PRIVACY POLICY

 

PROCESSING OF PERSONAL DATA AND PRIVACY

The company 2R INMUEBLES SL will process your data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter GDPR) of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018 (hereinafter LOPDGDD) of 5 December 2018, on the Protection of Personal Data and Guarantee of Digital Rights.

The details of the Data Controller are as follows:

1. DATA CONTROLLER

Identity: 2R INMUEBLES SL.

CIF: B06766216

Address: CALLE COMUNIDAD DE NAVARRA S/N 22520 FRAGA (HUESCA).

Email address: eruiz@natusfruits.es.

The data subject is hereby informed that 2R INMUEBLES SL has appointed a Data Protection Officer to whom they may address any questions regarding the processing of their personal data. The data subject may contact the Data Protection Officer using the following contact details: postal address and email address.

  • Identity: ANISA LEGAL CONSULTING SL.
  • CIF: B50957356
  • Address: CALLE COSO 24 PLANTA 2 OFICINA 3 50004 (ZARAGOZA).
  • Email address: dpo@anisalegal.com.

 

2. DATA WE COLLECT

Through this website, the Data Controller may collect the following categories of personal data:

  • Identifying information: name, surname, ID/NIE/Passport.
  • Contact information: address, phone number, email address.
  • Data provided through forms: messages sent through forms, real estate preferences, information necessary to answer queries or requests.
  • Browsing data: When accessing the website, the following may be automatically collected: IP address, device and browser type, operating system, pages visited, date and time of access, interaction with content. This data may be collected through cookies or other similar technologies.
  • Data derived from communications: conversations via email, contacts via WhatsApp or other enabled channels. Requests for appointments or visits to properties.
  • Commercial data: when authorized by the user: preference to receive commercial communications, history of requests related to real estate services.

 

  1. PURPOSES OF THE TREATMENT.

The personal data provided by the user will be processed for the following purposes:

– Handling inquiries and requests: responding to information requests made through web forms, email, telephone or any other means of contact, managing requests related to properties, real estate services or business appointments.

– Provision of real estate services: intermediation of the purchase, sale or rental of properties, management of visits, valuations and real estate advice, contact with interested parties in published properties.

– Commercial communications: sending information about properties, promotions or real estate services that may be of interest. These will only be carried out with the user’s prior consent or a legal basis that allows it.

– Improve user experience: analyze web browsing using cookies and qualitative tools to improve the website’s functionality and content.

– Compliance with legal obligations: comply with applicable legal obligations, including tax, commercial and data protection regulations.

– Website security: preventing fraud, unauthorized access and ensuring the security of systems.

  1. 4. LEGAL BASIS FOR PROCESSING

The legal basis for the processing of the user’s personal data is based on the following legal bases in accordance with Article 6 of Regulation (EU) 2016/679 (GDPR).

– Data subject consent: Data processing is based on the user’s freely given, specific, informed, and unambiguous consent: completing contact forms, requesting information about properties or services, subscribing to commercial communications or newsletters, and accepting the use of non-essential cookies. The user may withdraw their consent at any time.

– Execution of pre-contractual or contractual measures: The processing is necessary to: manage requests related to the purchase, sale or lease of real estate, attend to requests prior to the formalization of real estate contracts, provide services requested by the user.

– Compliance with legal obligations: Processing may be carried out when necessary to comply with legal obligations applicable to the Controller, including tax, commercial and administrative regulations.

– Legitimate interest of the controller: The processing may be based on the legitimate interest of the Controller to: ensure the security of the website, prevent fraud or misuse, improve services and customer service, always respecting the rights of the user.

 

  1. DATA RETENTION

The personal data provided by the user will be kept for the time necessary to fulfill the purposes for which they were collected and while there is a commercial or contractual relationship with the interested party.

In particular:

  • Contact information and inquiries: These will be kept for the time necessary to address the request made and, subsequently, for the applicable legal periods to address any potential liabilities.
  • Data related to real estate services: These will be kept while the commercial or pre-contractual relationship is maintained and for the periods required by tax, commercial or administrative regulations.
  • Commercial communications: Data will be kept until the user withdraws their consent or requests the deletion of their data.
  • Browsing data (cookies): These will be kept for the periods established in the Cookies Policy or until the user revokes their consent.

  1. DATA RECIPIENT.

The user’s personal data may be communicated to the following recipients when necessary for the fulfillment of the purposes described:

  • Public Administrations: when there is a legal obligation, the data may be communicated to: Tax Agency, Courts and Tribunals, Security Forces and Corps, other competent public bodies.
  • Service providers (Data Processors): The Controller may use external providers acting as data processors, such as: web hosting and maintenance companies, corporate email providers, real estate CRM platforms, email marketing tools, technology service and cloud storage providers, tax, labor or legal advisors.

These providers will process the data following the instructions of the Controller and under contract in accordance with Article 28 of the GDPR.

  • Professional collaborators: in the field of real estate operations, the data may be communicated, when necessary for the management of the operation, to: owners or interested parties in properties, notaries, financial entities, appraisers, property managers.

Always within the corresponding legal and contractual framework.

  • International transfers: In the event of using technological tools located outside the European Economic Area (for example, certain digital marketing or analytics services), it will be ensured that such transfers are carried out with the appropriate safeguards in accordance with the GDPR.

Guarantee: Under no circumstances will personal data be sold, transferred or rented to third parties for commercial purposes without the express consent of the user.

 

  1. CONFIDENTIALITY AND PROFESSIONAL SECRECY

The Data Controller undertakes to treat users’ personal data with the utmost confidentiality and to use them only for the purposes for which they have been collected, adopting the necessary technical and organizational measures to guarantee their security and prevent their alteration, loss, unauthorized processing or access.

All staff, collaborators and suppliers who have access to personal data will be subject to confidentiality and professional secrecy obligations, even after their contractual or employment relationship with the Controller has ended.

 

  1. RIGHTS AND HOW TO EXERCISE THEM

In compliance with the provisions of European Regulation 2016/679, on the Protection of Personal Data, as a client of 2R INMUEBLES SL you may at any time exercise the rights detailed below by communicating it in writing to 2R INMUEBLES SL, CALLE COMUNIDAD DE NAVARRA S/N 22520 FRAGA (HUESCA) or through our email address: eruiz@natusfruits.es.

. Pursuant to Article 15 of the GDPR, you have the right, to the extent indicated therein, to obtain information about the personal data concerning you that we process;

. Pursuant to Article 16 of the GDPR, the right to obtain without undue delay the rectification or completion of personal data concerning him or her;

. Pursuant to Article 17 of the GDPR, you have the right to obtain the erasure of personal data concerning you, provided that the processing is not necessary; for exercising the right of freedom of expression or information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

. Pursuant to Article 18 of the GDPR, you have the right to obtain restriction of processing of your data when: the data subject contests the accuracy of the data, the processing is unlawful and you oppose the erasure of the data, we no longer need the data, but you have objected to processing pursuant to Article 21 of the GDPR;

. In accordance with Article 20 of the GDPR, you have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller.

You can exercise your rights free of charge, and you will be entitled to receive a response within the time limits established by current data protection legislation.

In accordance with Article 77 of the GDPR, if you believe your rights regarding the protection of your personal data have been violated, particularly if you are not satisfied with the response to your request to exercise these rights, you may file a complaint with a supervisory authority. Generally, you can contact the supervisory authority in your place of residence or work, or at the headquarters of our company.

In Spain:

Spanish Data Protection Agency (AEPD)

Jorge Juan Street No. 6

28001 (Madrid)

Likewise, if you believe that the processing of your personal data violates regulations or your privacy rights, you may file a complaint:

Before the Competent Control Authority.

  1. SECURITY MEASURES AND LEVEL

The Data Controller undertakes to adopt the necessary technical and organizational measures to guarantee the security and integrity of personal data, preventing its alteration, loss, unauthorized processing or access, in accordance with the provisions of Regulation (EU) 2016/679 (GDPR) and current data protection legislation.

In particular, the following measures apply:

  1. Technical security:
  • Use of secure HTTPS protocol.
  • Access control and authentication systems for authorized users.
  • Protection through firewalls and intrusion detection systems.
  • Periodic software and system updates.
  • Regular backups to ensure the availability of information.

 

  1. Organizational security:
  • Access to personal data is limited to authorized personnel only.
  • Confidentiality agreements with employees and collaborators.
  • Basic data protection training for staff.
  • Periodic assessment of risks associated with data processing.

 

  1. Supplier management:

When using technology providers (hosting, real estate CRM, marketing tools, etc.), those that offer sufficient guarantees of compliance with the GDPR will be selected, formalizing the corresponding Data Processor agreements.

 

  1. Security breach notification:

In the event of a security incident that may affect personal data, it will notify the Spanish Data Protection Agency and the interested parties in accordance with current regulations.

Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.