Privacy policy

This policy explains how White Stork processes personal data under the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Data controller

[Company legal name, S.L.], NIF [NIF / CIF], [Registered address, Marbella, Málaga, Spain]. Contact: info@whitestork.es.

What data we process and why

• Assessment requests and contact messages: name, email, phone (optional), country, preferred language, property details and your message. We use them to reply to you and prepare a proposal. Legal basis: taking steps at your request before entering into a contract, and your consent (Art. 6(1)(b) and 6(1)(a) GDPR).
• Owner portal accounts: name, email, phone, language and login data. We use them to give you secure access to your property information. Legal basis: performance of our contract (Art. 6(1)(b)).
• Property, booking and financial data: processed to manage your property and prepare your statements. Legal basis: contract and legal obligations such as tax and accounting (Art. 6(1)(b) and 6(1)(c)).

We do not use your data for automated decision-making or profiling, and we do not sell it.

How long we keep it

Enquiries that do not lead to a contract are deleted after 24 months at most. Client data is kept for the duration of the relationship and afterwards for as long as required by law (for example, six years for accounting records under the Spanish Commercial Code).

Who we share it with

We use carefully selected service providers acting as data processors under a data processing agreement: Supabase (database, authentication and file storage, hosted in the EU, Frankfurt) and Vercel (website hosting). Any AI or email providers used in the future will be listed here before use. Where a provider is located outside the EEA, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

Your rights

You can request access, rectification, erasure, restriction, portability or object to processing, and withdraw consent at any time, by writing to info@whitestork.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

Data is encrypted in transit, access is restricted by role, and every owner can see only their own information. Changes to important records are logged.