Privacy policy

The data controller for your personal data is:

DATA CONTROLLER

Madis Realty, S.L.

CIF

B72589369

ADDRESS

Calle Gran Vía, 4, 28013 Madrid

PHONE NUMBER

+34 910 786 916

Our full details are set out in the Legal notice.

You can contact us about anything to do with your data through the contact form on this website, or by writing to the email address given in the Legal notice, saying in the subject line that it is about data protection.

We process only the data you give us and the data your visit generates. We do not buy databases, and we do not get your data from third parties without telling you. The data marked as required in each form is the minimum we need in order to help you; without it we cannot help you. Everything else is optional.

• Contact details: your name, phone number, email address, country of residence and the language you would like us to reply in, when you write to us through one of the forms on this website or call us.
• Data that reaches us through a property portal: if you write to us through a property portal, the portal passes on the details you gave it: name, phone number, email address and your message.
• Details of your enquiry: what you tell us: what you are looking for, which development or which particular home you are interested in, whether you would like us to send you its fact sheet as a PDF, and anything else you choose to add.
• Data from our contractual relationship: if you reserve or buy: identity document, address, bank details and the data required under the anti-money-laundering rules.
• Details of your call: the number you call from, the date, how long the call lasted and how it ended; the reason for your call or the message you leave, with your name and the number you would like us to call you back on; and, if you call outside office hours or nobody can take your call, the message you record on our voicemail after the tone, which is transcribed automatically for the team to read. We do not record conversations with our team.
• How we handle your call: during office hours your call is answered first by an automated voice assistant that uses artificial intelligence: it understands why you are calling, takes a message and puts you through to the right person; you can ask to speak to a person at any time. To greet you by name and put you through to whoever is handling your enquiry, we check whether your number is already in our contacts database. The conversation with the assistant is transcribed and kept for the same length of time as the rest of the call data.
• Data on how you reached us: which page of this website you write to us from, which site brought you here and any campaign parameters the link carried. This reaches us with the form, or when you open a chat, at the moment you press send, and it is also recorded in the usage measurement explained below. If you come in through the QR code on one of our hoardings, we record that you arrived that way, using data that cannot identify you. This website does not install cookies; the only thing it stores in your browser is the identifier for your chat, as the Cookie policy explains. We do not store your IP address alongside your data: it appears only in our hosting providers' technical security logs, and only for a few days.
• Data from your visit to this website: we record on our own server what happens on the website, so that we know what is being looked at and what works: the pages that are visited, the download of a home's fact sheet as a PDF, the sending of a form, the opening of the chat, clicks on the phone number, on WhatsApp, on the email address or on «Reserve», the sending of a fact sheet to someone else, the filters you use in the home selector (including searches that find nothing) and addresses that do not exist. For each of them we store the page, the language you are reading it in, your browser's language, the type of device and the operating system, and the domain of the site that brought you here. We measure it with our own tools, without Google Analytics or any other third-party tool. This measurement does not install any cookie, does not store anything in your browser and does not check the characteristics of your device. Your IP address and your browser are used only at that moment, to work out the type of device and to calculate a code that changes every day, that cannot be reversed and that lets us count people without knowing who they are: neither the IP address nor the browser is stored. Nothing you write ever goes into these records; from a filter we record a fixed label, for example «bedrooms: 3». These records are not linked to your file or to anything you tell us, so we cannot know which of them are yours.
• Data from your chat: what you write in the chat on the website and any files you choose to attach (images or PDFs), your name and, if you leave them with us, an email address or a phone number so that we can reply. Before your first message, the chat asks for your name and the reason for your enquiry. During office hours the email address is optional: without it we can only reply while you keep the window open. Outside office hours we do need it, because your enquiry reaches us as a request and we reply by email.
• Data from WhatsApp: if you write to us on WhatsApp on the number we publish: your number, your profile name and your messages. They arrive in the same inbox as the chat and are kept for the same length of time. We do not currently receive images or files through this channel. WhatsApp also processes your data as the messaging service, under its own policy.
• Data from our correspondence: the emails you send us and the ones we send you, with their attachments, are kept with your file so that we can keep track of your enquiry or your transaction. When we write to you, the provider we use to send email tells us whether the message was delivered and whether it was opened; it does not record where you were or what device you used.

Each processing operation has a specific purpose and a legal basis that permits it. Here is the full list:

PURPOSE

Answering your enquiry and preparing a proposal for you

LEGAL BASIS

Your request: steps taken at your request before entering into a contract

RETENTION

2 years from the last contact

PURPOSE

Answering you in the chat on the website and keeping track of the conversation

LEGAL BASIS

Your request: steps taken at your request before entering into a contract

RETENTION

2 years from the last message; 90 days if the conversation ends with no contact details

PURPOSE

Knowing who we are talking to and how to address you when we reply

LEGAL BASIS

Answering your enquiry: it is part of what you tell us when you start the conversation

RETENTION

2 years from the last message; 90 days if the conversation ends with no contact details

PURPOSE

Answering your call with an automated assistant, recognising you by your number and putting you through to the right person

LEGAL BASIS

Legitimate interest in answering calls quickly; steps before a contract when you call for information

RETENTION

2 years from the call; if there is a transaction, the period that applies to it

PURPOSE

Handling our correspondence with you by email

LEGAL BASIS

Your request or the contract

RETENTION

2 years from the last contact; if there is a transaction, the period that applies to it

PURPOSE

Knowing which page, which hoarding or which campaign brought you to us

LEGAL BASIS

Legitimate interest in measuring what works on our website

RETENTION

The same period as the enquiry it comes with

PURPOSE

Measuring how this website is used: what is visited, what is downloaded and what is searched for

LEGAL BASIS

Legitimate interest in knowing whether our website works and in improving it

RETENTION

25 months from each record

PURPOSE

Putting in place and carrying out a reservation or a purchase

LEGAL BASIS

Performance of the contract

RETENTION

The relationship and 6 years afterwards

PURPOSE

Meeting tax, accounting and anti-money-laundering obligations

LEGAL BASIS

Legal obligation

RETENTION

The period set by each rule; 10 years under the anti-money-laundering rules

PURPOSE

Sending you news about our developments, if you have agreed to it

LEGAL BASIS

Your consent, which you can withdraw at any time

RETENTION

Until you withdraw it

PURPOSE

Giving you access to the client area or the supplier area

LEGAL BASIS

Performance of the contract or legitimate interest in the professional relationship

RETENTION

For as long as the access is active

PURPOSE

Defending our rights against a claim

LEGAL BASIS

Legitimate interest

RETENTION

Until the limitation period expires

We do not take automated decisions that affect you, and we do not use your data for profiling.

The specific periods are set out in the table above. As a rule, we keep your data for as long as you have a relationship with us and, after that, we keep it blocked for as long as any legal liability could arise from it. Once that period is up, it is erased.

If you write to us and we do not end up working together, we delete your data two years after the last contact.

We do not sell your data or pass it to third parties so that they can offer you anything. There are only two cases in which it leaves Madis Realty:

• Providers of the services we use: hosting and database, sending and receiving email, telephony and the voice assistant, instant messaging, voice transcription and internal management tools. All of them act as data processors, under a signed contract and on our instructions.
• When the law requires it: public authorities, courts, notaries, registries, financial institutions and the anti-money-laundering authorities, as part of a purchase or to meet a legal obligation.

If you enter into a contract with us, some data is also passed to the professionals involved in the transaction, such as the notary, the financial institution or the gestoría that handles the paperwork, purely so that they can process it.

Some of our providers, those for telephony, instant messaging, email delivery and voice transcription, are established in the United States or process part of the data there. They do so with the safeguards of Chapter V of the GDPR: certification under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission. You can ask us for a copy of those safeguards by writing to us as explained in section 07.

You can exercise the following rights at any time and free of charge:

• Access: find out what data we hold about you and what we do with it.
• Rectification: correct anything that is inaccurate or incomplete.
• Erasure: ask us to delete it when it is no longer needed.
• Objection and restriction of processing: object to processing based on legitimate interest, or ask us to restrict it while the matter is resolved.
• Portability: receive the data you have given us in a readable format.
• Withdrawing consent: at any time, without affecting anything done before you withdrew it.

To exercise them, write to us using the contact form and tell us which one you want to exercise. We may ask you to prove your identity. We will reply as soon as we can.

If you believe we have not dealt with you properly, you can lodge a complaint with the Agencia Española de Protección de Datos (the Spanish Data Protection Agency, www.aepd.es), C/ Jorge Juan 6, 28001 Madrid.

We apply technical and organisational measures to protect your data: encryption in transit; access by role, so that each person sees only what they need for their work; personal, non-transferable log-in details; and daily backups.

This policy may change if our services, our providers or the rules do. The version in force is always the one published here, with the date it was updated at the top of the page. If a change affects you significantly and we have a way of reaching you, we will let you know.