Privacy policy

This notice explains what personal data we collect about you on this website, what we use it for, and what rights you have. We follow the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD 3/2018).

1. Who is responsible for your data

The data controller is Costa Blanca Selected, part of the Sp-Koti Costa Blanca real estate agency, registered with the Valencian regional register of estate agents (RAICV 3380).

2. What we collect

We collect only what you give us yourself, plus limited technical information about how the site is used.

• Enquiry forms: your name, email address, phone number (optional), the development you are interested in if you select one, and the page the form was sent from.
• Direct contact: if you contact us by email, phone or WhatsApp, we process the content of your message and your contact details.
• Analytics data: with your consent, usage data such as pages viewed, approximate location (country/city), device type, and how you arrived at the site.

We do not collect special-category (sensitive) personal data, and we never ask for identity document numbers or banking details through this website.

3. Why we use it, and on what legal basis

• Replying to your enquiry and sending you the property information you asked for — basis: your consent and pre-contractual steps taken at your request (GDPR Art. 6(1)(a) and (b)).
• Staying in touch through the stages of a purchase, if you proceed — basis: preparation and performance of a contract (GDPR Art. 6(1)(b)).
• Improving the site and our marketing using aggregate statistics — basis: your cookie consent (GDPR Art. 6(1)(a)).
• Meeting legal obligations such as accounting and estate-agency regulation — basis: legal obligation (GDPR Art. 6(1)(c)).

We do not sell your personal data, and we do not pass it to third parties for their own marketing.

4. Who else sees it

We use trusted service providers who process data on our behalf and only on our instructions:

• Netlify — website hosting and form handling.
• Google (Google Analytics 4, Google Ads) — site statistics and advertising measurement, only with your consent.
• Sp-Koti network — where your enquiry concerns a development handled by another agent in our network.
• Developers — only if you proceed to a reservation or purchase, and only to the extent the transaction requires.

We may also be legally required to disclose data to public authorities.

5. Cookies and analytics

The site uses strictly necessary cookies that keep it working, plus analytics and advertising cookies that are only set after you give consent.

When you first arrive, you will see a cookie banner. Analytics and advertising cookies stay switched off until you accept them. You can change your choice at any time from the “Cookie settings” link at the bottom of any page.

6. Transfers outside the EEA

Some of our providers, including Google and Netlify, may process data outside the European Economic Area. Where that happens, the transfer relies on the European Commission's Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework.

7. How long we keep it

• Enquiries that do not lead to a purchase: up to 24 months from our last contact.
• Data from an actual purchase: for the duration of the transaction and afterwards for as long as the law requires — generally six years for accounting records.
• Analytics data: per Google Analytics defaults, no longer than 14 months.

8. Your rights

You have the right to:

• know what data we hold about you and receive a copy of it;
• have inaccurate data corrected;
• ask us to delete your data;
• restrict or object to processing;
• receive your data in a portable format;
• withdraw your consent at any time — withdrawal does not affect processing carried out before it.

To exercise any of these, email jarno.halme@spkoti.fi. We reply within one month, and we do not charge for handling requests.

If you are not satisfied with how we handle your data, you can complain to the Spanish data protection authority (Agencia Española de Protección de Datos, aepd.es) or to the supervisory authority in your own country — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi).

9. Security

The site runs over an encrypted HTTPS connection. Form submissions are delivered to protected email, and access is limited to the members of our team who handle your enquiry.

10. Changes to this notice

We may update this notice if our services or the law change. The current version is always on this page, with the date shown at the top.