Privacy policy

Updated: 15 October 2026

1. Data controller

The controller of this website operates under the COSTA & SOL REAL ESTATE brand. Its legal name, Spanish tax ID and registered address are available in About us — company information. For privacy enquiries and rights: info@costasolestate.com.

2. Data and purposes

When you contact us, we process the information you provide: name, email address, phone number, message and any property preferences you choose to share. We use it to answer your enquiry, provide information about properties and services and handle actions you request. Do not include identity documents or sensitive information in the general enquiry form.

Hosting and security systems may process technical access data, such as IP address, date and browser, to deliver the website, detect incidents and protect it.

3. Legal basis

Enquiries about our services and actions you request are handled on the basis of pre-contractual measures requested by you (GDPR Article 6(1)(b)). For enquiries unrelated to a prospective contract, the basis is our legitimate interest in answering communications (Article 6(1)(f)). Website security is based on the legitimate interest in protecting the service and preventing abuse, balanced against your rights.

Where processing requires consent, we will ask for it separately. You may withdraw it without affecting the lawfulness of earlier processing. Sending an enquiry does not subscribe you to advertising.

4. Retention

Enquiries are kept for the time needed to answer them and provide the follow-up you request. If a contractual relationship begins, data are retained to manage it and for the applicable legal periods. Where required, data necessary for legal liabilities will be restricted and subsequently erased. You can ask the controller about the criteria applying to your enquiry.

5. Recipients and external services

Hosting, maintenance and email providers may access data as needed to deliver their services. Disclosures to other parties in a property transaction will be limited to what is needed for the actions you request, and data may also be disclosed where legally required. We do not sell your data.

Property pages use information and images from Resales Online. This website's enquiry form sends an email to the COSTA & SOL REAL ESTATE team; it is not a Resales Online form. WhatsApp and Instagram links and Google maps are subject to those providers' policies. When you use them, they may process technical data and information you supply, including outside the European Economic Area under their terms. Review their policies before using those services.

6. Your rights

You may request access, rectification, erasure, objection, restriction and portability where applicable, and withdraw consent, by emailing info@costasolestate.com or writing to the postal address linked in section 1. Explain your request; further identification will only be requested when necessary. If you believe your rights have not been respected, you may complain to the Spanish Data Protection Agency (AEPD).

7. Cookies and analytics

The website uses technical features for operation and language selection. Cookie preferences are managed through the consent system where available. Non-essential cookies must respect your choice. You may also manage cookies in your browser.

We use Google Analytics 4 to measure visits and interactions and improve this website, only after you accept statistics cookies. Processing is based on your consent, which you can withdraw through “Manage consent”. Google may process technical data, identifiers and browsing data under its terms; do not enter personal information in searches. Automatic search and form measurement is disabled, and email addresses and selected query parameters are redacted. See how Google uses data from partner sites. International transfers may occur under the safeguards in the data processing terms accepted with Google. According to the controller, no CRM or newsletter service is used to manage these enquiries.

8. Further information

Required form fields allow us to handle your enquiry; without them we may not be able to respond through that channel. Do not send other people's data without authorisation. The website is not specifically directed at children.

We apply measures appropriate to the risks to protect data. This policy will be updated if the described processing changes; the version date appears above. Contact the controller at the email address above with any questions.