Privacy policy
How Caroline Billiard collects, processes and protects your personal data under the GDPR and LOPDGDD.
1. Data controller
The data controller for personal data collected on casa-blanca.immo is:
- Caroline Billiard
- NIF / NIE: [TO BE COMPLETED]
- Address: [TO BE COMPLETED]
- Email: casablancacosta12@gmail.com
- Phone: +34 639 64 33 99
This privacy policy complies with Regulation (EU) 2016/679 (GDPR) and with Spanish Organic Law 3/2018 of 5 December on the protection of personal data and the guarantee of digital rights (LOPDGDD).
2. Data collected
We only collect data you voluntarily provide:
- Contact form: name, email address, subject, message. Any element you choose to add to the message (phone, budget, area, project) is processed as voluntarily disclosed data.
- Exchanges by email, phone or WhatsApp: content of the exchanges and contact details you provide.
- Technical data: IP address, browser type, pages visited, for site operation and security purposes.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) | Retention period |
|---|---|---|
| Reply to enquiries via the contact form or direct channels | Pre-contractual measures at your request (art. 6.1.b) | 3 years after last contact |
| Support of your real estate project | Performance of a contract or pre-contractual measures (art. 6.1.b) | Duration of the relationship + 5 years |
| Compliance with legal obligations (anti-money laundering, tax, accounting) | Legal obligation (art. 6.1.c) | According to applicable Spanish retention periods (up to 10 years) |
| Site security and technical logging | Legitimate interest (art. 6.1.f) | 12 months maximum |
4. Recipients of the data
Your data is intended exclusively for Caroline Billiard. It may be shared with:
- Technical providers of the site (hosting, email provider), strictly for service needs;
- Real estate partners (collaborating agents, notaries, lawyers, gestoría) only with your explicit consent and to move your project forward;
- Competent authorities in the event of a legal obligation.
No data is sold, rented or transferred to third parties for commercial purposes.
5. Transfers outside the EU
Some tools used (e.g. WhatsApp Business Meta, Instagram, Facebook, Gmail) may involve transfers of data outside the European Union. Such transfers are governed by the European Commission’s standard contractual clauses and/or by each provider’s certifications (EU-US Data Privacy Framework, where applicable).
6. Your rights
Under articles 15 to 22 of the GDPR, you have the following rights:
- Access: obtain confirmation that your data is being processed and receive a copy;
- Rectification: correct inaccurate or incomplete data;
- Erasure: request the deletion of your data, subject to legal obligations;
- Restriction: restrict processing;
- Objection: object to processing based on legitimate interest;
- Portability: receive your data in a structured format;
- Withdraw consent: at any time when processing is based on consent.
To exercise these rights, send a request to casablancacosta12@gmail.com with proof of identity.
7. Complaint to the supervisory authority
You have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD):
- Website: www.aepd.es
- Address: C/ Jorge Juan, 6 — 28001 Madrid, Spain
Residents of other EU member states may also contact their national supervisory authority.
8. Security
Caroline Billiard implements appropriate technical and organisational measures to preserve the confidentiality, integrity and availability of your data (HTTPS encryption, restricted access to tools, regular backups).
9. Updates
This policy may be updated to reflect legal developments or site practices. The date of last update is shown at the top of the page.
10. Contact
Any question regarding the protection of your data can be sent to: casablancacosta12@gmail.com.