Privacy Policy

Privacy Policy
Last updated: June 2026
This Privacy Policy governs the processing of personal data carried out by Patrimonia Premium within the framework of its professional, real estate, asset management, leasing, and digital activities, as well as through the use of the website www.patrimonia.cat.

1. Data Controller
PATRIMONIA PREMIUM S.L.

Tax ID: B63987598
Address for notification purposes: Calle Cardedeu 37, 08023 Barcelona
Email: privacitat@patrimonia.cat
Website: www.patrimonia.cat
PATRIMONIA PREMIUM S.L. will endeavor to request and process only the data that is adequate, relevant, and limited to what is necessary for each operation, service, or professional relationship.

2. Processing of Personal Data
2.1. Management of inquiries, web forms, and information requests
Purpose
To handle inquiries, information requests, and requests related to real estate, property management, rentals, sales, real estate personal shoppers, and other communications made through web forms, email, telephone, WhatsApp Business, social media, or other enabled communication channels.
Legal basis
• Application of pre-contractual measures requested by the data subject (Art. 6.1.b GDPR).

• Legitimate interest related to the proper commercial management and handling of requests (Art. 6.1.f GDPR).

Data categories
Identification data, contact information, property of interest, real estate preferences, images or information related to properties, and the content of communications.

Recipients
Real estate CRM, technology providers, partner agencies, real estate portals, and professionals related to the transaction when necessary. Data Retention
Data will be retained for the time necessary to address the inquiry or request and, subsequently, for a maximum period of five years from the last interaction, unless there is a subsequent contractual relationship or a legal obligation to retain the data.

2.2. Buyer and Purchase/Sale Management
Purpose
To manage reservations, offers, deposits, sales, document coordination, property marketing, electronic signatures, and actions related to real estate purchase and sale transactions.
Marketing may include publishing properties on real estate portals, sales networks, partner agencies, and specialized platforms, as well as using photographs, videos, floor plans, virtual tours, and other audiovisual material related to the properties, while avoiding the unnecessary collection of personal information from third parties.
Legal Basis
• Application of pre-contractual measures and contract execution (Art. 6.1.b GDPR).

• Compliance with legal obligations (Art. 6.1.c GDPR).

• Legitimate interest related to legal defense, fraud prevention, and proper professional organization of the transaction (Art. 6.1.f GDPR).

Data Categories
Identification data, contact information, banking information, asset information, contractual information, identification documents, financial information, images related to properties, and documentation related to the transaction.

Recipients
Owners, buyers, collaborating agencies, MLS, real estate portals, notaries, registries, administrative agencies, financial institutions, public administrations, advisors, lawyers, technology providers, electronic signature platforms, and other professionals related to the transaction.
Retention
The data will be retained for the duration of the contractual relationship and subsequently for the legally required periods in civil, tax, administrative, and anti-money laundering matters, and may be duly blocked while legal liabilities may arise.

2.3. Rental and Tenant Management
Purpose
To manage rental applications, reservations, creditworthiness assessments, contract formalization, marketing of rental properties, tenancy management, and tenant relations.
Marketing may include publishing properties on real estate portals, partner agencies, and specialized platforms, as well as using photographs, videos, floor plans, or audiovisual material related to the properties.
Legal Basis
• Application of pre-contractual measures and contract execution (Art. 6.1.b GDPR).

• Compliance with legal obligations (Art. 6.1.c GDPR).

• Legitimate interest related to proper tenancy and asset management (Art. 6.1.f GDPR).

Data Categories
Identification data, contact information, employment data, financial data, banking data, creditworthiness documentation, contractual documentation, images related to properties, and data related to the property.

Target audience
Owners, partner agencies, real estate portals, insurance companies, rental guarantee companies, or professionals 

Those involved in the solvency assessment when necessary, public administrations, financial institutions, utility companies, manufacturers, maintenance companies, technology providers, and other third parties necessary for lease management.
Data Retention
Data will be retained during the lease operation and subsequently for the legally required periods. Financial or solvency documentation of unsuccessful applicants may be retained for a maximum of one year unless consent is given for future real estate opportunities.

2.4. Rental Management, Asset Management, and Property Administration
Purpose
To manage services such as:

• rental administration;

• asset management;

• property management;

• lease management;

• collections and payments;

• settlements;

• incidents;

• maintenance;

• repairs;

• coordination with contractors;

• document management;

• utility changes;

• customer service for landlords and tenants;

• administrative and contractual control;

• Contract monitoring;

• and other actions related to real estate and property management.

Legal basis
• Contract performance (Art. 6.1.b GDPR).

• Compliance with legal obligations (Art. 6.1.c GDPR).

• Legitimate interest related to the proper asset, lease, and administrative management of the properties (Art. 6.1.f GDPR).

Data categories
Identification, banking, financial, contractual, and asset data; contact information; information related to incidents, utilities, properties, communications, and documentation linked to the lease or administrative relationship.

Recipients
Owners, landlords, tenants, homeowners' associations, insurance companies, industrial companies, maintenance and repair companies, utility companies, public administrations, banks, consultants, management companies, technology providers, and other third parties necessary for the proper management of the property or the contractual relationship.

Data Retention
Data will be retained for the duration of the contractual relationship and subsequently for the legally required periods for tax, accounting, administrative, and civil matters. Certain data may be kept duly blocked while legal liabilities may arise.

2.5. Real Estate Personal Shopper Service
Purpose
To manage real estate search assignments, property selection, scheduling of visits, negotiation, and advice on real estate acquisition transactions.
Legal Basis
• Contractual performance and pre-contractual measures (Art. 6.1.b GDPR).

• Legitimate interest related to the proper provision and organization of the professional service (Art. 6.1.f GDPR).

• Consent of the data subject solely with respect to optional purposes, subsequent data retention, or sending future commercial or real estate communications (Art. 6.1.a GDPR).

Data Categories
Identification data, contact information, real estate preferences, asset and financial information, creditworthiness information, and documentation related to real estate transactions.

Recipients
Real estate agencies, property owners, real estate portals, financial institutions, mortgage brokers, technicians, industry professionals, consultants, technology providers, and other professionals involved in the transaction.
Data Retention
Data will be retained for the duration of the service and subsequently for the legally required periods. When the data subject authorizes retention for future real estate opportunities, identification, contact, and real estate profile data may be kept until consent is withdrawn or deletion is requested.

2.6. Marketing Communications and Newsletter
Purpose
To send information about properties, real estate opportunities, services, news, and communications related to the activity and evolution of the real estate market.
Legal Basis
• Data subject's consent (Art. 6.1.a GDPR).

• Legitimate interest with respect to previous clients and communications related to similar services in accordance with applicable regulations (Art. 6.1.f GDPR).

Data Categories
Identification data, contact data, and real estate preferences.

Recipients
Real estate CRM, technology platforms, and electronic communications providers.
Retention
Data may be retained until the data subject withdraws their consent, requests the deletion of their data, or objects to its processing for commercial purposes.

2.7. Prevention of Money Laundering and Terrorist Financing
Purpose
To comply with legal obligations arising from regulations on the prevention of money laundering and terrorist financing.
Legal Basis
Compliance with legal obligations (Art. 6.1.c GDPR).
Data Categories
Identification data, documents 

Identifying information, financial, asset, and banking information, and legally required supporting documentation.

Recipients
Public administrations, SEPBLAC (Spanish Executive Service for the Prevention of Money Laundering and Terrorist Financing), official bodies, competent authorities, and legally authorized third parties.

Data Retention
Data will be retained for ten years in accordance with regulations on the prevention of money laundering and terrorist financing.

2.8. Social Networks and Digital Communications
Purpose
To manage the corporate presence on social networks and respond to inquiries or interactions made through these platforms.

Legal Basis
• Voluntary user interaction with corporate profiles.

• Legitimate interest related to corporate communication and activity.

Data Categories
Identifying data, username, images, messages, and other public information shared by the user.

Recipients
The social network platforms themselves and associated technology providers.

Data Retention
While the user maintains interaction with the corporate profiles or until the user deletes the information.

3. Joint Responsibility in Certain Processing Activities
Only with respect to certain specific processing activities related to lease management and property administration, where the parties jointly determine the essential purposes and means of the processing, the property owner and PATRIMONIA PREMIUM S.L. may act under a joint responsibility regime in accordance with Article 26 of the General Data Protection Regulation (GDPR).

The details of these agreements may be requested by sending a communication to privacitat@patrimonia.cat.

4. Technology Providers and Web Hosting
PATRIMONIA PREMIUM S.L. uses various technology providers necessary for the operation of its professional, real estate, leasing, and administrative activities, including services such as:
• web hosting;

• real estate CRM;

• document management;

• cloud storage;

• email;

• communications;

• electronic signature;

• asset management;

• lease management;

• property management;

• accounting;

• private client areas;

• and online administration.

The website and certain real estate integrations and forms can be managed using solutions provided by eGO Real Estate.
Rental management, asset management, and property management can be carried out using specialized tools such as TAAF, including document management functionalities, contract tracking, settlements, incident management, and future private access environments for registered clients.
Accounting, tax, and administrative management can be carried out using solutions such as A3 Software.
Certain contractual documentation and electronic signature processes can be managed using platforms such as DocuSign.
Web hosting services may be contracted with Arsys.
Some documentation and information may be stored and managed using Microsoft 365 and OneDrive, which PATRIMONIA PREMIUM S.L. uses in its professional activities.
These providers may access personal data only when necessary for the provision of the contracted services, acting, where applicable, as data processors in accordance with current regulations. 5. International Data Transfers
Some of the technological services used by PATRIMONIA PREMIUM S.L., including certain cloud services and electronic signature platforms, may involve international data transfers.
Microsoft Corporation adheres to the EU-U.S. Data Privacy Framework.
When international transfers occur, appropriate safeguards provided for by current regulations will be applied, including standard contractual clauses approved by the European Commission or other legally authorized mechanisms.

6. Electronic Communications
Communications related to real estate and contractual activity may be carried out via email, telephone, WhatsApp Business, digital platforms, or video calls.
PATRIMONIA PREMIUM S.L. takes reasonable measures to protect electronic communications used in its professional activity. However, the use of electronic means may involve certain inherent risks beyond the absolute control of the data controller.

7. Rights of Data Subjects
Data subjects may exercise their rights of:

• access;

• rectification;

• erasure;

• objection;

• limitation of processing;

• and portability;

by sending a request to:
privacitat@patrimonia.cat
Additional information may only be requested to verify the identity of the requester when there are reasonable doubts about it.

You may also file a complaint with the Spanish Data Protection Agency.

8. General Retention of 

Data
Generally, data will be retained:

• for as long as a contractual or professional relationship exists;

• for the time necessary for each purpose;

• and subsequently for the legally required periods to address any potential legal, tax, administrative, or judicial liabilities.

When processing is based on the data subject's consent for commercial purposes or future real estate opportunities, the data may be retained until such consent is withdrawn.

9. Third-Party Data
Anyone providing data of third parties declares that they have sufficient legal standing to do so and have previously informed said third parties of the content of this Privacy Policy.

10. Minors
The website and services of PATRIMONIA PREMIUM S.L. are not specifically directed at minors.

11. Information Security
PATRIMONIA PREMIUM S.L. PATRIMONIA PREMIUM S.L. applies reasonable and appropriate technical and organizational measures to protect the confidentiality, integrity, and availability of information and to prevent unauthorized access, loss, alteration, or improper processing of personal data.

12. Mandatory Nature of Certain Data
Certain forms or applications may require the mandatory provision of certain personal data necessary to process the request, manage the real estate transaction, or formalize contractual relationships.
Refusal to provide certain data may prevent the provision of the service or the proper management of the requested transaction.

13. Automated Decisions
PATRIMONIA PREMIUM S.L. does not make automated decisions with legal effects concerning individuals, nor does it create automated profiles as defined in Article 22 of the GDPR without significant human intervention.

14. External Links
The website may contain links to third-party websites or platforms. PATRIMONIA PREMIUM S.L. is not responsible for the privacy policies, content, or practices of these external sites.

15. Changes to the Privacy Policy
PATRIMONIA PREMIUM S.L. may modify this Privacy Policy when necessary due to regulatory, organizational, technological, or business-related changes.

The updated version will be available on the website.

16. Cookies
The website may use its own and third-party cookies for technical, functional, or analytical purposes.
Users can find additional information in the corresponding Cookie Policy.