Legal
Privacy policy
Last updated: 25 September 2026
This privacy policy explains which personal data we process when you visit luxevastgoedcostas.com or contact us, why we do so and what rights you have. We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
The controller responsible for your personal data is LUXE REAL ESTATE SL (trade name Luxe Vastgoed Costas), NIF B56358195, with its registered office at Avenida Lucio Diaz Flores 20, 38639 San Miguel de Abona, Santa Cruz de Tenerife, Spain. You can reach us at info@luxevastgoedcostas.com or by telephone on +34 622 65 66 93 / +32 479 60 66 42.
2. Our approach in brief
The website is a property catalogue. It has no customer accounts, no login for visitors, no contact form, no newsletter and no payments. We use no Google Analytics or other third-party analytics service, no advertising, no profiling and no analytics cookies, and we do not sell data. Fonts, icons, images and scripts are served from our own server, not from external networks.
3. Data we process and when
Visiting the website (server logs). Our web server keeps technical access logs containing your IP address, the date and time, the requested URL, your browser's user agent and the response status. We use them only for security and troubleshooting, and delete them after at most 14 days.
Visitor statistics. A small script of our own sends page views and a few interactions (use of search and filters, opening a map, clicking share or WhatsApp, copying a property reference) to our own server. We record the page URL, the property reference, the language, the referring website (domain only) and any UTM campaign parameters, the device class (mobile, tablet or desktop) and browser family derived from the user agent, and the time.
We do not store your IP address. It is used only for a moment, together with the user agent and a secret key that changes every day, to compute a one-way pseudonymous code (HMAC). This code lets us count approximate unique visitors and visits (a visit ends after 30 minutes of inactivity). Because the key changes daily, you cannot be recognised from one day to the next and the code cannot be traced back to your IP address. Obvious bots and crawlers are excluded. This measurement uses no cookies, no local storage and no fingerprinting scripts. Individual event records are deleted after 90 days; only aggregated daily totals, which contain no identifiers and are not personal data, are kept longer. The results are visible only to authorised staff of LUXE REAL ESTATE SL in a password-protected statistics portal.
Cookies. We use a cookie to remember your cookie and map choice and, if you change the language manually, a cookie to remember that language. On your first visit to the bare domain, the home page reads your browser's language setting once to send you to the matching language; nothing is stored for that. See our cookie policy.
Maps. Only if you consent, the interactive maps load map tiles, fonts and styles from OpenFreeMap (tiles.openfreemap.org), an external map service based on OpenStreetMap data. Loading them sends your IP address and browser data to that provider. Without your consent, the maps stay switched off.
Contact by WhatsApp, telephone or email. The website has no contact form. If you click a WhatsApp button, WhatsApp opens with a pre-filled message containing the property's LVC reference and page link; nothing is sent until you press send in WhatsApp. The data you then send us, by WhatsApp, telephone or email (such as your name, phone number, message and the property you are interested in), is used to answer your enquiry and, if you wish, to assist you with viewings or a purchase.
Statistics portal login. Authorised staff of LUXE REAL ESTATE SL sign in to the statistics portal. For them we use a session cookie; visitors never log in.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Security and troubleshooting of the website | Server logs: IP address, date/time, URL, user agent, status | Legitimate interest (Art. 6(1)(f) GDPR) | Max. 14 days |
| Understanding which pages and properties are useful and improving the site | Page URL, property reference, language, referring domain, UTM parameters, device class, browser family, time, daily pseudonymous code | Legitimate interest (Art. 6(1)(f) GDPR) | Event records 90 days; anonymous daily totals longer |
| Remembering your cookie/map choice and language | Cookie values lvc_consent and lvc_locale | Necessary for the service you request (art. 22.2 LSSI-CE) | 12 months |
| Showing interactive maps | IP address and browser data sent to OpenFreeMap | Consent (Art. 6(1)(a) GDPR) | Until you withdraw consent; the provider's own terms apply to its processing |
| Answering enquiries and assisting with viewings or a purchase | Name, phone number, email address, message, property of interest | Pre-contractual steps at your request (Art. 6(1)(b) GDPR); otherwise legitimate interest (Art. 6(1)(f) GDPR) | As long as needed for the enquiry, then max. 2 years after the last contact, unless the law requires longer |
| Staff access to the statistics portal | Session cookie lvc_stats | Legitimate interest (Art. 6(1)(f) GDPR) | 12 hours |
Where a property transaction proceeds, Spanish anti-money-laundering law (Law 10/2010), which applies to real-estate agents, may require us to keep certain records for up to 10 years.
We do not use automated decision-making or profiling.
5. Recipients and processors
- Hetzner Online GmbH hosts the website and its PostgreSQL database (catalogue, translations, statistics) on a dedicated server in Germany (EU), acting as our processor.
- OpenAI (API) is used to translate property descriptions automatically into the other languages of the website. This happens on our server: your browser never connects to OpenAI and OpenAI sets no cookies. Only property description text is sent, never any visitor data, so no personal data is shared; the service is used for translation only, not for profiling. Under OpenAI's API data policy, API data is not used to train its models unless explicitly opted in; OpenAI may retain it for a limited period for abuse monitoring.
- OpenFreeMap receives your IP address and browser data when the maps load, and only after your consent.
- WhatsApp (WhatsApp Ireland Ltd / Meta) processes your data when you choose to contact us through it. WhatsApp's own privacy policy governs that processing.
We do not share your data with other parties unless the law requires us to.
6. International transfers
We do not transfer personal data outside the European Economic Area. WhatsApp/Meta may process data outside the EEA under its own terms, relying on the EU-US Data Privacy Framework or standard contractual clauses. OpenFreeMap is an external provider whose own terms apply to its processing.
7. Security
The website is served exclusively over HTTPS. Access to the server and the statistics portal is restricted to authorised persons, and database access follows the principle of least privilege.
8. Your rights
You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability and to withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal. You may object to the visitor statistics by writing to us; you can also block the statistics script with a content blocker without losing any functionality.
To exercise your rights, email info@luxevastgoedcostas.com. We may ask for proof of identity. We will respond within one month.
9. Complaints
If you believe we are not handling your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es). We would appreciate the chance to resolve your concern first.
10. Minors
This website is not aimed at children under 14, and we do not knowingly process their personal data.
11. Changes to this policy
We may update this privacy policy when our website or the law changes. The date at the top of this page shows when it was last revised.