Privacy policy

Last updated: 9 August 2026.

1. Who processes your data

• Data controller: Forum Properties KRG, S.L., trading as Porta de Mar
• Tax ID (NIF): B70888052
• Registered office: Partida Santa Quiteria, 840, 12550 Castellón
• Sales office: Plaza Illes Balears, n.º 1, local 2, 12594 Oropesa del Mar (Castellón)
• Email: info@portademar.com
• Phone: +34 622 742 157

This policy explains how we process the personal data of people who visit portademar.com, ask us for information about our developments or contact us through our ads on Facebook and Instagram.

2. What data we process

• The data you give us in the form: name, email address, phone number, language and the development you are interested in. If you answer the questions about what you are looking for, we also process your answers: purchase intention, budget, number of bedrooms and province or country of residence.
• Proof of your consent: which boxes you ticked, the exact text you accepted and its version, the date and time, and the IP address and browser from which you submitted the form.
• How you reached us: if you come from an ad or a campaign link, the identifier of that campaign (for example, gclid, fbclid or the utm parameters) and the website you came from. This information is not stored on your device: it is sent along with the form when you submit it.
• What you do with what we send you: whether you download the brochure from the link in our email, whether you click the WhatsApp button on the thank-you page and whether our email could not be delivered. Our emails do not contain tracking pixels.
• If you contact us through a Facebook or Instagram ad: the data you enter in Meta's form, together with the campaign, ad set and ad from which you submitted it.
• Your conversations with our team by phone, email or WhatsApp, to the extent necessary to handle your request.
• Browsing data, only if you accept the corresponding cookies. These are explained in the cookie policy.

The fields marked as mandatory in the form are those we need in order to handle your request. If you do not fill them in, we cannot send you the information.

3. How we use your data and on what legal basis

Purpose	Legal basis
Handling your request: sending you the brochure, contacting you about the development you are interested in and, if you decide to go ahead, preparing the purchase.	Taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Sending you marketing information from Porta de Mar by email and WhatsApp.	Your consent (Art. 6(1)(a) GDPR and Art. 21 of Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI)).
Calling you with an automated Porta de Mar voice assistant to discuss your search.	Your consent (Art. 6(1)(a) GDPR).
Keeping proof of your consents.	Compliance with a legal obligation: being able to demonstrate that you gave your consent (Arts. 6(1)(c) and 7(1) GDPR).
Knowing which campaign brought you to us and measuring the results of our advertising.	Our legitimate interest in knowing how our campaigns perform (Art. 6(1)(f) GDPR). Measurement cookies are only set with your consent.
Protecting the form against abuse and automated submissions.	Our legitimate interest in the security of the website (Art. 6(1)(f) GDPR).
If you buy, managing the contract and complying with our tax, accounting and anti-money laundering obligations.	Performance of the contract and compliance with legal obligations (Arts. 6(1)(b) and 6(1)(c) GDPR).

We use your answers to the form to serve you better and to organise our sales follow-up. We do not make automated decisions that produce legal effects concerning you.

You can withdraw any consent at any time, without affecting the processing we carried out before you withdrew it.

4. How long we keep your data

• Your information request: for as long as you remain interested in our developments and, at most, three years from your last contact with us, unless you ask us to erase it sooner.
• Marketing communications and the automated call: until you withdraw your consent.
• Proof of your consents: for as long as we process your data on that basis and, afterwards, for the periods during which we may be required to demonstrate it.
• If you buy: for the periods set by law, including six years under commercial and accounting legislation and ten years under anti-money laundering legislation.

Once these periods have expired, the data is blocked for as long as any liability may arise from it, and is then erased.

5. Who we share your data with

We do not sell your data. To provide our service, we work with providers that process it on our behalf, under contract and only for the tasks we assign to them:

• OVH: website hosting, in France.
• Supabase: the database and the servers that receive the form, in Ireland.
• Resend: sending our automated emails, from servers in Ireland.
• Witei: the sales management software our team uses to handle your request.
• Google: corporate email and, if you accept the corresponding cookies, measurement and advertising.
• Meta: Facebook and Instagram forms and, if you accept marketing cookies, measurement of our ads.
• Microsoft: Clarity, if you accept marketing cookies.

Your data may also be accessed by the professionals and companies that work with us on the sale of the development you are interested in, only to the extent necessary to assist you. And, if you buy, by the notaries, land registries, financial institutions and public authorities involved in the transaction, or where a law requires us to disclose it.

Some of these providers belong to groups headquartered in the United States. Where there is an international transfer of data, it is covered by the EU-U.S. Data Privacy Framework or by the standard contractual clauses approved by the European Commission.

6. Your rights

At any time, you can ask us for:

• Access: to find out what data of yours we process.
• Rectification: to have any inaccurate data corrected.
• Erasure: to have your data deleted when it is no longer necessary.
• Objection: to have us stop processing it on the basis of legitimate interest.
• Restriction: to have us only keep it while a claim is being resolved.
• Portability: to receive it in a structured format.
• Withdrawal of your consent to marketing communications or the automated call.

Write to us at info@portademar.com with the subject “Data protection”, or by post to our registered office. If we have doubts about your identity, we may ask you to prove it. We will reply within one month.

If you believe we have not handled your request properly, you can lodge a complaint with the Agencia Española de Protección de Datos (the Spanish Data Protection Agency, www.aepd.es).

7. Security

The website only works over an encrypted connection (HTTPS). The data is stored on servers in the European Union, access is limited to the people who handle your request, and the brochure is delivered through signed links that only work for the person who receives them.

8. Minors

Our developments are aimed at people aged 18 or over. If you are under 18, please do not send us your data.

9. Changes to this policy

If we change this policy, we will publish the new version here with its date. If the change affects something you consented to, we will ask for your consent again.