Privacy policy

We only process the data you provide in the site's forms, the minimum technical data needed for the site to run securely and, if you accept the corresponding cookies, the data described below. In each form, optional fields are clearly marked as such.

Contact form

• Name, email and, if you wish, phone number.
• The reason for your enquiry and your message.

Owner request

• Name, email and, if you wish, phone number.
• Area and type of property, the services you are interested in, your preferred service model and your message.

Technical data

To protect the forms from abuse, the server uses your IP address for a few minutes to limit the number of submissions; it does not store it or link it to your request. The site's hosting provider may log technical connection data, such as IP address, date or page requested, for security and operational reasons.

What is stored in your own browser, such as your chosen language or your cookie choice, is explained in the Cookie policy.

• Replying to your enquiries and requests for information.
• Preparing personalised proposals for your property, and following them up with you.
• Managing the relationship if you go on to contract a service, in line with the agreement we sign.
• Sending you marketing communications about our services, only if you have expressly agreed to this using the dedicated tick box, which is separate and optional.
• Protecting the site and its forms against fraudulent or abusive use.

We do not make decisions based solely on automated processing that produce legal effects concerning you or affect you in a similar way (Art. 22 GDPR).

Form data is not sent from this site to any artificial intelligence system, nor is it used to train models. More information in Artificial intelligence.

• Replying to your request and preparing the proposal: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Providing the contracted service: performance of the contract (Art. 6(1)(b) GDPR) and, where applicable, compliance with legal obligations, such as tax or accounting obligations (Art. 6(1)(c) GDPR).
• Marketing communications: your express consent (Art. 6(1)(a) GDPR and Art. 21 LSSI-CE), which you can withdraw at any time without affecting the lawfulness of prior processing.
• Site security and abuse prevention: our legitimate interest in protecting the service and the people who use it (Art. 6(1)(f) GDPR).

Data marked as required is necessary to deal with your request: without it, we would not be able to reply. Optional data helps us tailor the proposal more closely.

• Enquiries and requests that do not lead to a contract: up to 12 months from our last communication. After that, we delete them.
• Clients: for the duration of the contractual relationship and, afterwards, for the periods during which liability may be claimed or the law requires it, for example under tax or commercial rules. During that period the data is restricted and used only to meet those obligations.
• Marketing communications: until you withdraw your consent or unsubscribe.
• Technical security data: only for as long as strictly necessary for its purpose.

• Your cookie decision: up to 12 months from when you make it; some browsers shorten this period. After that, or if the tools used change, we will ask you again.

We do not sell your data. We only share it in the following cases:

• Providers that process data on our behalf, under the corresponding data processing agreement: the email delivery service Resend, which delivers the requests you send us to our inbox; our professional email provider; and the website's hosting provider.
• Our partner tax and legal advisory firm, only when you ask us for tax or administrative management services and always with your knowledge, so that it can review and handle your case. If the firm processes your data as an independent controller, it will give you its own data protection information.
• Public authorities and courts, where there is a legal obligation to do so.

International transfers

Some of these providers, such as Resend, are based in the United States or may process data outside the European Economic Area. In such cases, the transfer is made with the appropriate safeguards provided for in the GDPR, such as the provider's participation in the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission. You can ask us for more information about these safeguards.

You can exercise the following rights at any time, free of charge:

• Access: find out whether we process your data and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete it, for example when it is no longer needed.
• Objection: object to certain processing, in particular marketing communications.
• Restriction of processing: ask us to keep your data but stop using it, in the cases provided for by law.
• Portability: receive the data you gave us in a structured, commonly used format, or ask us to transmit it to another controller.
• Withdrawal of consent: at any time, without affecting the lawfulness of prior processing.

To exercise them, write to us at info@emanuelenisigroup.com stating which right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for the information needed to confirm it. We will reply within one month, which may be extended in the cases provided for in the GDPR.

To stop receiving marketing communications, you can also use the unsubscribe link we will include in each one.

If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) through its website, www.aepd.es (opens in a new tab). If you prefer, write to us first: we will try to resolve it with you.

We apply technical and organisational measures proportionate to the risk to protect your data against loss, misuse or unauthorised access. These include:

• An encrypted connection (HTTPS) across the whole site.
• Form data is not stored in a website database: it is sent directly by email to the people who handle requests.
• The server's technical logs do not include the content of your requests.
• Access to information is limited to the people who need it to assist you.

No system is infallible. If a security breach were to occur that posed a risk to your rights, we would act as required by the GDPR.

This site is intended for adults: the forms are for requesting service proposals and must be completed by people of legal age. If you are under 14, please do not send us any personal data; in Spain, below that age, processing based on consent requires the authorisation of whoever holds parental authority or guardianship (Art. 7 LOPDGDD, the Spanish data protection and digital rights law).

We may update this policy when our services, the providers we use or the regulations change. The date of the last update appears at the top and bottom of this page. If the changes are significant, we will make this clearly visible on the site.