Privacy
Policy

1. Who We Are

Star La Cala SL ("Star Properties", "we", "us", "our") is a registered real estate agency operating on the Costa del Sol, Spain. Our registered address is C. Torremolinos, 12, 29649 La Cala de Mijas, Málaga, Spain.

We are the data controller responsible for your personal data collected through this website and our services. We are committed to protecting your personal information in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Spanish data protection law.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at info@starlacala.com.

2. Data We Collect

We collect personal data when you interact with our website, submit an enquiry form, or contact us directly. The types of data we may collect include:

Information you provide to us

• Your full name
• Email address
• Phone number
• Your property search requirements (budget, location, property type)
• Any other information you choose to include in your message

Information collected automatically

• IP address and browser type
• Pages visited and time spent on the website
• Referral source (how you found our website)
• Cookie data (see Section 8)

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to your property enquiries and provide information about properties
• To send you property listings and updates that match your requirements (with your consent)
• To arrange and manage property viewings
• To communicate with you throughout the buying, selling, or renting process
• To improve our website and services
• To comply with our legal and regulatory obligations
• To analyse website traffic and user behaviour (using anonymised data)

We will never sell your personal data to third parties or use it for purposes unrelated to our real estate services without your explicit consent.

4. Legal Basis for Processing

Under GDPR, we must have a lawful basis for processing your personal data. The legal bases we rely on are:

• Contract performance — when processing is necessary to fulfil our services to you
• Legitimate interests — when we have a genuine business reason, such as responding to enquiries
• Consent — when you have given us explicit permission, such as for marketing emails
• Legal obligation — when we are required to process data to comply with the law

5. Sharing Your Data

We may share your personal data with trusted third parties where necessary to deliver our services:

• Property developers and vendors (only with your knowledge and in connection with a specific property)
• Legal professionals (solicitors, notaries) involved in your transaction
• Mortgage brokers and financial advisors (only if you request this service)
• IT service providers who host or manage our website and CRM
• Email marketing platforms (if you have consented to receive marketing)

All third parties are required to process your data in accordance with GDPR and are prohibited from using your data for any other purpose. We do not transfer your data outside the European Economic Area (EEA) without appropriate safeguards in place.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Our general retention periods are:

• Enquiry data — 3 years from last contact
• Client transaction data — 10 years (as required by Spanish tax law)
• Marketing consent records — until you withdraw consent
• Website analytics data — 26 months (anonymised)

After the applicable retention period, your data is securely deleted or anonymised.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the data we hold about you
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — to request deletion of your data ("right to be forgotten")
• Right to restrict processing — to limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at info@starlacala.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

8. Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience and analyse website traffic. We use the following types of cookies:

• Essential cookies — necessary for the website to function correctly
• Analytics cookies — help us understand how visitors use our website (e.g. Google Analytics)
• Functional cookies — remember your preferences and settings
• Marketing cookies — used to show you relevant adverts (only with consent)

You can control cookies through your browser settings or our cookie consent tool. Disabling certain cookies may affect the functionality of the website. For more details, please see our Cookie Policy.

9. Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. These measures include SSL encryption, secure servers, and restricted access controls.

However, no method of data transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any significant changes by posting the updated policy on this page with a revised "Last updated" date.

We encourage you to review this policy periodically. Your continued use of our website following any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us: