13. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
12. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses SSL encryption, and we restrict access to personal data to employees who need it to perform their duties.
11. Complaints
If you believe we have not handled your personal data in accordance with data protection law, you have the right to lodge a complaint with a supervisory authority:
- In Norway: Datatilsynet
www.datatilsynet.no - In Spain: Agencia Española de Protección de Datos (AEPD)
www.aepd.es
10. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15): Request a copy of the data we hold about you
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
- Right to erasure (Art. 17): Request deletion of your data, subject to legal retention requirements
- Right to restriction (Art. 18): Request limited processing of your data
- Right to data portability (Art. 20): Request transfer of your data to another service provider
- Right to object (Art. 21): Object to processing based on legitimate inte…
9. International Transfers
As a Norwegian-owned company operating in Spain, your data may be accessed from Norway. Both Norway and Spain are part of the EEA, and the European Commission has confirmed that Norway ensures an adequate level of data protection (GDPR Article 45). Your data remains within the European Economic Area at all times.
8. Data Sharing and Recipients
We do not sell your personal data to third parties. We may share your data with:
- Property developers and sellers (when facilitating a purchase or viewing)
- Legal advisors, notaries, and banks (as necessary for property transactions)
- IT service providers who host our website and manage our communication systems
- Regulatory authorities when required by Spanish or Norwegian law
7. Data Retention
We retain your personal data only as long as necessary for the purposes collected:
- Contact form inquiries: Up to 2 years after your last interaction with us
- Client data (transactions): Up to 5 years after the transaction, in accordance with Spanish tax and accounting regulations (Ley General Tributaria)
- Marketing preferences: Until you withdraw consent or opt out
- Technical data (cookies): As specified in our cookie consent banner
6. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and understand where our visitors come from. You can control cookie preferences through your browser settings or our cookie consent banner.
We use the following types of cookies:
- Essential cookies: Required for the website to function properly
- Analytics cookies: Help us understand how visitors interact with our website
- Functional cookies: Remember your preferences for a better experience
5. How We Use Your Data
We use your personal data for the following purposes:
- Responding to your inquiries and providing property information
- Arranging property viewings and facilitating transactions
- Sending property recommendations tailored to your preferences (only with your consent)
- Complying with legal and regulatory obligations under Spanish and Norwegian law
- Improving our website and customer service
4. Legal Basis for Processing
Under GDPR Article 6, we process your personal data on the following legal bases:
- Consent (Art. 6(1)(a)): When you submit a contact form or agree to cookies, you give us explicit consent to process your data for those specific purposes
- Contractual necessity (Art. 6(1)(b)): When we assist you in buying, selling, or renting a property, processing your data is necessary to perform our services
- Legal obligation (Art. 6(1)(c)): Spanish real estate regulations and tax laws require us to retain certain transaction records
- Legitimate interests (Art. 6(1)(f)): We may process data to improve our services, maintain website …
3. How We Collect Your Data
We collect data directly from you through:
- Contact form submissions on our website
- Email and phone inquiries
- In-person meetings and property viewings
- Automated technologies including cookies and website analytics
2. What Data We Collect
We may collect the following personal data when you interact with us:
- Identity data: name, email address, phone number, and preferred language
- Property preferences: budget, location preferences, property type, and other criteria you share with us
- Communication data: messages you send through our contact form, email correspondence, and phone call records
- Technical data: IP address, browser type, device information, and usage data collected through cookies and analytics
1. Who We Are
Casa Concept is a Norwegian-owned real estate agency operating in Spain. We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish and Norwegian data protection laws.
Contact details:
Email: info@casaconcept.es
Phone: +34 912 345 678
Address: Costa del Sol, Málaga, Spain
Last updated: 7 August 2026