Privacy policy

1 · Controller

The controller of the personal data collected through this site is the entity identified in the legal notice.

• Trading name: Atlas Oikos RE Deals
• Email: contact@atlasoikosredeals.com
• Domain: atlasoikosredeals.com

2 · What data we collect

Data you give us. When you send the contact form, the opportunity request form or the email list form, we collect: full name, email address, telephone number (optional), the market you are interested in, the entry capital range you select, the content of your message, the reference of the opportunity the request comes from, the page you sent it from, the language of the site and the fact that you ticked the consent box.

Data collected automatically. If — and only if — you consent to analytics cookies, we collect browsing data: pages viewed, opportunities consulted, device, browser, approximate location derived from IP, and the source that brought you to the site. See the cookie policy.

We do not collect special categories of data, and you should not include them in the free-text message field.

3 · Why we use it, and on what legal basis

• To answer your enquiry and, where relevant, to take pre-contractual steps at your request — legal basis: performance of a contract or pre-contractual measures, Art. 6(1)(b) GDPR, together with your consent for the initial contact, Art. 6(1)(a).
• To send you new opportunities by email, if you subscribed — legal basis: your consent, Art. 6(1)(a). You can withdraw it at any time from any message we send.
• To measure how the site is used and to improve it — legal basis: your consent to analytics cookies, Art. 6(1)(a).
• To measure advertising performance, including enhanced conversions — legal basis: your consent to advertising cookies, Art. 6(1)(a). See section 6.
• To keep records and to defend against possible claims — legal basis: legitimate interest, Art. 6(1)(f), and compliance with legal obligations, Art. 6(1)(c).

4 · How long we keep it

Enquiries that do not lead to a transaction are kept for the time needed to answer them and, afterwards, for the period during which a claim could arise. Data relating to a completed transaction is kept for the retention periods required by commercial and tax law in the relevant jurisdiction. Consent to receive emails is kept until you withdraw it.

5 · Who we share it with

We do not sell personal data and we do not share it for third-party marketing. We use the following processors and service providers, each under a data processing agreement:

• Netlify — hosting of the site and receipt of the form submissions (United States).
• Google — Tag Manager, Analytics 4 and, where applicable, Google Ads conversion measurement (United States and the European Union), only after consent.
• Email provider — to receive and reply to your enquiry.
• Meta Platforms — only if you contact us through WhatsApp or Instagram, in which case their own privacy policy applies to that conversation.
• Local partners — agencies, developers, lawyers and notaries in the country where the property is located, and only when it is necessary to progress a transaction you have asked us to progress.

International transfers. Some of these providers process data in the United States. Those transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the provider is certified, and otherwise on Standard Contractual Clauses together with the supplementary measures the provider documents.

6 · Enhanced conversions and advertising measurement

If you consent to advertising cookies, when you send a form the site may transmit to Google, in irreversibly hashed form (SHA-256), your email address and, where provided, your telephone number and name. The purpose is solely to attribute a conversion to the advertising campaign that generated it. Google does not receive these fields in plain text and uses them for matching, not to build a profile for us.

This processing takes place only with your consent. If you do not consent, no identifier is transmitted. You can withdraw your consent at any time through the cookie preferences panel, and the transmission stops from that moment.

7 · Your rights

You may request access to your data, its rectification or erasure, the restriction of its processing, its portability, and you may object to processing based on legitimate interest. Where processing rests on your consent, you may withdraw it at any time, without affecting the lawfulness of what was done before.

To exercise these rights, write to contact@atlasoikosredeals.com from the address you gave us, indicating which right you wish to exercise. We may ask for reasonable evidence of your identity. We answer within one month and, if the request is complex, we will tell you and may extend that period by two further months.

If you believe your rights have not been respected, you may lodge a complaint with the supervisory authority of your country of residence — in Spain, the Agencia Española de Protección de Datos (aepd.es).

8 · Security, minors and automated decisions

The site is served entirely over HTTPS and the forms are transmitted encrypted. Access to the submissions is limited to the people who need it to answer them. No security measure is absolute, and we do not warrant that a breach can never occur; if one does and it presents a risk to your rights, we will notify you and the supervisory authority as the GDPR requires.

This site is not directed at minors and we do not knowingly collect their data. We do not take decisions producing legal effects about you based solely on automated processing, and we do not carry out profiling in that sense.

9 · Changes to this policy

This policy may be updated. Substantial changes will be flagged on the site, and where the change affects processing based on consent, we will ask for it again.