1. Data controller
- Identity
- VIUCO Assessors Immobiliaris, S.L.U.
- Tax ID (NIF)
- B21932082
- Registered office
- Plaça Josep Pla i Casadevall, 4, 1r 1a · 17001 Girona, Spain
- info@viuco.cat
- Phone
- +34 683 456 831
- Registration
- Girona Commercial Registry, page GI-76722, entry 1 · AICAT 13.559
Given the nature and volume of the processing carried out, VIUCO Assessors Immobiliaris, S.L.U. is not required to appoint a Data Protection Officer under article 37 GDPR. Nevertheless, users may address any data-protection matter to info@viuco.cat.
2. Information we collect and purposes
2.1. Contact form
When you complete the web form, we collect:
- Data: name, phone, message and, voluntarily, any other data you include in the free-text message.
- Purpose: to respond to your enquiry, provide information about our services and, if requested, schedule a free valuation of your property.
- Legal basis: your consent (art. 6.1.a GDPR), given by ticking the acceptance box of this policy. Withdrawal of consent shall not affect the lawfulness of earlier processing.
- Retention: up to 12 months from the last contact if no contractual relationship ensues. Data is subsequently deleted or anonymised.
2.2. Contact via WhatsApp
If you use the WhatsApp buttons on the website, you will start a conversation via the WhatsApp Business application, owned by Meta Platforms Ireland Ltd.
- Data: phone number, name/alias configured on your WhatsApp profile, message content and communication metadata.
- Purpose: to respond to your enquiries and manage the commercial relationship.
- Legal basis: consent (art. 6.1.a GDPR) given by initiating the conversation; or legitimate interest (art. 6.1.f GDPR) in the context of a pre-existing relationship.
- Retention: for the duration of the commercial relationship and thereafter during the statutory limitation periods (up to 10 years for matters related to anti-money-laundering prevention).
The technical operation of WhatsApp means that Meta processes your data under its own privacy policy, available at whatsapp.com/legal/privacy-policy.
2.3. Service delivery (clients)
If you engage our services, we will process the data necessary for the performance of the contract: identification, contact, financial, tax and property data and, where applicable, supporting documents (ID, title deeds, property-registry extracts, etc.).
- Purpose: to manage the professional engagement (sale, rental, valuation, advisory).
- Legal basis: performance of the contract (art. 6.1.b GDPR) and compliance with legal obligations (art. 6.1.c GDPR: real-estate agent regulations, anti-money-laundering, tax and registry obligations).
- Retention: during the contractual relationship and, thereafter, during the applicable statutory periods, in particular 10 years under Spanish Law 10/2010 on the prevention of money laundering.
2.4. Cookies
Browsing the Website may involve the installation of strictly necessary technical cookies. Detailed information is available in the Cookie Policy. The legal basis is the exemption under art. 22.2 LSSI-CE for technical cookies.
3. Recipients of the data
Your data will not be transferred to third parties except where required by law. No automated decisions or profiling are carried out.
In order to deliver the service, the technological providers needed for web hosting and the management of email and messaging access the data as data processors. These providers are contractually bound by the obligations of art. 28 GDPR.
Additionally, if you use the WhatsApp channels, Meta Platforms Ireland Ltd acts as messaging-service provider under the terms described in section 2.2.
Data will be disclosed to public authorities, courts, tribunals and administrative bodies where a legal obligation applies (in particular in tax matters, anti-money-laundering and before the Catalan Register of Real Estate Agents).
4. International transfers
The use of WhatsApp Business involves an international transfer of data to Meta Platforms Ireland Ltd and, potentially, to its affiliates in the United States of America. These transfers are covered by:
- Standard Contractual Clauses approved by the European Commission.
- The EU-U.S. Data Privacy Framework, under which Meta is certified.
If you do not wish your data to be processed by Meta, please use the alternative contact channels: web form, email (info@viuco.cat) or phone.
5. User rights
You may exercise at any time the rights recognised by data-protection law:
- Access: to know which of your data we process.
- Rectification: to correct inaccurate data.
- Erasure (right to be forgotten): to request deletion of your data.
- Objection: to object to processing on specific grounds.
- Restriction of processing: to request that in certain cases data is only stored.
- Portability: to receive the data in a structured, commonly used format.
- Withdrawal of consent: to revoke consent given, without retroactive effect.
To exercise these rights, send a request to info@viuco.cat or by post to Plaça Josep Pla i Casadevall, 4, 1r 1a · 17001 Girona, Spain, identifying yourself properly and stating the right you are exercising. We will respond within a maximum of one month from receipt, extendable by two further months in cases of particular complexity.
6. Complaints to the supervisory authority
If you believe the processing of your data does not comply with the regulations, or you have not received a satisfactory response to the exercise of your rights, you may file a complaint with:
- Catalan Data Protection Authority (APDCat) — apdcat.gencat.cat · C/ Rosselló, 214, Esc. A, 1st 1st, 08008 Barcelona, Spain. Preferred channel for processing carried out in Catalonia.
- Spanish Data Protection Agency (AEPD) — aepd.es · C/ Jorge Juan, 6, 28001 Madrid, Spain, as an alternative.
7. Minors
The Website and the services of VIUCO Assessors Immobiliaris, S.L.U. are intended exclusively for persons over 18. We do not knowingly collect data from minors. If you become aware that a minor has provided data without the authorisation of a legal representative, please contact us to proceed with deletion.
8. Security measures
VIUCO Assessors Immobiliaris, S.L.U. has adopted the appropriate technical and organisational measures to ensure a level of security appropriate to the risk of the processing (art. 32 GDPR), including access controls, staff training, data-processing agreements with suppliers and IT security measures.
9. Modifications
This policy may be updated to adapt it to regulatory, case-law or operational changes. Modifications shall be effective from their publication on the Website. Periodic review is recommended.