Privacy policy
This privacy policy was updated on September, 29th 2025
1. Purpose
This policy governs the processing of personal data of users registered on the RESIDELIA platform, including the use of SaaS, the Marketplace module, the Fast Track channel and the uploading of legal or economic documentation.
2. Controller Identity
Controller: Lean Digital S.L. – B88421920
Address: Av. de Europa, 19, Ed. 3, 1º – Loom. 28224 Pozuelo de Alarcón (Madrid)
Contact Email: dpo@residelia.com (mailto:dpo@residelia.com)
3. Scope of Processing
This policy applies to:
Users with an active account on the RESIDELIA platform.
Investors, advertisers and collaborators with access to Marketplace functionalities.
Processes associated with uploading and consulting legal or economic documents (property registry notes, transfers, KYC/AML).
Traceability, support and audit activities linked to such access.
4. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Registration, account management, profile configuration | Performance of contract |
| Publication and management of assets on Marketplace | Legitimate interest / performance of contract |
| Access to Fast Track channel (AML/KYC) | Compliance with legal obligation (AML/CFT) |
| Communication between users (advertisers and investors) | Legitimate interest / explicit consent |
| Document management and download of legal files | Legitimate interest / performance of contract |
| Service improvement and usage analysis | Legitimate interest |
PurposeLegal BasisRegistration, account management, profile configurationPerformance of contractPublication and management of assets on MarketplaceLegitimate interest / performance of contractAccess to Fast Track channel (AML/KYC)Compliance with legal obligation (AML/CFT)Communication between users (advertisers and investors)Legitimate interest / explicit consentDocument management and download of legal filesLegitimate interest / performance of contractService improvement and usage analysisLegitimate interest
5. Types of Data Processed
Identification data: name, surname, email, company, position
Technical data: logs, IP, device, usage behavior
Legal data: property registry notes, judgments, registry/cadastral information
Economic and AML data: KYC documents, proof of funds, IBAN (if applicable)
6. Collection Channels
Direct registration on the SaaS platform
Access requests via Fast Track channel
Manual document upload
Internal commercial and functional interactions
7. Data Transfers and Disclosures
To servicers and advertisers, when the investor has completed AML/KYC requirements.
To service providers available in the property listing (only with consent).
To judicial or administrative authorities in compliance with regulations.
8. Data Retention
AML/KYC documentation: 10 years (AML/CFT law)
Legal documentation: publication + 6 years
Account data: while active or up to 5 years after closure if there is legal liability
Logs and traceability: 12 months unless specific obligation exists
9. User Rights
Access, rectification, deletion, objection, portability, restriction
Exercise via email: dpo@residelia.com (mailto:dpo@residelia.com) (attach ID card or other identifier)
10. Security Measures
TLS and AES-256 encryption in transit and at rest
Multi-factor authentication
Role/license-based segmented access
Activity logging, traceability and modification logs
11. Contact with the DPO
Email: dpo@residelia.com (mailto:dpo@residelia.com)
Recommended Subject: Exercise of rights / Privacy inquiry
12. Specific Privacy Sections
12.1 Fast Track Channel
Access is conditional upon document validation. Access to legal documentation is not permitted until KYC validation has been passed and conditions have been accepted by the advertiser.
12.2 Property Listings with Additional Services
Services offered in the listing (mediation, financing, insurance, renovations) are only activated by user action. Data transfer only occurs if there is verifiable consent.
12.3 Asset Publication by Servicers
Published assets may include sensitive legal documentation. RESIDELIA anonymizes debtor data when not necessary for investment analysis.
12.4 Online Subscription and Payments
Users can purchase licenses from the platform, through manual registration or Google login, and make payment by credit card through the provider Stripe. The processing of financial data is limited to the data necessary to manage the subscription (card token, transaction ID, active license) and bank data is not directly stored in RESIDELIA.
12.5 Consent Revocation and Cancellation
Users can cancel their subscription at any time from their account area. Rights can be exercised directly from Intercom or by email. Cancellation does not imply immediate deletion if there are legal retention obligations.
12.6 Processing of Financial Data
The provider Stripe acts as data processor and complies with PCI-DSS. RESIDELIA only accesses the transaction identifier and linked metadata. Storage is encrypted and retained for 6 years in accordance with tax and anti-money laundering regulations.
12.7 Profiling and Use of Data for Improvements
RESIDELIA may analyze usage behavior and subscription data to offer service improvements or license upgrade proposals. Automated decisions that legally affect the user will never be made without human intervention.