Privacy policy
Information about how personal data submitted through this website is collected, used, retained and protected.
1. Data controller
The controller responsible for the personal data collected through this website is:
- Controller: AE PROPERTY MANAGEMENT CONSULT, S.L.
- Trade name: AE Property Management & Consult
- Tax ID (NIF/CIF): B88803077
- Address: Calle Dels Horts, 9, 1º B, 07630 Campos, Illes Balears, Spain
- Privacy email: info@aeproperties.com
- Phone: +34 601 927 601
- Data Protection Officer: Not applicable
2. Applicable regulations
The processing of personal data will be carried out in accordance with:
- Regulation (EU) 2016/679, the General Data Protection Regulation;
- Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights; and
- any other applicable provisions.
3. Personal data that may be collected
Depending on the channel used and the relationship with the data subject, the following categories of data may be processed:
- full name;
- email address;
- phone number;
- preferred contact method;
- approximate location of the property;
- general type and characteristics of the home;
- requested services;
- information voluntarily included in the message;
- data necessary to prepare quotes or contracts;
- communications maintained by email, phone or WhatsApp; and
- basic technical data recorded by the server, when necessary for the security and operation of the website.
Particularly sensitive data that is not necessary to respond to the request should not be sent through the form.
4. Source of the data
Data will mainly be obtained:
- directly from the data subject;
- through the contact form;
- by email;
- through calls or messages;
- through requested meetings or visits; or
- through a person authorised by the owner.
5. Purposes of processing
Data may be used to:
- respond to enquiries and requests for information;
- contact the data subject;
- understand the general needs of the property;
- prepare proposals, quotes or contracts;
- organise meetings or visits;
- provide and manage the contracted services;
- coordinate authorised providers;
- manage incidents and communications with clients;
- fulfil administrative, accounting, tax and legal obligations;
- protect the security of the website; and
- handle complaints or exercise rights.
Data will not be used to send electronic advertising unless there is a valid legal basis and a simple procedure is provided to opt out of receiving it.
6. Legal basis
Depending on the type of relationship, processing may be based on:
- the consent given when voluntarily submitting an enquiry;
- the application of pre-contractual measures requested by the data subject;
- the performance of a service contract;
- compliance with legal obligations; or
- the legitimate interest in protecting security, preventing abuse and properly managing activity, provided the data subject's rights do not prevail.
Where processing depends on consent, it may be withdrawn at any time without affecting the lawfulness of processing carried out beforehand.
7. Mandatory nature of the data
Fields marked as required on the form are necessary in order to process the request.
If they are not provided, it may not be possible to respond properly to the message.
All other fields are optional unless stated otherwise.
8. Data retention
Data will be retained for as long as necessary to handle the request and manage the corresponding relationship.
It may subsequently be kept blocked for the periods required to comply with legal obligations or address potential liabilities.
Requests that do not lead to a contractual relationship will be deleted once they are no longer necessary, unless there is another legal basis for retaining them.
9. Recipients of the data
Data will not be sold to third parties.
The following may access it, when necessary:
- web hosting providers;
- email providers;
- form system providers;
- storage or business management providers;
- legal, tax or accounting advisory professionals;
- providers coordinated to deliver a requested service, when sufficient authorisation or legal basis exists; and
- public authorities, courts or bodies where there is a legal obligation to do so.
Providers acting as data processors must offer adequate guarantees and formalise the corresponding terms.
10. International transfers
Some technology providers may process data outside the European Economic Area.
Before using such providers, the existence of a valid basis for the transfer and of adequate safeguards will be verified, where necessary.
This section will need to be updated with the final hosting, email, forms, analytics, messaging and storage providers.
11. Communication via WhatsApp
The website may include links that allow a conversation to be started via WhatsApp.
By using this service, the user leaves this website and begins using an external platform subject to its own terms and privacy policies.
Confidential information that is not necessary for the initial enquiry should not be sent via WhatsApp.
12. Rights of data subjects
Data subjects may exercise, where applicable, the following rights:
- access to their personal data;
- rectification of inaccurate data;
- erasure of data;
- restriction of processing;
- objection to processing;
- data portability;
- withdrawal of consent; and
- not being subject to decisions based solely on automated processing, where the legal requirements are met.
13. How to exercise these rights
Requests may be sent to:
The request must state:
- full name;
- the right you wish to exercise;
- information necessary to locate your data; and
- an address or means for receiving the response.
Where identity verification is necessary, additional information may be requested, provided securely.
14. Complaints
If you believe your data has not been processed correctly, you can first contact the controller via the privacy email address.
You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or with the relevant competent supervisory authority.
15. Security
Technical and organisational measures proportionate to the risk will be applied to protect personal data against:
- unauthorised access;
- loss;
- alteration;
- improper disclosure; or
- accidental or unlawful destruction.
These measures will be reviewed whenever systems, providers or the types of data processed change.
16. Data relating to minors
AE Property Management & Consult's services are mainly aimed at adults who own or are responsible for a property.
There is no intention to knowingly collect personal information from minors through the form.
17. Accuracy of the data
Users guarantee that the data provided is correct, current and their own, or that they have sufficient authorisation to provide it.
They must report any relevant changes in order to keep the information up to date.
18. Current status of the form
In the current development version, the form is only validated in the browser and does not send data to a server.
Before publishing, it must be connected to a secure submission system, and this policy will need to identify:
- the provider used;
- where messages are stored;
- for how long they are retained;
- who has access to them; and
- whether any international transfers take place.
19. Changes to this policy
This policy may be updated whenever the processing activities, providers, features or applicable regulations change.
The version in force will be the one published on this page.
20. Update date
Last updated: 21 July 2026.