Courtesy translation. In case of any discrepancy, the Spanish version prevails.
Privacy Policy
Data controller
EVS PROPERTY GROUP, S.L.
VAT NUMBER B10686459
Av. de Mijas 1, puerta 1, 29630 Benalmádena (Málaga)
Email: [email protected]
Purposes of processing
We process your personal data to manage real estate enquiries, formalise purchase or rental transactions, manage the contractual relationship, and send commercial communications if you have given us your consent.
Legitimation
Consent of the data subject (Art. 6.1.a GDPR), performance of a contract (Art. 6.1.b GDPR), and legal obligation (Art. 6.1.c GDPR) as the case may be.
Data retention
We keep the data for the duration of the contractual relationship and, after the end of the contractual relationship, for the legally required periods (at least 6 years for accounting documentation).
Virtual assistant with artificial intelligence (“Samantha” chat)
On the property pages you can chat with Samantha, a virtual assistant based on artificial intelligence. Samantha is not a person: her answers are generated automatically and may contain errors. Availability, the final price, costs and any other important details are always confirmed to you by an agent of EVS PROPERTY GROUP.
What data we process: the messages you write in the chat, the language, the property you are viewing and minimal technical data (a random conversation identifier and an encrypted code derived from your IP address, to prevent abuse). We use Google reCAPTCHA to tell people from robots. If you leave your name, phone number or email in a chat form (viewing, valuation or contact), we process them like any other contact request, together with the conversation so that the agent has the context.
Purpose and legal basis: answering your questions and, if you ask us to, handling your viewing, valuation or contact request (steps taken at the request of the data subject prior to entering into a contract, Art. 6.1.b GDPR), and protecting the service against abuse (legitimate interest, Art. 6.1.f GDPR).
Data processor: to generate the answers, messages are sent to Anthropic (provider of the Claude AI model), which acts as data processor under its data processing agreement, including the safeguards for international transfers.
Retention: the chat conversation log is deleted automatically after 30 days. The conversation is also saved in your own browser so that you can continue it; you can delete it at any time with the “New conversation” button.
MCP server for artificial intelligence assistants (mcp.evsproperty.com)
At mcp.evsproperty.com we offer a read-only service that lets artificial intelligence assistants (such as Claude, ChatGPT or Perplexity) search our public property catalogue and show links to this website. The service requires no registration, asks for no personal data and neither sends messages nor collects enquiries: contact always takes place through the forms, the telephone or the WhatsApp of EVS PROPERTY GROUP.
What data we process: for each query we record the tool used, the search criteria (area, price, bedrooms…), the number of results, the response time, the client application (from the User-Agent header) and the source IP address without its last block, which normally belongs to the servers of the assistant's provider rather than to the person. For security reasons, the web server also keeps a technical access log with the full IP address. The links returned by the service include parameters showing which assistant the visit comes from.
Purpose and legal basis: providing the service, protecting it against abuse and producing aggregated usage statistics (legitimate interest, Art. 6.1.f GDPR).
Retention: the query log is deleted automatically after 90 days and the technical access log after 14 days. They are not disclosed to third parties. What you write to the assistant is processed by its provider under its own privacy policy; EVS PROPERTY GROUP only receives the search criteria.
Rights of the data subject
You can exercise your rights of access, rectification, deletion, opposition, limitation and portability by sending an email to [email protected].
Recipients of the data
Your data may be disclosed to: financial and valuation institutions where necessary for the transaction requested; notaries, registries and advisers for the formalisation of contracts; partner real-estate intermediation agencies where the property you are interested in is managed by them; and public authorities where there is a legal obligation. In addition, service providers acting as data processors (web hosting, email, analytics and sales management tools) access the data under contract in accordance with Article 28 of the GDPR. In addition, enquiries received through the website forms are immediately notified to the agent in charge by means of instant messaging services (Telegram and WhatsApp), which receive the identification and contact details you provided in your enquiry.
International transfers
Some technology providers (for example, Google services) may process data outside the European Economic Area. Such transfers are covered by adequacy decisions of the European Commission or by standard contractual clauses, together with any additional safeguards required. The instant messaging services used for the internal notification of enquiries (Telegram FZ-LLC, based in the United Arab Emirates, and WhatsApp Ireland Ltd.) may involve the processing of data outside the European Economic Area, covered by standard contractual clauses.
Information security
EVS applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR, including encryption of website communications, access control and periodic review of its providers.
Third-party data
If you provide us with data relating to third parties, you warrant that you have previously informed them of the content of this policy and that you have their authorisation to disclose it to us.
Automated decision-making
No automated decisions are taken and no profiling is carried out that produces legal effects concerning the data subject.
Complaints to the supervisory authority
If you believe that the processing of your data does not comply with the applicable rules, you may contact EVS at [email protected] or lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).