Privacy policy

Data controller and contact

The data controller is KIVIR HOME INTERMEDIA S.L., represented by Carlos Javier Dominguez Rodriguez. For privacy enquiries or to exercise your rights, write to carlos.kivirhome@gmail.com.

What data we collect

We collect your name and telephone number, both required, and your email address only if you choose to provide it. We also collect your language, buyer or owner profile, and any search or property information you choose to share, including a property reference where applicable. Required fields are identified on the form; without them we cannot record your request. Do not include identity documents, detailed financial information or sensitive data.

How we use your data

To record, review and respond to your buying or selling enquiry and coordinate the assistance you have requested. We will contact you using the details you provide. Only if you provide an email address will we use it to handle the enquiry and send an automatic acknowledgement related to it; this acknowledgement is not a marketing communication. Only if you separately authorise it will we use your data to send updates about properties and services. Enquiry contact details are not published, and this form is not used to make automated decisions with legal effects.

Legal basis for processing

Initial handling of your enquiry is based on the consent you give in the form. Consent to receive commercial communications is separate and optional; refusing it does not prevent us from handling your request. You may withdraw either consent without affecting the lawfulness of earlier processing. Submitting the form does not constitute a brokerage contract or authorisation to publish a property.

Retention

The reference retention period for form enquiries is one year from receipt. Enquiries will be reviewed and deleted sooner when they are no longer needed or when an erasure request must be honoured. If a contractual relationship is established, necessary documentation will be processed under that relationship and applicable legal obligations. Data is not displayed publicly.

Recipients, providers and international transfers

Working with advisers in other countries does not mean your data is automatically shared with them. If their involvement is needed to handle your request, you will be informed of the recipients and legal basis before data is disclosed. We use IONOS for hosting and recording enquiries, Resend (Plus Five Five, Inc.) for transactional notifications and acknowledgements, and Google Gmail to receive and handle enquiries. Resend processes and stores data in the United States; its data processing agreement incorporates European Commission standard contractual clauses as safeguards for applicable international transfers. Google may also process data outside the European Economic Area under the safeguards described in its policy. The region used to send emails does not, by itself, determine where all data is stored. You may request information about recipients and applicable safeguards using the contact details in this policy.

• Data processing at IONOS
• Resend data processing agreement
• Google privacy policy

Your rights

You may request access, rectification, erasure, objection, restriction of processing or portability, as applicable, and withdraw your consent by writing to carlos.kivirhome@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security and abuse prevention

To protect the form against abusive submissions, the IP address is used temporarily without storing its original value in enquiry records. Protected, temporary security identifiers are retained, with cleanup cycles of up to two days. Access to enquiries is restricted to private management of the service.

Browsing and cookies

This version does not integrate Meta advertising tools or marketing analytics. Language selection uses links. The hosting service may use technical mechanisms necessary for security or access. If advertising cookies or tracking are introduced in future, their purposes and providers will be disclosed and any required consent will be requested before activation.