Privacy policy - SERRA GRUP IMMOBILIARI

Data controller:

SERRA EXPERIENCIA IMMOBILIARIA, SLU (“SERRA”), with registered office at calle Sant Pius.

This Privacy Policy aims to provide information on the rights of both the User and the Visitor under the General Data Protection Regulation (“GDPR”) and Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).

We also inform you that SERRA has a designated Data Protection Officer who can be contacted at the following address (dpo@serra.immo).

This Privacy Policy governs the company's website https://www.serra.immo (hereinafter “serra.immo”), and the processing of personal data of our registered users.

What processing do we perform with your personal data?

At SERRA we want to be transparent and inform you about the processing we carry out with your data and the purposes for which we process said data.

Managing the contractual relationship with clients:

to provide, manage, expand and improve the service and maintain the established contractual relationship
To attend to your request and provide you with the requested and/or contracted service.
to prevent and identify fraud, money laundering and terrorist financing
Management and handling of incidents and/or complaints, requests for information, user inquiries received through the customer service via telephone
Recording of the interaction with SERRA through customer service channels for the purpose of resolving issues and improving service
any other use based on legitimate interest linked to the relationship between SERRA and the interested parties

Sending commercial communications by electronic means:

To keep you informed of any information, promotions, newsletters and advertising that may be of interest to you regarding the company's activities and services, as well as to offer you new services tailored to your interests
manage their correct participation in the different promotional actions (raffles, contests, etc.) organized by SERRA.
Send commercial information, by any means including electronic, about the activities, products and services of the Housfy Group companies:

HOUSFY REAL ESTATE, SL (https://housfy.com)
HIBO TECH SERVICES, SLU (https://hiboteca.com)
FINQUES FELIU, SLU (https://www.finquesfeliu.es/es)
DESPATX OLIVARES, SLU (https://www.fincasolivares.com)
HOUSFY ASV, SLU.
UNIO CATALANA D'ADMINISTRATORS, SLU (http://www.finquesuna.com)
HRE FACILITY SERVICES, SLU.
IMMOSERVEIS J. COMPANY, SLU (https://www.finquescompany.com)
REAL ESTATE MANAGEMENT AND ADMINISTRATION GESTIN, SAU (https://gestin.es)
SAR SOLUCIONS IMMOBILIARIES, SLU (https://cobertia.cat)
CASTELLÀ I SOCIS, SLU (https://www.castellafinques.com)
HRE PM GIRONA, SLU.
FINQUES MARTINEZ, SLU (https://www.finquesmartinez.com/es)
FINQUES BRISASOL, SLU (https://brisasol.com)
CODASER 3000, SLU.
HRE PROPERTY MGMT IBERIA, SLU (https://www.administracionesmostoles.es)

Analysis, segmentation and profiling of customers and users:

Analyze and segment your data and consumption habits in order to obtain common profiles of customers and users.
To offer you products and design promotions and commercial and advertising communications for sending via electronic means (newsletters, SMS, etc.) according to your tastes and preferences based on the results of the actions of analysis, segmentation and profiling of clients and users.

Maintaining suppression lists to avoid being contacted: MMaintain a suppression list with confirmation of those users who have requested the deletion of their data or their objection to its processing.

Analysis of website usage, functionality and improvement:

recognize your username when you access the website again
adapt the website to the type of device used
adapt the website to the personalization criteria chosen by the user and remember them.
study possible website improvements to optimize the user experience and implement them

Video surveillance and security: Capturing images through security cameras for security purposes and other actions.

Use of Artificial Intelligence for customer management.

We use Artificial Intelligence (AI) technologies to optimize our customer acquisition and lead management processes. Our AI systems process your personal data for the following purposes:

Audience analysis and segmentation: Identifying patterns of behavior and interests to group our contacts into segments, allowing us to send more relevant and personalized communications.
Lead scoring: Assigning a score to contacts based on their interaction with us and their profile, so that our sales team can prioritize serving those who have shown the most interest.

What information is collected?

SERRA collects data such as name and surname, date of birth, ID/NIE, address, bank account, email, IP address, mobile and landline phone numbers, intention to sell and/or buy and any other data that you choose to provide through the use of the telephone and/or email and/or our user area, information and documentation about the property, date of birth, gender, marital status, image of your identity document and any other information that you decide to provide us.

We can also record the phone calls we make with you.

Data provided to us by third parties, provided there is a legitimate reason for the aforementioned communication of data, informing you at all times of the origin of your data.

¿How your data is collected?

We collect your data that you provide directly through the form on our website, by telephone, at SERRA physical stores or through our sales representatives.

We also collect your data through third parties, such as group companies and other collaborators in the real estate sector. When data is provided by third parties, and provided there is a legitimate reason for sharing this data, we will inform you of the source of your data.

How long is your data kept?

We inform you that we retain your personal data for the entire duration of the contractual relationship or for a longer period if you authorize us to do so. We also inform you that your data will remain blocked for the handling of legal, administrative, or tax claims and in compliance with anti-money laundering legislation, for the periods legally determined by each applicable regulation.

We will also consider whether and how we can reduce the personal data we use over time, and whether we can anonymize your personal data so that it can no longer be associated with or identify you, and in this case, we may use the information without prior notice.

What is the legal basis for processing your data?

GESTIN will process your data based on the following legal grounds:

The pre-contractual and contractual relationship.
The legal basis for processing your data is the performance of the contract, or the application of pre-contractual measures for the purpose of processing and managing your request. We may also share your data with companies in the Housfy Group when necessary to fulfill the contractual relationship.
Consent:

Both the offer of products and services, and the transfer of data to third-party entities in the real estate services, property management and related services sector, including companies of the Housfy Group, to which SERRA belongs, and the marketing services sector, for the purpose of sending you commercial communications and information solely and exclusively about real estate products, property management and related services, are based on the consent that is expressly requested from you by checking the box that appears on the form on the website, without the withdrawal of this consent in any case conditioning the execution of the contract.

Consents can be revoked at any time by sending an email to dpo@serra.immo

The creation of profiles in order to offer you products and design promotions and commercial and advertising communications for sending via electronic means (newsletters, SMS, etc.) according to your tastes and preferences based on the results of the actions of analysis, segmentation and profiling of clients and users.

Legitimate interest:

Sending commercial communications is permitted when there is a legitimate interest in products and services from Housfy Group companies that are commercially active and receive personal data, given their status as a real estate services group, as these communications are analogous to contracts for the client. The legitimate basis for this interest is to maintain the relationship with the client by registering new products, improving the conditions of products and/or services they have contracted, and offering information about similar products and/or services that may be of interest to the client. This allows the data controller to continue its economic activity and grow within its sector.
Conducting surveys: To verify the quality of communications, the procedures of the data controller, the treatment received by the user, and SERRA's products and services. To improve user support procedures and update the catalog of products and services, understanding how the user interacts with SERRA and determining their level of satisfaction.
Archive: Maintain a record of SERRA's activities in preparation for potential liabilities.
Processing of data of representatives and contact persons: Identifying the persons who represent the client or who act as contact persons for the purposes of contracting. This processing is only applicable if the client is a legal entity.
Fraud management and control: Filing complaints and legal representation in case of non-payment.

The public interest:

Video surveillance
Internal investigations

To whom will your data be communicated?

Your personal data may be disclosed to third parties when such disclosure is necessary for the proper provision of our services, including:

Housfy Group entities for internal administrative and commercial purposes.
Judges and Courts, Public Treasury, Government and Public Administration Bodies, State Security Forces and Corps, etc. when there is a legal obligation.
Data processors with whom SERRA has signed the corresponding data processing agreements that include the necessary guarantees.

International transfers of your personal data may be made to SERRA's service providers. These providers may be located in countries outside the European Economic Area. Where they have not declared that they offer a level of protection equivalent to that of the European Union, SERRA will adopt the corresponding standard contractual clauses.

SERRA contracts its virtual infrastructure according to a Cloud Computing model through Amazon Web Services (AWS) whose servers are located within the European Economic Area.

Data processors located in the United States and other countries outside the European Union, necessary for the execution of the processing contract:

WhatsApp Inc. (USA) under the Standard Data Protection Clauses adopted by the Commission.
Iterable Inc. (instant messaging service), hosted in the United States and under the protection of the Standard Contractual Clauses for data protection adopted by the European Commission.
Microsoft Corporation (USA) under the standard data protection clauses adopted by the Commission.

Companies that provide us with a commercial service by carrying out marketing activities, fraud and money laundering prevention, real estate services, appraisal, photography and architecture will have access to your data.

SERRA guarantees that the companies receiving your personal data have the same security measures in place and have signed the corresponding data processing agreement.

What data do third parties provide us about you?

We may receive information about you from third parties responsible for providing technical, payment and delivery services, advertising networks, analytics providers, and search providers when they provide services to us.

From software providers that offer an analytics solution capable of recording: Visited screens, Interaction patterns (on-screen actions, gestures: taps, swipes), and Device details (Type, Version, Model, Operating System). We use the information collected by these providers to improve our service.

These providers store and process this information on our behalf and it may contain personally identifiable information, although we proactively delete it when possible.

In any other case where you have consented to reveal your data to us.

How do we protect your data?

SERRA, with the aim of making this Privacy Policy effective and efficient, has adopted the technical and organizational security measures required by current legislation on the protection of personal data.

All necessary means and mechanisms have been established to prevent the alteration, loss, misuse, unauthorized processing, access, or theft of these data, taking into account the current state of technology. However, it should be borne in mind that, due to its nature and global reach, security measures on the Internet are not infallible.

Data protection regulations grant interested parties the possibility of exercising a series of rights that allow them to guarantee and protect in a real and effective way their right to honor and personal and family privacy.

What happens if you provide us with third-party data?

In the event that, in the course of a relationship with us, you provide us with personal data of third parties, we remind you that you are solely responsible for having obtained their prior consent to communicate the personal data to SERRA for the purpose that will be informed in each case, as well as having informed them of the content of this Policy.

He is responsible for holding harmless all companies of the Housfy Group from any liability arising from the lack of information and/or consent to the third party.

What are your responsibilities?

You are responsible for each piece of personal data you provide to us, as well as its truthfulness, accuracy, updating, validity and authenticity, including your consent for its use and/or processing.

Furthermore, you are responsible for any third-party data you provide to us and are obligated to obtain their consent after you have shared the privacy information provided in that specific case with SERRA, given that we do not have direct contact with that third party. And please remember that you are responsible for periodically reviewing this Policy and any updates.

What are your data protection rights?

We inform you that you may exercise the following rights:

Right of access to your personal data to know which data is being processed and the processing operations carried out with it;
Right to rectify any personal data that is inaccurate and incomplete;
Right to erasure of personal data, where possible;
Right to request the limitation of the processing of your personal data when the accuracy, legality or necessity of the processing of the data is in doubt, and in this case, we may retain the data for the exercise or defense of claims.
Right to object to the processing of your personal data when the legal basis for processing is legitimate interest. SERRA will cease processing your data except when it has a compelling legitimate interest or for the establishment, exercise, or defense of legal claims.
Right to data portability, the right of the data subject to receive personal data concerning him or her, which he or she has provided to SERRA, in a structured, commonly used and machine-readable format, and to transmit them to another controller without hindrance from the controller to whom they have been provided, provided that the conditions established in Article 20 of the General Data Protection Regulation are met.
Right to withdraw consent at any time, the consent given to process your data, without affecting the lawfulness of the processing based on the consent prior to its withdrawal.

We remind you, as required by law, of your right to file a complaint with the Spanish Data Protection Agency, if you believe that the data processing is not in accordance with European regulations.

You can exercise your rights by sending an email to dpo@serra.immo

This Privacy Policy may be updated; therefore, you should review it periodically and, if possible, each time you access the Website to stay informed about the type of information collected and how it is processed. You can find the Privacy Policy at the bottom of the Website. However, we will notify you of any changes to this Privacy Policy that affect the processing of your personal data.

Last updated: June 2026