Legal information
Last updated: October 2026
Legal notice
In accordance with Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE), we inform you that this website is owned by:
- Owner
- Spiral Properties SL (hereinafter, “THE OWNER”)
- Tax ID (NIF)
- B22475578
- Company registration
- Registered with the Barcelona Commercial Registry, volume/I.R.U.S. 1000450384875, folio 1, sheet B-635369, 1st entry
- Registered office
- Sexta Avenida, 35, 08629 Torrelles de Llobregat (Barcelona)
- Phone
- +34 722 61 55 42
- Professional registrations
- Anna: real estate agent registered with the Catalan Register of Real Estate Agents, AICAT no. 13979, and member of A.N.P.I.F.F. no. 2200. Pol: real estate credit intermediary (ICI) registered with the Bank of Spain under no. D986.
Intellectual and industrial property
The contents of this website, including texts, images and graphic designs, belong to THE OWNER or to third parties who have authorised their use. THE OWNER presents these contents for information and promotional purposes and authorises their use solely for these purposes. Any use of these designs, images or texts must expressly state that they belong to THE OWNER, who reserves the right to take appropriate legal action to remedy any damage.
Disclaimer
THE OWNER acts with the utmost diligence to keep the data and information on this website up to date at all times, but does not guarantee and is not responsible for the accuracy or currency of its contents, and reserves the right to modify them at any time. THE OWNER shall not be responsible for information obtained through links included on the website.
Business relationships with clients shall be governed by any general terms and conditions established by THE OWNER in a specific document for that purpose, or by the specific agreements reached with clients.
Terms of use
Use of this website implies full acceptance of the terms of this legal notice. Any disputes relating to this website shall be governed exclusively by Spanish law. All users, regardless of the territorial jurisdiction from which they access the website, accept these terms and expressly waive any other jurisdiction that may apply, without prejudice to the rights legally granted to users who are consumers.
Privacy policy
THE OWNER is committed to protecting the privacy of visitors to this website. This policy explains what personal data we process, why, and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). It does not apply to third-party websites or social networks we link to, which have their own policies.
Key information
- Controller
- THE OWNER. Contact details are in the legal notice.
- Purpose
- To respond to your contact and valuation requests, and to provide and manage our real estate and mortgage intermediation services.
- Legal basis
- Your consent when you send us your details, and pre-contractual steps or the performance of the services contract.
- Recipients
- We do not share your data with third parties unless required by law. We rely on providers who process it on our behalf (see below).
- Your rights
- Access, rectification, erasure, objection, restriction of processing and portability.
- Retention
- For as long as the relationship lasts or as required to meet legal obligations.
- Complaints
- You may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
What data do we process and how do we obtain it?
We only process the data you give us: your name, phone number, the reason for your enquiry and any message you write in the contact form; and, if you contact us by WhatsApp or email, the information you include in that conversation (for example, the area, size and situation of your property when you request a valuation). You guarantee that the data you provide is accurate and agree to let us know of any changes.
Why do we process it?
- To answer your enquiry and get in touch with you.
- To prepare a valuation of your property when you request one.
- To provide, manage and invoice our services if you decide to hire them.
We do not use your data to send you advertising or to build profiles.
What is the legal basis?
The consent you give us when you send us your data and, where applicable, pre-contractual steps taken at your request or the performance of the services contract. Data sent by children under 14 will be understood to have been provided with the consent of their legal guardians; if this is not the case, the guardian must let us know as soon as they become aware of it.
Who else processes your data?
We do not share your data with third parties unless required by law. To provide our services we use providers acting as data processors:
- Formspree, Inc.: receiving contact form messages.
- Google (Google Workspace): email.
- Cloudflare, Inc.: hosting of this website.
Some of these providers may process data outside the European Economic Area (for example, in the USA). In such cases, the transfer is covered by the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
If you choose to contact us by WhatsApp, the conversation takes place through WhatsApp (Meta) and is also subject to its own privacy policy.
How long do we keep your data?
For as long as needed to deal with your enquiry or while we have a business relationship with you, and afterwards for the applicable legal periods. If your enquiry does not lead to any relationship, we will delete your data once it is no longer needed.
What are your rights?
You have the right to know whether we process your data, to access it, to have it corrected if inaccurate, to request its erasure, to object to its processing, to request its restriction and to data portability. You can exercise these rights by writing to contact@spiralproperties.com or to the postal address in the legal notice, enclosing a copy of an identity document. You may also lodge a complaint with the Spanish Data Protection Agency.
What security measures do we apply?
We apply the technical and organisational measures set out in Article 32 GDPR to ensure an appropriate level of security: encrypted connection (HTTPS), access control, backups and regular review of our processes.