Privacy Policy

Last updated: 14 October 2026

This policy explains how Palancare collects and uses personal data when you visit palancare.com, contact us or work with us. We handle personal data in line with the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).

1. Who is responsible for your data

The data controller is Palancare, based in Madrid, Spain. You can contact us about anything related to your personal data at info@palancare.com or +34 671 653 361.

2. What data we collect

Enquiry form: whether you are an owner, investor or agent, your name, email address, phone number (optional) and the content of your message.

Correspondence: information you share with us by email, phone or in meetings, such as your investment criteria or details about a property you wish to sell.

Engagements: if we work together, identification and company details needed to sign agreements and NDAs and to carry out legally required checks.

Technical data: our hosting provider automatically processes basic technical information such as your IP address and browser type to deliver and secure the website.

3. Why we use your data and on what legal basis

To reply to your enquiry and take steps you request before entering into an agreement (Art. 6(1)(b) GDPR) or, where you contact us on behalf of a company, our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).

To provide our brokerage and advisory services under an agreement with you (Art. 6(1)(b) GDPR).

To meet our legal obligations, including tax, accounting and anti-money-laundering requirements that apply to real estate transactions (Art. 6(1)(c) GDPR).

To keep the website secure and working properly (Art. 6(1)(f) GDPR). We do not use your data for automated decision-making, and we will not send you marketing emails unless you have asked to receive them.

4. Who we share your data with

We never sell your data. We share it only with service providers that help us run our business, acting on our instructions: Webflow, Inc. (website hosting and form processing, United States), Namesco Ltd (email hosting, United Kingdom) and Google (email, United States).

Where needed for a transaction, we may share relevant details with professional advisers (such as lawyers and notaries) and, only with your agreement and usually under an NDA, with the other party to a deal. We may also disclose data where required by law or by a competent authority.

5. International transfers

Some of our providers process data outside the European Economic Area. Transfers to the United Kingdom are covered by an EU adequacy decision. Transfers to the United States rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. How long we keep your data

Enquiries that do not lead to an engagement are kept for up to two years and then deleted. Client and transaction records are kept for as long as the relationship lasts and afterwards for the periods required by law, for example up to ten years under Spanish anti-money-laundering rules.

7. Your rights

You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. To exercise these rights, email info@palancare.com. We will reply within one month.

If you are not satisfied with how we handle your data, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the supervisory authority in your country.

8. Security

The website is served over an encrypted (HTTPS) connection. We limit access to personal data to those who need it and treat all transaction information as confidential.

9. Cookies

Cookies are small files that a website stores on your device. This website does not use analytics, advertising or tracking cookies. It may use only strictly necessary technical cookies or similar storage that our hosting provider needs to deliver and secure the site. These do not require your consent under Spanish law (LSSI) and the GDPR.

If we add analytics or any other non-essential cookies in the future, we will ask for your consent first through a cookie banner and update this section. You can also block or delete cookies at any time in your browser settings.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.