Last updated: 13 November 2026
1. Who is responsible for your data
The controller of the personal data collected through gereshomes.com is:
- Legal name: Geres Properties Group SL
- Tax ID (NIF): B13758693
- Trading as: Geres Homes
- Registered office: Avenida Castuera 1A, Urbanización San Luis, 03184 Torrevieja (Alicante), Spain
- Office and postal address: Calle San Juan 2, 03187 Los Montesinos (Alicante), Spain
- Email: hello@geresgroup.com
- Phone: +34 687 666 262
- Data Protection Officer: none has been appointed, as it is not mandatory for our activity. For any question about your personal data, write to hello@geresgroup.com.
Company details and registration data are in our Legal Notice, and the conditions for using the website in our Terms of Use.
2. What data we collect and why
2.1 Enquiries through our forms
When you use the contact form, the form on a property page, “Schedule a Tour” or the form in the footer, we collect your name, email address, phone number (optional), the type of enquiry, your message and, where applicable, the property you are interested in and the day and time you would like to visit. We use this data to answer your enquiry, arrange viewings and assist you with buying, selling or renting a property.
Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and, for follow-up that you have not asked for, our legitimate interest in answering and managing enquiries (Art. 6(1)(f) GDPR).
Your enquiry is emailed to our team and stored in the website’s database and in our customer management system (CRM), hosted with the website.
2.2 WhatsApp, email and phone
If you contact us by WhatsApp, email or phone, we process your contact details and the content of your messages to answer you.
WhatsApp messages and automated processing. Messages sent to Geres Group via WhatsApp, including voice messages, are processed by an automated system in order to understand each enquiry and route it to the right person in our team. To do this we use external technology providers, which process this data on behalf of Geres Group and solely for this purpose. Voice messages are converted into text; we keep the transcript, not the audio. This processing does not produce decisions with legal or similarly significant effects on you: a member of our team handles every enquiry.
WhatsApp is a service of WhatsApp Ireland Limited (Meta). Its own terms and privacy policy apply to your use of WhatsApp.
Legal basis: Art. 6(1)(b) and 6(1)(f) GDPR, as in 2.1.
2.3 User accounts
If you create an account on the website (for example to save favourite properties or searches), we process your username, email address and the information you add to your account, to provide that service (Art. 6(1)(b) GDPR).
2.4 Website analytics and cookies
With your consent, we use Google Analytics 4 to measure how the website is used and how many enquiries it generates (Art. 6(1)(a) GDPR). Some content on the website, such as maps and videos, is provided by third parties and only loads with your consent or when you click on it. Details, and how to withdraw your consent, are in our Cookie Policy.
3. Who receives your data
- Technical providers that process data on our behalf: hosting, email and website infrastructure (Hostinger International Ltd., on servers in the European Union); Google Ireland Limited (Google Analytics), only with your consent; and the providers of the automated WhatsApp system described in 2.2, named in section 4.
- Only when it is necessary to answer your enquiry about a specific property: the collaborating agent or the developer of that property.
- Public authorities, when required by law.
We do not sell your personal data.
4. Transfers outside the European Economic Area
Some of the providers in section 3 are based, or may process data, outside the European Economic Area (EEA). Each of these transfers is covered by one of these safeguards: the EU-U.S. Data Privacy Framework (an adequacy decision of the European Commission, for companies certified under it) or the Standard Contractual Clauses approved by the European Commission.
Providers outside the EEA, or that may process data outside it:
- WhatsApp (WhatsApp Ireland Limited, with WhatsApp LLC and Meta Platforms, Inc., United States): messages are processed on Meta’s servers, which may be in the United States. Safeguard: EU-U.S. Data Privacy Framework.
- Railway Corporation (United States), which hosts our automated WhatsApp system. Safeguard: EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
- Supabase Pte. Ltd. (Singapore), which hosts the database of our WhatsApp system on servers in the EU (Ireland). Safeguard: Standard Contractual Clauses.
- Vercel Inc. (United States), which hosts the internal panel where our team reads the conversations. Safeguard: EU-U.S. Data Privacy Framework.
- OpenRouter, Inc. (United States), through which our system uses artificial intelligence models. Safeguard: Standard Contractual Clauses.
- The model providers reached through OpenRouter: Anthropic (understands each message and routes it to the right person), ElevenLabs (converts voice messages into text) and OpenAI (interprets our team’s internal commands). Safeguard: Standard Contractual Clauses; ElevenLabs is also certified under the EU-U.S. Data Privacy Framework.
- Telegram (Telegram Messenger Inc.), which our team uses to receive internal alerts about new enquiries. Telegram stores the data of users who signed up in the EEA in the Netherlands, and states that its transfers to group companies outside the EEA use the Standard Contractual Clauses.
- Google Analytics (Google Ireland Limited and Google LLC, United States), only with your consent. Safeguard: EU-U.S. Data Privacy Framework.
Our WhatsApp Business provider, 360dialog GmbH (Germany), processes data within the EU, and our website is hosted by Hostinger on servers in the EU.
5. How long we keep your data
We keep the data of an enquiry for as long as we need it to answer you and to manage any relationship that follows. If you become a client, we keep your file for the periods required by law, for example under anti-money-laundering and tax rules. Account data is kept while your account is active. After these periods, data is kept blocked only for as long as liabilities may arise from its processing, and is then deleted.
6. Your rights
You can ask us for access to your data, its rectification or erasure, the restriction of its processing, its portability, and you can object to its processing. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing. Write to hello@geresgroup.com or to Calle San Juan 2, 03187 Los Montesinos (Alicante), Spain, indicating the right you wish to exercise. We will reply within one month.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
7. Do you have to give us your data?
The fields marked as required in our forms are needed to answer your enquiry; without them we cannot reply. Everything else is optional.
8. Changes to this policy
We may update this policy. The date at the top shows the latest version.
