Privacy Policy

1. Data controller

Controller: Alejandro Calvente Crespo, trading as Cobalt Garden
Professional address: Calle San Nicolás 7, 29660 San Pedro de Alcántara, Marbella, Málaga, Spain
Email: info@cobaltgarden.com
Telephone: +34 652 205 238

2. Data we process

Depending on how you contact us, we may process your name, telephone number, email address, message, preferred language, property location, access information, service requirements and photographs or documents that you voluntarily provide. The website may also generate limited technical information such as IP address, browser, device, referring page and page views for security and measurement purposes.

3. Purposes and legal bases

• Answer enquiries, arrange visits and prepare quotations: steps requested before entering into a contract.
• Provide and manage contracted services: performance of a contract.
• Invoices, accounting and legal duties: compliance with legal obligations.
• Website security and technical delivery: legitimate interests in providing a secure and reliable website.
• Optional Jetpack Stats audience measurement: consent. It remains blocked until analytics are accepted and can be disabled again at any time.
• Commercial communications: only where authorised or otherwise permitted by law; consent may be withdrawn at any time.

4. WhatsApp and email

When you choose WhatsApp, your communication is also processed by WhatsApp/Meta under its own terms and privacy policy. Do not send identity documents, bank details, access codes or other unnecessary sensitive information through WhatsApp or email. Property access information will only be requested when needed to provide an agreed service.

5. Recipients and international processing

Data may be processed by service providers necessary for hosting, security, email, communications and website measurement, including Automattic/WordPress.com/Jetpack and, when you use WhatsApp, WhatsApp Ireland/Meta. Some providers may process information outside the European Economic Area using applicable adequacy decisions or contractual safeguards. Data may also be disclosed to public authorities where legally required.

6. Retention

Enquiries are retained only for the time reasonably necessary to answer and follow them up. Customer and accounting information is retained while the relationship remains active and during applicable legal limitation periods; business and tax records may generally need to be kept for six and four years respectively. Data based solely on consent is retained until consent is withdrawn, unless another legal duty applies.

7. Your rights

You may request access, rectification, erasure, restriction, objection, portability and withdrawal of consent by writing to info@cobaltgarden.com with the subject “Data protection”. We may request information necessary to verify identity. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

8. Security and updates

Reasonable technical and organisational measures are used to protect personal data. This policy may be updated when services, providers or legal requirements change.