We have established this Privacy Policy to describe how we manage and protect your personal data, the legal basis for each processing activity, and the rights you hold under applicable data protection legislation.

Please read this policy carefully. By using our website, engaging with our marketing (including e-mail and social media campaigns), or contacting us in any way, you acknowledge that you have read and understood how we handle your personal data.

Personal Data Controller

The data controller responsible for the processing of your personal data is 3SA ESTATE, with registered address at Av. Bulevar Alfonso de Hohenlohe, Edif. Milla de Oro 1, 4, Marbella, Málaga, Spain.

J WIDEN REAL ESTATE, S.L., commercially known as 3SA Estate, processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), and other applicable Spanish data protection legislation.

What Data Do We Collect?

We collect data in two main ways: (1) data you supply to us voluntarily, and (2) data we collect automatically when you use our digital channels.

A. Data you provide directly

• Identity & contact data: first and last name, address, postal code, e-mail address, telephone number, and (where relevant) your preferred language.
• Transaction data: where you are a buyer or seller, we collect account information, copies of ID documents, proof of funds, and transaction-related details required to complete a residential transaction.
• Service data: information relating to a valuation request, viewing appointment, or other service you request.
• Marketing data: details you provide when you subscribe to our e-mail newsletter, sign up for market updates, or register for a campaign, competition, or event.

B. Data collected automatically via our website and marketing

• Technical data: IP address, browser type and version, operating system, device type, referring page, pages visited, time spent on site, and dates/times of visits.
• Usage & analytics data: collected via Google Analytics (and equivalent tools) for statistical, non-identifying purposes only, where consent has been given.
• E-mail campaign data: when we send you marketing e-mails, we may record whether the e-mail was opened, which links were clicked, and whether you unsubscribe, so we can improve relevance and compliance.
• Social media data: when you interact with us on social media platforms (e.g. Facebook, Instagram, LinkedIn, YouTube), those platforms may collect and share information such as your user ID, page interactions, and campaign/ad engagement data. We may use platform-provided ad pixels and targeting tools to measure and optimise our social media campaigns.

Email Marketing & Campaigns

We use your contact data to send you informative and marketing communications, such as property listings, market insights, news, and invitations to events, where you have given us consent or we are otherwise entitled to do so.

• Legal basis: primarily your consent (GDPR Article 6(1)(a)). For existing customers, we may occasionally send relevant service and product information under legitimate interest where permitted.
• What we track: send/delivery status, open events, link clicks, and unsubscribe actions.
• Opt-out: every marketing e-mail includes a clear unsubscribe link. You may also unsubscribe at any time by contacting us at [email protected]. We stop sending marketing e-mails promptly upon request (without prejudice to our right to send service messages where a contract exists).
• Frequency & relevance: we keep our communications relevant and proportionate, and may segment subscribers based on the topics they are interested in.

Social Media Campaigns (SoMe)

We run campaigns and maintain profiles on social media platforms (such as Facebook/Meta, Instagram, LinkedIn, YouTube, and X/Twitter) to inform you about our services, properties, and events, and to engage with our community.

• Legal basis: your consent (via the platform’s and our own cookie/ad trackers) and/or legitimate interest in operating and measuring our marketing communications.
• Data involved: platform user IDs, profile data, likes, follows, comments, direct messages, and campaign/ad engagement metrics (e.g. clicks, conversions, pixel events).
• Ad targeting & measurement: we may use platform-provided advertising pixels, custom audiences, and remarketing tools to show relevant ads and measure campaign performance. These tools are operated by the respective platform under its own data policy.
• Your control: you can manage cookies/trackers via your browser or the platform’s ad preferences; you can unfollow or unsubscribe at any time, and you can contact us at [email protected] to ask us not to use your data for this purpose.

On What Grounds (Legal Basis) Do We Save Data?

Under GDPR Article 6, we rely on one or more of the following legal bases for each processing activity:

• Consent (Art. 6(1)(a)) – where you have clearly agreed to us saving and using your data (e.g. subscribing to a newsletter, cookies, marketing).
• Contract (Art. 6(1)(b)) – where we have a contract with you (e.g. a purchase or sale agreement) that requires the use of personal data.
• Legal obligation (Art. 6(1)(c)) – where the law requires us to process data, for example archiving data from a completed property transaction for 10 years in accordance with applicable Spanish legal, accounting, and anti-money-laundering obligations.
• Legitimate interest (Art. 6(1)(f)) – where the interest in contacting you outweighs the protection of your personal data (e.g. saving a telephone number to reach an interested party after a viewing), subject to a balancing test and your right to object.

Do We Share Data With Any Third Parties?

We never sell your personal data. We may share data only in the following limited ways:

• With the 3SA Group of companies – your data may be shared within the 3SA Group where necessary to provide our services, process a transaction, or for other legitimate purposes in line with our data protection obligations.
• With service providers acting on our behalf as processors (e.g. photography, IT, e-mail marketing platforms, social media ad platforms, valuation or survey providers), under data processing agreements and where you have ordered or agreed to a service.
• With professionals involved in a transaction (e.g. lawyers, notaries, banks, tax advisors) where required to complete the transaction.
• Where we are legally obligated to disclose data, or where disclosure is necessary to defend legal claims.

Third-party platforms (including Google, Meta, and others) may process data in their own capacity for their own purposes in certain cases; please review their respective privacy policies.

 

How Long Do We Save The Data?

The storage time varies depending on the type of relationship and the legal basis:

• Completed property transactions: 10 years, in accordance with applicable Spanish legal, accounting, and anti-money-laundering obligations.
• Money laundering / AML obligations: 5 years after the end of the business relationship, in accordance with applicable law.
• Marketing & newsletter data: until you withdraw consent or unsubscribe, and no longer than reasonably necessary.
• Website & analytics data: limited periods, anonymised where feasible.
• Other contact data: until the purpose is fulfilled or you object/withdraw consent, then deleted or anonymised.

Cross-Border Transfer Of Data

Some of our service providers and platforms operate outside the European Economic Area (EEA), for example in the United States. Where this occurs, we ensure the transfer is based on an appropriate safeguard, such as Standard Contractual Clauses (SCCs) adopted by the European Commission, an adequacy decision, or another valid mechanism, so your data remains protected.

Your Rights

Regardless of what data we have saved, you always have control over your own data. Under GDPR, you have the following rights:

• Right of access – you may request a copy of the personal data we hold about you.
• Right to rectification – you have the right to have inaccurate information corrected and incomplete information completed.
• Right to erasure – you have the right to request deletion of your personal data, except where we must retain the data to comply with a legal obligation.
• Right to data portability – where processing is based on consent or a contract and is carried out by automated means, you may receive your data in a structured, commonly used, machine-readable format.
• Right to object – you have the right to object to processing based on legitimate interest and to direct marketing (including profiling for marketing) at any time. If you object to direct marketing, we will cease processing your data for that purpose.
• Right to restrict processing – you have the right to restrict processing where, for example, the data is inaccurate or you object and contest its legality.
• Right to withdraw consent – where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond without undue delay and in any event within one month of receiving your request.

Do You Have Any Complaints?

If you have a complaint regarding our processing of personal data, you have the right to lodge a complaint with the relevant supervisory authority. In Spain, the relevant authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful access, alteration, disclosure, or destruction. Access to personal data within 3SA is restricted to persons who need it for their work.

Cookies On 3SAESTATE.COM

3saestate.com uses cookies to develop and optimise the website’s features and to deliver the best possible experience. A cookie is a small text file that is sent to and saved on your device when you visit our website. There are two types of cookies, permanent and temporary. Permanent cookies are stored until you, or the server that sent them, deletes them. Temporary cookies are stored temporarily and disappear when you close your browser.

We use cookies on 3saestate.com to be able to:

• see information such as visitor statistics,
• see which operating systems and browsers are used,
• see how the site is used by our visitors, and
• where you have consented, to run and measure marketing campaigns (including social media ad pixels).

We do not use cookies to profile you as an individual beyond what is necessary and lawful. The cookie does not contain sensitive personal information but helps us identify you as a user of the website. If you do not want cookies stored on your device, you can turn off, block, or remove stored cookies in your browser settings. Then no cookies will be stored, however, such settings may mean that some features on our website might not work as intended. Marketing and advertising cookies are only set with your consent.

Children’s Data

Our services are directed at persons aged 18 and over. We do not knowingly collect personal data from children under 18.

Updates To This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or for other operational, legal, or regulatory reasons. Please check this page periodically.

 

 

Last updated: 3 January 2026