Privacy Policy

1. Data Controller

Spanienfastigheter.se is the data controller for the processing of your personal data. You can contact us at:

Email: info@spanienfastigheter.se

Website: www.spanienfastigheter.se

2. Data We Collect

We collect the following categories of personal data:

• Contact details: Name, email address, phone number — when you fill in contact forms, book a viewing trip or contact us.

• Account data: Email address and profile information — when registering via Clerk (our authentication service).

• Property inquiries: Information about properties you are interested in, housing preferences, budget and timeframe.

• Technical data: IP address, browser type, device information and page views — via PostHog analytics (EU-hosted).

• Cookies: See our cookie policy for details.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds (Article 6, GDPR):

• Consent (Article 6.1a): When you actively accept cookies for analytics or marketing.

• Contract (Article 6.1b): When we process data to provide our services, e.g., handle your property inquiry or viewing trip.

• Legitimate interest (Article 6.1f): To improve our website and services, and to prevent fraud.

• Legal obligation (Article 6.1c): When we must comply with legal requirements, e.g., accounting regulations.

4. How We Use Your Data

• Handle and respond to property inquiries.

• Organise and conduct viewing trips.

• Send relevant information about properties and services (with your consent).

• Improve website functionality and user experience.

• Comply with legal obligations.

5. Third-Party Services

We share personal data with the following trusted third-party providers who process data on our behalf:

• Clerk — Authentication and account management. Clerk processes login credentials and manages sessions. Read Clerk's privacy policy at clerk.com.

• PostHog — Web analytics. EU-hosted (eu.i.posthog.com). Collects anonymised usage statistics to improve the website.

• Convex — Backend and database. Stores property data and user inquiries.

• Vercel — Hosting. The website is hosted on Vercel which may process IP addresses and technical logs.

• Google Maps / Mapbox — Map display. May set their own cookies and collect location data.

• Resend — Email service. Used to send emails from us to you.

We ensure all third parties have adequate safeguards through Data Processing Agreements (DPA) in accordance with GDPR.

6. Transfers Outside the EU/EEA

Some of our third-party providers may process data outside the EU/EEA. In such cases, we ensure transfers comply with GDPR Chapter V, for example through the European Commission's Standard Contractual Clauses (SCC) or the provider's certification under the EU-US Data Privacy Framework.

7. Data Retention

We store your personal data for as long as necessary for the purpose of processing:

• Contact and inquiry data: Up to 24 months after last contact, if no customer relationship is established.

• Account data: As long as you have an active account.

• Analytics data: Up to 26 months (anonymised thereafter).

• Accounting data: 7 years under Swedish accounting law.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — Request a copy of the data we hold about you.

• Right to rectification — Correct inaccurate data.

• Right to erasure ("right to be forgotten") — Request deletion of your data.

• Right to restriction — Restrict how we process your data.

• Right to data portability — Receive your data in a machine-readable format.

• Right to object — Object to processing based on legitimate interest.

• Right to withdraw consent — You may withdraw your consent at any time.

Contact us at info@spanienfastigheter.se to exercise your rights. We will respond within 30 days.

9. Complaints

If you believe we process your personal data in violation of GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY):

Integritetsskyddsmyndigheten (IMY)

Box 8114, 104 20 Stockholm, Sweden

imy.se

10. Changes

We may update this privacy policy. For significant changes, we will inform you via the website. The latest version is always available on this page.