Privacy
Privacy policy
Working draft: before publication it must be reviewed by a lawyer (GDPR and the Spanish LOPDGDD), in particular the controller details and retention periods. The Polish version is the original; the English version is a translation.
1. Who is the data controller
The controller is AR Marbella Real Estate, . Contact on data matters: .
2. What data we collect
On this page we collect only what you enter in the form: your first name and e-mail address. We also record technical data needed to prove your consent and to protect the form from abuse: the date and wording of the consent, your IP address, information about your browser, the page address, and campaign parameters from the link (e.g. utm_source) if you arrived from an advertisement or a link with such parameters.
3. Purposes and legal bases
- Sending the free e-book excerpt and messages about the e-book, its bonuses and the agency’s offer. Basis: your consent (Art. 6(1)(a) GDPR).
- Property and service offers from the agency (the second, voluntary consent). Basis: your separate consent. It is not a condition for downloading the excerpt.
- Confirming your e-mail address (double opt-in): we send the excerpt and later messages only after you click the confirmation link.
- Proving consent and defending claims, and protection against spam. Basis: the controller’s legitimate interest (Art. 6(1)(f) GDPR).
- Selling the e-book and services (if you buy): performance of a contract and accounting obligations. The terms describe the rules.
4. Withdrawing consent
You can withdraw your consent at any time by clicking “Unsubscribe” in any message or by writing to the controller. Unsubscribing withdraws all marketing consents you have given. Withdrawal does not affect the lawfulness of processing carried out before it.
5. Who receives your data
Technical service providers process data on our behalf:
- page hosting (Hostinger),
- database and server functions (Supabase), as part of the tool used to manage contact lists and messages (Funneldos),
- e-mail delivery (Resend),
- anti-spam verification of the form (Cloudflare Turnstile).
Some of these providers may process data outside the European Economic Area. This then takes place on the basis of GDPR-compliant mechanisms (e.g. standard contractual clauses). We do not sell your data.
6. How long we keep data
We keep data used to send messages until you withdraw your consent. After you unsubscribe, we keep a minimal record (the address, the fact of unsubscribing and the proof of consent) for as long as needed to defend possible claims and to avoid messaging you again. Data related to a sale is kept for as long as tax and accounting law requires.
7. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, data portability, to object to processing based on legitimate interest, and to withdraw consent. Write to the controller’s address. You also have the right to lodge a complaint with a supervisory authority: in Spain the Agencia Española de Protección de Datos (aepd.es), in Poland the President of the Personal Data Protection Office (uodo.gov.pl).
8. Cookies and tracking
The page does not use advertising or analytics cookies and does not track opens or clicks in messages. Your browser may keep campaign parameters from the link in session storage, only for the duration of your visit. The Cloudflare Turnstile verification may set its own technical bot-protection mechanism.
9. Providing data
Providing data is voluntary, but without a first name and e-mail address we cannot send you the e-book excerpt.
Last updated: 21 October 2026.