Privacy Policy
1. Data Controller
The data controller for the personal data processed through www.propdue.com is:
- Company: Prado Capital SL
- CIF: B98739253
- Address: Gran Vía Marqués del Turia 39, 46005 Valencia, Spain
- Contact: hola@propdue.com
2. What Data We Collect
We collect the following categories of personal data:
- Cost Calculator submissions: email address, nationality, property price inputs, autonomous community selection.
- Legal Review orders: name, email, payment details (processed by Stripe — we do not store card numbers), property location, nota simple uploads, additional property details.
- Partner Network requests: name, email, property location, budget range, services needed, situation description.
- Analytics (consent required): page views, clicks, session duration, device information. Collected via PostHog only after you grant consent.
- Email marketing (opt-in only): email address and engagement data, only if you explicitly opt in.
3. Legal Basis for Processing
- Legal Review orders: contractual necessity (Art. 6.1.b GDPR) — processing is necessary to deliver the service you purchased.
- Cost Calculator: legitimate interest in providing the free service. Email is stored only with your explicit consent.
- Partner Network requests: contractual necessity / pre-contractual steps (Art. 6.1.b GDPR).
- Analytics: consent (Art. 6.1.a GDPR; LSSI Art. 22.2). No analytics data is collected without your prior consent.
- Marketing emails: consent (Art. 6.1.a GDPR).
4. Processors and Recipients
We use the following third-party processors:
- Supabase (database, EU region) — stores order data, property data, and user information.
- Stripe (payments, EU/US) — processes payments securely. Standard Contractual Clauses (SCCs) are in place for EU→US transfers.
- PostHog EU (analytics, EU region) — collects usage data only after consent is granted.
- Resend (transactional email, EU/US) — sends order confirmations and report deliveries. SCCs in place.
- Vercel (hosting, EU edge) — serves the website with EU origin.
All processors have signed Data Processing Agreements (DPAs) with Prado Capital SL.
5. International Transfers
- Stripe: USA, under Standard Contractual Clauses and supplementary measures.
- Resend: USA, under Standard Contractual Clauses.
- All other processors: EU only.
6. Retention Periods
- Cost Calculator submissions: 12 months from last interaction.
- Legal Review orders: 6 years from purchase (required by Spanish accounting and tax law).
- Partner Network requests: 12 months from submission, or until the purpose is fulfilled.
- Marketing email data: until user unsubscribes.
- Analytics data: anonymised after 12 months.
7. Your Rights
Under the GDPR and LOPDGDD, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
To exercise any of these rights, email hola@propdue.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.
8. Automated Processing
The Legal Review uses AI to interpret the nota simple (title deed extract from the Spanish Land Registry). Users have the right to request human review of any AI-generated output.
No fully automated decisions with legal effects are made. Human review occurs before report delivery.
9. Data Protection Officer
A Data Protection Officer is not currently designated, as the processing scope does not require one under GDPR Article 37. Privacy matters can be raised at hola@propdue.com.
10. Changes to This Policy
We will notify users of material changes via email (if we hold a contact address) or by prominent notice on the site. Check this page for the current version.
11. Cookies
See our Cookie Policy for full details on how we use cookies and similar technologies.