Data Protection – Las Arenas

1. Data controller

Evoost Real Tech S.L., with tax ID B16420051 and registered address at Calle Jovellanos, 10 BAJO IZQ – 33206 Gijón (Asturias), is the entity responsible for the processing of personal data collected through this website (lasarenas-excent.com) and through external channels that reference this policy.

2. Categories of personal data collected

We may process the following categories of personal data:

• Identification data: first name, surname
• Contact data: email address, telephone number
• Location data or area of interest
• Data related to profile and motivation to purchase a property
• Browsing and web interaction data
• Recordings or transcriptions generated by voice assistants
• Conversations via instant messaging (such as WhatsApp Business)
• Online identifiers, IP and browsing habits collected through cookies

3. Data source

Data is collected through:

• Contact forms on the website
• Automated service channels managed by Evoost, such as:
  • Virtual voice assistant
  • Conversational agent embedded on the website
  • Instant messaging channel (WhatsApp Business)
• Commercial actions or events
• Cookies and similar technologies (see section 13)

In the case of external channels such as WhatsApp, the user may also be subject to WhatsApp's privacy policy.

4. Purpose of processing

Data will be processed for the following purposes:

• Respond to enquiries and interests regarding property developments
• Management of information and commercial communications
• Segmentation and commercial qualification of users
• Statistical analysis and internal market studies
• Share data with EXCENT for commercial follow-up and/or the property reservation and sale process
• Analyse user behaviour on the site using analysis tools such as Google Analytics

5. Legal basis for processing

Data processing is based on:

• The user's express consent
• The legitimate interest of the controller to maintain communications with persons interested in the developments
• The performance of pre-contractual measures requested by the data subject

6. Data recipients

Data may be disclosed to:

• The developer EXCENT, as an independent manager, for commercial management purposes
• Providers acting as data processors, including:
  • Communication sending platforms
  • Automated customer service tools and CRM
  • Analytics services (such as Google Analytics)
  • External messaging services (such as WhatsApp Business)

When the user interacts via WhatsApp or accesses content analysed by Google Analytics, their data may also be processed in accordance with their respective privacy policies:

• Google – Privacy Policy
• WhatsApp – Privacy Policy

7. International data transfers

In some cases, data may be processed outside the European Economic Area, for example by analytics or communication services. In such cases, appropriate measures will be applied, such as:

• Standard contractual clauses approved by the European Commission
• Adherence to the EU-US data protection framework
• Additional security mechanisms, such as encryption or pseudonymisation

8. Retention periods

Data will be retained:

• While an active relationship with the user exists or until they request its deletion
• Up to 5 years from the last commercial contact
• For the periods required by legal obligations

9. User rights

The user has the right to:

• Access, rectify or erase their data
• Request restriction of or object to processing
• Exercise the right to data portability
• Withdraw consent at any time
• Lodge a complaint with the Spanish Data Protection Agency (www.aepd.es)

10. Security measures

Appropriate technical and organisational measures have been adopted to protect personal data against unauthorised access, loss, alteration or destruction, in accordance with Article 32 of the GDPR.

11. Mandatory nature of requested data

All fields marked with an asterisk (*) in forms are mandatory. Failure to provide this data may prevent the user's request from being properly processed.

12. Changes to the privacy policy

This policy may be updated as a result of legal or technical changes. Any modification will be notified by means of a notice on the website.

13. Use of cookies

This website uses technical, analytical and advertising cookies, both first-party and third-party. These include Google Analytics cookies, which process personal data such as IP address, session identifiers, pages visited and browsing time. This information is used for statistical purposes, to improve the service and to personalise the content displayed to the user.

The use of Google Analytics involves data processing by Google, in accordance with its privacy policy. For more information, please see our Cookie Policy.