Privacy policy

This privacy policy was updated on September, 29th 2025

1. Identity of the Controller

The controller of the personal data collected through this platform is LEAN DIGITAL S.L., with Spanish tax identification number (CIF) B88421920, registered address at Av. de Europa, 19, Ed. 3, 1st Floor – Loom, 28224 Pozuelo de Alarcón (Madrid), Spain. Contact: dpo@residelia.com (mailto:dpo@residelia.com)

2. Scope of Application

This Policy applies to personal data processed through:

  • The SaaS Property Management environment.

  • The professional Marketplace and Fast Track channel.

  • The Estate Leads online valuation widget.

  • The commercial website and contact forms.

  • Online licence purchases processed through Stripe.

3. Categories of Personal Data Processed

Full detail is available in the Record of Processing Activities (RAT-001.md). Data processed includes, among others:

  • Identification and contact data.

  • Financial and tax data.

  • Platform usage data (analytics, preferences, configuration).

  • AML/KYC documentation from investors.

  • Third-party data submitted via leads (Estate Leads).

4. Purposes and Legal Bases for Processing

PurposeLegal basis
User registration and account managementPerformance of a contract
Delivery of contracted services (SaaS, API, Marketplace)Performance of a contract
Operational communicationsPerformance of a contract
Commercial communicationsConsent / Legitimate interest
Payment processing and invoicingLegal obligation / Performance of a contract
User experience improvement and usage analyticsConsent / Legitimate interest
Fast Track channel management and offer dispatchPerformance of a contract / Consent
AML/KYC document verification for the professional channelLegal obligation (Law 10/2010) / Consent

5. Retention Periods

Personal data will be retained for the duration of the contractual relationship and, thereafter, for as long as required by applicable legal obligations. AML/KYC documentation will be retained for 10 years in accordance with Spanish Anti-Money Laundering Law 10/2010.

6. Recipients of Personal Data

Personal data may be disclosed to:

  • Public authorities where required by law.

  • Financial institutions for payment processing purposes.

  • Technology providers acting as data processors (see ENC-XXX series).

  • Marketplace Advertisers, subject to successful AML/KYC verification and the user's prior consent.

  • Partners providing ancillary services requested from an asset listing.

7. International Data Transfers

Certain providers used by RESIDELIA (e.g. Stripe, Pipedrive, Supabase, AWS) may transfer personal data internationally. Such transfers are carried out under Standard Contractual Clauses approved by the European Commission.

8. User Rights

Users may exercise their rights of access, rectification, erasure, restriction of processing, data portability and objection by sending a written request to dpo@residelia.com (mailto:dpo@residelia.com), together with proof of identity.

9. Information Security

RESIDELIA applies technical and organisational measures proportionate to the risks involved in order to ensure the security, confidentiality, integrity and availability of personal data.

10. Cookie Policy

Please refer to the standalone document: POL-002.md – Cookie Policy.

11. Contact

For any matter relating to this Policy, please contact our Data Protection Officer at dpo@residelia.com (mailto:dpo@residelia.com).

12. Module- and Channel-Specific Provisions

12.1 Fast Track Channel and AML/KYC Documentation

Access to the professional Fast Track channel is reserved for qualified investors. AML/KYC documentation provided will be accessible only to authorised Advertisers and solely upon the investor's explicit consent. Consent is collected at investor registration or when the investor expresses interest in a specific asset. Documentation is handled in accordance with POL-012.md – AML/KYC Policy.

12.2 Estate Leads Widget and Third-Party Lead Data

Users who share valuations with third parties via the widget must confirm that they hold the necessary authorisation to submit their personal data. RESIDELIA will not use such data for any purpose other than sending the requested valuation, and will delete it upon dispatch. This functionality must be correctly integrated by the entities (estate agencies, insurers, banks) deploying the widget.

12.3 Online Contracting and Payments

Online contracting is processed through Stripe, acting as a data processor. Please refer to document ENC-009.md. RESIDELIA does not store payment card data directly; only the billing information strictly necessary for invoicing purposes is retained.

All documents referenced herein are available at https://residelia.com/en/terms/use-terms, except those classified as confidential or restricted access.

© RESIDELIA – All rights reserved.