Last updated: 4 October 2026

1. Who we are

This website at https://marbellaskycorp.com is operated by Marbella Sky Corp ("we", "us", "our"), a real estate advisory based in Marbella, Spain. We are the data controller for any personal data collected through this website.

Our contact details:

Marbella Sky Corp
Calle Lirio 12-1-1
29604 Elvira, Marbella
Spain

Email: comercial@marbellaskycorp.com
Phone: +34 609 289 323

[Placeholder: insert registered legal form (e.g. S.L.), CIF/NIF, and Mercantile Registry entry here once confirmed with your gestor.]

2. What data we collect and why

2.1 Property enquiries and contact forms

When you contact us through a property listing, the main contact form, or by email, we collect:

  • Your name
  • Your email address
  • Your telephone number
  • The content of your message, including property preferences, budget, and any other details you choose to share
  • The property reference you enquired about (where applicable)

Why: to answer your enquiry, send you property information, and take pre-contractual steps you have requested. The legal basis is Article 6(1)(b) GDPR (steps prior to entering a contract) and, where you have ticked a consent box, Article 6(1)(a) GDPR (consent).

2.2 Marketing emails

If you consent, we may send you occasional emails about new listings, market updates, or events. These are sent through Mailchimp (operated by Intuit Inc., USA). You can unsubscribe at any time using the link at the bottom of every email.

Legal basis: your consent under Article 6(1)(a) GDPR. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

2.3 Property transactions

If you proceed with a property purchase, sale, or formal viewing, we may collect additional information required under Spanish law, including:

  • Copy of ID or passport
  • Proof of address
  • Proof of funds and source of wealth documentation
  • PEP (Politically Exposed Person) declarations where applicable
  • Tax identification numbers (NIE, CIF, or equivalent)

Why: to comply with our obligations as an "obliged subject" under Spanish anti-money-laundering law (Ley 10/2010 of 28 April). The legal basis is Article 6(1)(c) GDPR (legal obligation).

2.4 Technical data

When you visit the website, our hosting provider automatically processes basic technical data (IP address, browser type, pages visited) for security and site operation. This is covered in detail in our Cookie Policy.

3. How long we keep your data

  • Enquiries that do not lead to a transaction: up to 2 years from last contact, then deleted or anonymised.
  • Marketing list subscribers: until you unsubscribe, then up to 30 days for suppression-list purposes.
  • Transaction documentation (AML records): 10 years from the end of the business relationship, as required by Article 25 of Ley 10/2010.
  • Email correspondence: retained for as long as needed for the enquiry or transaction, then archived or deleted in line with the periods above.

4. Who we share your data with

We only share your personal data where necessary, and only with trusted parties who are bound by data protection obligations:

  • Hostinger International Ltd. (Cyprus) — website hosting and email service for @marbellaskycorp.com addresses.
  • Mailchimp (Intuit Inc., USA) — marketing email delivery, if you have subscribed.
  • Legal, tax, and notary professionals — only when a transaction requires their involvement, and only with the data strictly needed.
  • Spanish authorities (SEPBLAC, AEAT, Registro de la Propiedad) — where disclosure is required by law, for example under AML reporting duties or tax reporting.
  • Partner agencies or collaborating brokers — only with your prior consent, where introducing you to another agent is necessary to find or sell a property.

We do not sell your personal data. We do not share it for third-party advertising.

5. International transfers

Some of our service providers (notably Mailchimp) process data in the United States. These transfers rely on the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework adequacy decision of 10 July 2023. You may request a copy of the safeguards in place by contacting us.

6. Your rights

Under the GDPR and Spanish LOPDGDD, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten"), subject to our AML retention obligations
  • Restrict or object to processing
  • Portability — receive your data in a machine-readable format
  • Withdraw consent at any time, without affecting prior processing
  • Lodge a complaint with the Spanish Data Protection Authority (AEPD), C/ Jorge Juan 6, 28001 Madrid, +34 901 100 099

To exercise any of these rights, email comercial@marbellaskycorp.com. We respond within 30 days as required by Article 12 GDPR. We may ask for proof of identity before acting on your request.

7. Security

We take reasonable technical and organisational measures to protect your data, including TLS encryption on this website, access controls on our email and files, and limiting access to Cédric Bredoux as the person responsible for client matters. No system is perfectly secure, but we will notify you and the AEPD without undue delay if a breach is likely to pose a risk to your rights.

8. Changes to this policy

We may update this policy from time to time. The current version is always available at this URL, with the "Last updated" date at the top. Material changes will be