PropertyList.es – Privacy Policy

Effective Date: 8th February 2025

Introduction

http://PropertyList.es (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you use our platform. By accessing or using our website and services, you agree to this Privacy Policy. This policy complies with the General Data Protection Regulation (GDPR) and Spanish data protection laws and applies to all products and services offered by http://PropertyList.es.

Information We Collect

1. Personal Data

We may collect personal data that you voluntarily provide to us, including:

  • Name
  • Email address
  • Phone number
  • Business or company details
  • Business address
  • Photographs and logos for profile customisation
  • IP address

Legal Basis:

  • Consent: For account creation, marketing communications, and profile customisation.
  • Contractual Necessity: To provide services and manage user accounts.

2. Usage Data

We may collect the following data automatically when you use our platform:

  • IP address
  • Browser type and version
  • Operating system
  • Access dates and times
  • Pages viewed
  • Clickstream data
  • Property view counts to generate reports

Legal Basis:

  • Legitimate Interests: To enhance platform functionality and user experience.

3. Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies to improve your experience. Cookies may include:

  • Essential Cookies: Necessary for platform operation.
  • Analytical Cookies: For user behaviour analysis (e.g., property views).
  • Advertising Cookies: To display relevant ads (if applicable).

Consent Mechanism: A cookie banner will appear when you first visit, allowing you to accept or reject cookies.

How We Use Your Information

We use the data we collect for the following purposes:

  • To provide and maintain our services (Contractual Necessity)
  • To manage user accounts and profiles (Contractual Necessity)
  • To send important updates and marketing materials (Consent)
  • To process transactions and manage orders (Contractual Necessity)
  • To analyse platform performance and improve services (Legitimate Interests)
  • To enforce our Terms and Conditions (Legitimate Interests)
  • To respond to legal requests and prevent harm (Legal Obligation)

Data Storage, Security, and Retention

1. Storage

Your data is stored on secure servers located within the European Economic Area (EEA).

2. Security

PropertyList.es adopts a ‘Data Protection by Design and by Default’ approach in compliance with GDPR. This means that we have implemented appropriate technical and organisational measures to ensure that only personal data necessary for each purpose is processed, and that data is processed with the highest standards of security and privacy.
We employ advanced cybersecurity measures, including:

  • Encryption of sensitive data
  • Regular server monitoring
  • Use of CloudFlare for enhanced security

Nota: While we strive to protect your data, no system is completely secure.

3. Retention

We retain personal data for as long as it is necessary to fulfil the purposes for which it was collected or for as long as required by applicable law. Generally, we retain personal data for no longer than one year from the point of collection, but this may be extended in accordance with legal obligations or legitimate business purposes. You have the right to request deletion of your personal data at any time, subject to certain legal obligations to retain certain data for specific periods.

4. Data Breach Protocols

In the event of a data breach:

  • Immediate action will be taken, such as isolating affected servers.
  • Impacted users will be notified within 72 hours, as required by GDPR.

Sharing Data with Third Parties

We do not sell your personal data. We may share it only in the following cases:

Trusted third-party service providers, such as hosting, payment processors, and marketing service providers, who act as Data Processors on our behalf. These third parties are contractually obligated to safeguard your data and process it only as instructed by PropertyList.es. A list of such third-party processors is available upon request.

  • Legal Requests: Compliance with subpoenas or court orders (Legal Obligation).
  • Business Transactions: In the event of a merger, sale, or asset transfer (Legitimate Interests).
  • Trusted Partners: Hosting providers, payment processors, or analytics providers bound by Data Processing Agreements (DPAs).

User Rights

Under GDPR, you have the following rights:

  • Access: View the personal data we hold about you.
  • Correction: Rectify inaccurate or incomplete data.
  • Deletion (“Right to Be Forgotten”): Request erasure of your personal data.
  • Portability: Obtain a copy of your data in a portable format (when technically feasible).
  • Restriction: Limit how your data is processed.
  • Objection: Object to data processing based on legitimate interests or direct marketing.

You have the right to object to the processing of your personal data, including for direct marketing purposes. If you wish to exercise this right, please contact us MLS Support.
We will consider your objection and respond in a timely manner. If we are unable to process your data based on your objection, we will inform you accordingly.

How to Exercise Your Rights: Contact MLS Support to make a request.
https://info.propertylist.es/docs/propertylist-mls-user-manual/additional-resources/mls-support/

WhatsApp Group Participation and Data Use

If you choose to participate in our official WhatsApp groups, certain personal data may be used in line with group communication and moderation policies. This includes:

  • Displaying your name, business name, and phone number as part of messages

  • Sharing your listing details, business logos, or images if voluntarily submitted

  • Logging advertising activity (e.g. pinned messages) for billing and scheduling purposes

By participating in our WhatsApp groups, you acknowledge that messages you send may be visible to other group members and that PropertyList.es may moderate or remove content that violates our Terms & Conditions.

We will never share your data beyond the scope of group administration and internal advertising operations. Your WhatsApp participation is optional and can be discontinued at any time by leaving the group or requesting removal through MLS Support.

Advertising and Group Message Logs

For users who purchase pinned message promotions in WhatsApp groups, we may collect and store:

  • The content of your pinned message (text, image, links)

  • Your name and billing details

  • The duration and group(s) where the message was pinned

This data is processed under the legal basis of Contractual Necessity y Legitimate Interests, solely to manage and document your advertising request. It will not be sold or shared with third parties beyond payment processors or internal team members involved in group moderation.

You may request a record of your WhatsApp advertising history or ask for removal of related personal data, subject to applicable retention requirements.

User Responsibilities and Legal Compliance

All users are solely responsible for ensuring that the information they publish or share via PropertyList.es and associated WhatsApp groups complies with all applicable laws and regulations in their respective jurisdictions. This includes, but is not limited to:

  • Real estate marketing laws and licensing requirements

  • Consumer protection and advertising standards

  • Data protection laws (e.g. obtaining consent for sharing third-party data or images)

  • Anti-discrimination regulations in housing and services

  • Copyright and intellectual property rights for media or branding elements

By submitting content to our platform or WhatsApp groups, users confirm that they have the legal right to distribute such content and that it does not violate any local, national, or international laws. PropertyList.es assumes no liability for unlawful, misleading, or non-compliant content posted by users.

We reserve the right to remove any content that we believe may breach legal standards or our platform’s Terms & Conditions.

International Data Transfers

If your data is transferred outside the EEA, we ensure that such transfers are compliant with GDPR through the use of EU Standard Contractual Clauses (SCC) or other legal mechanisms to guarantee the protection of your personal data. You can request further information about such transfers by contacting us.
Your data may be transferred outside the EEA. We ensure compliance with GDPR standards by:

  • Using EU Standard Contractual Clauses for international transfers.
  • Partnering with providers in countries with adequate data protection laws.

Children’s Data

Our platform is not intended for users under the age of 18. We do not knowingly collect data from minors. Parental consent is required for users under this age.

Cookies Policy

We use cookies for the following purposes:

Before placing cookies on your device, we will request your consent via a cookie banner when you first visit our website. You may choose to accept or reject the use of cookies at any time. You can modify your cookie preferences or disable cookies through your browser settings.

  • Essential Functionality: Ensure smooth platform operation.
  • Analytics: Measure performance and usage patterns.
  • Advertising (if applicable): Show personalised ads.

Managing Cookies: You can manage your preferences through browser settings or the cookie banner on our website.

Changes to this Privacy Policy

This Privacy Policy is reviewed periodically and may be updated. Changes will be posted on this page with a revised effective date. Significant updates will be communicated via email.

Contact Information

For questions about this Privacy Policy, contact MLS Support here.

You may also file a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the relevant supervisory authority. You can contact the AEPD through their official website or by using the contact information provided on their platform.

Compliance and Audits

We regularly review our data protection practices through audits and consultations with legal experts to ensure compliance with GDPR and Spanish data protection laws.