDGDD) and the Spanish law on information society services (LSSI-CE).
1. Who is responsible
[COMPANY NAME], [ADDRESS], CIF [CIF], is the controller of the personal data described here. For anything about your data, write to [EMAIL]. Data protection officer: [none appointed, or name].
2. What we collect
What you give us
When you send a brief, ask about a home, or write to us by email, phone or WhatsApp: your name, email address and phone number, your country of residence, what you are looking for (areas, budget, timing, the kind of home), and anything else you choose to tell us.
What our systems record
When you visit, our hosting and security provider (Cloudflare) processes your IP address and technical details of each request, such as your browser, your device and the page asked for, to deliver the website and protect it from abuse. On the brief pages, and only if you accept cookies there, analytics and advertising tools record how the page is used (see the cookie policy).
What advertising platforms pass on
If you reach us through an advertisement, the link can carry a click identifier and the campaign’s details. We use them to see which advertising works.
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answer your enquiry and run your search: shortlists, viewings, checks and negotiation | Steps you ask for before a contract, and the contract itself (GDPR article 6(1)(b)) |
| Keep you informed about your search and your appointments | The contract (article 6(1)(b)) |
| Measure visits and advertising on the brief pages | Your consent, given in the cookie banner (article 6(1)(a)) |
| Send you news or new homes by email, if you ask us to | Your consent (article 6(1)(a)) |
| Keep the records the law requires: tax, accounting and anti-money-laundering | Legal obligation (article 6(1)(c)) |
| Keep the website and our systems secure | Our legitimate interest in security (article 6(1)(f)) |
You can withdraw your consent at any time. It does not affect what was done before.
4. How long we keep it
| Data | How long |
|---|---|
| Enquiries and briefs that don’t lead to working together | [RETENTION PERIOD] after our last contact, then deleted |
| Clients’ files | For as long as we work together, then as long as the law requires: six years for accounting records (Commercial Code, article 30) and ten years for anti-money-laundering records (Law 10/2010, article 25) |
| Consent to marketing emails | Until you withdraw it |
| Analytics and advertising data from the brief pages | As set by each tool (see the cookie policy) |
5. Who receives it
We never sell your data. It goes only to:
- Service providers who process it for us, under contract: Cloudflare (hosting, content delivery and security); ScalaHosting (the server where briefs are stored); [CRM PROVIDER] (client records); [EMAIL PROVIDER] (email); and, on the brief pages and only with your consent, Google (Analytics, Ads and Tag Manager).
- Professionals in your purchase, such as lawyers, notaries and surveyors, when you ask us to involve them.
- Authorities, when the law requires it.
Listing photos are loaded from Resales Online’s image servers, so your browser’s request, with your IP address, reaches them when you view a listing.
6. Transfers outside the European Union
Some providers, such as Cloudflare and Google, may process data in the United States. These transfers rely on the EU–US Data Privacy Framework where the provider is certified under it, or on the European Commission’s standard contractual clauses. You can ask us for a copy of the safeguards.
7. Your rights
You can ask us to:
- show you the personal data we hold about you;
- correct it, or delete it;
- limit how we use it, or stop using it for purposes based on our legitimate interests;
- give it to you, or to someone else, in a common machine-readable format;
- stop using it for anything you consented to.
Write to [EMAIL]. We may ask you to confirm your identity, and we reply within one month. If you are not satisfied, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the authority where you live.
We make no decisions about you by automated means alone.
8. Cookies
See the cookie policy.
9. Children
This website is not meant for children. We don’t knowingly collect data from anyone under 14, the age of digital consent in Spain (LOPDGDD, article 7).
10. Security
Connections to this website are encrypted. Access to personal data is limited to the people who need it, and our providers are bound by contract to protect it.
11. Changes
When this policy changes, we update this page and the date at the top.
12. Contact
[EMAIL] · [ADDRESS]