Privacy policy

1. Data controller

[Razón social pendiente] [contact details and, where applicable, details of the Data Protection Officer to be completed].

2. Data we process and why

• User account (name, email, optional phone number, encrypted password): to provide the service. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Listings and photographs: to publish and moderate them. Legal basis: performance of a contract. We remove location metadata (EXIF/GPS) from photos.
• Messages to advertisers: to deliver them to the recipient and keep a record. Legal basis: steps taken at the request of the data subject prior to entering into a contract.
• Security (access logs with pseudonymised IP addresses, fraud prevention): legitimate interest (Art. 6(1)(f) GDPR).
• Marketing communications: only with your express consent, which you can withdraw at any time (Art. 6(1)(a) GDPR and Art. 21 LSSI-CE).
• Analytics: only if you accept it in the cookie panel.

3. Retention

We keep your data while your account remains open and, after that, blocked for the statutory limitation periods. Erasure requests are carried out within 30 days at most.

4. Recipients

Processors needed to provide the service (hosting, file storage, email delivery), under a contract that complies with Art. 28 GDPR. [List of providers and, where applicable, international transfers pending]. We do not sell personal data.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability from My account → Privacy and data, or by writing to [privacy email]. You can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).