PropertyList.es – Privacy Policy
Effective Date: 8th February 2025
Introduction
http://PropertyList.es (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you use our platform. By accessing or using our website and services, you agree to this Privacy Policy. This policy complies with the General Data Protection Regulation (GDPR) and Spanish data protection laws and applies to all products and services offered by http://PropertyList.es.
Information We Collect
1. Personal Data
We may collect personal data that you voluntarily provide to us, including:
- Name
- Email address
- Phone number
- Business or company details
- Business address
- Photographs and logos for profile customisation
- IP address
Legal Basis:
- Consent: For account creation, marketing communications, and profile customisation.
- Contractual Necessity: To provide services and manage user accounts.
2. Usage Data
We may collect the following data automatically when you use our platform:
- IP address
- Browser type and version
- Operating system
- Access dates and times
- Pages viewed
- Clickstream data
- Property view counts to generate reports
Legal Basis:
- Legitimate Interests: To enhance platform functionality and user experience.
3. Cookies and Tracking Technologies
We use cookies, pixels, and similar tracking technologies to improve your experience. Cookies may include:
- Essential Cookies: Necessary for platform operation.
- Analytical Cookies: For user behaviour analysis (e.g., property views).
- Advertising Cookies: To display relevant ads (if applicable).
Consent Mechanism: A cookie banner will appear when you first visit, allowing you to accept or reject cookies.
Verification of Professional Activity
In order to maintain the integrity of our professional network, PropertyList may request verification of your real estate activity before granting access to certain services, groups, or features.
For this purpose, we may ask you to provide one or more of the following documents: IAE certificate showing real estate activity, RAIA registration (Registro de Agentes Inmobiliarios de Andalucía), or Modelo 036/037 (Alta en Hacienda).
The legal basis for processing this information is our legitimate interest in ensuring that users participating in our platform are legally registered real estate professionals (Article 6.1.f of the GDPR).
The documents provided will be used exclusively for verification purposes, will be handled confidentially and securely, and will be deleted once the verification process is complete.
No information from these documents will be shared with third parties except where legally required.
In addition to tax and registration documents, PropertyList may request a copy of your Professional Indemnity Insurance certificate. This document is used solely to verify your eligibility to operate as a protected professional within our network. Consistent with our security protocols, this document will be handled confidentially and deleted once the verification process is complete.
How We Use Your Information
We use the data we collect for the following purposes:
- To provide and maintain our services (Contractual Necessity)
- To manage user accounts and profiles (Contractual Necessity)
- To send important updates and marketing materials (Consent)
- To process transactions and manage orders (Contractual Necessity)
- To analyse platform performance and improve services (Legitimate Interests)
- To enforce our Terms and Conditions (Legitimate Interests)
- To respond to legal requests and prevent harm (Legal Obligation)
To protect agent assets: We do not access or reallocate leads that an agent brings to the platform themselves through their own marketing. Only platform-generated leads are subject to the response-time reallocation rules defined in our Terms and Conditions.
To facilitate internal dispute resolution and IP enforcement: We may process listing data, timestamps, and account activity to investigate claims of intellectual property infringement (e.g., photo theft) or commission sharing disputes between members. This is done under our Legitimate Interest to maintain a fair and professional marketplace.
Data Storage, Security, and Retention
1. Storage
Your data is stored on secure servers located within the European Economic Area (EEA).
2. Security
PropertyList.es adopts a ‘Data Protection by Design and by Default’ approach in compliance with GDPR. This means that we have implemented appropriate technical and organisational measures to ensure that only personal data necessary for each purpose is processed, and that data is processed with the highest standards of security and privacy.
We employ advanced cybersecurity measures, including:
- Encryption of sensitive data
- Regular server monitoring
- Use of CloudFlare for enhanced security
Note: While we strive to protect your data, no system is completely secure.
To protect our members’ proprietary listing data and images, we employ active monitoring for automated scraping, data mining, and bot activity. We process IP addresses and traffic patterns to identify and block unauthorised attempts to harvest agent data. This ensures that your listings are not being exported to unauthorised third-party platforms without your consent.
3. Retention
We retain personal data for as long as it is necessary to fulfil the purposes for which it was collected or for as long as required by applicable law. Generally, we retain personal data for no longer than one year from the point of collection, but this may be extended in accordance with legal obligations or legitimate business purposes. You have the right to request deletion of your personal data at any time, subject to certain legal obligations to retain certain data for specific periods.
In the event of an account suspension or investigation for fraudulent activity, we may extend the retention period of relevant data (including listing history and communication logs) beyond the standard one-year limit. This data is retained as necessary to conclude investigations, prevent re-registration by banned users, or comply with legal and audit requirements
4. Data Breach Protocols
In the event of a data breach:
- Immediate action will be taken, such as isolating affected servers.
- Impacted users will be notified within 72 hours, as required by GDPR.
Sharing Data with Third Parties
We do not sell your personal data. We may share it only in the following cases:
Trusted third-party service providers, such as hosting, payment processors, and marketing service providers, who act as Data Processors on our behalf. These third parties are contractually obligated to safeguard your data and process it only as instructed by PropertyList.es. A list of such third-party processors is available upon request.
- Legal Requests: Compliance with subpoenas or court orders (Legal Obligation).
- Business Transactions: In the event of a merger, sale, or asset transfer (Legitimate Interests).
- Trusted Partners: Hosting providers, payment processors, or analytics providers bound by Data Processing Agreements (DPAs).
Lead Confidentiality
User Rights
Under GDPR, you have the following rights:
- Access: View the personal data we hold about you.
- Correction: Rectify inaccurate or incomplete data.
- Deletion (“Right to Be Forgotten”): Request erasure of your personal data.
- Portability: Obtain a copy of your data in a portable format (when technically feasible).
- Restriction: Limit how your data is processed.
- Objection: Object to data processing based on legitimate interests or direct marketing.
You have the right to object to the processing of your personal data, including for direct marketing purposes. If you wish to exercise this right, please contact us MLS Support or email us at [email protected]
We will consider your objection and respond in a timely manner. If we are unable to process your data based on your objection, we will inform you accordingly.
How to Exercise Your Rights: Contact MLS Support to make a request.
https://info.propertylist.es/docs/propertylist-mls-user-manual/additional-resources/mls-support/
WhatsApp Group Participation and Data Use
If you choose to participate in our official WhatsApp groups, certain personal data may be used in line with group communication and moderation policies. This includes:
Displaying your name, business name, and phone number as part of messages
Sharing your listing details, business logos, or images if voluntarily submitted
By participating in our WhatsApp groups, you acknowledge that messages you send may be visible to other group members and that PropertyList.es may moderate or remove content that violates our Terms & Conditions.
We will never share your data beyond the scope of group administration and internal advertising operations. Your WhatsApp participation is optional and can be discontinued at any time by leaving the group or requesting removal through MLS Support.
Members are reminded that while PropertyList moderates these groups, we cannot control how other participants use the contact information (name and phone number) visible in the group. Agents are encouraged to use professional-only phone numbers and are strictly prohibited from ‘harvesting’ other members’ data from these groups for external marketing purposes
User Responsibilities and Legal Compliance
All users are solely responsible for ensuring that the information they publish or share via PropertyList.es and associated WhatsApp groups complies with all applicable laws and regulations in their respective jurisdictions. This includes, but is not limited to:
Real estate marketing laws and licensing requirements
Consumer protection and advertising standards
Data protection laws (e.g. obtaining consent for sharing third-party data or images)
Anti-discrimination regulations in housing and services
Copyright and intellectual property rights for media or branding elements
By submitting content to our platform or WhatsApp groups, users confirm that they have the legal right to distribute such content and that it does not violate any local, national, or international laws. PropertyList.es assumes no liability for unlawful, misleading, or non-compliant content posted by users.
We reserve the right to remove any content that we believe may breach legal standards or our platform’s Terms & Conditions.
While we reserve the right to remove content without notice, for non-fraudulent clerical errors (such as a pricing typo), PropertyList may provide a 24–48 hour ‘Notice and Cure’ window for the member to rectify the error before sanctions are applied
International Data Transfers
We do not transfer your personal data outside the European Economic Area (EEA). All data is processed and stored within the EEA in compliance with applicable data protection laws.
Children’s Data
Our platform is not intended for users under the age of 18. We do not knowingly collect data from minors. Parental consent is required for users under this age.
Cookies Policy
We use cookies for the following purposes:
Before placing cookies on your device, we will request your consent via a cookie banner when you first visit our website. You may choose to accept or reject the use of cookies at any time. You can modify your cookie preferences or disable cookies through your browser settings.
- Essential Functionality: Ensure smooth platform operation.
- Analytics: Measure performance and usage patterns.
Managing Cookies: You can manage your preferences through browser settings or the cookie banner on our website.
Changes to this Privacy Policy
This Privacy Policy is reviewed periodically and may be updated. Changes will be posted on this page with a revised effective date. Significant updates will be communicated via email.
Contact Information
For questions about this Privacy Policy, contact MLS Support or email [email protected]
You may also file a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the relevant supervisory authority. You can contact the AEPD through their official website or by using the contact information provided on their platform.
Compliance and Audits
We regularly review our data protection practices through audits and consultations with legal experts to ensure compliance with GDPR and Spanish data protection laws.
