680 808 844 [email protected]
EN ES
WhatsApp
Agente Inmobiliario Colegiado API
EN ES

Privacy policy

Last updated: 2 September 2026

This policy explains how Lena Tamen SL processes personal data when you visit pedroochoa.com, contact us, or engage us for a real estate service.

1. Controller

The controller is Lena Tamen SL, tax identification number B64327117, with its address at Calle Calvet 51 Atico 2, Barcelona, 08021, Spain.

For privacy questions or to exercise your rights, write to [email protected].

No data protection officer has been appointed because the business does not carry out regular and systematic monitoring on a large scale or large-scale processing of special categories of data or data relating to criminal convictions and offences.

2. Data processed and its source

We process the following categories of data:

  • Identity and contact data, such as your name, email address, and telephone number.
  • Enquiry and property-preference data, such as the type of transaction, area, budget, basic features of a property you are seeking, or information needed to value a property.
  • Contract and customer data, when a service is agreed or provided.
  • Communication data, including the content you provide by email, telephone, or WhatsApp and the dates of interactions. We do not record calls.
  • Technical browsing data, such as IP address, date and time, requested URL, browser, and connection-security data, which is received by the site's hosting and delivery infrastructure.
  • Information about closing or confirming the cookie notice, stored on your device to remember that you already closed or confirmed it.

Contact details, enquiries, and preferences come directly from you when you email, call, or contact us through WhatsApp. The buyer network is built exclusively from direct contacts and contains contact details and basic property preferences. Pedro is the only person who manages it, using Google Workspace email and Google Contacts.

We do not process special categories of data as part of these services or ask for them. Please avoid including health, political, religious, biometric, or other particularly sensitive information in free-text communications.

3. Purposes and legal bases

We process data for the following purposes:

  • To answer general enquiries that you initiate. Our legal basis is our legitimate interest in managing and answering communications relating to our services. That interest is limited by the content you choose to provide, your reasonable expectations when you first contact us, and your right to object.
  • To take pre-contractual steps that you request. Where a request objectively requires us to prepare a sale, purchase, rental, valuation, or other service that you may engage us to provide, we process the data needed to take those steps at your request. We do not apply this basis to communications that are not necessary to prepare a possible contract.
  • To provide an agreed service. We process the data needed to perform the contract and manage the customer relationship.
  • To maintain a direct network of prospective buyers. Our legitimate interest is to retain the context of property requests received directly and identify properties that match current preferences, without using that information for marketing campaigns. We limit the data to contact details and basic preferences. Only Pedro has access, and you may object at any time.
  • To maintain the site's security, integrity, and availability. Our legal basis is our legitimate interest in preventing misuse, detecting incidents, and protecting the site and its communications. Only the technical data needed for those purposes is processed, and it is not reused for audience analytics.
  • To prepare and deliver site images through the Sanity CDN, including the preconnect that may establish the technical connection before an image is requested. The purpose is to prepare and serve images that the site may request. Our legal basis is our legitimate interest in delivering content efficiently, limited to that technical connection; you may object to this processing.
  • To remember that you closed or confirmed the cookie notice and avoid showing it to you again for 182 days (approximately six months). Our legal basis is our legitimate interest, limited to remembering only that closure or confirmation so the notice is not repeated. You may object at any time; if you delete the cookie, the notice will be shown again.
  • To comply with legal obligations that apply to the business and contractual relationship. Our legal basis is compliance with those obligations, including tax and accounting requirements or lawful requests from competent authorities where applicable.
  • To establish, exercise, or defend legal claims. Our legal basis is our legitimate interest in protecting our rights and addressing possible liabilities.

We do not process data for marketing, promotional campaigns, or personalised advertising.

4. Required and voluntary data

Providing personal data is voluntary. To reply through a direct channel, we need at least a way to contact you and the minimum information required to understand the request. To take pre-contractual steps or provide a service, we may ask for the data objectively needed for that task; without it, we may be unable to proceed.

All other information is optional. Please do not send more data than necessary. You may use [email protected], the telephone number published on the site, or WhatsApp as a verifiable contact channel.

5. Recipients and providers

We do not sell personal data or disclose it for commercial purposes. We use the following providers or categories of providers to operate the site and contact channels:

  • Cloudflare, for hosting, edge services, content delivery, and security. It receives the technical data needed to handle each connection to the site.
  • Sanity, as the CMS queried when the site is built. Contact enquiries are not sent to Sanity. When certain images load, your browser connects to its CDN; the site may also prepare that connection using preconnect.
  • Google Workspace and Google Contacts, for email and the direct management of contact details and basic property preferences.
  • WhatsApp Business, when you choose to use that channel.
  • Telecommunications providers, for calls and connectivity.

Pedro is the only person who manages the direct buyer network. We may also disclose data to professional advisers, courts, public bodies, or other authorities where necessary to comply with a legal obligation or to establish, exercise, or defend legal claims.

Virtual tours, videos, and other external resources open only when you choose to follow their links. The external provider then receives technical connection data and applies its own privacy policy. The site does not load those external resources as embedded content before you open them.

6. International transfers

Cloudflare, Sanity, Google, and WhatsApp may process data outside the European Economic Area, either directly or through subprocessors. According to their public data-protection terms, restricted transfers rely, as applicable, on an adequacy decision, a recognised framework, or the Standard Contractual Clauses approved by the European Commission. WhatsApp also states that it uses the EU-U.S. Data Privacy Framework for certain transfers to WhatsApp LLC and Meta Platforms, Inc., with alternative mechanisms available where applicable.

The specific location may depend on the service and its subprocessors; this policy does not state that any particular account region or control has been enabled. You may request information about the applicable safeguards by writing to [email protected]. When you open a tour, video, or other external link, transfers made by that third party are governed by its own policy.

7. Retention

We apply the following periods or criteria:

  • Enquiries that do not result in a customer relationship are deleted 12 months after the last interaction.
  • Contacts in the direct buyer network who no longer have a current interest are reviewed and deleted after 24 months without a current interest.
  • Contract and customer records are kept for the duration of the relationship and then for as long as required by applicable legal obligations and the relevant periods for establishing, exercising, or defending claims. Where required, the records are blocked and restricted to those purposes before they are deleted.
  • Technical data is kept only for as long as needed to operate and protect the site and according to the provider's applicable retention periods.
  • The necessary cookie that remembers the closure or confirmation of the notice is kept for 182 days (approximately six months).

8. Rights and complaints

You may ask for access to and a copy of your data, correction, erasure, or restriction, and you may object to processing based on legitimate interests. You may also request portability of data you provided where processing is automated and based on a contract, including direct transmission where technically feasible.

To exercise your rights, write to [email protected] and state which right you wish to exercise. We will ask for additional information to verify your identity only where there are reasonable doubts. We will normally respond within one month. If a request is complex or there are several requests, we may extend that period as permitted by the GDPR and will explain why.

If you believe the processing is not appropriate, you may lodge a complaint with the Spanish Data Protection Agency.

9. Cookies

The site does not use analytics or marketing cookies. It uses a necessary cookie for 182 days (approximately six months) to remember that you closed or confirmed the cookie notice and avoid showing it to you again. This cookie is configured with the Secure attribute and is not used to measure audiences, create profiles, or track browsing for advertising purposes.

Our legal basis is our legitimate interest, limited to remembering the closure or confirmation and not repeating the notice. Your consent is not required for this technical purpose, and you may object at any time; if you delete the cookie, the notice will be shown again. If non-essential technologies are introduced in the future, the information will be updated and those technologies will not be enabled before a valid choice is obtained.

10. Children, profiling, and automated decisions

The site and services are not directed at children. We do not knowingly seek or request their data. If a child needs to make an enquiry relating to a property, it must be made through their legal representative.

We do not record calls, score individuals, create profiles, or make decisions based solely on automated processing that produce legal or similarly significant effects.

11. Security and changes

We use technical and organisational measures proportionate to the risk to protect the confidentiality, integrity, and availability of data, restrict access, and respond to incidents. No measure can remove every risk associated with the Internet.

We will review this policy if our processing, providers, or applicable requirements change. The effective version date appears at the beginning. The Spanish and English versions will remain structurally and semantically equivalent.