1. Data controller
Controller: Inversiones ENOSIS
Tax ID (NIF/CIF): [PENDING]
Address: Avda. de Torre Pacheco, 8 bajo · 30709 Roldán (Murcia), Spain
Email: info@enosis.es
Data Protection Officer (DPO): info@enosis.es
2. Purposes of processing
We process the personal data provided by users through the website forms for the following purposes:
- To respond to enquiries and requests for information about properties.
- To arrange viewings, valuations and sale or rental processes.
- To send commercial communications about our services, provided the user has given consent.
- To comply with applicable legal and tax obligations.
3. Legal basis
The legal basis for processing the data is:
- The data subject's consent, given when submitting the form.
- The performance of a contract or steps prior to entering into it (property management).
- Compliance with legal obligations (Spanish Act 10/2010 on the Prevention of Money Laundering, and tax legislation).
4. Recipients
Personal data will not be disclosed to third parties except where legally required or where necessary to provide the service (for example, notaries, administrative agencies, financial institutions or the property portals where the property of interest is advertised).
To provide certain services, Inversiones ENOSIS may rely on suppliers acting as data processors (web hosting, email tools, CRM). All of them are bound by confidentiality agreements and GDPR compliance.
5. Data retention
Data will be kept for as long as necessary to fulfil the purpose for which it was collected and to determine any liability arising from the processing. In general, the periods are as follows:
- Contact data without a contract: 1 year from the last contact.
- Client data with a contract: 6 years from completion (tax obligation).
- Property transactions subject to anti-money-laundering rules: 10 years (Act 10/2010).
6. International data transfers
Data is processed on servers located within the European Union. Should any transfer outside the European Economic Area become necessary, it will only be carried out to countries with an adequacy decision or under the appropriate safeguards laid down in Chapter V of the GDPR, and you will be informed accordingly.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as well as withdraw your consent at any time, by writing to info@enosis.es, stating the right you wish to exercise and enclosing a copy of your identity document.
If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid.
8. Security measures
Inversiones ENOSIS applies the technical and organisational measures required by article 32 of the GDPR to guarantee the security of personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the art, the nature of the data and the risks to which it is exposed.