This Privacy Policy describes how Afincados ("we", "our" or "the Company") collects, uses and protects the personal data of users who access our website and platform, in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data Controller
Afincados S.L.
Email: privacy@afincados.com
2. Data We Collect
We may collect the following categories of personal data:
- Identification data: name, surname, email address, phone number.
- Access credentials: username and encrypted password.
- Usage data: pages visited, actions performed, IP address, browser type and device.
- Payment data: processed securely through our payment provider; we do not store card numbers.
- Community data: information about the community of owners you manage (properties, owners, incidents).
3. Purpose and Legal Basis
- Service delivery – performance of a contract (Art. 6.1.b GDPR).
- Billing and legal compliance – legal obligation (Art. 6.1.c GDPR).
- Analytics and platform improvement – legitimate interest (Art. 6.1.f GDPR).
- Marketing communications – consent (Art. 6.1.a GDPR), which can be withdrawn at any time.
4. Cookies
We use own and third-party cookies to improve your experience and analyse usage. You can manage your preferences via the cookie banner or your browser settings. For full details, see our Cookie Policy section below.
Types of cookies we use
- Essential cookies: necessary for the platform to function. Cannot be disabled.
- Analytics cookies: help us understand how visitors interact with the site (e.g. Google Analytics).
- Preference cookies: remember your settings (language, theme).
5. Data Retention
Personal data is retained for as long as the contractual relationship exists and, thereafter, for the periods required by applicable law (generally 5–10 years for accounting and tax records). Analytics data is anonymised after 26 months.
6. Recipients and International Transfers
Your data may be shared with:
- Cloud hosting providers (servers located in the EU/EEA).
- Payment processors (compliant with PCI-DSS).
- Analytics providers under standard contractual clauses where applicable.
We do not sell your personal data to third parties.
7. Your Rights
Under the GDPR you have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Restrict processing in certain circumstances.
- Data portability in a machine-readable format.
- Object to processing based on legitimate interest.
- Withdraw consent at any time, without affecting prior processing.
To exercise any of these rights, contact us at privacy@afincados.com. You also have the right to lodge a complaint with your national supervisory authority (in Spain: AEPD).
8. Security
We apply technical and organisational measures to protect your data against unauthorised access, loss or disclosure, including encryption in transit (TLS), access controls and regular security audits.
9. Changes to This Policy
We may update this policy periodically. We will notify you of significant changes via email or a notice on the platform. The date at the top of this page reflects the latest revision.
10. Contact
For any questions regarding this policy, contact us at privacy@afincados.com.