(GDPR & Spanish Data Protection Compliance)
Last updated: 30/10/25
- Data Controller
The Data Controller responsible for processing your personal data is:
Blue Horizon 360 S.L.
CIF: B21677281
Registered Address: Calle la Tosca 5, 38678 Adeje (Callao Salvaje), Tenerife, Spain
Email: bh360invest@gmail.com
Phone: +34 822 11 92 44
Personal Data We Collect
We may collect and process the following categories of personal data:
Identification details: full name, nationality. - Contact details: email address, phone number, postal address.
- Property information: details of properties you own or intend to acquire for investment or rental purposes.
- Financial information: billing details, payment information, bank account details (only when necessary for service agreements).
- Technical data: IP address, browser type, cookies, browsing behaviour on our website.
Purposes of Processing & Legal Basis
We process personal data only when we have a valid legal basis under the GDPR and Spain’s LOPDGDD.
Responding to enquiries and pre-contract steps – based on contractual necessity (Art. 6(1)(b)).
Service delivery (property management, advisory, investment services) – based on contractual necessity (Art. 6(1)(b)).
Billing, accounting, and compliance – to meet legal obligations (Art. 6(1)(c)).
Payments processing & fraud prevention – contractual necessity and legitimate interests (Art. 6(1)(b) & Art. 6(1)(f)).
Client relationship management – legitimate interests in running and growing our business (Art. 6(1)(f)).
Website operation & security – legitimate interests in securing our services (Art. 6(1)(f)).
Analytics & performance measurement – consent for non-essential cookies (Art. 6(1)(a)).
Marketing communications – consent (Art. 6(1)(a)) or legitimate interests for existing clients (Art. 6(1)(f)).
Record-keeping and dispute management – legitimate interests and/or legal obligation (Art. 6(1)(f), Art. 6(1)(c)).
Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may object to such processing.
Data Retention
We retain personal data only as long as necessary:
Contractual and billing records: up to 6 years (Spanish tax/commercial law).
Property and investment documentation: during the contract and up to 5 years after termination.
Marketing data: until you withdraw consent or opt out.
Website technical data: generally up to 12 months.
Cookies: according to our Cookie Policy and your preferences (session or up to 24 months).
After retention periods expire, data is securely deleted, anonymised, or blocked.
Sharing and International Transfers
We do not sell your personal data. We may share it with:
Service providers (e.g. Google, Zoho, Microsoft, WhatsApp) under contractual safeguards.
Professional advisers (accountants, auditors, lawyers, consultants).
Public authorities when legally required (e.g. Spanish Tax Agency, courts).
Some providers operate outside the EEA (e.g. in the US). In such cases we rely on:
Adequacy decisions by the European Commission, or
Standard Contractual Clauses (SCCs) with supplementary safeguards.
Copies of safeguards are available upon request.
Your Data Protection Rights
You have the following rights:
Access – obtain confirmation and a copy of your data.
Rectification – correct inaccurate data.
Erasure – request deletion when data is no longer needed.
Restriction – suspend processing in certain cases.
Portability – receive your data in a structured, machine-readable format.
Objection – object to processing based on legitimate interests or direct marketing.
Withdraw consent – at any time, without affecting past processing.
To exercise your rights, contact: bh360invest@gmail.com.
If you are unsatisfied, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.
Cookies and Tracking Technologies
We use cookies to improve user experience, analyse traffic, and support marketing.
Strictly necessary cookies – required for website operation.
Analytics cookies – e.g. Google Analytics (requires consent).
Marketing cookies – personalised ads and tracking (requires consent).
You can accept, reject, or customise cookies through our banner. You can also change preferences at any time.
See our Cookie Policy [insert link] for more details.
Data Security
We implement appropriate measures to protect your data:
SSL/TLS encryption for data in transit.
Restricted access for authorised staff only.
Secure servers with industry-standard protections (Google, Zoho, Microsoft).
Monitoring to detect and prevent misuse.
Backups and recovery procedures.
No system is 100% secure, but we take all reasonable steps to minimise risks.
Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be reflected with an updated “Last updated” date. We encourage you to review this page periodically.
Contact us
If you have any questions or concerns about this Privacy Policy or your data, please contact us at:
Blue Horizon 360 S.L.
CIF: B21677281
Address: Calle la Tosca 5, 38678 Adeje (Callao Salvaje), Tenerife, Spain
Email: bh360invest@gmail.com
