Privacy policy

At Gallery Properties we protect your privacy and process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 of 5 December on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

1. What data do we process?

We process the personal data you voluntarily provide through website forms or other communication channels. We usually collect:

• Identification details: first name and surname.
• Contact details: email, phone number and postal address.
• Commercial information: search preferences (property type, area, budget, bedrooms, etc.) and interaction history.
• Browsing data: IP address, browser, operating system, pages visited, and access date and time.

2. Why do we process your data?

Purpose	Legal basis	Retention period
Handling information requests, viewings and valuations	Pre-contractual measures / legitimate interest	For the duration of the commercial relationship
Sending properties matching your search criteria	Express consent (GDPR)	Until consent is withdrawn
Sending commercial communications and newsletters	Express consent	Until consent is withdrawn
Compliance with legal and tax obligations	Legal obligation	Applicable statutory periods

3. Who do we share your data with?

As a general rule, your data will not be disclosed to third parties, except:

• To technology service providers supporting us (hosting, CRM, website analytics and email delivery), under data processing agreements compliant with Article 28 GDPR.
• To Inmovilla (real estate CRM), as a processor for managing enquiries and transactions.
• To Betterplace when you request an automated valuation, to provide that service.
• To PostHog, if you accept analytics, to understand browsing through events, heatmaps and recordings with form data hidden. This integration uses the European region, discards the IP address and retains recordings for 30 days. It does not record the external valuation tool’s content or the private portal. You can change your choice in the cookie policy.
• To the competent public authorities when required by law.

We do not transfer data internationally outside the European Economic Area except to technology providers in the USA covered by the EU‑US Data Privacy Framework or subject to standard contractual clauses.

4. What are your rights?

As the data subject, you have the right to:

• Access: know which data about you we process.
• Rectification: correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”): request deletion of your data.
• Objection: object to processing of your data for specific purposes.
• Restriction: request restriction of processing.
• Data portability: receive your data in a structured, commonly used format.
• Withdraw consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You can exercise your rights by emailing info@galleryproperties.es stating the right you wish to exercise and enclosing a copy of your national identity document or equivalent.

If you believe the processing of your data breaches the regulations, you may lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.

5. Data security

We have implemented appropriate technical and organisational measures to ensure security proportionate to the processing risk, including HTTPS encryption of all communications, access controls, regular backups and anonymisation wherever possible.

6. Changes to the privacy policy

We reserve the right to amend this privacy policy at any time to reflect legislative developments or operational changes. We recommend reviewing it periodically.

Última actualización: 04/11/2026