Privacy policy
How we use the details you send us through this website, and your rights over them.
Last updated: [date]
Who we are
This website, onitproperty.com, is run by [your full name or company name], NIF/CIF [number], of [full postal address], Spain (“we”, “us”). We are responsible for your personal data. You can contact us about it at [email address].
What we collect
- When you send a message: your name, email, phone number (if you give it), your message, the deal you asked about, and your answers to the quick questions about your portfolio, budget, funding and timing.
- When you join the off-market list: your email address.
- To stop spam: a scrambled, one-way code made from your IP address, so we can limit repeat submissions. We don't store the address itself.
Why we use it, and on what legal basis
- To answer your enquiry and talk to you about deals you're interested in. The legal basis is taking steps at your request before a possible agreement, and our legitimate interest in replying to people who contact us.
- To email you off-market deals, only if you ask us to. The legal basis is your consent, which you can withdraw at any time.
- To keep the forms free of spam and abuse. The legal basis is our legitimate interest in keeping the website secure.
We don't sell your data, and we don't use it for automated decisions about you.
How long we keep it
We keep enquiries for [24 months] after our last contact with you, unless we go on to work together, in which case we keep what the law requires. You stay on the off-market list until you unsubscribe. Spam-protection codes are only compared against the last hour.
Who else handles it
We use a few trusted providers who process data on our behalf, under contract:
- Supabase, which stores the enquiries and the email list [in the EU].
- Resend, which delivers the email alerts we receive about new enquiries.
- Vercel, which hosts this website.
Some of these providers are based in the United States. Where your data leaves the European Economic Area, it is protected by the European Commission's standard contractual clauses or an equivalent safeguard.
Your rights
You can ask to see, correct or delete your data, to object to or restrict how we use it, to take a copy of it, and to withdraw your consent at any time. Email [email address] and we'll reply within a month. If you're not happy with our answer, you can complain to the Spanish data protection authority, the AEPD (aepd.es), or in the UK to the ICO (ico.org.uk).
Cookies
The public pages of this website don't use advertising or tracking cookies. The only cookies are the ones that keep our own staff logged in to the back office.
Changes
If we change this policy we'll update the date at the top of this page. See also our Aviso legal.