Privacy Policy (Spain/EU GDPR)

Effective date: 1 October 2025
Controller: Kristoffer Petersson, based in Mallorca, Spain.
Contact (privacy): contact@mallorcapartners.com

Short version

  • We keep your details off-list and only share them with partners you approve in writing.

  • We collect the minimum needed to coordinate your search (name/initials, email, role, budget range, timing).

  • Proof-of-Funds (POF): we sight documents and prefer to store only a note (e.g., “POF verified on [date]”).

  • You can request access, correction, deletion, or withdraw consent at any time.

  • If you have concerns, you can contact Spain’s data protection authority (AEPD).

1) Who we are

This site and service are operated by Kristoffer Petersson, a buyer-side consultant/introducer for property acquisitions in Mallorca (Spain). We are not an estate agency or a law firm.

2) What data we collect

We collect only what we need to run a discreet, consent-based process.

From the website form (/conversation):

  • Name or initials

  • Email

  • Role (principal / family office / PA–advisor)

  • Budget range (e.g., €1–2M, €2–5M, €5M+)

  • Timing (e.g., <3 months, 3–6 months, 6–12 months, exploring)

  • Optional: purpose, short message

  • Your acknowledgement of our privacy/role statement

During coordination (by email/phone/video):

  • Brief details you choose to share (areas of interest, must-haves/no-gos, travel windows)

  • Limited scheduling metadata (date/time/meeting ID) from our calendar tool

Step-2 (only after you approve the written brief):

  • Buyer Service Letter (signature/acknowledgement)

  • Short Application (identifiers needed to coordinate)

  • Proof of Funds (POF): bank letter or redacted statement for sighting
    Default handling: we record only a note such as “POF verified on [date]” and delete the document, unless you ask us to retain it for coordination with your approved partners.

Technical data:

  • Basic logs for security (IP, user-agent, timestamps).

  • Cookies are limited to essential site operation; we avoid analytics unless noted below.

3) Why we process your data (purposes & legal bases)

  • Responding to enquiries & arranging a call (pre-contractual steps, Art. 6(1)(b) GDPR).

  • Preparing your brief, presenting an Option Pack, and coordinating with partners (legitimate interests in running a discreet and efficient mandate, Art. 6(1)(f)).

  • Sharing your brief with partners (agent of record, independent lawyer, notary or bank) only with your explicit written consent (Art. 6(1)(a)).

  • Record-keeping, fraud prevention, and security (legitimate interests, Art. 6(1)(f)).

  • Legal/compliance obligations if applicable (e.g., responding to lawful requests) (Art. 6(1)(c)).

4) Who we share data with

We do not sell your data. We share only as needed:

  • With your written consent only:
    – Licensed agents of record for shortlisted properties
    – Independent lawyers (and, if required, notary or bank)
    We share the approved brief and essential identifiers; no wider circulation.

  • Processors (service providers):
    Website host/CMS, email provider, calendar/scheduling tool (with no intake questions), secure file storage. Each provider is bound by a data-processing agreement.

5) International transfers

Some processors may store data outside the EEA. Where this occurs, we rely on an EU adequacy decision or Standard Contractual Clauses (SCCs) with supplementary safeguards. Details are available on request.

6) How long we keep data

  • Initial enquiries that don’t proceed: kept indefinitely unless otherwise expressed.

  • Active clients: keep core mandate records for the duration of the engagement + up to 6 years for tax/contract purposes.

  • POF documents: aim to delete within 30 days of verification and keep only a verification note, unless you ask us to retain the file for coordination.

  • We will delete earlier if you ask and it is legally possible.

7) Your rights (GDPR)

You can exercise these at any time by emailing [privacy@yourdomain.com]:

  • Access your data

  • Rectify inaccuracies

  • Erase (right to be forgotten)

  • Restrict processing

  • Portability (receive your data in a portable format)

  • Object to processing based on legitimate interests

  • Withdraw consent (does not affect prior lawful processing)

You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD).

8) Security

We apply proportionate technical and organizational measures: least-data collection, access controls, encryption at rest/in transit where supported by providers, and limited retention. No method is 100% secure; we review providers regularly.

9) Cookies & analytics

We use only essential cookies for site operation and security. If we later add privacy-friendly analytics (e.g., IP-anonymized, no cross-site tracking), we will update this section and, if required, present a consent banner.

10) Children

Our service is for adults. We do not knowingly collect information from anyone under 18.

11) Your choices

  • You may withhold consent to share your brief; in that case we cannot approach the market.

  • You may request deletion at any time; we will confirm deletion or explain any legal retention we must apply.

12) Updates

We may update this policy from time to time. Material changes will be noted on this page with a new effective date.

13) Contact

For privacy requests: contact@mallorcapartners.com
For legal notices: contact@mallorcapartners.com

Legal notice (role & jurisdiction)

We act solely as a consultant/introducer and do not provide legal, tax, financial, or regulated estate-agency services. Spanish law applies; disputes subject to the courts of the Balearic Islands (without prejudice to mandatory consumer protections).