Privacy policy

Data controller

The data controller is SOLENCA COSTA BRAVA S.L., NIF B88955513, Avenida Diagonal 497, P. 5, 08029 Barcelona, España.

For any question or request concerning your data: [email protected].

Solenca has not appointed a data protection officer. Requests are handled directly by the management of the company.

The data we process

What you give us: name, telephone number, email address, address of the property managed, billing details, and what you enter in the site's forms, that is to say the configuration of your property, the question asked at the foot of a guide and the address signed up to the newsletter.

What your visit produces: IP address of the connection, browser used, page the click came from, page viewed and display language. The IP address is not recorded with the content of your request: it is used to control the number of submissions per visitor, for the duration of the request. It does appear in the technical logs, whose retention period is given below.

We process none of the special categories of data listed in article 9 of the GDPR. Do not send health data, political opinions or beliefs, or identity documents through the site's forms.

Purposes, and the legal basis of each

Answering a request sent through the configurator, through the contact form or through the question asked at the foot of a guide. Legal basis: the taking of steps prior to a contract at your request, article 6.1.b of the GDPR.

Providing the agreed services, following their performance and invoicing them. Legal basis: the performance of the contract, article 6.1.b of the GDPR.

Keeping the accounts, issuing and retaining invoices, answering requests from the Spanish tax administration. Legal basis: compliance with legal obligations, article 6.1.c of the GDPR.

Sending the newsletter to the people who sign up for it. Legal basis: your consent, article 6.1.a of the GDPR, obtained by the sign-up itself. Article 21 of the LSSI-CE, the Spanish act on information society services and electronic commerce, requires this prior consent for any commercial communication by email. You may withdraw it at any time, through the unsubscribe link in the message or by writing to [email protected].

Measuring the audience of the site with Cloudflare Web Analytics, without cookies and without profiling. Legal basis: legitimate interest, article 6.1.f of the GDPR. The interest pursued is to know which pages are actually read, in order to decide which ones to rewrite.

Counting departures to WhatsApp from the buttons on the site. The line recorded contains the page of origin, the language and the position of the button, not your identity. Legal basis: legitimate interest, article 6.1.f of the GDPR, which is to measure what leads a visitor to write.

Protecting the site: limitation of the number of submissions per IP address, hidden field against robots, technical logs of the server and of Cloudflare. Legal basis: legitimate interest, article 6.1.f of the GDPR, which is to keep the site available and the forms usable.

What is required, and what is not

No data requested on the site is required by a law or by a contract. You decide what you leave, and a form abandoned part of the way through has no consequence other than the absence of a reply from us.

Without a telephone number or an email address, a call-back request cannot succeed. For invoicing, on the other hand, the name, the address and the tax identification number are necessary: a Spanish invoice must carry them, in application of Real Decreto 1619/2012, which sets the invoicing obligations.

Who receives your data

Your data is neither sold, nor transferred, nor exchanged.

The requests sent through the forms are recorded in a file on Solenca's server, in Platja d'Aro. That server belongs to the company, and no third-party host has access to it.

Two processors are involved in the operation of the site. Cloudflare, Inc. relays the traffic and thereby processes your IP address. Resend, a service operated by Plus Five Five, Inc. (2261 Market Street #5039, San Francisco, CA 94114, United States), delivers the internal email that notifies us of the arrival of a request. That email repeats the contact details you entered.

The service providers who work on a managed house receive what is necessary for them to do so, and nothing more: the tradespeople, the pool technician and the gardener we coordinate are given the address of the property, the nature of the work and a way of reaching us, not your contact details. Your gestor, where you have one, receives the documents we gather for them.

Lastly, your data may be disclosed to a Spanish authority or court where the law so requires.

Transfers outside the European Union

Resend and Cloudflare are companies established in the United States. The delivery of the notification email and the relaying of the traffic therefore constitute transfers of data outside the European Union, within the meaning of chapter V of the GDPR.

Safeguards stated by Resend, as at the date of this policy: its data processing agreement applies, in its section 6.2 “Ex-EEA Transfers”, the standard contractual clauses adopted by the European Commission; its section 11 declares a certification under the EU-U.S. Data Privacy Framework.

Safeguards stated by Cloudflare, as at the date of this policy: its data processing agreement applies the same standard contractual clauses in its section 6.2, and refers to the EU-U.S. Data Privacy Framework in its section 6.4, specifying that transfers revert to the standard clauses should the certification cease to have effect.

A copy of these safeguards may be requested at [email protected].

How long we keep it

A request sent through the site that is not taken further: three years at most from the last exchange. A weekly scheduled task erases anything beyond that.

The data of a client: throughout the relationship, then for the duration of the legal periods. Invoices and accounting records are kept for six years from the last entry, in application of article 30 of the Código de Comercio, the Spanish commercial code. Items of a tax nature are kept for at least four years, the limitation period set by article 66 of the Ley General Tributaria, the Spanish general tax act.

The address signed up to the newsletter: until you unsubscribe.

The technical logs of the server: thirty days at most, a period applied by the logging service itself. Cloudflare's own logs fall under Cloudflare's retention policy.

The measurement lines that carry no contact detail, that is to say a departure to WhatsApp from a button on the site and a search within the guides: twelve months, erased by the same weekly task.

The audience statistics of Cloudflare Web Analytics are aggregated and kept by Cloudflare under its own policy. We keep no copy of them and we access them only as totals.

Your rights

You have the rights of access, rectification, erasure, restriction of processing, objection and portability provided for in articles 15 to 22 of the GDPR. They are exercised on the terms of articles 12 and following of Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD), the Spanish data protection act.

Where processing rests on your consent, the newsletter for example, you may withdraw it whenever you wish. The withdrawal operates for the future and does not call into question what was done beforehand.

To exercise a right, write to [email protected]. We reply within one month. Where there is serious doubt about the identity of the person making the request, supporting evidence is asked for before any reply.

If our reply does not satisfy you, you may lodge a complaint with the Agencia Española de Protección de Datos, the Spanish data protection authority, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, electronically at sedeagpd.gob.es.

Article 77 of the GDPR also lets you bring the matter to the data protection authority of the country where you live or work, if you would rather deal with that one.

Automated decisions and profiling

No decision producing legal effects concerning you is taken by automated means from this site, and no profiling is carried out on it, within the meaning of article 22 of the GDPR.

The site queries no artificial intelligence model. It carries neither advertising tracker, nor social network button, nor online payment.

Data that does not come from you

It may happen that a piece of data concerning you is passed to us by a third party: the owner who gives us the contact details of a neighbour holding a key, or those of a co-owner. Article 14 of the GDPR then applies.

We inform the person concerned within the month following receipt of their data, or at the first contact with them if that comes sooner, telling them where that data comes from and what we do with it. It is limited to a name, a role and a means of contact.

A use other than those described here

If we one day wished to use your data for a purpose that does not appear on this page, we would inform you beforehand, with the corresponding legal basis, and we would obtain your consent where it is required. That is what article 13.3 of the GDPR requires.

Security

The site is served over HTTPS. The form data stays on a server that Solenca owns, and access to that server is limited to the people who need it.

If a data breach presented a high risk to your rights, we would inform you. Notification to the AEPD would take place within the 72 hours provided for by article 33 of the GDPR.

Minors

The site is addressed to owners of full age. We do not knowingly collect the data of a minor under fourteen years of age, the age from which article 7 of the LOPDGDD recognises a valid consent. Any such data reaching us would be erased.

Cookies and local storage

The site sets no cookie. The language displayed is carried by the address of the page you open, so nothing needs to be remembered from one visit to the next. A technical language cookie existed until 17 October 2026; it no longer served any purpose and it was removed.

The site therefore displays no consent banner, and this is not an exemption we grant ourselves: article 22.2 of the LSSI-CE makes only storage devices subject to consent, and none of them leaves your browser.

Two further pieces of information are written into the memory of your browser, without going through a cookie. The key solenca:guides-seen, in session storage, counts the guides opened during your visit. The key solenca:guide-question, in local storage, records that you closed or sent the question offered at the foot of a guide, so that it is no longer presented to you. Neither of them leaves your browser.

Audience measurement goes through Cloudflare Web Analytics, which sets no cookie and builds no profile. The statistics are aggregated and do not make it possible to identify you.

The fonts are served from our server: your browser does not call Google to display them.

To erase the two keys described above, use the settings of your browser, under deletion of site data. The site will carry on working exactly as before.

Updating of this policy

This policy is amended when the processing changes. The date below is that of the version in force.