Last updated: October 21, 2026
1. Data Controller
- Responsible: Radoslav Dishev (Aradesa)
- NIF/NIE: Y8611455Q
- Address: Calle Doña María de las Mercedes, nº 1, staircase 1, floor SO2, door C, 29640 Fuengirola (Málaga), Spain
- Data protection contact: radoslav.dishev@century21.es
2. What data do we process
- Contact and property interest forms: name, email, telephone, type of interest, message, the property consulted and the IP address from which it is sent (for security purposes).
- Clients (buyers, sellers, landlords and tenants): identification and contact information, property and transaction details, and the documentation required by anti-money laundering regulations.
- Navigation: statistical data obtained through analytical cookies, only if you accept them (see Cookies Policy ).
3. Purposes and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| To answer your questions, send you property information, and arrange viewings | Your consent and the application of pre-contractual measures at your request (art. 6.1.ay 6.1.b) |
| Manage the brokerage engagement and the real estate transaction | Performance of a contract (art. 6.1.b) |
| Comply with legal obligations: tax and anti-money laundering (Law 10/2010) | Legal obligation (art. 6.1.c) |
| Sending you news and new properties | Your consent, which you may withdraw at any time (art. 6.1.a) |
| Website usage statistics | Your consent via the cookie panel (art. 6.1.a) |
No automated decisions are made, nor are profiles with legal effects created.
4. Storage periods
- Consultations that do not lead to an operation: up to 2 years from the last contact, unless you request their deletion beforehand.
- Clients: during the relationship and afterwards, during the statutory limitation periods; money laundering prevention documentation, 10 years.
- Analytical data: according to the duration of each cookie indicated in the Cookie Policy.
5. Recipients
Your data is not sold or transferred to third parties, except when legally required or necessary for the transaction you are requesting (for example, the property owner or developer, notaries, or financial institutions), always informing you beforehand. The following entities provide services to the data controller as data processors:
- the website's web hosting and email provider;
- Google Ireland Ltd. / Google LLC (Gmail email, Google Analytics and Google Search Console);
- Technical content providers: Google Fonts (fonts), Cloudflare cdnjs (icons) and OpenStreetMap (maps), which receive the browser's IP address when loading the page.
Some of these providers may process data in the United States. These transfers are covered by the EU-U.S. Data Privacy Framework or by standard contractual clauses approved by the European Commission.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability, as well as withdraw your consent at any time, by writing to radoslav.dishev@century21.es and indicating the right you wish to exercise. If you believe that the processing does not comply with the regulations, you can file a complaint with the Spanish Data Protection Agency ( www.aepd.es ).
7. Minors
Aradesa's services are not directed at children under 14 years of age, and we do not knowingly process their data.
8. Security
We apply appropriate technical and organizational measures to protect your data: encrypted connection (HTTPS), restricted access and backups.