Privacy Policy
Cora Blanca attaches great importance to protecting your personal data. This privacy policy explains what data we process, why, and what rights you have. This policy complies with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018 (LOPDGDD).
1. Data controller
- Cora Blanca
- Urbanova 4, 03008 Alicante, Spain
- Phone: +34 657 32 67 35
- Email: info@corablanca.es
- Tax identification number: [NIF]
For any questions about data protection you can contact us via info@corablanca.es.
2. What data we process
Depending on the service you use, we process the following categories of data:
Contact details (for forms and requests)
Name, email address, phone number, and the content of your message or request.
Preference data (for property searches and alerts)
Desired location, property type, price range, number of bedrooms and similar search preferences.
Account data (if you create an account)
Name, email address, phone number, encrypted password, language preference and account settings.
Identification and file data (for administrative services)
When you instruct us to provide administrative guidance, such as a NIE application, opening a bank account or property guidance, we process the data necessary for that specific procedure. This may include: identification details from your passport or ID document, nationality, date and place of birth, address details, and documents supporting the reason for the application.
Payment data
Payments are processed through a certified external payment provider. Cora Blanca does not receive or store credit card numbers or similar payment details. We only receive confirmation of a successful or failed transaction and the related invoice details.
Technical data
IP address, browser type, device type, pages visited and usage statistics, collected through cookies as described in our cookie policy.
3. Purpose and legal basis
4. Data minimisation
We only ask for data necessary for the service you use. Documents needed for a specific procedure are only requested once you actually instruct us to carry out that procedure. We never ask for data that is not relevant.
5. Identity verification
When identity verification is necessary for a service, this is carried out through a specialised external verification provider. In that case, Cora Blanca only receives confirmation that the verification was successful, not the underlying identity document.
When a copy of an identity document is legally required for an administrative procedure, it is stored encrypted, used only for that procedure, and deleted once the legal retention period has expired.
6. Who we share data with
We never sell your data. We only share data when necessary for the service you requested, with:
- Qualified professionals (lawyers, gestores, notaries) who carry out the legal act on your behalf
- Financial institutions and insurers, only when you ask us to support an application with them
- Real estate professionals, only when you ask us to search for properties on your behalf
- Competent government authorities, when necessary or legally required for your procedure
- Technical service providers (hosting, email, payment processing, identity verification), who act solely on our instructions and are bound by a data processing agreement
7. Where your data is stored
Your data is stored on servers within the European Union. Where a service provider processes data outside the EU, this only happens with appropriate safeguards, such as the European Commission's standard contractual clauses.
8. How long we retain data
After this, data is deleted or irreversibly anonymised.
9. Security
We take appropriate technical and organisational measures, including encrypted connections (HTTPS), encrypted storage of sensitive data, strict access restriction based on necessity, secure authentication, and periodic review of our systems.
10. Your rights
You have the right to access, rectify, delete, restrict the processing of, and port your data, and the right to object. Where processing is based on consent, you can withdraw that consent at any time.
You can exercise your rights via info@corablanca.es. We respond within one month.
If you are not satisfied with our response, you can file a complaint with the Spanish supervisory authority: Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.
11. Minors
Our services are not aimed at people under the age of eighteen. We do not knowingly process data of minors without the consent of a parent or guardian.
12. Changes
We may amend this privacy policy when our services or legislation give reason to do so. The current version is always available at corablanca.es.
Last updated: July 2026