Privacy Policy

The Data Controller is Domus Aedes SP, S.L. (CIF: B21771068) for properties located in Spain and the European Union, with registered office at Avenida Diagonal, 534 — Entresuelo Izquierda, 08006 Barcelona, Spain. For properties located in Morocco, the Controller is Domus Aedes MA, S.A.R.L. For certain global processing activities the two entities may act as Joint Controllers. We have not appointed a mandatory Data Protection Officer; our privacy team can be reached at moss@domusaedes.com.

• Identity & contact data: name, surname, email, phone, postal address, copy of ID/passport where legally required. • Enquiry & transaction data: property of interest, budget, viewing history, purchase preferences, financial-capacity declarations where applicable. • Owner & supplier data: contractual information, bank details, tax identification numbers, invoices. • Technical & usage data: IP address, browser type, device information, website usage patterns, cookies. • Special categories of data: only processed when voluntarily provided and with explicit consent (e.g. accessibility requirements), with enhanced safeguards.

• Managing your enquiry, arranging viewings, and conducting a property sale — performance of a contract / pre-contractual measures (Art. 6(1)(b) GDPR). • Complying with legal obligations including AML/KYC checks, notarial paperwork, tax reporting and invoicing — legal obligation (Art. 6(1)(c)). • Site security, fraud prevention and protection of our IT systems — legitimate interest (Art. 6(1)(f)). • Marketing communications about new listings and the company — consent (Art. 6(1)(a)) or, for existing customers, legitimate interest with a clear opt-out (LSSI Art. 21). • Analytics to improve the website and offering — consent (non-essential cookies) or legitimate interest.

We may share your data with: IT and hosting providers (processors); payment processors; AML/KYC providers; collaborating real-estate professionals working on your transaction; notaries, lawyers and tax advisors involved in the closing; and public authorities when legally required (Spanish or Moroccan tax authorities, registries, police). When you enquire about a property in Morocco, your data will be processed by Domus Aedes MA in Morocco. The transfer from the EEA is necessary for the performance of your contract (GDPR Art. 49(1)(b)). For other transfers outside the EEA we rely on Adequacy Decisions or implement EU Standard Contractual Clauses.

• Enquiry records and viewing history: duration of the relationship plus 4 years. • Sales contracts, invoices and tax-relevant records: up to 10 years (Spanish General Tax Law / Moroccan equivalent). • AML/KYC records: 10 years from the end of the business relationship (Law 10/2010). • Marketing consent records: until consent is withdrawn, plus a grace period to evidence compliance.

You have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time. To exercise these rights write to moss@domusaedes.com. You also have the right to lodge a complaint with the Spanish Agencia Española de Protección de Datos (www.aepd.es) or, in Morocco, with the CNDP (www.cndp.ma).

We have implemented appropriate technical and organisational measures to prevent personal data from being accidentally lost, used, accessed in an unauthorised way, altered or disclosed. In the event of a data breach likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.