Privacy policy

Last updated: 15 October 2026.

1. Data controller

• Owner: RAMOS GALLARDO INVERSIONES, S.L.
• Tax ID (NIF): B22550354
• Registered office: Calle Luzcozan, 9, 29620 Torremolinos (Málaga)
• Sales office: Calle Bulto, 60, 29620 Torremolinos (Málaga)
• Registration details: Registered with the Commercial Registry of Málaga (Registro Mercantil de Málaga).
• Email: demi@holanducia.com
• Telephone: +34 673 11 34 47
• Trade name: Holanducía Real Estate

You can contact us about any matter relating to your data at demi@holanducia.com or by post at our office address.

2. What data we process

• Website forms: name, email address, telephone number (optional), the property or service you are interested in and the content of your message.
• Contact via WhatsApp, telephone or email: the data you provide to us during the conversation.
• Property brokerage clients: identification and contact details, identity documents, financial data required for the transaction and details of the property.
• Administrative services clients (NIE, residency, municipal registration, bank account, certificates, licences): the documentation required for each procedure before the relevant public authority or institution.

3. Why we process your data and on what legal basis

• Responding to your enquiries and requests for information or viewings. Legal basis: your consent, given when you submit the form or contact us.
• Providing the service you have engaged us for, whether property brokerage or administrative services, and taking any pre-contractual steps you request. Legal basis: performance of a contract or of pre-contractual measures.
• Complying with legal obligations, in particular those under Ley 10/2010 de prevención del blanqueo de capitales y de la financiación del terrorismo (Spanish Act on the Prevention of Money Laundering and Terrorist Financing) – customer identification and record-keeping – as well as tax and accounting obligations. Legal basis: legal obligation.
• Sending you properties that match what you are looking for, only if you ask us to. Legal basis: your consent, which you may withdraw at any time.

We do not make automated decisions or carry out profiling that produces legal effects concerning you.

4. How long we keep your data

• Enquiries that do not lead to a business relationship: up to 12 months from the last contact.
• Client data: for as long as the relationship lasts and, thereafter, for the limitation periods applicable to any legal liabilities.
• Documentation required under anti-money laundering legislation: 10 years from the end of the business relationship.

5. Who we share your data with

Your data is only disclosed where necessary to provide the service or where required by law: to the other party to the transaction (buyer, seller, landlord or tenant), notaries, registries, banks, public authorities (Immigration Office, National Police, town halls, Spanish Tax Agency) and, where applicable, the Servicio Ejecutivo de Prevención del Blanqueo de Capitales (SEPBLAC, the Spanish financial intelligence unit).

Our providers of web hosting, email and professional advisory services also have access to your data, as data processors, under contracts that guarantee its confidentiality.

6. International transfers

If you choose to contact us via WhatsApp, your data will also be processed by WhatsApp (Meta Platforms), which may transfer it to the United States under the safeguards of the EU-U.S. Data Privacy Framework. If you prefer to avoid this, you can write to us by email or through the website form.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent at any time, by writing to demi@holanducia.com and stating which right you wish to exercise. If you believe that we have not handled your request properly, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD, the Spanish Data Protection Agency): www.aepd.es.

8. Security and accuracy

We apply appropriate technical and organisational measures to protect your data. We ask that the data you provide to us be accurate and up to date; if you provide us with data relating to third parties, you must have informed them beforehand.

9. Minors

Our services are intended for adults. We do not knowingly collect data from children under the age of 14.