Privacy policy

1. Data controller

Controller: CONBASA XXI, S.L. (commercial brand Christina Rius Homes™).

CIF: B63160311.

Registered office: Calle San Pedro Claver, 25-27, Casa D, 08017 Barcelona, Spain.

Privacy contact: info@christinariushomes.com.

2. Data collected

When you request a Discovery Call™, we collect the information you provide in the form: name, email address, optional telephone number, the location of the property and a short description of what you would like to discuss. Technical security data, such as IP address, date, time and request metadata, may also be processed to protect the website and prevent abuse.

We do not request special-category data through the website. Please do not include health, identification-document, financial-account or other sensitive information in the free-text field.

3. Purposes and legal bases

Answering your enquiry, assessing mutual fit and taking steps at your request before a possible contract: Article 6(1)(b) GDPR.

Protecting the website, preventing abuse and maintaining evidence of communications: legitimate interests under Article 6(1)(f) GDPR.

Complying with tax, accounting, legal or regulatory duties when applicable: Article 6(1)(c) GDPR.

Sending marketing communications or activating non-essential cookies, if introduced in the future: consent under Article 6(1)(a) GDPR. No marketing subscription is included in the current form.

4. Retention

Enquiries that do not lead to a professional relationship are retained for a maximum of 12 months after the last meaningful contact and are then deleted or anonymised, unless they must be retained to establish, exercise or defend legal claims. If a professional relationship begins, relevant data is retained for the duration of the relationship and for the statutory periods applicable to contractual, tax, accounting and legal obligations.

5. Recipients and processors

Personal data is not sold. It may be processed by providers strictly necessary to operate the website, host its secure backend, protect it against abuse and deliver notifications. The website uses Lovable Cloud, operated by Lovable Labs, with the project backend hosted in the European region. Lovable may use authorised subprocessors, including cloud and edge-security providers, under its data-processing terms.

A transactional email provider may process the data necessary to forward your request internally to the studio, so that Christina receives and can answer it. This is used only to deliver that internal notification; no marketing, tracking or automated reply is sent to you.

Data may also be disclosed to public authorities, courts or professional advisers when required by law or necessary to establish, exercise or defend legal claims.

6. International transfers

Where a provider or authorised subprocessor processes data outside the European Economic Area, transfers are covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, together with supplementary measures where required. Further information may be requested at info@christinariushomes.com.

7. Your rights

You may request access, rectification, erasure, restriction, portability or object to processing, and withdraw consent where processing is based on consent. Write to info@christinariushomes.com and identify your request. We may ask for information necessary to verify your identity.

You may lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, if you consider that your data has been processed unlawfully.

8. Security

Appropriate technical and organisational measures are applied according to the risk, including server-side validation, restricted access, transport encryption, database access controls, abuse prevention and scheduled deletion. No method is completely risk-free, but the website is designed to avoid exposing form data in browser URLs or public frontend code.

9. Children

The website and services are directed to adults. We do not knowingly collect data directly from children through the website.

10. Changes

This policy may be updated when the website, providers or processing activities change. The current version and update date will always be published on this page.