Inquiry Form Privacy Policy

Last updated: April 2, 2026

1. Who We Are

The data controller responsible for processing your personal data is VIRTO PROPERTY S.L., a company registered in Spain with CIF B42576900.

2. What Data We Collect

When you submit an inquiry form on our website, we collect the following data:

  • name;
  • phone number;
  • email address;
  • preferred contact method (WhatsApp, Telegram, Email, Phone);
  • message text.

In addition, the system automatically records:

  • interface language (RU / EN);
  • the page from which the inquiry was submitted;
  • property ID, if the inquiry was submitted from a specific property page;
  • the date and time of submission based on server time (Europe/Madrid).

We do not collect IP addresses, cookies, or any other tracking data through the inquiry form.

3. How We Use Your Data

Your personal data is used exclusively for the following purposes:

  • responding to your property inquiry;
  • providing information about the property you are interested in;
  • contacting you via your preferred communication method.

We do not use your data for marketing mailings, profiling, or sharing with third parties for advertising purposes.

The processing of your data is based on:

  • your consent under Art. 6(1)(a) GDPR — you give it by checking the corresponding checkbox when submitting the form;
  • legitimate interest under Art. 6(1)(f) GDPR — processing is necessary to respond to your inquiry.

5. Data Storage and Security

Your data is stored in a secured Google Sheets spreadsheet hosted on Google LLC infrastructure. Access to the spreadsheet is restricted to a service account and authorised company personnel.

We apply the following security measures:

  • data is transmitted over an encrypted channel (HTTPS / TLS);
  • Google credentials are stored on the server and are not accessible from the browser;
  • the spreadsheet has no public access;
  • data is written in append-only mode, and reading via the form is not possible.

6. Data Retention Period

We retain your personal data for no longer than 24 months from the date of receiving your inquiry, unless a different period is required by applicable law. After this period, the data is deleted.

7. Data Sharing with Third Parties

Your data is not shared with third parties, except:

  • Google LLC as the infrastructure provider for data storage (Google Sheets).

Google processes data in accordance with its own privacy policy and Data Processing Agreement.

We do not sell, exchange, or transfer your data to third parties for advertising or any other commercial purposes.

8. International Data Transfers

Google LLC participates in the Data Privacy Framework (EU-US). If data is transferred outside the EEA, Standard Contractual Clauses (SCC) are applied in accordance with GDPR requirements.

9. Your Rights

Under the GDPR, you have the right to:

  • request access to your data;
  • request correction of inaccurate data;
  • request deletion of your data;
  • request restriction of processing;
  • object to processing;
  • request data portability;
  • withdraw consent at any time.

To exercise any of these rights, please send a request to [email protected]. We will respond within 30 days.

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

10. Changes to This Policy

We reserve the right to update this Privacy Policy. The current version is always available on the website. In the event of significant changes, we will notify users through the website.