Privacy policy

1. Data controller

• Controller: INNOVA URBIS, S.L.
• Spanish Tax Identification Number (NIF): B26808980.
• Registered office: Calle Fernando Guanarteme, 171, 35010 Las Palmas de Gran Canaria, Las Palmas, Spain.
• Registration details: Commercial Registry of Las Palmas, Section 8, Sheet GC-66168, Entry 1.
• Email: info@innovaurbis.com.
• Telephone: +34 682 69 13 51.

2. Scope

This policy applies to individuals who request information, offer a property for sale or rent, search for a property, express an interest in an investment, arrange a viewing, enter into a contractual or professional relationship with Innova Urbis, or interact with its digital channels.

3. Data we may process

Depending on the relationship and the service requested, we may process the following categories of data:

• Identification and contact data: first name, surname, identity document, address, telephone number, email address, language and signature.
• Property and transaction data: ownership, cadastral reference, location, characteristics, price, encumbrances, land registry, planning, technical or contractual documentation and property-search preferences.
• Economic and financial data: information required to assess the feasibility of a transaction, verify funds, manage payments or invoicing and comply with legal obligations.
• Professional or representation data: company, position, powers of representation, relationship with the property or the parties and information relating to agents or partners.
• Communication data: enquiries, messages, calls, meetings, viewings, incidents, offers and exchanged documentation.
• Technical and browsing data: IP address, identifiers, browser, device, security logs, pages visited, interaction with content and cookie preferences.
• Other data: information voluntarily provided by the data subject or by third parties lawfully involved in the transaction.

Please do not provide special-category personal data that is not required for the service. Where a legal obligation requires additional information, it will be requested specifically.

4. Purposes and legal bases

• Handling enquiries: to respond to contact, information, valuation, sale, purchase, investment or partnership requests. The legal basis is taking steps at the request of the data subject prior to entering into a contract and, where appropriate, the legitimate interest in managing the communication.
• Managing real estate services: to carry out property acquisition, marketing, search, viewings, negotiation, offers, reservations, contracts and transaction follow-up. The legal basis is the performance of a contract or taking pre-contractual steps.
• Verification and compliance: to verify identity, representation, ownership and documentation and to comply with tax, accounting, registration, consumer-protection and anti-money laundering obligations. The legal basis is compliance with legal obligations.
• Relationship with professionals and partners: to coordinate the involvement of notaries, registries, financial institutions, architects, technicians, lawyers, advisers, agencies and agents where necessary. The legal basis will be the performance of a contract, taking pre-contractual steps, compliance with a legal obligation or legitimate interest, as applicable.
• Security and quality: to protect the website, prevent fraud and unlawful use, retain evidence, resolve incidents and improve processes and customer service. The legal basis is Innova Urbis's legitimate interest in ensuring security and quality and defending its rights.
• Marketing communications: to send news, properties, developments or services that may be of interest. The legal basis is consent, except where the law permits communications to existing customers concerning similar services. The data subject may object at any time.
• Analytics, personalisation and advertising: to measure website use, produce statistics, optimise campaigns and personalise content through cookies or similar technologies. The legal basis is the consent given through the cookie settings panel.
• Social networks and messaging: to manage interactions through social networks, WhatsApp or other third-party services. The legal basis will be consent, taking pre-contractual steps or legitimate interest, depending on the nature of the request.

5. Mandatory data

Fields identified as mandatory are required to process the request. If they are not completed, Innova Urbis may not have sufficient information to respond, provide the service or formalise the transaction.

6. Source of the data

Data is obtained mainly from the data subject. It may also be obtained from owners, representatives, buyers, partner agents, professionals involved in the transaction, publicly accessible sources, public registers or real estate platforms, always within legal limits and for purposes compatible with the transaction.

Anyone providing another person's data declares that they are legally entitled to do so and that they have informed the person concerned where required.

7. Recipients

Personal data is not sold. Where necessary and supported by a valid legal basis, it may be disclosed or made available to:

• Owners, buyers, landlords, tenants, investors or other parties to the transaction.
• Notaries, registries, public authorities, courts and competent bodies.
• Financial institutions, insurers, valuation companies and payment-service providers involved in the transaction.
• Lawyers, tax advisers, architects, engineers, technicians, certifiers, photographers and other necessary professionals.
• Real estate agencies, agents and partners involved in marketing or property searches, subject to the appropriate contractual safeguards.
• Service providers acting as processors: website hosting, email, CRM, maintenance, forms, analytics, security, storage, electronic signature, communications and technical support.

Where disclosure is not necessary for the performance of the service and is not covered by another legal basis, the data subject's prior consent will be requested.

8. International providers and transfers

The website may use services provided by companies such as Google, Meta, WhatsApp, YouTube, Vimeo, CRM providers, analytics tools, maps, anti-spam tools and other technology services. Some providers may process data outside the European Economic Area.

Where an international transfer takes place, Innova Urbis will seek to ensure that it is based on a European Commission adequacy decision, the provider's valid participation in the EU-US Data Privacy Framework, Standard Contractual Clauses or another safeguard recognised under Articles 44 et seq. of the GDPR. Users may request information about the safeguards applied by writing to the address stated in this policy.

9. Retention periods

• Enquiries not followed by a relationship: up to 12 months from the last communication, unless a longer period is required to handle a complaint or demonstrate the action taken.
• Pre-contractual and contractual relationships: for the duration of the negotiations or service and subsequently for the applicable statutory limitation periods.
• Commercial, accounting and tax documentation: for the periods required by applicable law; generally up to 6 years for commercial documentation and 4 years for tax obligations, without prejudice to longer periods.
• Anti-money laundering: for 10 years where the relevant legislation applies to the transaction and the documentation collected.
• Marketing communications: until the data subject withdraws consent or exercises the right to object. Thereafter, the minimum necessary data will be retained on an exclusion list to respect that decision.
• Cookies and browsing data: for the periods stated in the Cookie Policy and, in all cases, in accordance with the preference expressed by the user.

Once the applicable period has expired, the data will be deleted or blocked and will remain available only for the purpose of addressing potential liabilities or requests from competent authorities.

10. Data subject rights

Data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing and data portability. They may also withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Requests should be sent to info@innovaurbis.com or to the registered office stated above, identifying the right to be exercised. Innova Urbis may request additional information to verify identity where there are reasonable doubts.

Data subjects have the right to lodge a complaint with the Spanish Data Protection Agency, particularly if they consider that their rights have not been properly addressed.

11. Automated decisions and profiling

Innova Urbis does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject. Analytics or advertising tools may create browsing profiles where the user has consented, but such profiles do not by themselves determine whether a real estate transaction is accepted or rejected.

12. Minors

Real estate services are intended for adults. Innova Urbis does not knowingly request information from minors through the website. If it becomes aware that a minor has provided data without valid authorisation, appropriate steps will be taken to delete it.

13. Security and confidentiality

Innova Urbis applies reasonable technical and organisational measures to protect personal data against loss, alteration, unauthorised access, disclosure or destruction. Access to the information is limited to persons and providers who require it for the purposes described and who are subject to confidentiality obligations.

No system is completely invulnerable. If a user becomes aware of an incident or suspects misuse of their data, they should inform Innova Urbis as soon as possible.

14. Social networks and external services

Interaction with Innova Urbis profiles on social networks or with external services is also governed by the terms and policies of the relevant providers. Users are advised to review those policies before submitting information or using external buttons, maps, videos, messaging systems or forms.

15. Policy updates

This Privacy Policy may be updated to reflect regulatory changes, guidance from supervisory authorities, new processing activities, providers or functionalities. The current version will be the version published on the website together with its last-updated date.