Saltar al contenido principal
CAZETTI

Dile a Cazetti qué buscas y ve cómo encaja cada casa contigo.

Borrador — pendiente de revisión legal. Este documento es un borrador técnico estructurado. Debe ser revisado y aprobado por asesoría legal cualificada antes del lanzamiento comercial.

Privacy Policy

Version 2026-08-22 · GDPR-compliant draft

1. Data Controller

The data controller for personal data processed through Cazetti is Amanda Salazar Hogenfält, Ardennervägen 41, SE-25483 Helsingborg (registration: 910506-5966 · VAT: SE910506596601). For data-protection queries: privacy@cazetti.com.

2. Personal Data We Collect

We process the following categories of personal data:

  • Account data: name, email address, hashed password, role (buyer / agency staff), and account creation date.
  • Agency data: agency name, country, website URL, and subscription information.
  • Property data: listings uploaded or managed by agency users, including any photos and documents.
  • Interaction data: property views, saved searches, saved homes, viewing requests, and messages.
  • Technical data: IP address (hashed for audit purposes), browser type, session identifiers, and error logs.
  • Communications: support emails and feedback you send to us.

3. How We Use Your Data

  • Providing and operating the Cazetti platform.
  • Authenticating users and protecting account security.
  • Matching buyers with relevant properties and enabling viewing requests.
  • Processing agency subscriptions and issuing billing records.
  • Generating AI-enhanced property descriptions and translations (agency data only; see Section 5).
  • Detecting and preventing fraud, abuse, and security incidents.
  • Improving the platform based on aggregated usage patterns.
  • Sending transactional emails (account verification, viewing confirmations, billing).

4. Legal Bases (GDPR Article 6)

  • Contract performance (Art. 6(1)(b)): account creation, subscription management, property matching, viewing bookings.
  • Legitimate interest (Art. 6(1)(f)): security monitoring (Sentry), fraud prevention, aggregated analytics.
  • Consent (Art. 6(1)(a)): optional functional cookies (saved homes / searches for guests) and analytics.
  • Legal obligation (Art. 6(1)(c)): retention of billing records.

5. Data Sharing and Processors

We share data only with processors bound by data-processing agreements (DPAs):

  • Cloudflare R2 (Cloudflare, Inc.): object storage for property media. Data stored in EU region.
  • Sentry (Functional Software, Inc.): error monitoring. IP addresses are scrubbed. Processed under legitimate interest for security and stability.
  • Paddle (Paddle.com Market Limited): payment processing and subscription management as Merchant of Record.
  • MapTiler (MapTiler AG): map tiles for property display. Functional cookies.
  • AI inference provider (TBD): property description enhancement. Listing data only; no buyer personal data is sent to AI providers.
  • Transactional email provider (TBD): sending verification, notification, and billing emails.

We do not sell personal data. We do not share data with advertisers.

6. Your Rights (GDPR Chapter III)

You have the right to:

  • Access (Art. 15): request a copy of the personal data we hold about you.
  • Rectification (Art. 16): correct inaccurate data.
  • Erasure (Art. 17): request deletion of your data where no legal basis exists for continued processing.
  • Portability (Art. 20): receive your data in a machine-readable format.
  • Restriction (Art. 18): restrict processing while a dispute is resolved.
  • Objection (Art. 21): object to processing based on legitimate interest.
  • Withdraw consent: withdraw cookie consent at any time via the Cookie Settings link in the footer.

To exercise your rights, contact privacy@cazetti.com. We will respond within 30 days. You may also lodge a complaint with the Spanish data protection authority (AEPD, www.aepd.es) or your local supervisory authority.

7. Data Retention

  • Active accounts: retained for the duration of the account relationship.
  • Deleted accounts: personal data deleted within 30 days, except billing records.
  • Billing records: retained for 7 years (Spanish tax law, LIVA).
  • Security logs (hashed IP): retained for 12 months.
  • Error logs (Sentry): retained for 30 days.

8. Cookies

For full details of the cookies and storage items we use, see our Cookie Policy. You can manage your cookie preferences at any time via the Cookie Settings link in the page footer.

9. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated to registered users by email before they take effect.

10. Contact

Data protection contact: privacy@cazetti.com
Amanda Salazar Hogenfält, Ardennervägen 41, SE-25483 Helsingborg