Privacy & Cookies Policy

This Privacy & Cookies Policy applies to the website operated under the commercial name CASTAVA.

Data Controllers

The personal data collected through this website is jointly controlled by:

Agnieszka Sowula Płatek
NIF: Y5163185K
Avda. Diagonal 419, 3-1a
08008 Barcelona, Spain

Dominik Michał Poręba
NIF: Y9631214R
Calle Ausona 17, 4-1
08033 Barcelona, Spain

Commercial name: CASTAVA

Contact: info@castava.es +34 685 72 83 45

Purpose of Data Processing.

When you use this website, contact us, submit an enquiry, or request information about our services, we may process your personal data for the following purposes:

a) To provide access to the website and its content

We process technical data necessary to ensure the proper functioning of the website and to make our content available to users.

Legal basis: performance of a service requested by the user and legitimate interest.

b) To respond to enquiries

If you contact us through a form, email, phone, WhatsApp, or any other communication channel, we process your data in order to respond to your request.

Legal basis: legitimate interest and, where applicable, pre-contractual measures requested by you.

c) To provide real estate, relocation, rental, and property management services

If you request our services, we may process the data necessary to manage your request, search for properties, coordinate visits, communicate with owners, agencies, legal professionals, notaries, service providers, or other relevant parties.

Legal basis: performance of a contract or pre-contractual measures.

d) For administrative and legal purposes

We may process your data to comply with accounting, tax, legal, or regulatory obligations.

Legal basis: compliance with legal obligations.

e) For analytics and website improvement

We may process browsing information, including cookies or similar technologies, to analyse website usage, improve functionality, and enhance user experience.

Legal basis: consent, where required, or legitimate interest where applicable.

f) To protect our rights and interests

We may process personal data where necessary to establish, exercise, or defend legal claims.

Legal basis: legitimate interest.

3. Categories of Personal Data Processed

Depending on how you interact with us, we may process:

• name and surname

• email address

• phone number

• message content

• preferred location or property criteria

• information related to property search, rental, purchase, relocation, or property management requests

• IP address and browsing data

• cookies and similar identifiers

• any other information voluntarily provided by you

We only request and process data that is relevant and necessary for the purposes described above.

4. Data Retention Period

We will keep your personal data only for as long as necessary to fulfil the purpose for which it was collected.

In general:

• enquiry data will be kept for the time necessary to respond and follow up on your request

• client data will be kept for the duration of the business relationship and for the period required by applicable legal obligations

• data processed on the basis of consent will be kept until consent is withdrawn

• data required for legal claims may be kept for the applicable limitation period

After this period, the data will be securely deleted or anonymised.

5. Recipients of Personal Data

Your personal data may be disclosed, where necessary, to:

• hosting and IT service providers

• website and email service providers

• accounting, tax, legal, and administrative advisers

• real estate agencies, property owners, developers, or buyers, where necessary for the requested service

• notaries, registries, banks, insurance providers, architects, technicians, contractors, or maintenance providers

• public authorities, courts, or administrative bodies where required by law

• other third parties where you have given your consent or where disclosure is necessary to provide the requested service

All service providers are required to process personal data in accordance with applicable data protection laws.

6. International Data Transfers

As a general rule, we aim to process your data within the European Economic Area.

If personal data is transferred outside the European Economic Area, we will ensure that such transfer is carried out on a valid legal basis and with appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses, or other mechanisms permitted under applicable data protection law.

7. Your Data Protection Rights

You have the right to:

• access your personal data

• request rectification of inaccurate or incomplete data

• request deletion of your data

• request restriction of processing

• object to processing based on legitimate interest

• request data portability

• withdraw your consent at any time, where processing is based on consent

• object to direct marketing communications

To exercise your rights, you may contact us using the contact details provided on this website.

You also have the right to lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos (AEPD).

8. Cookies Policy

This website may use cookies and similar technologies to ensure proper functioning, improve user experience, analyse traffic, and, where applicable, support marketing activities.

Cookies are small files stored on your device when you visit a website.

9. Types of Cookies We May Use

Technical cookies

These cookies are necessary for the website to function correctly and to enable basic features such as navigation, security, and page loading.

Preference cookies

These cookies allow the website to remember information such as language, region, or user preferences.

Analytics cookies

These cookies help us understand how visitors use the website, which pages are visited, and how the website can be improved.

Marketing cookies

These cookies may be used to display relevant content or advertising and to measure the effectiveness of marketing campaigns.

10. Third-Party Cookies

This website may use third-party tools such as Google Analytics, Google Ads, Meta Pixel, or similar services.

These providers may process data according to their own privacy and cookie policies.

Non-essential cookies are only used where the required consent has been obtained, in accordance with applicable law. The Spanish Data Protection Agency’s cookie guidance requires clear information and consent management for non-essential cookies, including analytics or advertising cookies.

11. Managing or Disabling Cookies

You can manage your cookie preferences through the cookie banner or settings panel available on the website.

You can also disable or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

12. Updates to This Policy

We may update this Privacy & Cookies Policy from time to time to reflect legal, technical, or operational changes.

The latest version will always be available on this website.

Last updated: March 2026