Privacy

**PRIVACY POLICY — HomeSpoty** **Last updated: 12 November 2026** This Privacy Policy explains how HomeSpoty collects, uses, stores, shares and protects your personal data when you visit or use our website and services. We are committed to protecting your privacy and processing your personal data transparently and responsibly, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, or GDPR), Spain's Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable data protection legislation. HomeSpoty operates an online property marketplace that connects people interested in buying or renting properties with property owners, landlords and real estate professionals. HomeSpoty provides a platform for property discovery, property advertisements and direct communication between users. We do not process rental or purchase payments, manage property transactions, collect deposits or sign rental or purchase agreements on behalf of users. **1. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?** The data controller responsible for processing your personal data is: Company name: [INSERT FULL LEGAL COMPANY NAME] Trading name: HomeSpoty Registered address: [INSERT REGISTERED BUSINESS ADDRESS] Country: Spain Tax identification number (NIF/CIF): [INSERT TAX IDENTIFICATION NUMBER] Website: https://homespoty.com/en Privacy contact email: [INSERT PRIVACY EMAIL ADDRESS] Throughout this Privacy Policy, "HomeSpoty", "we", "us" and "our" refer to the company operating the HomeSpoty platform. For any questions concerning your personal data or this Privacy Policy, you can contact us using the email address provided above. If you wish to close your account or request the deletion of your personal data, please contact us using the same email address or use the account deletion functionality available on the Platform, if provided. **2. WHAT PERSONAL DATA DO WE COLLECT?** The personal data we collect depends on how you interact with HomeSpoty and which services you use. **2.1. Information you provide directly** **a) Account registration** When you create a HomeSpoty account, we may collect: - First and last name. - Email address. - Phone number, if provided or required for a particular feature. - Password and account authentication information. - Account type or user role, such as property seeker, property owner or real estate agent. - Account preferences and settings. If you register or log in using a third-party authentication service, such as Google, we may receive the information you authorize that service to share with us, such as your name and email address. **b) Property owners and real estate agents** If you register as a property owner, landlord or real estate professional and publish property advertisements, we may collect: - Full name or business name. - Email address. - Phone number. - Business or contact address, where provided. - Professional information, where relevant. - Property address and location details. - Property descriptions and characteristics. - Sale or rental price. - Property photographs, videos and other uploaded materials. - Availability information. - Information and communications relating to your property advertisements. If you publish a property on behalf of another person or business, you confirm that you have the necessary authorization to provide the relevant information and publish the advertisement. **c) Buyers and tenants** If you use HomeSpoty to search for properties or contact property owners and agents, we may collect: - Name and contact details. - Account information. - Property preferences. - Search criteria and saved properties. - Messages and inquiries sent through the Platform. - Information you voluntarily include in your communications. - Any additional information you choose to provide when contacting an advertiser. HomeSpoty does not require users to provide bank card details, bank account information or payment information to complete property transactions, because HomeSpoty does not process property purchase or rental payments. Please do not include unnecessary sensitive personal information in messages or other content submitted through the Platform. **d) Customer support and communications** When you contact HomeSpoty for assistance, report an advertisement or submit a question, complaint or request, we may collect: - Your name and contact details. - The content of your message. - Information about your account or property advertisement. - Any documents or other information you voluntarily provide to help us handle your request. - Our correspondence with you. **e) Promotions and marketing activities** If we organize competitions, promotional activities or special campaigns, we may collect the information necessary for participation, such as your name, email address and any other details specified in the relevant promotion. Where required by law, we will request your consent before using your personal data for promotional communications. **f) Job applications** If HomeSpoty publishes job opportunities and you apply for a position, we may collect: - Name and surname. - Email address. - Phone number. - Curriculum vitae (CV). - Cover letter. - Professional experience and qualifications. - Any other information you voluntarily include in your application. **2.2. Information collected automatically** When you visit or use HomeSpoty, certain technical and usage information may be collected automatically. This may include: - IP address. - Device type and operating system. - Browser type and version. - Language preferences. - Date and time of access. - Pages visited and interactions with the Platform. - Referral pages and website navigation information. - Technical logs and diagnostic information. - Cookie identifiers and similar technologies, where permitted. We may use analytics and similar technologies to understand how visitors use HomeSpoty, improve website performance and enhance the user experience. Non-essential cookies and similar technologies will only be used where the required consent has been obtained. For further information, please consult our Cookie Policy. **3. WHY DO WE USE YOUR PERSONAL DATA?** We process personal data for the following purposes: **3.1. To provide and operate HomeSpoty** We use your information to: - Create and manage user accounts. - Authenticate users and maintain account security. - Allow property owners and agents to publish and manage advertisements. - Display property advertisements on the Platform. - Allow visitors and registered users to search for properties. - Save property preferences and searches, where these features are available. - Allow users to contact property owners and agents. - Facilitate communication between users through the Platform, where applicable. - Provide technical support and maintain the functionality of our services. **3.2. To connect property seekers with property advertisers** HomeSpoty is designed to help people interested in buying or renting properties connect directly with property owners and real estate professionals. For this purpose, we may: - Forward inquiries or messages to the relevant property advertiser. - Share the contact information that you choose to provide when contacting an advertiser. - Make property advertisement information available to visitors and users. - Display contact details on advertisements where the advertiser has chosen to make them public. - Facilitate communication relating to a particular property. When you contact a property owner or agent, the information you submit may be made available to that recipient so they can respond to your inquiry. Once your information is shared with another user, that user may process it independently in accordance with their own privacy practices and applicable legal obligations. **3.3. To manage property advertisements** We use property owners' and agents' information to: - Create and manage property advertisements. - Publish property descriptions, photographs and other materials. - Verify or review advertisements when reasonably necessary. - Communicate about listing updates or reported issues. - Remove advertisements that are no longer available or that violate our policies. - Maintain the accuracy and quality of property information on the Platform. **3.4. To provide customer support** We use personal data to respond to questions, complaints, requests and reports. This includes helping users with account issues, property advertisements, suspected fraud, technical problems and other matters related to HomeSpoty. **3.5. To maintain security and prevent fraud** We may process personal data to: - Detect suspicious or fraudulent activity. - Protect user accounts. - Identify fake or misleading property advertisements. - Prevent unauthorized access. - Investigate reports of scams or abusive behavior. - Protect HomeSpoty, its users and third parties against unlawful activities. - Enforce our Terms of Use and other platform policies. **3.6. To improve our services** We may use technical and usage information to: - Understand how users interact with HomeSpoty. - Improve website navigation and functionality. - Identify technical errors and performance issues. - Develop new features. - Improve search functionality and the relevance of property results. - Measure the effectiveness of our services. Where possible, we use aggregated or anonymized information for statistical and analytical purposes. **3.7. To send marketing communications** Where legally permitted, we may use your contact details to send information about HomeSpoty, new features, property-related services, promotions and other relevant updates. Where consent is required, we will only send marketing communications after obtaining your consent. You can unsubscribe at any time by using the unsubscribe link included in our emails or by contacting us directly. Unsubscribing from marketing communications will not prevent us from sending essential service-related messages, such as account notifications or security updates. **3.8. To comply with legal obligations** We may process and retain personal data when necessary to: - Comply with applicable legal and regulatory obligations. - Respond to lawful requests from public authorities. - Establish, exercise or defend legal claims. - Maintain records required by law. - Protect the rights, property and safety of HomeSpoty, our users and other individuals. **4. WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR DATA?** We only process personal data when there is a valid legal basis under the GDPR. Depending on the purpose, we rely on the following legal grounds: **4.1. Performance of a contract or pre-contractual measures** We process personal data when it is necessary to provide the services you request, including: - Creating and managing your account. - Publishing and managing property advertisements. - Providing property search functionality. - Enabling communication between property seekers and advertisers. - Responding to requests relating to our services. **4.2. Legitimate interests** We may process personal data where necessary for our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms. Our legitimate interests may include: - Maintaining the security of HomeSpoty. - Detecting and preventing fraud. - Protecting users from misleading advertisements. - Improving our website and services. - Handling complaints and investigating reported misconduct. - Defending legal claims. - Ensuring the proper operation of our Platform. We consider the impact of these activities on your privacy and apply appropriate safeguards. **4.3. Your consent** We rely on your consent where required by law, including for: - Certain marketing communications. - Non-essential cookies and similar tracking technologies. - Other optional processing activities for which consent is required. You may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal. **4.4. Legal obligations** We may process personal data when necessary to comply with legal obligations applicable to HomeSpoty, including obligations arising from Spanish and European legislation. **5. HOW LONG DO WE KEEP YOUR PERSONAL DATA?** We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. The applicable retention period depends on the type of data and the purpose of processing. In general: - **Account information:** Retained while your account remains active and for a reasonable period afterwards where necessary to handle legal obligations, disputes or security matters. - **Property advertisements:** Retained while the advertisement is active and for a reasonable period afterwards where necessary for platform administration, fraud prevention or legal claims. - **Messages and inquiries:** Retained for as long as necessary to facilitate communication, handle complaints and protect legitimate interests. - **Customer support records:** Retained for the time necessary to resolve your request and comply with applicable legal obligations. - **Marketing information:** Retained until you withdraw your consent or object to the relevant marketing processing, as applicable. - **Technical and security logs:** Retained for a period appropriate to the security and operational purposes for which they were collected. - **Job applications:** Retained for the duration of the recruitment process and for any additional period permitted by law or based on your consent, where applicable. When personal data is no longer necessary, we will delete it or anonymize it, unless we are legally required to retain it. In certain circumstances, information may be retained in a restricted or blocked form for the period necessary to comply with legal obligations or establish, exercise or defend legal claims. **6. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?** HomeSpoty does not sell your personal data. However, we may share personal data with the following categories of recipients when necessary and in accordance with applicable data protection legislation. **6.1. With other HomeSpoty users** Because HomeSpoty is a property marketplace, certain information must be shared to enable users to communicate. For example: - When a property seeker contacts an owner or agent, the information included in the inquiry may be shared with that advertiser. - When an advertiser publishes a property, the information included in the advertisement may be visible to visitors and other users. - Contact details may be displayed publicly if the advertiser chooses to include them in the advertisement. - Information included in messages may be shared with the intended recipient. Users should carefully consider the information they provide when contacting other users. Property owners, agents and other recipients may process the information they receive independently. HomeSpoty is not responsible for the independent privacy practices of other users. **6.2. With service providers** We may use trusted third-party companies to help us operate and maintain HomeSpoty. These providers may assist us with: - Website hosting and cloud infrastructure. - Data storage and backup. - Email delivery and communication services. - User authentication and account management. - Customer support tools. - Website analytics. - Security and fraud prevention. - Website maintenance and development. - Technical monitoring and error reporting. These providers may access personal data only to the extent necessary to perform services on our behalf and must be subject to appropriate contractual and data protection obligations. **6.3. With professional advisers** Where necessary, we may share personal data with professional advisers, including lawyers, auditors, accountants and other consultants, when required to obtain professional assistance, comply with legal obligations or defend legal claims. **6.4. With public authorities and competent institutions** We may disclose personal data when required by law or when reasonably necessary to: - Comply with a legal obligation. - Respond to a lawful request from a public authority. - Prevent or investigate suspected criminal activity or fraud. - Protect the rights, safety or property of HomeSpoty, our users or other individuals. - Establish, exercise or defend legal claims. **6.5. Business transfers** If HomeSpoty undergoes a merger, acquisition, restructuring, sale of assets or similar corporate transaction, personal data may be transferred as part of that transaction, subject to applicable data protection requirements. **7. INTERNATIONAL DATA TRANSFERS** Some of our service providers may be located outside the European Economic Area (EEA), or may process personal data from countries outside the EEA. Where personal data is transferred internationally, HomeSpoty will ensure that the transfer complies with the GDPR. Depending on the circumstances, this may involve: - Transfers to countries recognized by the European Commission as providing an adequate level of data protection. - The use of Standard Contractual Clauses approved by the European Commission. - Other legally recognized transfer mechanisms or safeguards. You may contact us using the details in Section 1 to request further information about applicable safeguards for international transfers. **8. HOW DO WE PROTECT YOUR PERSONAL DATA?** HomeSpoty takes reasonable technical and organizational measures to protect personal data against: - Unauthorized access. - Accidental loss or destruction. - Unlawful processing. - Unauthorized disclosure. - Alteration or misuse. Depending on the nature of the information and the risks involved, these measures may include access controls, authentication mechanisms, secure hosting, encryption where appropriate, backups and internal security procedures. Access to personal data is limited to authorized persons and service providers who need it for legitimate operational purposes. However, no website, online service or electronic data transmission can be guaranteed to be completely secure. We therefore cannot guarantee absolute security. **9. WHAT ARE YOUR DATA PROTECTION RIGHTS?** Under the GDPR and applicable Spanish data protection legislation, you have several rights regarding your personal data. You may exercise these rights free of charge, subject to the conditions established by law. **9.1. Right of access** You have the right to ask whether HomeSpoty processes your personal data and, if so, to obtain access to that data and relevant information about its processing. **9.2. Right to rectification** You have the right to request the correction of inaccurate personal data or the completion of incomplete information. **9.3. Right to erasure** You may request the deletion of your personal data when, for example, it is no longer necessary for the purposes for which it was collected or when the legal conditions for erasure are met. This right is not absolute. We may need to retain certain information to comply with legal obligations or establish, exercise or defend legal claims. **9.4. Right to restriction of processing** You may request that we temporarily restrict the processing of your personal data in circumstances provided for by the GDPR. **9.5. Right to data portability** Where the legal requirements are met, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format, or request that it be transmitted to another controller where technically feasible. **9.6. Right to object** You may object to the processing of your personal data when it is based on our legitimate interests. You have an absolute right to object to the processing of your personal data for direct marketing purposes. **9.7. Right to withdraw consent** Where processing is based on your consent, you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. **9.8. Rights relating to automated decision-making** You have the right not to be subject to a decision based solely on automated processing, including profiling, where that decision produces legal effects concerning you or similarly significantly affects you, except where an applicable legal exception applies. **9.9. How to exercise your rights** To exercise any of your data protection rights, please contact us at: Email: [INSERT PRIVACY EMAIL ADDRESS] Subject: Data Protection Rights Request Please explain which right you wish to exercise and provide sufficient information for us to identify your account or the personal data concerned. We may request additional information to verify your identity where reasonably necessary to protect your personal data. We will respond within the period required by applicable law. Under the GDPR, this is generally one month from receipt of the request. This period may be extended by up to two additional months where necessary due to the complexity or number of requests, in which case we will inform you. **10. RIGHT TO LODGE A COMPLAINT** If you believe that HomeSpoty has processed your personal data in a way that violates applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority. In Spain, the competent supervisory authority is: Agencia Española de Protección de Datos (AEPD) Website: https://www.aepd.es/ You may contact the AEPD if you believe your data protection rights have not been respected. **11. COOKIES AND SIMILAR TECHNOLOGIES** HomeSpoty may use cookies and similar technologies to ensure the proper functioning of the website, remember user preferences, analyze website traffic and improve the user experience. Certain cookies are strictly necessary for the operation of the website. Other cookies, such as analytics or advertising cookies, may require your prior consent. You can manage your cookie preferences through the cookie settings available on our website. For further details about the cookies we use, their purposes and how to manage them, please consult our Cookie Policy. **12. THIRD-PARTY WEBSITES AND SERVICES** HomeSpoty may contain links to third-party websites, platforms or services. If you follow a link to an external website, you will be subject to that website's own privacy policy and terms of use. HomeSpoty does not control the privacy practices, security or content of external websites and is not responsible for how those third parties collect or use personal data. We encourage you to review the privacy policies of any third-party websites you visit. **13. CHILDREN'S PRIVACY** HomeSpoty is intended for individuals who are at least 18 years old. Our services are not designed for children, and we do not knowingly collect personal data from individuals under the age of 18 for account registration or property-related services. If we become aware that personal data has been collected from a child in circumstances where such collection is not permitted, we will take appropriate steps to address the situation. **14. CHANGES TO THIS PRIVACY POLICY** We may update this Privacy Policy from time to time to reflect changes in our services, business operations, technology or applicable legislation. When we make significant changes, we will take reasonable steps to inform users through the website or other appropriate communication channels. The date at the beginning of this document indicates when the Privacy Policy was last updated. We encourage you to review this page periodically to stay informed about how we protect your personal data. **15. CONTACT US** If you have any questions, concerns or requests regarding this Privacy Policy or the way HomeSpoty processes your personal data, please contact us: Platform: HomeSpoty Website: https://homespoty.com/en Country: Spain Thank you for trusting HomeSpoty. **HomeSpoty — Find Your Place.**