Privacy Policy

In accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and Spanish Organic Law 3/2018, of 5 December, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), website users are informed of the following personal data processing policy.

This English version is provided for the convenience of international users. Since Contrakt is established in Spain and the processing described below is governed by Spanish and EU law, in the event of any discrepancy the Spanish-language version shall prevail.

1. Data controller

Identity: Contrakt BCN Real Estate Consulting, S.L.
Tax ID: B57520454
Address: c/ Andrea Doria 25 | 07014 | Palma de Mallorca | Spain
Email: info@contrakt.es

2. What do we process your personal data for?

At Contrakt, we process the information provided by data subjects for the following purposes:

Handling enquiries and contact requests: responding to requests for information, advice or quotes submitted through the contact form or by email.
Managing the pre-contractual and contractual relationship with clients, investors, owners or operators who request our consulting services.
Sending commercial communications and market reports, only where the user has given explicit consent for this purpose.

No automated decisions will be made, nor will profiling be carried out using the data provided.

3. How long will we keep your data?

Personal data will be kept for as long as the business relationship is maintained, or for as long as necessary to handle the enquiry made, and subsequently, where applicable, for the statutory limitation periods applicable (for tax, commercial or liability purposes) before being deleted.

4. What is the legal basis for processing your data?

The legal basis for processing is:

The consent of the data subject, given by ticking the corresponding box and submitting the contact form.
Contrakt's legitimate interest in responding to commercial enquiries related to its hospitality consulting business.
The performance of a contract or pre-contractual measures, in the case of clients formally requesting our services.

5. Who will your data be shared with?

Data will not be transferred to third parties, except where legally required. However, certain providers who supply services to Contrakt may access the data as data processors (for example, website hosting or email service providers), with whom the corresponding data processing agreement required under Article 28 GDPR has been signed.

The personal data we process may be accessed by the following providers, acting as data processors:

Nominalia (website domain hosting), based in and with data centres within the European Union, meaning no international data transfer takes place.
Microsoft (Office 365), based in the United States. The transfer of data to Microsoft is safeguarded by the European Commission's Adequacy Decision on the EU-US Data Privacy Framework, complemented by Standard Contractual Clauses signed with that provider as an additional safeguard.
Lovable (website development and hosting platform), based in the European Union (Sweden). Some of its sub-processors may process data outside the European Economic Area, a transfer safeguarded by the European Commission's Standard Contractual Clauses included in its Data Processing Agreement.

In all cases, Contrakt has verified that appropriate safeguards are in place in accordance with Articles 44 to 49 of the GDPR prior to engaging these services.

6. What are your rights?

Any individual has the right to obtain confirmation as to whether Contrakt is processing personal data concerning them. Data subjects have the right to:

Access their personal data.
Rectify inaccurate data.
Request erasure of their data where, among other reasons, it is no longer necessary for the purposes for which it was collected.
Request restriction of processing, in which case the data will only be kept for the establishment, exercise or defence of claims.
Object to the processing of their data.
Request portability of their data.
Withdraw consent given at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.

These rights may be exercised by writing to info@contrakt.es, indicating the right being exercised and attaching a copy of an identifying document.

Data subjects may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), via its electronic office (www.aepd.es), particularly if they consider that their rights have not been satisfactorily addressed.

7. Where does your data come from?

The personal data processed by Contrakt comes directly from the data subject, provided voluntarily through the website's contact form, by email, or through meetings/communications held with the data subject.

The categories of data processed are identifying data (name, company, email address, phone number) and, where applicable, the content of the message sent. No special categories of data are processed.

8. Security measures

Contrakt has adopted the technical and organisational measures necessary to guarantee the security and integrity of the personal data it processes, and to prevent its loss, alteration and/or access by unauthorised third parties.

9. Minors

The services offered through this website are aimed exclusively at adults. Contrakt does not knowingly collect data from minors.

10. Changes to this privacy policy

Contrakt reserves the right to amend this policy to adapt it to legislative or case-law developments. Where applicable, the change will be announced on this page with reasonable notice before it takes effect.