Privacy Policy

Below, we summarize the key points about your relationship with SunLine Real Estate:

Summary version if you’re short on time:

For users, registered clients, or individual customers of our website and services:
SunLine Real Estate is responsible for handling the personal data you provide when requesting our services. We primarily process this data to fulfill contractual relationships, such as responding to your inquiries or providing property services.
Additionally, we may send you promotional communications about SunLine Real Estate’s products and services similar to those you’ve expressed interest in. This is based on our legitimate interest in maintaining relationships and informing you of relevant offerings. However, you can unsubscribe at any time.
If you explicitly request a service offered by third-party collaborators or authorize us to do so, we will share your data with these companies so they can provide the requested services.
You may access, rectify, or delete your data at any time and exercise other rights (explained further below).
For professional clients or their representatives using our website, services, or professional tools:
SunLine Real Estate will handle the personal data provided to fulfill agreements with you or the organization you represent.
If you request a service on your own behalf, we will process your data solely for providing the requested service. However, if the service is requested on behalf of your organization, we process your data based on our legitimate interests to manage service delivery effectively.
If you explicitly request services provided by third parties, your data may be shared with these companies to fulfill the requested services.
You can access, rectify, or delete your data at any time and exercise other rights (explained further below).

Key notes:
We recommend you read this full Privacy Policy to understand the details of how we process your data for each service you request and how long we store it.

This Privacy Policy may change at SunLine Real Estate’s discretion, so we encourage you to review it regularly.

Before clicking “Accept” or similar buttons, we ask you to acknowledge your understanding and acceptance of this Privacy Policy.

Take your time to enjoy a cup of tea, juice, or coffee while reading through, and feel free to reach out with any questions.

1. Data Controller: Who is responsible for processing your data?

SunLine Real Estate, located in Alicante, Spain, is responsible for processing the personal data you provide through our website or related platforms (“Website and Platforms”). As part of our services, SunLine Real Estate operates:

sunlinespain.com – a real estate portal for browsing or advertising properties.
sunlinespain.com/blog – a portal offering real estate news, trends, and insights.
sunlinespain.com/form-main/ – tools and resources tailored for real estate professionals.

Below, we outline how your personal data is used while you navigate our website, search for listed properties, or advertise your own properties (“User” or “Registered User”), whether you engage our services as an individual (“Private Client”) or as a freelance professional or representative of a company (“Professional Client”). This policy complies with the General Data Protection Regulation (GDPR) and other applicable local laws on data protection and digital rights.

If you have any questions about the processing of your personal data, you can contact us via email at r.m.smith@gmail.com.

2. Categories of Data: What personal data do we use?

When using our website and platforms, we may process various types of personal data. Not all data categories are used for every purpose; specific details will depend on the context and service provided. Below is an overview of the personal data categories we may process:

Identification Data: Name, surname, identification documents (passport/NIE), profile photo, user ID, and password.
Biometric Data: Characteristics of electronic signatures, including stroke, pressure, and speed.
Contact Information: Phone number, email address, and postal address.
Personal Characteristics: Age, gender, profession, and preferences (e.g., housing preferences when searching for a rental property).
Economic and Financial Data: Payment details (e.g., card or bank account information), billing address, and optional income details (e.g., for rental profile qualification).
Interaction and Navigation Data: Activity on the website and platforms, including IP address and navigation history.
Service-Related Data: Information about properties listed for advertising (e.g., property addresses) and contracted service data (e.g., saved search filters).
Professional Client Data (Legal Entities): For professional clients, we process representative information such as names, identification documents, phone numbers, emails, and, if required, documentation proving representation.

This processing is conducted in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws to ensure your data is handled responsibly.

3. Purposes and Legitimacy of Data Processing: Why and on What Legal Basis We May Process Your Data

At Idealista, we process your data for the following purposes:

3.A) Procedures Necessary to Provide the Services You Request

We request certain “mandatory” data from you because it is essential for delivering the services you have requested. The services we provide include:

Registration as a User on Our Website and Apps: This includes sending any transactional messages related to your account or contract services. These messages may involve managing technical incidents, updating contract terms, or handling any claims you may have.
Search Query Management: Whether you are a registered user or not, we store and manage your search queries.
Advertising Services: Posting ads online and in our apps, and, if specified, on other portals owned by Idealista (e.g., yaencontre.com), where Idealista also handles data processing. We may also process your data for billing purposes for these services.
Property Valuation Services.
Multimedia Services: Enhancing your ad with photos, floor plans, videos, virtual tours, 3D renderings, etc.
Property Export.
Energy Efficiency Certification: In collaboration with Certicalia.
Support Services: Helping you sell or rent property if you are a private client.
Biometric Handwritten Electronic Signature: Used for services such as lease agreement signing.
Signature Services: For professional clients via Idealista/tools, allowing them to manage their own client document signatures related to property sales or rentals.
DeDup Service: Identifying duplicate ads from various online sources. Idealista does not control or take responsibility for third-party websites or apps that may be linked during this process. We recommend reviewing their privacy policies and terms of use carefully.
Site Terms Compliance: Monitoring adherence to website conditions.

For the execution of these services, we may use your identification and financial data (if applicable), property information (if necessary), and your contact details to communicate via phone, SMS, or email (provided you have shared this information with us).

To provide certain services or enter contracts, Idealista may share your personal data with third-party companies to respond to your request, such as our repair calculator or Idealista/energy services.

For these additional services, we will process your identification, contact data, and any property information we hold.

3.B) For Idealista’s Legitimate Interests

We will explain in detail the various situations in which we process your data based on legitimate interest:

Professional Clients: If you are a professional client and have entered into any services as outlined in section 3.A), representing your company (legal entity), we will process your contact information to maintain communication necessary for providing services to the organization you represent or to manage any inquiries sent on its behalf.

According to the GDPR, we conduct a “balancing test,” which is an internal assessment to confirm that our legitimate interest does not harm the data subjects’ rights regarding the protection of their personal data.

As a result of this test, we understand that Idealista’s legitimate interest outweighs the mutual interest in ensuring proper representation and maintaining a connection with the legal entity, enabling us to manage contractual relations adequately. This is done in compliance with Article 19 of the GDPR.

Data processed: Your identification and contact details.

Debt Collection: Whether you are a private or professional client, we may process your data to handle claims regarding amounts you owe for our services.

We also conduct a balancing test for this processing, concluding that our interest in collecting unpaid sums for services rendered, ensuring the enforcement of contract terms, and safeguarding the company’s solvency outweighs any potential impact on your privacy. This processing will only use the minimum necessary data for debt collection purposes.

Data processed: Identification, contact, and financial information.

User Behavior: If you are a user and have accepted cookies (analytics, settings, personalization, or advertising cookies), Idealista may create profiles based on your behavior. This includes processing data from your browsing habits and interactions with our website and app, as well as analyzing this data to offer personalized product recommendations.

No automated decisions that significantly affect you will be made solely based on these profiles.

This processing is based on your consent via cookies, and Idealista will process your personal data only if you have explicitly agreed to this through our cookie configuration panel.

Data processed: Identification and contact details, personal characteristics, interaction and navigation data, as well as commercial information.

Advertising: As a registered user, private client, or professional, we will send you promotional messages about Idealista’s products and services that are relevant to your initial subscription. These messages will be based on internal data sources, including cookies you have authorized, your profile, searches, properties marked as favorites, or contacts established with advertisers. This allows us to send you tailored messages and conduct surveys to evaluate the services you’ve subscribed to, aiming to improve them.

We have conducted a balancing test and concluded that our interest in maintaining relationships, gathering feedback, and improving services outweighs any potential impact on your privacy, as we only use data you have provided or created within contractual relationships.

Data processed: Identification, contact, and commercial information.

Fraud Prevention and Security: We process your data to verify your identity, prevent fraud, and maintain a secure environment for all users on our website and apps. This includes data processing even after you cancel your registered account, as well as checking internal communications on the platform. In the event of fraud attempts affecting your personal data, we will notify you and request additional information if needed.

A balancing test confirms that our interests in preventing fraud and ensuring user safety outweigh any privacy concerns, making this processing necessary to safeguard the integrity and functionality of our services.

Appraisal Services: Regarding the listings you post, we inform you that we may share details about these listings, along with public information from the Cadastre related to properties, with appraisal agencies based on their legitimate interest in finding comparable offers that accurately reflect the market situation.

3.C) Compliance with Legal Obligations

What data do we process?
We process your identification, contact, financial data, and information related to the services you have contracted.

For what purpose?
We process this data to comply with various legal obligations, as required by law, or when required by a court, tribunal, security forces, or any other competent government authority or administration.

3.D) Based on Your Direct Consent

If you provide consent, we will process your data for the following purposes:

User or Registered User: If you are a user and choose to search and wish to be contacted by an advertiser, we will share your identification and contact details with the relevant Private or Professional Client. We may also provide the search filters you applied to help find their property.
Requests or Claims: If you send us an inquiry or a claim via email or contact form, we will process your contact and identification data to manage the request.
Profile Qualification Service: If you are looking for a room or home for rent, we may share your profile (including identification, contact, personal, economic, and financial details) with advertisers you have selected.
Real Estate Professionals: If you are a real estate professional, you can participate in webinars organized by us, should you consent via the registration form we provide for this purpose.
Mortgage or Insurance Intermediaries: If you are a professional client interested in collaborating with Idealista for mortgage services (provided by Idealista Crédito y Financiación, L.) or insurance services (offered by Idealista World Agencia de Seguros Vinculada, SLU), we may share your data with these group companies.
Commercial Communications: If you are a registered user, private client, or professional client, we may contact you by phone, SMS, or email (if you provided this information) to send you commercial messages you have agreed to receive. This includes:
- Messages about products offered by Idealista (other than those with which you have a contract) or companies within our group, such as Inmovilla Applications, SLU, Rent Alia Holidays, SLU, Avaibook Online, SLU, idealista/seguros, BDMI, or idealista/hipotecas.
- Special offers from companies that assist you in selling or renting your property (real estate companies, developers, energy companies, insurance companies, consultants, and appraisers).
- Idealista newsletters and news.
- Participation requests for surveys and market research
- Sharing Data with Third Parties: If you are a registered user, private, or professional client, we may share your data with third parties to allow them to contact you via phone, SMS, or email (if provided) for commercial messaging about their products and services. Specifically, we will seek your consent for:
  - Sharing your data with third parties in sectors like real estate, energy, insurance, consulting, appraisal, and others, who are not part of the Idealista group, for them to send commercial messages.
  - Sharing your data within the Idealista group companies to send information related to their products and services, news, and other commercial communications.

For all these purposes, we will use your identification and contact data or the information mentioned above to qualify your profile, with your consent where required.

In any case, Idealista will seek explicit consent for each of these purposes. For commercial messages, if you are a registered user or a private client posting on the portal, you will give your consent by checking the box in the registration or ad registration form, which will also appear under “Settings.” For professional clients, this consent will be provided through a similar process when contacting us or contracting our services.

Additionally, we inform you that Idealista has collaboration agreements with certain companies offering services that may interest you, such as products from the insurance sector or financial investment calculators. These third parties offer their services on our website and app, and provide forms for you to contact them directly.

4. Recipients: Who may we disclose your data to?

We may share your data with third parties in the following cases:

(i) For section 3.A) above, if you are a private or professional client:

Agencies you selected for assistance in selling or renting your property when you request the relevant support service (if you are a private client).
Companies offering solar energy (or other energy solutions) or repair services, which you contact, so they can reach out to you and process your request.
If you are a professional client, we may share your data with organizations that own or manage real estate portals or aggregators for publishing your properties when you request an export service to other portals.

(ii) For section 3.D) above (if you are a user, registered user, private client, or professional):

Advertisers (private clients or professionals) you have contacted. Specifically, we will pass along your contact information included in the relevant form to the selected advertisers.
For Idealista/mortgages or Idealista/insurance, when you are a professional client interested in becoming an external collaborator of any of these services, and you explicitly indicate this to us.
Other third parties in real estate, energy companies, insurance companies, real estate agencies, consultants, appraisers, and other companies outside the Idealista group, when you have consented, to send you commercial messages.
Other Idealista group companies (as mentioned above) to send you information related to their products and services, news, and other commercial communications if you have consented.

(iii) For other purposes:

Your data will not be shared with third parties, except when required to comply with legal obligations or if explicitly demanded by courts, tribunals, or government authorities, as outlined in section 3.C). We will also share data from the listings you post, along with publicly available information from the Land Registry, with valuation entities, based on their legitimate interest in determining comparable offers that reflect the market situation.

Without prejudice to the above, we inform you that Idealista service providers responsible for data processing may have access to your data, including those providing technology or delivery services, documentation handling, and internet performance measurement tools. These data processors will access your information only in accordance with Idealista’s instructions.

You may request additional information about the recipients of your data by sending an email to r.m.smith@gmail.com, specifying the particular processing or usage for which you require more information about the recipients.

5. Data Transfer: Where may we send your data?

In exceptional cases, some of Idealista’s service providers mentioned in the previous section may process your data in countries outside the European Economic Area (EEA).

However, whenever we transfer personal data abroad, we ensure that:

a) The data transfer complies with applicable laws; and
b) Your data is protected to the same level as it would be within the EEA.

To achieve this, we will only use service providers that:
(i) Are located in a country or area that the European Commission has recognized as providing an adequate level of protection; or
(ii) Provide us with appropriate guarantees, such as standard contractual clauses or equivalent legal instruments, ensuring that the third party protects your data and offers you rights and protection equal to that in the EEA.

This does not limit our ability to use technical protection measures, such as encryption and pseudonymization, when necessary.

If you are interested in learning more about our providers currently operating outside the EEA, you may contact us for further details.

6. Data Retention: How long will we process your data?

The retention period for your data depends on the specific processing purpose, as outlined below:

During the duration of contractual relationships: This applies as long as you remain a User, Private Client, and/or Professional Client (as per the processes mentioned in Section 3.A), which are necessary to provide the services you requested.
Until the purpose for which your data was obtained is fulfilled: Or until you object to the processing, based on legitimate interest (applies to processing methods in Section 3.B). In certain cases, such as preventing abuse or fraud on our website and applications, we may store your data for up to 4 years.
Until you withdraw your consent: This applies to the processing methods in Section 3.D, based on your explicit consent.
Until you request deletion: In cases where this is legally permitted (applies to all purposes described in Section 3).
For 5 years from the date of signing a lease agreement or from the last saved draft of the specified agreement, if you requested the service of preparing and signing the lease agreement.

Please note that your data will be retained in a locked state after the completion of its intended processing and for the duration of any legal obligations (up to a maximum of 6 years), as required for each processing purpose in Section 3.

If you are a private client who used the property listing service, either free or paid, and you request the deletion of your data (including your phone number), we will retain the phone number in a locked (encrypted) state along with an internal identifier for up to 2 years from your last listing. This is to prevent improper or fraudulent use of our free listing service. During this period, we may conduct security checks to ensure the correct use of our services.

Similarly, if you are a professional client, we will retain your phone number for a maximum of 4 years from your last interaction with Idealista, to prevent improper or fraudulent use of our services.

In both cases, we conduct a balancing test to ensure that Idealista’s legitimate interest in performing this check does not harm the rights and interests of the individuals involved regarding the protection of their personal data. Based on this test, we conclude that Idealista’s legitimate interest prevails, as these measures are necessary to ensure proper compliance with the terms of our services, and we only use the minimum necessary information to avoid infringing on rights and freedoms.

7. Necessary and up-to-date information

Some fields in the forms are mandatory to fill out, without which we will not be able to provide you with our services. By clicking the button “OK, let’s go inside” (or equivalent) on the aforementioned forms, you declare that the information and data you provide are accurate and truthful.

To ensure that the information provided is always up-to-date and free from errors, please remember to notify us as soon as any changes or corrections to your personal data occur, via the following email: r.m.smith@gmail.com. You can also update your phone number or email via your private area on the website and applications.

8. Rights of Data Subjects

You are entitled to exercise the following rights regarding your personal data:

Right of Access: To know which personal data is being processed and what operations are being performed on them.
Right to Rectification: To correct any inaccurate or incomplete personal data.
Right to Erasure: To request the deletion of your personal data when possible (unless we are legally required to keep it blocked).
Right to Restrict Processing: To request the restriction of processing if there are doubts about the accuracy, legality, or necessity of data processing. We may block the data to protect or exercise claims.
Right to Object: To object to the processing of your data if it is based on our legitimate interest. We will stop processing your data unless there are overriding legal reasons or if it is necessary to protect claims.
Right to Data Portability: To request the transfer of your personal data to another company in a structured, commonly used, and machine-readable format, if the legal basis for processing is a contractual relationship or consent, and if the processing is automated.
Right to Withdraw Consent: To withdraw consent you have previously given to us for processing your personal data at any time.
Right Not to Be Subject to Automated Decisions: To not be subject to decisions based solely on automated processing of your personal data that have legal effects or similar consequences for you.

You can exercise your rights at any time and for free through the following means:

a) From your private area on our website or app, where you can unsubscribe from any commercial communications or set the type of notifications you wish to receive.
b) If you cannot access the website or app, you can send an email to privacy@idealista.com with the specific right you wish to exercise and your identification details.

Additionally, you have the right to lodge a complaint with the Spanish Data Protection Agency if you believe there has been a breach of data protection laws regarding the processing of your personal data.

9. Confidentiality and Security

At SunLine Real Estate, we make all reasonable efforts to maintain the confidentiality of personal information processed through our website and applications, as well as, where applicable, other tools provided by SunLine Real Estate. We uphold a high level of security to protect personal data from accidental loss, unauthorized access, processing, or disclosure, taking into account the state of technology, the nature of the data, and the risks to which the data is exposed.

However, we are not responsible for the use of your data (including your username and password) outside of our tools, website, and applications. This means that if you use your credentials in external services or other contexts not controlled by SunLine Real Estate, we cannot guarantee the security of your data.

10. Additional Information about Certain Features of the Website and Applications

a) “Share Listing” Form
SunLine Real Estate will only process the email address you provide in the “share listing” form. The processing will consist solely of resending the selected listing and will end once that is completed.

b) Message Archive and Internal Chat Usage
To optimize your experience, SunLine Real Estate offers a message archiving service (sent or received messages) and internal chat through the website and applications, where registered users, professional clients, and individuals can (i) initiate contact and ensure continuity of your communications and (ii) access and save conducted conversations.
Please note that messages may be checked using automated systems or manual processes to ensure compliance with the terms of our service agreement, improve and develop our service, and prevent fraud, abuse, or misuse. The legitimate basis for this monitoring is our legitimate interest.
We reserve the right to block access to the messaging service if, in our judgment, we believe the messages may contain malicious content, spam, or pose a threat to Users, Individual Clients, and Professionals. Since SunLine Real Estate offers multiple forms of communication, Users, Individual Clients, and Professionals can communicate directly with you via the email address you provided, your phone number, or other communication channels not controlled by SunLine Real Estate.

c) User Registration and Password. Two-Step Verification for Added Security
When you register on the Website and Applications, you set a username and password that will allow you to log in at any time as a “Registered User” and, therefore, manage your relationship with SunLine Real Estate. This password can be changed.
It is important that you always keep your password secret and do not share it with third parties. It would be advisable not to use the same password across all your personal accounts, so in case any third party gains unauthorized access, they cannot access your various accounts on different websites.
Additionally, we provide a two-step verification system to enhance security and ensure that no one can access your account without your consent. With “two-step access” enabled, whenever we detect access from a device other than your usual one, we will send an SMS with a code to your mobile phone, which you will need to enter along with your password to log in. This is done to prevent identity theft and avoid fraud situations.

d) Information Collected from Online Identifiers or Cookies
When providing our services, we use third-party software and/or services to collect information when you browse or interact with content on our website and applications or those of companies affiliated with or owned by SunLine Real Estate. This includes information about the device you use.
The main purpose of collecting information through cookies is to better understand how you use our website and applications and interact with them, in order to improve your experience with our services and detect potential errors on our website and applications. The collected information includes, among other things:

IP address of your device
Screen size of the device you are using
Device type (unique device identifier) and browser information
Geographical location
Preferred language for display on our website
Pages visited
Date and time of page visits
For more information about passively collected information, please see our Cookie Policy.

e) SunLine Real Estate/tools: What Happens When You Integrate Your Google Account with SunLine Real Estate Software?
When you integrate your Google account with SunLine Real Estate’s software, we will export relevant information to provide you with a better experience with our service.

f) SunLine Real Estate/tools: What Data Do We Receive When You Integrate Your Google Account?
Google User: We will receive all your data as a Google user, including your name, surname, email address, and/or phone number, as well as encrypted messages in our databases.
Google Calendar: We will export information about events and activities from your calendar that are important for your business.

g) SunLine Real Estate/tools: Who Will Have Access to Your Data After Integration with Your Google Account?
After completing the integration of your Google account, both you and SunLine Real Estate (as administrators) will have access to the information relevant to the integration with SunLine Real Estate/tools.