Privacy Statement
Version 1.0 – October 2026
CostaVista handles your personal data with care. This statement explains which data we process, why, for how long, and what rights you have.
Who is responsible?
CostaVista B.V.
Winschoterweg 6, 9723 CG Groningen, the Netherlands
KvK number 95519882
Email: info@costavista.nl
Which data do we process?
- Contact form and email: your name, email address, telephone number (if you provide it), your objective and budget, and the content of your message.
- Guidance: the data you provide to us during the process, such as your wishes, your timeline and, to the extent you share it, your financing options.
- Website visits: technical data needed to operate and secure the website, such as a truncated IP address, the time of the visit and the page requested.
We do not ask you for a copy of your identity document. Documents required for the purchase, such as your identity document and NIE, you provide directly to the notary, the bank or your lawyer.
What do we use your data for?
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and scheduling an introductory meeting | Performance of a contract or taking steps at your request prior to entering into a contract |
| Guiding you through the purchase | Performance of a contract |
| Sharing your data with a Partner who assists you further | Performance of a contract; we share only what is necessary and inform you in advance |
| Administration and invoicing | Legal obligation |
| Security and proper functioning of the website | Legitimate interest |
We do not use your data for automated decision-making or profiling, and we do not sell data to third parties.
With whom do we share your data?
- Partners in Spain, such as an estate agent, financing adviser or property developer, where this is necessary for your process. They are themselves responsible for their processing and are also subject to the GDPR.
- Service providers working for us, such as our hosting and email provider. We have agreements with them on the security and confidentiality of your data.
Your data is processed within the European Economic Area.
How long do we keep your data?
- Enquiries that do not lead to guidance: no longer than 12 months after the last contact.
- Data relating to a guidance process: no longer than 2 years after completion.
- Invoices and accounting records: 7 years, under the statutory tax retention obligation.
- Technical server data: no longer than 14 days.
Cookies
This website does not use tracking or advertising cookies, nor any third-party analytics services. Fonts and images are loaded from our own server.
Security
We protect your data with appropriate technical and organisational measures, including an encrypted connection (HTTPS) and restricted access.
Your rights
You have the right of access, rectification, erasure and restriction of processing of your data, the right to data portability and the right to object. Please send your request to info@costavista.nl. We will respond within one month.
If you are not satisfied with the way we handle your data, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) (autoriteitpersoonsgegevens.nl) or with the supervisory authority in the country where you live.
Changes
We may amend this privacy statement. The most recent version is always available on this page.