Privacy and Cookie Policy
Which personal data Grupo Soltura processes, why, how long we keep it, who we share it with and what your rights are.
01Who we are
The controller responsible for processing your personal data through this website and in our services is:
This policy applies to the website gruposoltura.com and to data you give us in other ways, for example by phone, email, WhatsApp or at our office.
02What data we process
Data you give us
- Contact details: name, email address, phone number, language and place or country of residence.
- Your wishes and questions: search profile (property type, area, budget), favourites, the property you want to sell, and what you write or tell us.
- My Soltura account: login details and preferences if you create an account.
- In a purchase, sale or legal assignment: identity data (passport, NIE), address, marital status, property details, and financial data such as the source of funds where the law requires it.
Data we collect automatically
When you visit the website, technical data is recorded, such as your IP address, browser and device, the pages you view, the date and time of your visit and the website you came from. If you click a link in one of our emails or adverts, we can see which campaign brought you to us. More about this under Cookies.
Data from others
Sometimes we receive data about you from others, for example from a partner agent, a property portal where you responded to one of our listings, or the seller or buyer in a transaction you are involved in.
03Purposes and legal bases
We only process your data for a clear purpose and on one of the legal bases of the GDPR:
| Purpose | Legal basis |
|---|---|
| Answering your question or request (contact form, valuation, viewing) | Performance of a contract or steps at your request before entering into one (Art. 6(1)(b) GDPR) |
| Guiding a purchase or sale, legal services and completion at the notary | Performance of the contract (Art. 6(1)(b)) |
| Identification and checks under Spain's anti-money-laundering law (Ley 10/2010), tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| Suggesting properties that match your search profile, and weekly updates for sellers | Your consent or our legitimate interest in an existing client relationship (Art. 6(1)(a)/(f); Art. 21 LSSI); you can unsubscribe in every email |
| Newsletters and information about similar services | Consent (Art. 6(1)(a)) or, for existing clients, legitimate interest (Art. 21.2 LSSI) |
| Managing your My Soltura account and favourites | Performance of a contract (Art. 6(1)(b)) |
| Keeping the website secure, working and improving it; measuring which campaigns work | Legitimate interest (Art. 6(1)(f)) and, for non-essential cookies, consent (Art. 22.2 LSSI) |
| Asking for a review after we have helped you | Legitimate interest (Art. 6(1)(f)); you can always decline |
04Who we share data with
We never sell your data. We only share it when that is needed for the purpose you gave it for, or when the law requires it:
- Parties in your transaction: the buyer or seller, a partner agent, the notary, lawyer or gestor, the bank or mortgage lender and translators, as far as you need them.
- Service providers working for us (processors): including hosting and website management, email and newsletters, cloud storage and databases, automation, AI services, analytics and advertising. We sign a data processing agreement with them; they may only use your data on our instructions.
- Authorities and regulators: for example the tax agency (Agencia Tributaria), the Land Registry or the authorities in anti-money-laundering reports, where the law requires it.
- Social media and messaging services: if you contact us via WhatsApp, Facebook or Instagram, the terms of those services also apply.
05Transfers outside the EEA
We process your data within the European Economic Area wherever possible. Some service providers are (also) based outside the EEA, for example in the United States. In that case we only transfer your data with appropriate safeguards: an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or the Commission's standard contractual clauses. You can ask us which safeguards apply.
06How long we keep data
We keep your data no longer than needed for the purpose, unless the law requires a longer period:
| Data | Retention period |
|---|---|
| Enquiries and search profiles without a transaction | Until your question has been handled and then as long as you stay in touch with us; at most two years after the last contact, or sooner if you ask |
| File of a purchase, sale or legal assignment | Ten years after completion under the anti-money-laundering law (Ley 10/2010), and the periods of tax and commercial law |
| Newsletter and property offers by email | Until you unsubscribe or withdraw your consent |
| My Soltura account | Until you close the account |
| Cookies and website statistics | See the durations under Cookies |
07Your rights
Under the GDPR you have the following rights:
Send your request to [email protected]. We may ask you to identify yourself so we do not give data to the wrong person. You will receive an answer within one month.
08Cookies
Cookies are small files a website places on your device. Session cookies disappear when you close your browser; persistent cookies remain until they expire or you delete them. We use the following types:
| Cookie | Purpose | Duration |
|---|---|---|
pll_language | Remembers your language choice (necessary) | 1 year |
cookie_notice_accepted | Remembers your choice in the cookie notice (necessary) | Up to 1 year |
wordpress_*, wp-settings-* | Logging in to My Soltura (necessary) | Session to 1 year |
_ga, _ga_* | Google Analytics: distinguishes visitors and sessions (analytics) | Up to 2 years |
Your choices
You can refuse or delete cookies in your browser settings. If you refuse necessary cookies, some parts of the website may not work. Your browser's help pages and the AEPD website explain how to manage cookies. Third parties' own privacy policies also apply, such as Google's.
09Security
We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, such as encrypted connections (https), limiting access to those who need the data, and agreements with our service providers. No system is completely secure; if we discover a data breach that poses a risk to you, we report it to the AEPD and, where necessary, to you.
10Minors and external links
Minors
Our services are intended for adults. We do not knowingly process data of children under 14 without the consent of their parents or guardian.
Links to other websites
Our website contains links to other websites, such as portals, social media and public authorities. We are not responsible for their content or how they handle your data; please read their own privacy policy.
11Changes
We update this policy when our services or the law change. The "Last updated" date at the top shows when that last happened. For important changes we also inform clients we are in contact with by email.
Questions about your data?
Want to exercise your rights or have a question about this policy? Email us; we respond within one month, usually much sooner.
