Privacy Policy

Draft pending legal review. This document is informational and not legal advice.

1. Who we are (Data Controller)

listyco.com is a joint initiative currently operated by the entities named below. A dedicated Listyco group company is in formation; this notice will be updated with its registered details upon incorporation. The following entities act as joint data controllers (the "Controllers", "we", "us") under Article 26 GDPR:

• RFKT S.L.. Spanish tax ID B75371500, registered office at Calle Guadaiza 251, Urbanización Los Ángeles, San Pedro de Alcántara, 29670 Marbella (Málaga), España.
• PTC Capri S.L.. Spanish tax ID B55435069, registered office at Urbanización El Mirador 4B, 29602 Marbella (Málaga), España.

For any privacy matter you can reach us at privacy@listyco.com.

2. What data we collect

• Enquiry / contact data you submit through our forms: name, email address, phone number (optional), and the content of your message, plus the property or development your enquiry relates to.
• Technical data automatically collected by our hosting infrastructure: IP address, browser type, device and access logs, for security and to operate the Site.
• Cookie and usage data as described in our Cookie Policy. Non-essential cookies are only set with your consent.

We do not knowingly collect data from minors, nor any special-category data.

3. Why we use it and on what legal basis

Purpose	Legal basis (GDPR Art. 6)
Respond to your property enquiry and put you in contact with our team	Steps taken at your request prior to a contract (Art. 6(1)(b)) and our legitimate interest in handling enquiries (Art. 6(1)(f))
Manage and follow up your enquiry as a lead in our CRM	Legitimate interest (Art. 6(1)(f))
Send you property information you have asked for or consented to receive	Consent (Art. 6(1)(a))
Operate, secure and improve the Site (incl. analytics)	Legitimate interest, and consent for non-essential cookies (Art. 6(1)(a)/(f))
Comply with legal obligations	Legal obligation (Art. 6(1)(c))

4. Who we share it with

We do not sell your data. We share it only with service providers who process it on our behalf under data-processing agreements, and only as needed:

• Hosting / CDN: Cloudflare, Inc. (serves the Site and our edge functions).
• Transactional email: Resend (delivers enquiry notifications to us).
• Our CRM / lead platform: the Listyco platform, where your enquiry is recorded so our team can respond.
• Property data source: data.listyco.com, our own market-data service (provides listing information shown to you; your personal data is not sent to it).

We may also disclose data where required by law or competent authority.

5. International transfers

Some providers above (e.g. Cloudflare, Resend) may process data outside the European Economic Area. Where they do, transfers are protected by appropriate safeguards under Chapter V GDPR, such as the European Commission's Standard Contractual Clauses.

6. How long we keep it

We keep enquiry data while we handle your request and for up to 180 days after our last contact, after which it is deleted or anonymised, unless a longer period is required to meet legal obligations or to defend potential claims.

7. Your rights

Under the GDPR and LOPDGDD you may exercise the rights of access, rectification, erasure, restriction of processing, data portability, and objection, and you may withdraw any consent at any time without affecting prior processing. To exercise these rights, email privacy@listyco.com; we may ask you to verify your identity.

You may also lodge a complaint with the Spanish supervisory authority (AEPD).

8. Security

We apply appropriate technical and organisational measures to protect your data. API keys and credentials are held server-side and never exposed to the browser.

9. Changes

We may update this policy; the current version and its date are always shown at the top of this page.

10. Governing law

This policy is governed by Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), and Law 34/2002 (LSSI-CE) of Spain.