Marcin Nowak Services – Luksusowe Nieruchomości, Wykończenia Wnętrz i Budownictwo Modułowe
Legal

Privacy Policy

Last updated: 17 September 2026

Data Controller

Costa Modular is the trading name used for the services presented on this Website. For all questions concerning personal data, privacy or the exercise of your GDPR rights, please contact us at: Officecostamodular@gmail.com

1. INTRODUCTION

This Privacy Policy explains how Costa Modular (“we”, “us”, “our”) collects, uses, stores and protects personal data when you visit or use www.costamodular.es (the “Website”), contact us, request information, or enquire about our real estate, investment, modular home or related services. We are committed to protecting your privacy and processing personal data in accordance with applicable data-protection law, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Spanish data-protection legislation.

2. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with us, we may process the following categories of personal data:

  • Identification and contact data, such as your name, email address, telephone number and country of residence.
  • Enquiry and communication data, including the content of messages, requests, property preferences, project requirements or information you voluntarily provide to us.
  • Technical and usage data, such as IP address, browser type, device information, pages visited, approximate location derived from IP address, referral source and interaction with the Website.
  • Cookie and analytics data, where permitted or where you have provided consent through our cookie settings.

We do not intentionally request special categories of personal data. Please do not send sensitive personal information unless it is strictly necessary and we have specifically requested it.

3. HOW WE COLLECT DATA

We may collect personal data when you:

  • Contact us by email, telephone, messaging services or through a contact form.
  • Request information about properties, modular homes, investment opportunities, services or collaborations.
  • Interact with our social-media profiles or third-party platforms.
  • Browse our Website and accept non-essential cookies or similar technologies.

4. PURPOSES AND LEGAL BASES

We process personal data only when we have a lawful basis to do so. The purposes may include:

a) Responding to enquiries and providing requested information

We use your contact details and enquiry information to respond to your request, arrange calls or meetings, and provide information about our services, properties, projects or opportunities.

Legal basis: taking steps at your request before entering into a contract, performance of a contract where applicable, or our legitimate interest in responding to business enquiries.

b) Managing professional and business relationships

We may process data to manage communications with clients, suppliers, collaborators, investors, property owners and other business contacts.

Legal basis: performance of a contract, steps prior to entering into a contract, compliance with legal obligations, or legitimate interests in managing our business relationships.

c) Improving our Website and services

We may use aggregated or pseudonymised technical and analytics information to understand Website performance, visitor behaviour and the effectiveness of our content.

Legal basis: your consent for non-essential cookies and analytics technologies where required; otherwise, our legitimate interest in improving Website performance and security.

d) Security, fraud prevention and legal compliance

We may process data to protect our Website, systems, users and business; to prevent misuse or fraud; and to comply with applicable legal, accounting, tax or regulatory obligations.

Legal basis: legal obligation and/or legitimate interests in protecting our business and enforcing our rights.

5. RECIPIENTS OF PERSONAL DATA

We may share personal data only where necessary with trusted service providers and professional partners, including:

  • Website hosting, IT, website maintenance and security providers.
  • Email, communication and administrative service providers.
  • Analytics providers, including Google Analytics 4, where enabled in accordance with your cookie preferences.
  • Professional advisers, including legal, accounting or insurance advisers.
  • Public authorities, regulators or law-enforcement bodies where required by law.
  • Business partners or service providers involved in responding to a specific request, only where necessary and relevant to that request.

6. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process data outside the European Economic Area (“EEA”), including providers of cloud, analytics, communications or technical services. Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is lawful and that an adequate level of protection is applied, such as relying on an adequacy decision, Standard Contractual Clauses approved by the European Commission, or other appropriate safeguards permitted by applicable law.

7. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, tax, reporting or dispute-resolution requirements. In general:

  • Enquiry and contact data may be retained for up to 24 months after the last meaningful contact, unless a longer period is necessary due to an ongoing relationship, legal obligation or legitimate business reason.
  • Client, supplier and contractual data may be retained for the duration of the relationship and afterwards for the legally required limitation or retention periods.
  • Analytics and cookie data is retained in accordance with the settings of the relevant tool and our Cookie Policy.

We may retain data for longer where necessary to establish, exercise or defend legal claims.

8. YOUR RIGHTS

Subject to applicable law, you have the right to:

  • Request access to your personal data.
  • Request correction of inaccurate or incomplete personal data.
  • Request erasure of your personal data where applicable.
  • Request restriction of processing in certain circumstances.
  • Object to processing based on legitimate interests.
  • Receive your data in a portable format where applicable.
  • Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.
  • Lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos – AEPD) if you believe that your rights have been infringed.

To exercise your rights, contact us at Officecostamodular@gmail.com. We may request reasonable information to verify your identity before responding.

9. COOKIES AND ANALYTICS

The Website may use cookies and similar technologies to ensure its operation, remember preferences, improve performance and measure Website traffic. We use Google Search Console and may use Google Analytics 4 (GA4) to understand Website traffic and performance. Where required by law, non-essential cookies and analytics technologies will be activated only after you have provided consent through the cookie banner or settings panel. For further information, please read our Cookie Policy.

10. THIRD-PARTY LINKS

The Website may contain links to third-party websites, platforms, social-media profiles or services. We are not responsible for the privacy practices, content or security of third-party websites. We recommend that you review their privacy policies before providing personal data.

11. SECURITY

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. However, no online transmission or electronic storage system can be guaranteed to be completely secure. Please do not send confidential or sensitive information through unsecured channels unless necessary.

12. CHILDREN

Our Website and services are not intended for children. We do not knowingly collect personal data from persons under 18 years of age. If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. The current version will always be published on this page with the “Last updated” date.