Manage your personal data
You can ask us at any time for:
- Access: to know what data we hold about you and what we use it for.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to delete it when it is no longer needed, unless a legal obligation requires us to keep it.
- Objection and withdrawal of consent: to stop receiving marketing communications (“Unsubscribe”), without giving a reason.
- Restriction and portability: to limit its use or receive it in a commonly used format.
How: write to info@nexthome.cat stating which right you wish to exercise, from the same email address or with the phone number you gave us. By default we will not ask for a copy of your ID; only if we cannot reasonably confirm your identity will we ask for the minimum information needed.
We will reply within one month. In complex cases this may be extended by two further months; if so, we will tell you within the first month.
Write to us to exercise a right
Documents you send us: we only use them to handle your request or relationship with NEXT>HOME, with restricted access. When they are no longer needed and there is no obligation or other legal basis to keep them, we will delete them securely. We do not keep them to send you future opportunities.
If you disagree with our reply, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
1. Data controller
The controller is VIS Projectes 81, SL, Tax ID B55337356, trading as NEXT>HOME, at Carrer de Pau Vila i Dinarès, 4, baixos, 17003 Girona. Contact: info@nexthome.cat or 972 21 51 40. Registered real estate agent: AICAT 13187.
2. Data collected and source
We process information entered in forms or supplied by email, telephone or WhatsApp. Depending on the request, this may include:
- Name, telephone number and email address.
- Transaction: buying, selling or renting.
- Property type and town or area.
- Budget or indicative price.
- Floor area and number of bedrooms, where relevant.
- Comments, features, needs, expected timeframe and financing status.
- Request language and the minimum technical data needed for form security and operation.
3. Purposes
- Answer enquiries and information requests.
- Manage purchase or rental requirements and identify suitable properties.
- Assess and manage requests to sell or let a property.
- Contact the interested person and follow up the request.
- Manage a pre-contractual or contractual relationship, if entered into, and meet legal duties.
- Prevent misuse, fraud and security incidents.
4. Lawful bases
To respond to and follow up your request, the legal basis is taking pre-contractual steps at your request. The checkbox confirms that you have read the data protection information. If a contract is concluded, its performance and applicable legal obligations also apply. Security and handling claims are based on legitimate interests. Optional cookies require separate consent.
5. Private nature of property requirements
Searches, property requirements and contact details are not published and are not visible to other users or visitors. They can only be viewed internally by NEXT>HOME to manage the property request.
Internal access is limited to people who need the information to handle the request and is subject to confidentiality duties.
6. Retention periods
- Enquiries and requirements that do not become contractual: up to 24 months after the last relevant interaction, unless earlier erasure is requested or retention is necessary to defend a claim.
- Client and transaction data: for the relationship and then blocked for the applicable tax, accounting, civil or administrative limitation periods.
- Marketing consent, if enabled and granted: until withdrawn or no longer applicable.
- Technical security logs: for the short, proportionate period needed to detect incidents.
7. Recipients, processors and transfers
We do not sell personal data or disclose it for a third party’s own purposes. Providers acting for VIS Projectes 81, SL may access it, including hosting, database, maintenance, communications and IT support services, subject to appropriate contracts and instructions.
Data may also be disclosed to public authorities, courts, notaries, registries, professional advisers or transaction participants where necessary for a transaction, to comply with law or at the person’s request. If a provider processes data outside the European Economic Area, an adequacy decision or appropriate safeguards such as standard contractual clauses will be required.
When the CRM records a new request, the team receives a generic internal alert containing no personal data. Request details are only viewed in the CRM.
- Cloudflare, Inc. (website hosting and security).
- WhatsApp Ireland Ltd. (if you contact us through WhatsApp).
8. Your rights
You may request access, rectification, erasure, restriction, objection and portability, and withdraw consent at any time. Write to info@nexthome.cat or the controller’s address, identifying the right and supplying only what is needed to verify identity.
You may also complain to the Spanish Data Protection Agency (AEPD), www.aepd.es. Withdrawal does not affect processing carried out lawfully before withdrawal.
9. Security
We apply risk-appropriate technical and organisational safeguards for confidentiality, integrity, availability and resilience, including access controls, limited permissions, protected communications, backups where appropriate and incident procedures. No system is completely invulnerable, so safeguards are reviewed periodically.
10. Children’s data
The services and forms are not directed at children under 14. A child’s data must not be submitted without authorisation from their legal representative. Data identified as having been collected without a sufficient basis will be erased as soon as possible.
11. Valuation tool
The valuation tool is our own: it neither loads nor links to any external valuation service.
12. External links and updates
This policy applies only to the NEXT>HOME website. Idealista, Google Maps, WhatsApp and other destinations have their own policies. We may update this policy if processing or legal requirements change; the published date identifies the current version.
ChatGPT Ads · OpenAI
With advertising consent, the OpenAI pixel receives the pixel ID, cookie identifiers and technical connection, browser and page data. On a WhatsApp click, the code sends the whatsapp_clicked event; this does not confirm that a message was sent. No contact data from forms is sent to OpenAI.
Consent to be contacted (optional)
If you tick this box, NEXT>HOME may contact you by phone, email or WhatsApp to offer properties, valuations or services related to your request, including after it has been handled. It is optional: if you do not tick it, we will only contact you to handle the request you sent us.
You can withdraw this consent at any time, free of charge: reply “UNSUBSCRIBE” to any of our emails or write to info@nexthome.cat. Withdrawal does not affect processing carried out before.
You can exercise your rights of access, rectification, erasure, objection, restriction and portability as explained in this privacy policy.
Google Analytics 4
Google Analytics 4 loads only after you accept visit analytics. It measures pages visited, traffic sources and contact clicks, and records a property search after the server confirms it has been saved. A WhatsApp, phone or email click is a contact attempt; it does not confirm a message was sent or a call took place.
Google may receive cookie identifiers and technical browser, device and connection data. NEXT>HOME code does not send names, phone numbers, email addresses, property addresses, comments or WhatsApp message text to Analytics. Automatic enhanced measurement, Google Signals and advertising personalization are disabled. Loading is based on consent, separate from ChatGPT Ads measurement and the external valuation tool.
You can accept, reject or withdraw consent using Analytics and advertising settings. Your analytics choice expires after 180 days. Analytics cookies are configured to last at most 180 days, without automatic renewal. Withdrawing consent stops measurement and deletes accessible analytics cookies on this subdomain; it does not erase data Google previously received with consent.
Metricool
Metricool measures website visits only with analytics consent. After loading be.js from tracker.metricool.com, we send one visit with the website’s public identifier. Metricool receives the page URL limited to known public routes without query strings or fragments, only the referrer origin, window dimensions and technical connection data. We do not add form fields. It does not load before acceptance or after rejection. Withdrawal stops measurement and removes the script tag; it cannot undo requests already sent or guarantee cancellation of an ongoing download. We do not attribute unverified cookies or retention periods to the provider.
NEXT>HOME · Carla
Some messages may be handled by an artificial intelligence virtual assistant. You can always ask to speak to a person.
