Legal notice
Privacy Policy
Version 1.1 — Last updated: May 20, 2026
1. Data controller
The data controller for personal data collected through this website is:
Legal name: Ofertatucasa Consultores, S.L.
CIF: B75635573
Registered office: Avinguda de Segarra, 39, 03320 La Torre del Pla, Alicante ( Spain)
Contact email: info@aterrizaespana.com
Phone: +34 965 063 127
Aterriza España is a trade name owned by Ofertatucasa Consultores, S.L. Data collected through any form, instant messaging channel or social media account associated with the Aterriza España brand is processed by Ofertatucasa Consultores, S.L. as data controller.
2. Personal data we collect
Depending on how the user interacts with the website and the brand, we may collect the following data:
2.1. Data provided via the contact/lead form:
- Identifying data: full name, email address, phone number.
- Geographic origin: country and, where applicable, state or region of origin.
- Destination preferences: desired area in Spain, reason for moving.
- Composition of the family or travel group: number of adults, number of children and their ages, pregnancy status, presence and details of pets.
- Migration project: type of housing sought, expected arrival date, requested services, free-text comments.
- Economic data voluntarily provided: estimated monthly rental budget, group monthly income, available savings, possession of driving licence.
2.2. Data provided via instant messaging or social media:
- Data contained in messages voluntarily sent via WhatsApp Business, Instagram or TikTok direct messages, or any other channel enabled by the brand.
- Identifier or username on the platform used.
2.3. Browsing data collected automatically:
- IP address, browser type, operating system, browser language, date and time of visit, pages viewed, traffic source (referrer), cookie identifiers and similar technologies. More information in the Cookie Policy.
2.4. Contracting and payment data:
- Billing data: name and surname, postal address, country of residence and, where applicable, tax number.
- Transaction details: contracted service, amount, currency, date, unique transaction identifier.
- Card data (tokenised): Aterriza España does not store or have access to the full card number, CVV code or expiration date. These data are collected directly by the Stripe platform in a PCI-DSS certified environment. Ofertatucasa Consultores, S.L. only receives a transaction identifier (token) and the last four digits of the card for subsequent transaction identification purposes.
We do not collect special categories of data within the meaning of article 9 GDPR (health data, ethnic origin, political opinions, religious beliefs, biometric data, etc.). If the user voluntarily provides data of this nature in a free-text field, their explicit consent will be required for processing or, failing that, such data will be deleted.
3. Purposes of processing and legal bases
The personal data collected will be processed for the following purposes:
| Purpose | Legal basis |
|---|---|
| Respond to the user's enquiry and prepare a tailored service proposal. | Consent of the data subject (art. 6.1.a GDPR) and, where applicable, pre-contractual measures (art. 6.1.b GDPR). |
| Provide relocation advisory services, housing search and administrative settlement. | Performance of a contract (art. 6.1.b GDPR). |
| Process payment for the contracted service, issue the corresponding invoice and manage refunds when applicable. | Performance of a contract (art. 6.1.b GDPR) and compliance with legal obligation (art. 6.1.c GDPR). |
| Comply with tax, accounting and administrative obligations. | Compliance with legal obligation (art. 6.1.c GDPR). |
| Sending commercial communications about our own services. | Express and independent consent (art. 6.1.a GDPR and art. 21 LSSI-CE). |
| Statistical analysis of traffic, site improvement and advertising effectiveness measurement. | Consent (art. 6.1.a GDPR), provided through the cookie banner. |
| Retention of communications for evidentiary purposes. | Legitimate interest of the controller (art. 6.1.f GDPR). |
Consent given for each purpose can be withdrawn at any time, without affecting the lawfulness of prior processing.
4. Retention periods
- Leads who do not contract: one (1) year from the last significant interaction, a period justified by the typical duration of the migration decision cycle.
- Clients who contract: during the term of the contractual relationship and, once it ends, for the periods required to comply with tax, accounting and statute of limitations obligations (minimum six (6) years under the Spanish Commercial Code).
- Payment and billing transaction data: six (6) years, in accordance with article 30 of the Spanish Commercial Code and applicable tax regulations.
- Commercial communications: until the data subject withdraws their consent.
- Browsing data: as set out in the Cookie Policy.
- Messaging and social media messages: for the time necessary to handle the conversation and thereafter in accordance with the retention policy of the respective platform.
Once these periods have elapsed, data will be deleted, blocked or anonymised in accordance with applicable regulations.
5. Recipients of the data
Personal data may be disclosed to the following recipients, all bound to the controller by a data processing agreement under article 28 GDPR:
- OVH Groupe, S.A.S. — web hosting provider. Data hosted on servers in the European Union.
- Lead management software provider (CRM/ERP): proprietary system of Ofertatucasa Consultores, S.L.
- Google Ireland Limited — Google Analytics 4 and Google Tag Manager.
- Meta Platforms Ireland Limited — Meta Pixel for Facebook and Instagram.
- TikTok Information Technologies UK Limited — TikTok Pixel.
- Cybot A/S (Cookiebot) — cookie consent management. Data processed in the European Union.
- WhatsApp Ireland Limited (Meta) — WhatsApp Business messaging services.
- Stripe Payments Europe, Ltd. — card payment processing platform. Stripe acts as an independent data controller for payment data that the user enters directly into its PCI-DSS certified environment, and as a data processor for transaction data received from Ofertatucasa Consultores, S.L. Headquartered at 1 Grand Canal Street Lower, Grand Canal Dock, Dublin (Ireland). Stripe Privacy Policy.
- Ofertatucasa Consultores S.L.'s tax and accounting consultancy, only when the lead becomes a client and for the fulfilment of legal obligations.
No data is transferred to third parties for commercial purposes. No automated individual decisions or profiling with legal effects on the data subject are carried out.
6. International data transfers
Some of the recipients mentioned above (Google, Meta, TikTok, Stripe) may transfer data to the United States. These transfers are carried out under:
- The European Commission's Adequacy Decision regarding the EU–US Data Privacy Framework (Decision 2023/1795), for certified adhered entities.
- The Standard Contractual Clauses (SCC) approved by the European Commission (Decision 2021/914), as supplementary safeguards.
- Technical and organisational measures implemented by the processors (in-transit encryption, access controls, etc.).
If the user resides or is located in Brazil at the time of providing their data, processing is additionally governed by the Brazilian General Data Protection Law (LGPD, Law no. 13,709/2018). Brazil has a regulatory framework equivalent to the GDPR that recognises analogous rights to data subjects. Ofertatucasa Consultores, S.L. acts as the controller within the meaning of article 5.VI LGPD.
7. Rights of the data subject
As the data subject, the user has the following rights recognised by the GDPR and the LOPDGDD:
- Right of access to your personal data.
- Right of rectification of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten").
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing and to direct marketing.
- Right not to be subject to automated decisions, including profiling.
- Right to withdraw consent at any time.
Users whose data is subject to Brazilian LGPD additionally have rights such as: confirmation of the existence of processing, anonymisation, blocking or deletion of unnecessary data, information about the entities with which data is shared, and information about the possibility of not consenting and the consequences of refusal (art. 18 LGPD).
How to exercise these rights
The user may exercise any of these rights by sending a request to info@aterrizaespana.com, clearly indicating the right they wish to exercise and attaching a copy of their identity document or passport to verify their identity. The request will be addressed within a maximum period of one month from its receipt, extendable by two additional months depending on the complexity and number of requests.
Right to lodge a complaint with the supervisory authority
If the user believes that the processing of their personal data infringes applicable regulations, they have the right to lodge a complaint with:
- In Spain: Spanish Data Protection Agency (AEPD), calle Jorge Juan 6, 28001 Madrid, www.aepd.es.
- In Brazil: National Data Protection Authority (ANPD), www.gov.br/anpd.
8. Security measures
Ofertatucasa Consultores, S.L. has implemented appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing, in accordance with article 32 GDPR. These measures include, among others:
- Encryption of communications via HTTPS/TLS protocol.
- Role-based access control and strong authentication for authorised personnel.
- Internal security incident management policy.
- Periodic audits and staff training on data protection.
- Selection of data processors with sufficient guarantees for GDPR compliance.
9. Cookies and similar technologies
This website uses its own and third-party cookies for different purposes. Detailed information is available in our Cookie Policy, permanently accessible from the cookie settings banner and the footer of the website.
10. Minors
The services offered by Aterriza España and the forms available on this website are aimed exclusively at persons over 18 years of age. We do not deliberately collect or process personal data of minors without the verifiable consent of their parent or legal guardian.
If a parent or guardian detects that a minor in their care has provided personal data through this website, they should contact us at info@aterrizaespana.com so that such data is deleted as soon as possible.
11. Modifications to this Privacy Policy
Ofertatucasa Consultores, S.L. reserves the right to modify this Privacy Policy to adapt it to legislative, case-law or service developments. Any modification will be published on this same page, indicating the date of the last update at the beginning of the document.
We recommend that the user review this Policy periodically. In case of substantial modifications affecting consent-based processing, consent will be requested again.
12. Applicable law and jurisdiction
This Privacy Policy is governed by Spanish law, in particular Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE). Additionally, with respect to data subjects residing in Brazil, the General Data Protection Law (LGPD, Law no. 13,709/2018) applies.
For the resolution of any dispute arising from the processing of personal data, the parties submit to the Courts and Tribunals of Alicante (Spain). However, when the user acts as a consumer or user under Royal Legislative Decree 1/2007, the competent court shall be the one corresponding to the consumer's domicile, in accordance with Article 90.2 of said consolidated text.