Legal
Privacy Policy
What is processed when you visit this site or send an enquiry — and the rights you have.
Editorial note: this privacy policy is a template. Before launch, complete the controller, hosting provider, recipients, retention periods and any tools in use, and have it reviewed by a qualified lawyer.
1. Controller
The controller for data processing on this website is: [to be completed by the operator]. Contact details are in the legal notice.
Data protection officer, where appointed: [to be completed by the operator]
2. Hosting and server log files
This website is hosted by [to be completed by the operator]. When a page is requested, access data is automatically processed in server log files.
- IP address of the requesting device
- date and time of the request
- page requested and volume of data transferred
- referrer URL
- browser type, browser version and operating system
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Log files are deleted according to the retention periods configured at the host.
3. Enquiry and contact forms
When you submit a form on this website, we process the details you enter in order to handle your enquiry.
- Mandatory fields: name (or first and last name) and email address
- Optional fields: phone/WhatsApp, budget, property type sought, bedrooms, timing, message
- Technical attribution data: the page URL of the enquiry, project reference, property reference, language, referrer and the campaign parameters utm_source, utm_medium, utm_campaign and utm_content
- Your consent to processing and the time of submission
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and/or Art. 6(1)(a) GDPR (consent). Data is deleted once it is no longer required and no statutory retention obligation applies.
4. Recipients and international transfers
Enquiries may be shared with service providers and partners in order to answer them, for example a CRM system or partners handling the response: [to be completed by the operator].
Where personal data is transferred to a third country outside the EU/EEA — in particular to the United Arab Emirates — this happens only on the basis of appropriate safeguards under Art. 44 et seq. GDPR, such as standard contractual clauses, or with your explicit consent under Art. 49(1)(a) GDPR.
5. Cookies and analytics
As shipped, this website sets no marketing or analytics cookies and loads no external fonts or tracking services.
If analytics or marketing services are added later, they will run only after prior consent through a consent banner, and this policy will be extended accordingly.
6. Your rights
- Access to the data processed (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interests (Art. 21 GDPR)
- Withdrawal of consent with future effect (Art. 7(3) GDPR)
- Complaint to a supervisory authority (Art. 77 GDPR)
7. Data security
Transmission is encrypted via HTTPS. We apply technical and organisational measures to protect your data against loss, manipulation and unauthorised access.
8. Changes to this policy
This policy is updated whenever processing changes — for example through new features or service providers. The version published on this page applies.