Privacy Policy

1. Introduction

Luxury Oasis Realty ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

This policy complies with the European Union's General Data Protection Regulation (GDPR), Spanish data protection laws, and the Russian Federal Law on Personal Data (PDPL).

Data Controller:
Luxury Oasis Realty
Boadilla del Monte, 28660 Madrid, Spain
Email: info@luxoasisrealty.com

2. Information We Collect

2.1 Personal Information You Provide

When you register or use our services, we may collect:

• Name and contact information (email address)
• Account credentials (username and password - encrypted)
• Property search preferences and saved searches
• Communication preferences
• Inquiry messages and correspondence

2.2 Automatically Collected Information

When you access our website, we automatically collect:

• IP address and device information
• Browser type and version
• Operating system
• Referring URLs and pages visited
• Date and time of access
• Location data (with your consent)

2.3 Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for website functionality
• Analytics Cookies: Google Analytics to understand usage patterns
• Marketing Cookies: To deliver relevant content and measure effectiveness

You can control cookies through your browser settings. However, disabling essential cookies may affect website functionality.

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain our property listing service
• To create and manage your account
• To respond to your inquiries and provide customer support
• To send you property alerts and saved search notifications
• To improve our website and services
• To analyze usage patterns and trends
• To comply with legal obligations
• To protect against fraud and ensure security

Legal Basis for Processing (GDPR)

We process your data based on:

• Consent: When you provide explicit consent (e.g., marketing communications)
• Contract: To fulfill our service agreement with you
• Legitimate Interest: To improve services and prevent fraud
• Legal Obligation: To comply with applicable laws

4. Third-Party Services

We use the following third-party services:

• Amazon Web Services (AWS): Cloud hosting and data storage
• Google Analytics: Website analytics and usage statistics
• Google Maps: Property location mapping

These services have their own privacy policies and may collect data independently. We recommend reviewing their privacy policies.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data:

• Property Owners/Agents: When you submit an inquiry
• Service Providers: AWS, Google Analytics (under strict data processing agreements)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or asset sale

6. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA) and Russia, including the United States, where our cloud service provider (AWS) operates.

We ensure such transfers comply with GDPR through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Additional safeguards to protect your data

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest
• Secure password hashing (bcrypt)
• Regular security assessments
• Access controls and authentication
• Secure cloud infrastructure (AWS)

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy:

• Active Accounts: Until account deletion
• Inactive Accounts: 3 years of inactivity
• Inquiries: 2 years after resolution
• Analytics Data: 26 months (Google Analytics default)
• Legal Obligations: As required by law

9. Your Rights

Under GDPR and applicable laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time
• Complain: Lodge a complaint with a supervisory authority

To exercise these rights, contact us at: info@luxoasisrealty.com

Spanish Supervisory Authority (AEPD):
Agencia Española de Protección de Datos
C/ Jorge Juan, 6, 28001 Madrid, Spain
Website: www.aepd.es

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notification for material changes

Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Information

For questions, concerns, or to exercise your rights, contact us:

13. Governing Law and Jurisdiction

This Privacy Policy is governed by Spanish law. Any disputes shall be subject to the exclusive jurisdiction of the courts of Madrid, Spain.