Privacy Policy

Last updated: 23 July 2026

Data Controller

The controller responsible for processing the personal data collected through this website is:

MYSPOT BARCELONA, S.L.
Tax Identification Number (CIF): B13765417
Registered address: Av. de Mistral 18, 7th Floor, Door 3, 08015 Barcelona, Spain
Telephone: +34 674 63 63 73
Email: info@myspotbarcelona.com

Hereinafter, MySpot Barcelona.

Personal Data Processed

MySpot Barcelona may process the data provided by users through the website forms, by email, telephone or other contact channels, including:

• name and contact details;
• information included in the enquiry;
• information relating to the search, purchase, sale or rental of a property;
• budget, preferences and property requirements;
• documentation provided during a professional relationship;
• technical and browsing data collected through authorised cookies.

Users are requested not to provide particularly sensitive personal data that is not necessary to respond to their enquiry or provide the requested service.

Purposes and Legal Bases

Personal data may be processed for the following purposes:

Responding to Enquiries and Requests

To respond to forms, telephone calls, emails and requests for information.

The legal basis is taking pre-contractual measures at the request of the data subject and, where necessary, the consent provided by the user.

Providing Real Estate Services

To manage property purchase and sale, rental, real estate brokerage and buyer representation services, as well as to coordinate the actions required for the transaction.

The legal basis is the performance of the contract or professional engagement entered into with the client.

Compliance with Legal Obligations

To comply with tax, accounting, administrative and anti-money-laundering obligations, as well as any other applicable legal requirements.

The legal basis is compliance with legal obligations.

Sending Marketing Communications

Where the user has expressly authorised it, MySpot Barcelona may send information about its services, content and news.

The legal basis is consent, which may be withdrawn at any time.

Acceptance of this Privacy Policy does not, in itself, constitute authorisation to receive advertising. The Spanish Data Protection Agency distinguishes between providing information about data processing and requesting consent for a specific purpose.

Retention Periods

Personal data will be retained for the following periods:

• Enquiries that do not result in a contractual relationship: for the time required to respond and carry out the requested follow-up, up to a maximum of 12 months from the last communication.
• Clients and property transactions: throughout the professional relationship and subsequently for the statutory periods required to comply with legal obligations and address potential liabilities.
• Marketing communications: until the user withdraws their consent or requests to stop receiving them.
• Data obtained through cookies: for the periods stated in the Cookie Policy.

When the data is no longer required, it will be deleted or restricted for the periods required by law.

Recipients and Service Providers

Personal data will not be sold or disclosed to third parties for their own commercial purposes.

Where necessary to respond to an enquiry or provide the contracted service, personal data may be disclosed to:

• lawyers, architects, technical professionals and advisers;
• notaries, registries and public authorities;
• financial institutions, property valuers or mortgage intermediaries;
• property owners, buyers, sellers, landlords, tenants and collaborating agencies;
• providers of technology, web hosting, email, CRM, storage, document management and IT support services;
• authorities and public bodies where a legal obligation applies.

Service providers processing personal data on behalf of MySpot Barcelona must do so in accordance with the company’s instructions and applicable data protection legislation.

International Data Transfers

Some technology providers may be established outside the European Economic Area or may process personal data from other countries.

Where an international data transfer takes place, MySpot Barcelona will apply the safeguards required by the GDPR, such as adequacy decisions, Standard Contractual Clauses or other legally recognised mechanisms. International transfers are transfers made to recipients located outside the European Economic Area.

Users may request information about the safeguards applied by writing to info@myspotbarcelona.com.

Rights of Data Subjects

Users may exercise the following rights:

• access to their personal data;
• rectification of inaccurate data;
• erasure of their personal data;
• objection to processing;
• restriction of processing;
• data portability;
• withdrawal of consent at any time.

To exercise these rights, users must write to info@myspotbarcelona.com, stating the right they wish to exercise and providing the information required to verify their identity where necessary.

The withdrawal of consent will not affect the lawfulness of any processing carried out before its withdrawal.

Users may also lodge a complaint with the Spanish Data Protection Agency if they believe that their rights have not been properly addressed.

Required Nature of the Data

Fields identified as mandatory in the forms are required in order to process the request.

Failure to provide this information may prevent MySpot Barcelona from responding to the enquiry or providing the requested service.

Users guarantee that the information provided is accurate, complete and up to date. Where users provide personal data relating to another person, they must be authorised to do so and must inform that person about this Privacy Policy.

Automated Decision-Making

MySpot Barcelona does not make decisions that produce legal effects for users based solely on automated processing, nor does it carry out automated profiling that produces such effects.

Security

MySpot Barcelona applies reasonable technical and organisational measures to protect personal data against loss, alteration, unauthorised access or unlawful processing.

However, no system connected to the Internet can guarantee absolute security.

Cookies

The processing of data collected through cookies and similar technologies is governed by the Cookie Policy and the settings panel available on the website.

Amendments

MySpot Barcelona may amend this Privacy Policy where necessary to reflect legal or technical changes, or changes relating to its personal data processing activities.

The applicable version will be the version published on the website, together with the date of its most recent update.