PRIVACY POLICY

Data Controller
Corporate Name: Sotogrande Life Experience, hereinafter referred to as “The Company”.
Registered Address: DEL AGUA E-1, 1. 11310 San Roque (Cádiz)
Tax ID Number: CIF B72410236
Telephone: +44 7702 074813
Email: info@sotogrande-experience.com

1.1. Applicable Regulations
Our Privacy Policy has been designed in accordance with the General Data Protection Regulation of the EU 2016/679 of the European Parliament and of the Council, of April 27, 2016, relating to the
protection of individuals with regard to the processing of personal data and the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), and Organic Law
3/2018 of December 5, on Personal Data Protection and Guarantee of Digital Rights. By providing us with your data, you declare that you have read and know this Privacy Policy, giving your unequivocal
and express consent to the processing of your personal data according to the purposes and terms expressed herein. The Company may modify this Privacy Policy to adapt it to legislative, jurisprudential,
or interpretation novelties of the Spanish Data Protection Agency. These privacy conditions may be supplemented by the Legal Notice, Cookie Policy, and General Conditions that, where appropriate, are
collected for certain products or services, if such access involves any specialty in the field of personal data protection.

Purpose of Personal Data Processing


The processing we carry out of your personal data responds to the following: Collecting personal data such as email addresses allows the website to communicate with users, such as sending newsletters,
updates, or responding to inquiries.

Advertising measurement using Meta and HubSpot

We use HubSpot to manage property enquiries and record their qualification status.

Separately, with your optional consent, Sotogrande Life Experience shares your email address, telephone number, Meta advertising identifiers and the qualification status of your enquiry with Meta through HubSpot. This helps Meta match enquiries to its users, measure which advertisements generate qualified enquiries and optimise our advertising.

The legal basis for this advertising-related sharing is your consent. Giving consent is optional and is not a condition for receiving property information, having your enquiry answered or requesting a viewing.

You may withdraw this consent at any time by emailing info@sotogrande-experience.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Permission to respond to your property enquiry does not, by itself, constitute consent to this separate advertising-related sharing.

2.1. Data Retention Period

We retain personal data for as long as necessary to respond to your property enquiry, arrange viewings and assist with an active property search or purchase. We assess the need for continued retention based on the status of your enquiry, your most recent substantive contact with us and whether you have requested further assistance.

When your enquiry is closed and the data is no longer needed for these purposes, we delete it or permanently anonymise it, unless a separate lawful reason requires its retention.

Where processing is based on your consent, including sharing enquiry qualification data with Meta for advertising measurement and optimisation, you may withdraw that consent at any time by emailing info@sotogrande-experience.com. We will stop the processing covered by the withdrawn consent.

Limited records may be retained where necessary to demonstrate consent or its withdrawal, comply with legal obligations, or establish, exercise or defend legal claims. Such records will be kept only for the applicable retention period, with restricted access, and will not be used for advertising.

Legitimacy and Data Collected
The legitimacy for the processing of your data is the express consent granted by means of a positive  and affirmative act (filling in the corresponding form and checking the acceptance box of this policy) at
the time of providing us with your personal data.

3.1. Consent to process your data
By filling out the forms, checking the box “I accept the Privacy Policy” and clicking to send the data, or by sending emails to the Company through the accounts enabled for this purpose, the User declares to
have read and expressly accepted this privacy policy, and gives their unequivocal and express consent to the processing of their personal data in accordance with the purposes indicated.

3.2. Data Categories
The data collected would fall under the category of personal data. This might include information such as names, contact details, preferences, and other personal information necessary for providing services
or products we offer.

Security Measures
As part of our commitment to guarantee the security and confidentiality of your personal data, we inform you that the necessary technical and organizational measures have been taken to guarantee the security of personal data and prevent its alteration, loss, treatment, or unauthorized access, taking into account the state of the technology, the nature of the stored data, and the risks to which they are
exposed, according to Art. 32 of EU GDPR 679/2016.

Data Transfer
No data transfers or international transfers of your data are foreseen, except those authorized by tax, commercial, and telecommunications legislation, as well as in those cases where a judicial authority
requires it.

User Rights
Any interested party has the right to obtain confirmation as to whether or not we are processing personal data concerning them. Interested parties have the right to access their personal data, as well
as to request the rectification of inaccurate data or, where appropriate, request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
Under certain circumstances, data subjects may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defense of claims. For reasons related to their
particular situation, data subjects may object to the processing of their data. The Data Controller will cease processing the data, except for compelling legitimate reasons, or the exercise or defense of
possible claims. In accordance with current legislation, you have the following rights: the right to request access to your personal data, the right to request rectification or deletion, the right to request the
limitation of their treatment, the right to object to the treatment, the right to data portability, and also, to revoke the consent given. Likewise, you have the right to file a complaint with the Spanish Data
Protection Agency.

6.1. How to exercise my rights?
To exercise your rights, you must contact the data controller, requesting the corresponding form for exercising the chosen right. Optionally, you can contact the competent Control Authority to obtain
additional information about your rights. The contact details for exercising your rights are the telephone number +44 7702 074813 and the email address: info@sotogrande-experience.com.

Consent for Sending Electronic Communications

Likewise, and in accordance with the provisions of Law 34/2002, of July 11, on Information Society Services and Electronic Commerce, by completing the data collection form and checking the corresponding box “I accept the sending of electronic communications”, you are giving express consent to send information to your email address, telephone, fax, or other electronic means about the
Company