Privacy policy
At Fuengirola Estates we process your data with transparency. This policy explains what data we collect, what we use it for, how long we keep it and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
1. Data controller
Magiste Service, S.L. (Fuengirola Estates)
Calle Miguel de Cervantes 21, 29640 Fuengirola (Málaga)
NIF: B92778265
Data protection email: info@fuengirolaestates.com
Phone: +34 951 351 263
2. What data we collect
Only the data you provide through the site forms or by direct contact:
- Contact form: name, email, phone, enquiry reason and message.
- Valuation form: name, email, phone and property details (address, type, size, features). The property address is personal data if you are the owner.
- Newsletter and property alerts: name, email and, where applicable, search criteria (area, type, budget).
- Website chat (Tidio): name, email if provided and the conversation content. It only activates if you accept functional cookies.
- Browsing data: as described in the Cookie policy, only if you accept analytics cookies.
We do not collect data from children under 14. If you become aware that a minor has provided us with data, please write to us and we will delete it.
Fields marked as required are needed to handle your request; if you do not complete them, we will not be able to reply.
3. Why we use your data and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Respond to your enquiries and information requests about properties or services | Pre-contractual measures at the data subject’s request (Art. 6.1.b GDPR) | Until the enquiry is resolved plus 1 further year, unless a commercial relationship begins |
| Carry out the valuation of your property and contact you to present it | Pre-contractual measures (Art. 6.1.b GDPR) | Up to 2 years from the last communication |
| Manage brokerage in the sale/purchase (clients) | Performance of the contract (Art. 6.1.b) and legal obligations (Art. 6.1.c): tax, accounting, anti-money laundering | During the relationship and, blocked, 5 years (civil obligations) and up to 10 years (Law 10/2010 on anti-money laundering) |
| Send you newsletters, updates and property alerts matching your criteria | Consent (Art. 6.1.a GDPR), which you may withdraw at any time via the link in each email or by writing to us | Until you withdraw consent |
| Send commercial communications to clients about services similar to those already contracted | Legitimate interest (Art. 6.1.f GDPR and Art. 21.2 LSSI). You may object at any time | Until you object |
| Assist you via the website chat | Consent (Art. 6.1.a) when activating the chat, and pre-contractual measures (Art. 6.1.b) if you enquire about a property | 6 months from the conversation |
| Analyse website use to improve it | Consent via the cookie banner (Art. 6.1.a) | See Cookie policy |
We do not create automated profiles or make decisions based solely on automated processing that produce legal effects concerning you.
4. Who we share your data with
We do not sell or transfer your data to third parties for their own commercial purposes. Data is only shared in these cases:
- Collaborating estate agencies: when you are interested in a property listed by another agency in our Costa del Sol collaboration network, we share with that agency the data needed to arrange the viewing. Likewise, if you are an owner and instruct us to sell, your property details (not your personal details) are shared with the network to maximise exposure.
- Notaries, administrative agencies, financial institutions and legal advisors involved in the sale/purchase, when necessary to complete it.
- Public authorities, judges and courts when there is a legal obligation.
We also use providers that process data on our behalf as processors, under a contract pursuant to Art. 28 GDPR:
- Web hosting: Hostinger, servers in the EU.
- Email and newsletter delivery: Brevo, France.
- Website support chat: Tidio, with servers in the EU.
- Web analytics and maps: Google Analytics and Google Maps, Google Ireland Ltd., with possible transfer to the USA under the EU-US Data Privacy Framework.
- Office tools: Google Workspace.
5. International transfers
Our servers are in the European Union. When a provider processes data outside the European Economic Area (Google, and Tidio for technical support), it does so under an adequacy decision of the European Commission or standard contractual clauses.
6. How long we keep your data
The periods are set out in the table in section 3. Once the purpose is fulfilled, the data is blocked for the legal limitation periods, available only to the competent authorities, and then deleted.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent given, by writing to info@fuengirolaestates.com or by post to Calle Miguel de Cervantes 21, 29640 Fuengirola (Málaga), stating the right you exercise and attaching a copy of an identity document.
We will reply within a maximum of one month.
If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).
8. Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration: encrypted connection (HTTPS), restricted access to information, backups and providers with contractual guarantees.
9. Third-party data
If you provide us with another person’s data (for example a co-owner), you warrant that you have informed them of this policy and have their authorisation.
10. Changes to this policy
We may update this policy to reflect legal or service changes. The current version is the one published on this site.
Last updated: 17 September 2026
