Privacy Policy
How we handle your personal data under EU GDPR and Spanish law (LOPDGDD 3/2018).
Last updated: 6 July 2026
1. Data controller
The data controller of the personal data collected through this website is LaCostaBlanca.com, operating from Alicante, Costa Blanca, Spain. Contact: hello@lacostablanca.com.
2. What data we collect
- Contact data you submit via forms (name, email, phone, message).
- Newsletter data (email address, language preference).
- Property enquiry data (contact details and message body).
- Technical data collected only with your consent: IP address (anonymised), browser, device type, pages viewed, referrer.
3. Legal basis (Art. 6 GDPR)
- Consent — analytics cookies, newsletter subscription.
- Contract / pre-contract — replying to enquiries and property requests.
- Legitimate interest — securing the site and preventing abuse.
- Legal obligation — tax, accounting and LSSI-CE record-keeping.
4. Retention
Enquiry data is kept for up to 24 months after last contact. Newsletter data is kept until you unsubscribe. Analytics data is kept for 14 months. Data required by law is kept for the legal retention period (generally 4–6 years).
5. Recipients & international transfers
We share data only with processors who help us run the site: hosting (Cloudflare / EU-region Lovable Cloud), email delivery, and Google Analytics (Google Ireland Ltd, with data transfers to the US under the EU-US Data Privacy Framework). We do not sell personal data.
6. Your rights
You have the right to:
- Access, rectify or erase your personal data.
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time (without affecting past processing).
- Lodge a complaint with the Spanish Data Protection Agency (AEPD).
To exercise these rights, email hello@lacostablanca.com with proof of identity.
7. Cookies
We use cookies only after you accept them via our consent banner. See our Cookie Policy for details.
8. Security
The site uses HTTPS everywhere and reputable EU-based processors. No online transmission is 100% secure, but we apply the technical and organisational measures required by Art. 32 GDPR.
9. Changes
We may update this policy to reflect legal or operational changes. The "last updated" date above always shows the current version.