PropertyList.es – Privacy Policy

Effective Date: 8th February 2025

Introduction

http://PropertyList.es (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you use our platform. By accessing or using our website and services, you agree to this Privacy Policy. This policy complies with the General Data Protection Regulation (GDPR) and Spanish data protection laws and applies to all products and services offered by http://PropertyList.es.

Information We Collect

1. Personal Data

We may collect personal data that you voluntarily provide to us, including:

  • Name
  • Email address
  • Phone number
  • Business or company details
  • Business address
  • Photographs and logos for profile customisation
  • IP address

Legal Basis:

  • Consent: For account creation, marketing communications, and profile customisation.
  • Contractual Necessity: To provide services and manage user accounts.

2. Usage Data

We may collect the following data automatically when you use our platform:

  • IP address
  • Browser type and version
  • Operating system
  • Access dates and times
  • Pages viewed
  • Clickstream data
  • Property view counts to generate reports

Legal Basis:

  • Legitimate Interests: To enhance platform functionality and user experience.

3. Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies to improve your experience. Cookies may include:

  • Essential Cookies: Necessary for platform operation.
  • Analytical Cookies: For user behaviour analysis (e.g., property views).
  • Advertising Cookies: To display relevant ads (if applicable).

Consent Mechanism: A cookie banner will appear when you first visit, allowing you to accept or reject cookies.

How We Use Your Information

We use the data we collect for the following purposes:

  • To provide and maintain our services (Contractual Necessity)
  • To manage user accounts and profiles (Contractual Necessity)
  • To send important updates and marketing materials (Consent)
  • To process transactions and manage orders (Contractual Necessity)
  • To analyse platform performance and improve services (Legitimate Interests)
  • To enforce our Terms and Conditions (Legitimate Interests)
  • To respond to legal requests and prevent harm (Legal Obligation)

Data Storage, Security, and Retention

1. Storage

Your data is stored on secure servers located within the European Economic Area (EEA).

2. Security

PropertyList.es adopts a ‘Data Protection by Design and by Default’ approach in compliance with GDPR. This means that we have implemented appropriate technical and organisational measures to ensure that only personal data necessary for each purpose is processed, and that data is processed with the highest standards of security and privacy.
We employ advanced cybersecurity measures, including:

  • Encryption of sensitive data
  • Regular server monitoring
  • Use of CloudFlare for enhanced security

Note: While we strive to protect your data, no system is completely secure.

3. Retention

We retain personal data for as long as it is necessary to fulfil the purposes for which it was collected or for as long as required by applicable law. Generally, we retain personal data for no longer than one year from the point of collection, but this may be extended in accordance with legal obligations or legitimate business purposes. You have the right to request deletion of your personal data at any time, subject to certain legal obligations to retain certain data for specific periods.

4. Data Breach Protocols

In the event of a data breach:

  • Immediate action will be taken, such as isolating affected servers.
  • Impacted users will be notified within 72 hours, as required by GDPR.

Sharing Data with Third Parties

We do not sell your personal data. We may share it only in the following cases:

Trusted third-party service providers, such as hosting, payment processors, and marketing service providers, who act as Data Processors on our behalf. These third parties are contractually obligated to safeguard your data and process it only as instructed by PropertyList.es. A list of such third-party processors is available upon request.

  • Legal Requests: Compliance with subpoenas or court orders (Legal Obligation).
  • Business Transactions: In the event of a merger, sale, or asset transfer (Legitimate Interests).
  • Trusted Partners: Hosting providers, payment processors, or analytics providers bound by Data Processing Agreements (DPAs).

User Rights

Under GDPR, you have the following rights:

  • Access: View the personal data we hold about you.
  • Correction: Rectify inaccurate or incomplete data.
  • Deletion (“Right to Be Forgotten”): Request erasure of your personal data.
  • Portability: Obtain a copy of your data in a portable format (when technically feasible).
  • Restriction: Limit how your data is processed.
  • Objection: Object to data processing based on legitimate interests or direct marketing.

You have the right to object to the processing of your personal data, including for direct marketing purposes. If you wish to exercise this right, please contact us MLS Support.
We will consider your objection and respond in a timely manner. If we are unable to process your data based on your objection, we will inform you accordingly.

How to Exercise Your Rights: Contact MLS Support to make a request.
https://info.propertylist.es/docs/propertylist-mls-user-manual/additional-resources/mls-support/

International Data Transfers

If your data is transferred outside the EEA, we ensure that such transfers are compliant with GDPR through the use of EU Standard Contractual Clauses (SCC) or other legal mechanisms to guarantee the protection of your personal data. You can request further information about such transfers by contacting us.
Your data may be transferred outside the EEA. We ensure compliance with GDPR standards by:

  • Using EU Standard Contractual Clauses for international transfers.
  • Partnering with providers in countries with adequate data protection laws.

Children’s Data

Our platform is not intended for users under the age of 18. We do not knowingly collect data from minors. Parental consent is required for users under this age.

Cookies Policy

We use cookies for the following purposes:

Before placing cookies on your device, we will request your consent via a cookie banner when you first visit our website. You may choose to accept or reject the use of cookies at any time. You can modify your cookie preferences or disable cookies through your browser settings.

  • Essential Functionality: Ensure smooth platform operation.
  • Analytics: Measure performance and usage patterns.
  • Advertising (if applicable): Show personalised ads.

Managing Cookies: You can manage your preferences through browser settings or the cookie banner on our website.

Changes to this Privacy Policy

This Privacy Policy is reviewed periodically and may be updated. Changes will be posted on this page with a revised effective date. Significant updates will be communicated via email.

Contact Information

For questions about this Privacy Policy, contact MLS Support here.

You may also file a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), the relevant supervisory authority. You can contact the AEPD through their official website or by using the contact information provided on their platform.

Compliance and Audits

We regularly review our data protection practices through audits and consultations with legal experts to ensure compliance with GDPR and Spanish data protection laws.