Privacy policy
Last updated: 7 November 2026
This policy explains how we handle personal data under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
| Controller | ALPHAS LUXURY S.L. (trading as Hestia Property Care) |
|---|---|
| NIF | B22762199 |
| Address | Calle Picador 13, 07600 Palma de Mallorca, Illes Balears, Spain |
| Contact | [email protected] |
2. What data we collect
- Enquiries: name, email, phone, property location and the details you give us about your property, when you contact us by email or through our contact form.
- Clients: contact, billing and property data, access instructions, and photographs taken during visits.
Our contact form does not store data on this website. It opens your own email app, and we receive your message by email.
3. Why we use it and the legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry and preparing a quote | Steps before a contract at your request, and your consent (Art. 6.1.a and b GDPR) |
| Providing the contracted services and reports | Performance of a contract (Art. 6.1.b) |
| Invoicing and accounting | Legal obligation (Art. 6.1.c) |
| Occasional news about our services to clients | Legitimate interest, which you can object to at any time (Art. 6.1.f) |
4. How long we keep it
Enquiry data is kept for up to one year if no contract follows. Client data is kept for the duration of the contract and afterwards for the periods required by tax and commercial law (generally six years).
5. Who we share it with
We do not sell personal data. We share it only with providers who help us deliver the service (email and hosting providers, accountants, and contractors working at your property with your approval), under data processing agreements, or where the law requires it.
If a provider processes data outside the European Economic Area, it does so under appropriate safeguards such as the European Commission's standard contractual clauses.
6. Your rights
You can request access, rectification, erasure, restriction or portability of your data, object to processing, and withdraw consent at any time by writing to [email protected] with proof of identity. If you think your rights have not been respected, you can complain to the Spanish Data Protection Agency (aepd.es).
7. Security
We apply technical and organisational measures to protect your data, including restricted access to keys, access codes and property information.
8. Changes
We may update this policy. The date at the top shows the latest version.