Privacy policy
1. Who is responsible for your data
Santiago Antonio Platas Rengel, NIF 16859788E, Calle Molino de Viento 29, Madrid, is the data controller for the personal data described in this policy. Contact: contacto@confirmad.es.
2. What we collect
When you use the contact form or book a check, we collect what you type in: your name, email, phone/WhatsApp (optional), the listing link or address, any contact details you give us for the landlord, and whatever you write in the free-text fields.
We don't ask for or collect your government ID. If you accept the cookie banner, Google Analytics also collects standard browsing data (pages visited, approximate location, device/browser type) — it's off by default and never combined with the name or email you give us. See our Cookie Policy for details and how to change your choice.
3. About the landlord's information
If you give us a landlord's name or contact details, we use them only to arrange and carry out the visit, and to write the report we send you. During the visit, we may check the landlord's ID visually to confirm their name matches the listing — we do not photograph, copy, or keep a record of that document. We keep the landlord's name and contact details only as long as needed to deliver your report.
4. Why we process it, and on what basis
- To deliver the service you asked for (arranging and carrying out the visit, writing the report) — necessary to perform our contract with you.
- To answer questions sent through the contact form — based on your consent to be contacted.
- To take payment — necessary to perform the contract, processed by Stripe (see below).
- To understand how visitors use the site (Google Analytics) — based on your consent via the cookie banner, which you can withdraw at any time. See our Cookie Policy.
5. Who else sees it
We use a small number of outside services to run this site and deliver the service. Each only sees what it needs to do its job:
- Web3Forms — delivers the contact/request forms to our inbox by email.
- EmailJS — sends the automatic confirmation email you get after submitting a form.
- Stripe — processes card payments; we never see or store your card details ourselves. See Stripe's privacy policy.
- GitHub Pages — hosts this website.
- Google Fonts — serves the fonts used on this site; loading them shares your IP address with Google. See Google's privacy policy.
- Google Analytics — only if you accept the cookie banner; tells us which pages are visited and roughly how, never tied to the name or email you might give us elsewhere. See Cookie Policy.
Some of these providers may process data outside the EU/EEA, under their own safeguards (such as the EU Standard Contractual Clauses). We don't sell your data to anyone, ever.
6. How long we keep it
We keep booking and payment records for 5 years, as required by Spanish tax law, and other contact-form enquiries for up to 12 months after your last message to us, then delete them.
7. Your rights
Under GDPR, you can ask us to access, correct, delete, restrict, or export your personal data, and you can object to how we use it. Email contacto@confirmad.es and we'll get back to you. If you're not satisfied with our response, you can complain to the Spanish data protection authority, the AEPD.
8. Security
We take reasonable technical and organizational steps to protect the data you share with us. No online service can guarantee perfect security, but we don't store payment details ourselves, and we limit what we ask for to what the service actually needs.
9. Information for property owners and occupants
If ConfirMad visits your property as part of a check a prospective tenant booked, this section explains what personal data we handle about you — separately from the rest of this policy, which covers our paying customers.
What we collect: your name, so we can visually confirm it matches the listing, and whatever contact details you've given the prospective tenant or us to arrange the visit. For a Live visit, we also process your participation in a live video call, which is not recorded.
What we don't collect: we do not photograph, scan, or keep a copy of your ID or any occupant's ID. We do not photograph faces, and we do not photograph or note down names on buzzers or mailboxes. We only visually confirm that the name you give matches the listing — we don't record the document itself.
Legal basis: our legitimate interest in confirming the advertiser's identity in order to deliver the check our customer paid for — the data is minimal, isn't stored beyond what's needed for the report, and you're informed of it at the time of the visit. [A confirmar formalmente con un abogado/DPO]
How long we keep visit photos: up to 12 months after the report is delivered, then deleted.
Your rights: the same as described in section 7 above — you can ask us to access, correct, delete, restrict, or export the data we hold about you, and you can object to how we use it. Email contacto@confirmad.es.
This section has a fixed link — confirmad.es/privacidad.html#visitas — so our visitor can show it to you on their phone during a visit.
10. Changes to this policy
We may update this page as the service changes. We'll update the date at the top when we do.