Privacy Policy
Last updated: 2026-05-25
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), the UK Data Protection Act 2018 where applicable, and Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD), this Privacy Policy describes how Bluevera Residences processes personal data collected through www.blueveraresidences.com.
1. Data controller
- Controller: Eduardo Morillo Velarde Magaña
- Tax ID (NIF): 75248131C
- Address: Paseo de Reding 43, 1º Izda, 29016 Málaga, Spain
- Phone: +34 696 676 348
- Email for privacy matters: eduardo@blueveraresidences.com
2. What data we collect and how
We collect personal data in the following circumstances:
a) When you complete our “Design Your Stay” questionnaire: name, email address, nationality, intended length of stay, planned travel dates, preferences and any other information you voluntarily provide.
b) When you contact us by email, phone or web form: the contact details and the content of your communication.
c) When you book a Discovery Call via Calendly: name, email, time zone and information you provide in the booking questions.
d) When you download a guide or sign up to receive content: name, email and country.
e) Automatically when you browse the website: technical data such as IP address, browser type, operating system, pages visited, time on page and approximate location, collected through cookies and similar technologies (see our Cookie Policy).
3. Purposes and legal basis of processing
| Purpose | Legal basis |
|---|---|
| Respond to your enquiries and provide information about our services | Pre-contractual measures at the data subject’s request (Art. 6.1.b GDPR) |
| Send you the guide or content you have requested | Consent (Art. 6.1.a GDPR) |
| Send you commercial communications about our services | Consent (Art. 6.1.a GDPR), revocable at any time |
| Manage the contractual relationship if you become a client | Performance of a contract (Art. 6.1.b GDPR) |
| Comply with legal, accounting and tax obligations | Legal obligation (Art. 6.1.c GDPR) |
| Analyse website usage to improve our services | Consent through cookie banner (Art. 6.1.a GDPR) |
4. How long we keep your data
- Data from enquiries that do not become clients: up to 24 months from the last contact, then deleted.
- Data from clients: for the duration of the relationship and up to 6 years thereafter to comply with Spanish commercial and tax law.
- Data collected through cookies: as detailed in the Cookie Policy.
- Marketing consent: until you withdraw it.
5. Who we share your data with
We do not sell your personal data. We share it only with:
- IT and infrastructure providers acting as data processors under Art. 28 GDPR: Vercel Inc. (hosting), Google LLC (email and analytics services where applicable), Meta Platforms Ireland Ltd. (Facebook Pixel for advertising measurement), MailerLite (email marketing platform), Calendly LLC (appointment booking).
- Professional advisors (lawyers, gestors, accountants) where necessary to provide the services you have engaged us for, only with your prior knowledge.
- Public authorities where legally required.
6. International data transfers
Some of our service providers are located outside the European Economic Area (EEA), in particular in the United States (Vercel, Google, Meta, MailerLite, Calendly). These transfers are protected by the EU-US Data Privacy Framework and/or Standard Contractual Clauses adopted by the European Commission, ensuring an adequate level of protection equivalent to that required by GDPR.
7. Your rights
You have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data (“right to be forgotten”) where applicable.
- Restrict the processing of your data.
- Data portability in a structured, commonly used format.
- Object to processing, including direct marketing.
- Withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.
- Not be subject to automated decisions with significant effects.
To exercise these rights, write to eduardo@blueveraresidences.com or to our postal address, attaching a copy of your ID or equivalent identification document.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD — www.aepd.es), or with your local supervisory authority in your country of residence.
8. Security measures
We have implemented technical and organisational measures appropriate to the nature of the data and the risks involved, including encrypted connections (HTTPS), access controls, regular backups and contractual safeguards with our processors.
9. Changes to this Policy
We may update this Privacy Policy. The most recent version is always available on this page, with the “Last updated” date at the top.