Privacy policy
Who is responsible for your data
The controller of the personal data collected on harveyinvestments.es is Harvey Estates, S.L., trading as Harvey Investments, tax ID (NIF) B54023841, with its address at Ctra. Moraira a Calpe, 159, 03724 Teulada, Alicante.
For any question about your data you can write to info@harveyinvestments.es or call +34 656 56 05 15.
What data we process
Contact form: your name, email address, telephone number if you give it, the reason for your enquiry and your message.
Viewing request: your name, email address, telephone number if you give it, the property, your preferred date and time slot and, if you add one, a message.
Newsletter: your email address and the language you want to receive it in.
With each contact or viewing form we also store the date, IP address, browser, the page you wrote from and the version of the privacy text you accepted; with a newsletter subscription, the date and IP address. This lets us prove your consent.
If your enquiry goes further, we record the conversations, calls and viewings we have with you and the status of your request.
Please do not send us special categories of data, such as health data, or data about other people without their permission.
Why we process them and on what legal basis
To answer your enquiry, arrange the viewing you ask for and follow up your interest in a property. The legal basis is taking steps, at your request, prior to a possible contract (article 6.1.b of the General Data Protection Regulation, GDPR) and our legitimate interest in handling your request well (article 6.1.f).
To send you the newsletter, if you subscribe. The legal basis is your consent (article 6.1.a), which you give by confirming the subscription from the email we send you and which you can withdraw at any time with the unsubscribe link in every issue.
To prove that you gave us your consent and to comply with the legal obligations that apply, such as those on the prevention of money laundering (Spanish Law 10/2010) if your enquiry leads to a transaction. The legal basis is compliance with a legal obligation (article 6.1.c).
To protect the website against abuse, such as mass form submissions or attempts at unauthorised access. The legal basis is our legitimate interest in the security of the site (article 6.1.f).
We do not make automated decisions about you or build profiles, and we do not send your data to artificial intelligence services.
How long we keep them
Your contact details and requests are kept while we have a relationship with you. After 36 months without any activity they are anonymised automatically: your name, email, telephone, messages and notes are deleted, and only statistical data that no longer identify you remain.
Your newsletter email is kept until you unsubscribe; we keep a record of the unsubscription so that we do not write to you again. If you do not confirm your subscription, your email is deleted after 30 days.
Where the law requires us to keep some data for longer, they are kept blocked for that period only.
Backups of the website are kept for 7 days.
Who else may see your data
We do not share your data with third parties, unless the law requires it.
To provide the service we use providers that process data on our behalf under a data processing agreement: website hosting, on OVH servers in France, and email, with DonDominio in Spain. The data you give us do not leave the European Union.
Your rights
You may request access to your data, their rectification or erasure, the restriction of their processing, object to it and ask for the portability of the data you gave us. You may also withdraw any consent you have given at any time, without affecting the processing carried out before.
To exercise these rights, write to info@harveyinvestments.es stating which right you wish to exercise. If we have doubts about your identity, we may ask you to prove it. We will reply within one month.
If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
Mandatory data
The fields marked in each form are needed to handle your request; without them we cannot reply.
Minors
This website is not aimed at children under 14, and we do not knowingly collect their data.
Security
We apply technical and organisational measures to protect your data: encrypted connections, access limited to the team members who need it, with a record of changes and two-factor authentication available, and backups.
Changes to this policy
If we change this policy, we will publish the new version here with its date.