Privacy policy

Pending legal review. The fields marked [TODO: …] must be filled in with the controller's real details before this page goes live. The text below describes exactly what the site does, but it has not been validated by a lawyer.

1. Data controller

• Controller: [TODO: legal entity name]
• Tax ID: [TODO: tax ID]
• Address: [TODO: postal address]
• Contact: [TODO: privacy contact email]

This policy covers the commercial site solcondo.com only. Each community's private portal is served on its own domain and carries its own privacy notice, in which the homeowners' community is the controller and SolCondo acts as processor.

2. What we collect and why

Demo request form

It is the only form on this site. When you submit it we process:

• Required: your full name and email address.
• Optional: phone number, the name of your community or management firm, your role (property manager, president, owner or other), the number of homes, and whatever you write in the message field.
• Technical: the language you were browsing in, campaign parameters (utm_source, utm_medium, utm_campaign) if you arrived from an ad or a campaign link, and an identifier derived from your IP address.

Purpose: to answer your request, prepare the demonstration, and keep the commercial conversation attached to that enquiry.

We never store your IP address. We keep only a value derived from it using a keyed cryptographic algorithm, which cannot be reversed to the original address and which we use solely to limit submissions per origin and detect abuse of the form.

Browsing

This commercial page uses no analytics or advertising cookies and does not profile visitors. The only cookie that may exist is the session cookie, and only if you sign in to a portal through "Sign in"; it is strictly necessary to keep you signed in.

3. Legal basis

• Demo form: your consent (Art. 6(1)(a) GDPR), given by explicitly ticking the box before submitting. If a contractual relationship follows, the processing basis becomes performance of that contract (Art. 6(1)(b) GDPR).
• Rate limiting and abuse prevention: our legitimate interest (Art. 6(1)(f) GDPR) in keeping the service available and free of spam.

4. Retention

We keep your enquiry for as long as the commercial conversation lasts and, after that, for a maximum of 24 months from the last contact — unless you ask us to erase it sooner, or the relationship becomes a contract, in which case the applicable statutory retention periods apply.

5. Recipients

We do not sell or share your data with third parties for commercial purposes. It is hosted on the infrastructure of our technology providers, who act as processors and with whom we have the agreements required by Art. 28 GDPR in place:

• Supabase — database and authentication.
• Vercel — application hosting and delivery.
• Cloudflare R2 — file storage.

Where any of these providers processes data outside the European Economic Area, the transfer relies on the Standard Contractual Clauses approved by the European Commission.

6. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent — without affecting the lawfulness of processing carried out before withdrawal — by writing to [TODO: privacy contact email] stating which right you wish to exercise.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

7. Changes to this policy

If we change how we process data we will update this page and change the last-updated date shown at the top.