Privacy policy
Last updated: 22 September 2026 · Version 2.1
This is a faithful translation. If interpretation differs, the Spanish version prevails without limiting mandatory rights.
1. Controller
TAMARA HENAREJOS RODRIGUEZ (Marhen Homes), Spanish tax ID 73208582L, C/ Cronista Figueras Pacheco, 16, 1st floor, 03730 Xàbia (Alicante), Spain. Telephone: +34 623 300 859. Privacy email: welcome@marhenhomes.com.
2. Data processed
We process information supplied by form, email, telephone or WhatsApp: name, contact details, service of interest, enquiry content and data needed for a quotation or contractual relationship. Technical data essential to website functions are also processed; analytics data are processed only when that category is authorised. Please do not send special-category data or identity documents through an open form unless specifically required through a secure channel.
3. Purposes and legal bases
- Enquiries, quotations and service requests: responding and taking pre-contractual steps, Article 6(1)(b) GDPR.
- Service delivery: managing communications and contractual obligations, Article 6(1)(b).
- Billing, accounting and tax: compliance with legal obligations, Article 6(1)(c).
- Security and legal claims: legitimate interest in protecting the site and evidencing communications, Article 6(1)(f).
- Web analytics: Google Analytics only with consent, Article 6(1)(a).
- Accommodation search: providing the requested search function and taking pre-contractual steps through the Avantio integration, Article 6(1)(b).
Submitting a form does not subscribe the sender to marketing. Separate permission will be requested if marketing is introduced and consent is required.
4. Recipients and providers
Hosting, maintenance, email and support providers may process data on our behalf. Google receives data when Analytics is authorised; Avantio and the operator of its environment receive information entered after continuing to the external search or booking process; Meta may receive information when a user chooses WhatsApp or interacts with Instagram. Public authorities and courts receive data where legally required.
5. International transfers
Some technology providers may process data outside the EEA. The relevant GDPR safeguard will be used in each case, such as a current adequacy decision or standard contractual clauses with supplementary measures. Details of the safeguard can be requested from the controller. We do not assume that every provider uses the same transfer mechanism.
6. Retention
- Enquiries without a contract: until closure and no longer than 12 months afterwards, unless needed for a claim.
- Quotations: while valid and up to 12 months afterwards if not accepted.
- Contracts and invoices: for the relationship and subsequent statutory tax, accounting and limitation periods.
- Analytics: for each cookie’s configured period or until consent is withdrawn.
- Consent evidence: while the choice is valid and for the period needed to demonstrate compliance.
7. Rights
You may request access, rectification, erasure, objection, restriction and portability, and withdraw consent without affecting earlier processing, by emailing welcome@marhenhomes.com. Additional identity information will only be requested where there are reasonable doubts and through an appropriate channel. You may also complain to the Spanish Data Protection Agency.
8. Required data and automated decisions
Marked fields are needed to respond. Without a name, email and message we cannot process the enquiry; telephone is optional. We do not make decisions producing legal effects solely by automated means or create commercial profiles.
9. Security and updates
Technical and organisational measures proportionate to risk are applied. This policy will be updated when processing or providers change; the date and version identify the current text.