Skip to content
GREA España
EN

Version 2026-05-28 · Draft under legal review

Privacy policy

We collect as little as possible, are transparent about it, and never sell your data. Here's exactly how we handle it under the GDPR and Spain's LOPDGDD.

At GREA Spain we take your privacy seriously. This policy explains what data we collect through the sign-up and notification form and how we process it, in line with the General Data Protection Regulation (GDPR) and Spain's LOPDGDD.

What we collect

Only the essentials needed to run the sign-up list:

  • Your name and email address.
  • The segment you choose (professional or buyer), an optional region of interest and your language.
  • Optional details you choose to share — for buyers, where you're moving from, whether you're buying or renting and your timeframe; for professionals, your role and regions of operation.
  • Attribution data: the page that referred you and any campaign (UTM) parameters in the link you arrived through, stored alongside your email so we understand how people find GREA.
  • The date and version of the consent you accept.

Legal basis & purpose

We process your data on the basis of your explicit consent, via double opt-in — you confirm your subscription through a link we email you. The purpose is to keep you informed about the launch of GREA Spain, the directory and membership. We may use the optional details you provide and the attribution data above to send you more relevant information and to understand how people find us. We do not carry out automated decision-making that produces legal effects on you.

Retention

We keep your data while you remain subscribed or until you ask us to delete it. We store the version of this policy you accepted, and the timestamp, so we can evidence your consent.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability — and withdraw consent — at any time by writing to privacy@greaspain.org. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD).

Third parties

We use an email-delivery provider to handle confirmation and communications, and secure storage for the list. These providers act as processors under appropriate agreements. We do not sell or share your data with third parties for advertising.

Analytics & cookies

We use cookieless, privacy-respecting web analytics that does not personally identify you and requires no consent banner. The site sets no advertising or tracking cookies.

Security & international transfers

Data is stored on reputable infrastructure with encryption in transit. Where a provider processes data outside the EEA, we rely on adequacy decisions or standard contractual clauses.

Changes & contact

We may update this policy as the company evolves; the version and date above always reflect the current edition. Questions? Write to privacy@greaspain.org.