Privacy Policy

PRIVACY POLICY

At REINES GRUPO INMOBILIARIO, S.L. (hereinafter, "REINES"), the protection of your personal data is a priority. This Privacy Policy explains how we collect, use, and protect your personal information in connection with our website, https://reines.es (the "Website"), and the real estate services provided through it.

This Privacy Policy has been drafted in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), accurately reflecting the technical and operational architecture of our systems.

1. DATA CONTROLLER

Data Controller:
REINES GRUPO INMOBILIARIO, S.L.

Tax Identification Number (N.I.F.):
B-74243049

Registered Office:
Calle Chile No. 4
28290 Las Rozas
Madrid, Spain

Telephone:
+34 911 997 946

Data Protection Contact Email:
info@reines.es

Joint Controllership and Office Network

REINES operates through a network of company-owned and affiliated/franchised offices.

Depending on the office responsible for managing the property in which you are interested or the office assigned to your enquiry, that office may act either as a Joint Controller or as a Recipient of your personal data for the specific purpose of managing the purchase, sale, or rental transaction.

2. PERSONAL DATA WE COLLECT

We collect the information necessary to provide the advanced real estate services offered through our Inmoqueenplatform.

1. Identification and Contact Data

We may collect:

• First name and surname;

• Spanish National Identity Number (DNI/NIE), where required for reservations and contracts;

• Postal address;

• Email address;

• Telephone number; and

• Skype username (for video calls).

2. Profile and Property Preference Data

Information relating to your property preferences, including:

• Preferred location;

• Budget;

• Property type.

This information is used to configure your saved property requirements and automated property alerts.

3. Financial and Transaction Data

We may process:

• Reservation history;

• Payment confirmations;

• Billing information; and

• For corporate clients, tax identification details (CIF) and company name.

4. Browsing and Location Data

We may collect:

• IP address;

• Device information; and

• Where you have given your consent, your precise geolocation in order to provide our Geographic Radius Search functionality through the interactive map.

5. Calendar and Scheduling Data

Where you use our calendar synchronisation feature, we process information relating to your calendar events and availability in order to coordinate property viewings.

6. Multimedia Content

Where you advertise a property through our platform, we process photographs and videos relating to that property.

Such content may be processed using Artificial Intelligence technologies for purposes including image enhancement and privacy protection, such as the automatic blurring of vehicle registration plates.

3. PURPOSES OF PROCESSING AND LEGAL BASIS

We process your personal data for the following purposes and on the corresponding legal bases established under the GDPR.

4. RECIPIENTS OF PERSONAL DATA

In order to fulfil the purposes described above, your personal data may be disclosed to the following recipients.

1. REINES Office Network

Your personal data may be shared with the REINES office responsible for your geographical area or for the property in which you have expressed an interest, for the purpose of arranging viewings and managing the related real estate transaction.

This includes the exchange of information necessary to calculate and distribute commissions between the listing office, the managing office, and the selling office.

2. Technology Provider (Data Processor)

IMPROVE TECHNOLOGY, S.L. is responsible for the technical infrastructure, database management, hosting, and maintenance of the Inmoqueen platform.

It accesses personal data solely for the purpose of providing these technical services and acts exclusively as a Data Processor on behalf of REINES.

3. Cloud Service Providers

We use the following cloud service providers:

• Amazon Web Services (AWS) – data hosting and Amazon S3 file storage.

• Google LLC – mapping services, analytics, and authentication.

• Stripe – payment processing services.

4. External Property Portals

Where you request the publication of your property, basic property information (and contact details where applicable) may be published on third-party property portals, including:

• Idealista

• Fotocasa

• ThinkSpain

5. Public Authorities

Where required by law or necessary to complete a real estate transaction, your personal data may be disclosed to:

• The Spanish Tax Agency;

• Notaries Public;

• Land Registries; and

• Other competent public authorities.

5. INTERNATIONAL DATA TRANSFERS

Our technological infrastructure relies on global service providers. Consequently, certain processing activities involve transfers of personal data outside the European Economic Area (EEA), specifically to the United States.

The following service providers may process personal data outside the EEA:

• Google LLC

• Microsoft Corporation

• Stripe, Inc.

• Amazon Web Services (AWS)

These providers participate in the EU–U.S. Data Privacy Framework (DPF), ensuring that personal data transferred to them benefits from an adequate level of protection equivalent to that required under European data protection legislation, in accordance with the European Commission's Adequacy Decision.

6. DATA RETENTION

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations.

Specifically:

User Account Data

Your personal data will be retained for as long as your account remains active.

Following the deletion of your account, your data will be blocked and retained for a period of five (5) years for the purpose of addressing any potential legal liabilities.

Transaction Data

Information relating to payments, invoices, and commercial transactions will be retained for four (4) years, in accordance with Spanish tax legislation.

Property Alerts and Saved Search Criteria

Data relating to your saved property requirements and property alerts will be retained until you unsubscribe from the alert service or delete your saved search criteria.

7. YOUR RIGHTS

You may exercise your data protection rights at any time by sending a written request to:

info@reines.es

Subject to the conditions established under applicable data protection legislation, you have the right to:

• Right of Access – to obtain confirmation as to whether your personal data is being processed and, where applicable, to access such data.

• Right to Rectification – to request the correction of inaccurate or incomplete personal data. Certain information may also be updated directly through your "My Profile" profile.

• Right to Erasure ("Right to be Forgotten") – to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected or otherwise processed.

• Right to Object – to object to the processing of your personal data where such processing is based on our legitimate interests or carried out for direct marketing purposes.

• Right to Restriction of Processing – to request that the processing of your personal data be restricted in the circumstances provided for under the GDPR.

• Right to Data Portability – to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or XML) and, where technically feasible, to have those data transmitted to another data controller.

You also have the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data infringes applicable data protection legislation.

In Spain, the competent supervisory authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD).

8. SECURITY MEASURES

REINES and its technology provider have implemented appropriate technical and organisational measures designed to ensure the confidentiality, integrity, availability, and resilience of personal data.

These measures include, among others:

• The use of HTTPS (SSL/TLS) encryption for all communications with the Website.

• Encryption of passwords and API credentials.

• Daily backups and redundant storage using Amazon Web Services (AWS S3).

• Role-Based Access Control (RBAC), implemented through Spatie Permissions, ensuring that access to personal data is restricted exclusively to authorised personnel according to their operational responsibilities.

Although REINES applies security measures consistent with current industry standards, no system connected to the Internet can guarantee absolute security. Accordingly, while REINES makes every reasonable effort to protect personal data against unauthorised access, loss, alteration, or disclosure, it cannot guarantee the absolute security of information transmitted electronically.

COOKIE POLICY

1. WHAT ARE COOKIES?

A cookie is a small text file that is stored on your browser when you visit almost any website. Its purpose is to enable the website to remember your visit when you return to it.

Cookies generally store technical information, user preferences, content personalisation, usage statistics, links to social media, access to user accounts, and similar information.

The Website https://reines.es uses both first-party and third-party cookies to ensure the proper technical operation of the platform, enhance payment security, and provide advanced features such as interactive maps.

2. TYPES OF COOKIES USED

According to the entity that manages them

We use:

• First-Party Cookies, which are set by our own servers (Inmoqueen/AWS infrastructure).

• Third-Party Cookies, which are set by external providers such as Google and Stripe.

According to their purpose

A. Strictly Necessary Cookies

(These cookies do not require your consent.)

These cookies are essential for the Website to function properly. Without them, you would not be able to browse the Website, log into your account, or complete property reservations.

Security and Session Cookies

The Website is built using the Laravel framework, which installs cookies such as XSRF-TOKEN and laravel_sessionin order to:

• identify you as a unique user during your visit;

• maintain your authenticated session within the private area of the Website; and

• protect forms against Cross-Site Request Forgery (CSRF) attacks.

Secure Payment Cookies

The Stripe payment gateway installs cookies such as __stripe_mid and __stripe_sid to detect and prevent fraudulent payment transactions.

These cookies are essential to ensuring the security of your online payment.

B. Functional Cookies

These cookies enable the Website to remember your preferences and provide enhanced functionality.

Google Maps

Google Maps uses cookies to remember:

• your most recent map location;

• zoom level; and

• display preferences when searching for properties.

Language Preferences

These cookies remember your preferred language for future visits.

C. Analytics Cookies

Analytics cookies enable us to measure the number of visitors and analyse how users interact with the Website.

This information helps us improve the products and services we offer.

For these purposes, we use Google Analytics.

3. COOKIE INVENTORY

4. INTERNATIONAL DATA TRANSFERS

The use of third-party cookies, including those provided by Google and Stripe, may involve the processing of certain personal data on servers located in the United States.

These providers participate in the EU–U.S. Data Privacy Framework (DPF), ensuring that personal data transferred outside the European Economic Area benefits from an adequate level of protection in accordance with the European Commission's Adequacy Decision.

Further information regarding the processing of personal data by these third parties can be found in their respective Privacy Policies.

5. MANAGING AND DISABLING COOKIES

You may allow, block, or delete cookies through your browser settings.

Instructions for the most commonly used browsers are available below:

• Google Chrome: Settings → Privacy and Security → Cookies and Other Site Data

• Mozilla Firefox: Settings → Privacy & Security

• Microsoft Edge: Settings → Cookies and Site Permissions

• Safari: Preferences → Privacy

Important Notice

If you disable strictly necessary cookies (including laravel_session or Stripe security cookies), certain features of the Website may no longer function correctly.

In particular, you may be unable to:

• sign in to your account;

• manage your favourite properties;

• complete online property reservations; or

• access secure areas of the Website.