Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identification data: first name, surname
• Contact data: telephone number, email address
• Communication data: messages and enquiries submitted via our contact form
• Browsing data: IP address, browser type, pages visited, and session duration (collected automatically via cookies)

3. Purposes of Processing

Your personal data is processed for the following purposes:

• Responding to enquiries and requests submitted through the contact form
• Providing information about available properties and residential developments
• Scheduling private consultations or property viewings
• Sending commercial communications related to Omala Residences, where you have provided explicit consent
• Complying with legal and regulatory obligations

4. Legal Basis for Processing

The legal basis for processing your personal data varies by purpose:

• Consent (Article 6(1)(a) GDPR): for the sending of commercial communications and the use of non-essential cookies
• Performance of pre-contractual measures (Article 6(1)(b) GDPR): for responding to property enquiries at your request
• Legitimate interests (Article 6(1)(f) GDPR): for improving our services and maintaining the security of our website

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact and enquiry data: up to 3 years from the last communication
• Commercial communication data: until you withdraw your consent
• Data required by law: for the periods established by applicable legislation

6. Data Recipients

Your data will not be sold or transferred to third parties, except in the following cases:

• Service providers acting as data processors on our behalf (e.g. email platforms, CRM tools), bound by data processing agreements
• Competent authorities and public bodies, when legally required
• Other companies within the Grupo Hozono Global group, where necessary for operational purposes

No international transfers of data outside the European Economic Area are carried out without adequate safeguards in place.

7. Your Rights

Under the General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), you have the following rights:

• Right of access: to obtain confirmation of whether your data is being processed and to receive a copy
• Right to rectification: to request correction of inaccurate or incomplete data
• Right to erasure: to request deletion of your data under certain circumstances
• Right to restriction: to request that processing be limited in certain situations
• Right to data portability: to receive your data in a structured, commonly used format
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out prior to withdrawal

8. How to Exercise Your Rights

To exercise any of the above rights, please contact us in writing at:

sales@omalaresidences.com

Please include your full name, a copy of your national identity document or equivalent proof of identity, and a clear description of your request. We will respond within one calendar month.

9. Supervisory Authority

If you believe that the processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legislation. We encourage you to review this page periodically. The date at the top of this page indicates when it was last revised.