Data Controller Information
Identifying details of the Data Controller:
-
Mª DOLORES NUÑEZ ORTIZ
-
Tax ID (CIF): 31827316P
-
Address: C.C. CRISTMAR LOCAL 26 B, NUEVA ANDALUCÍA, MARBELLA 29660, MÁLAGA
-
Email: info@smf-realestate.com
Description of the Data Processing Activity
-
Processing Activity: Client Management
-
Purpose: Management of customer relationships
-
Data Subjects: Clients – individuals with whom a commercial relationship is maintained
-
Data Categories:
-
Necessary data for maintaining the commercial relationship: invoicing, sending marketing communications by post or email, after-sales services, and customer loyalty programs.
-
Identification data: full name, tax ID (NIF), mailing address, phone numbers, email address.
-
Banking data: for payment processing via direct debit.
-
International Transfers and Data Sharing
-
Disclosures: Lawyers, accounting firms, banking institutions, utility companies (telephone or water), property managers, Land Registry, local tax collection authorities.
-
Planned International Transfers: No international transfers are planned.
-
Retention Period: As required by tax legislation for the statute of limitations on legal responsibilities.
Data Processing Lifecycle
1. Data Collection
-
Process Activities: Paper forms, phone communication
-
Data Processed: Same as listed above under “Data Categories”
-
Participants: Clients and employees
-
Technologies: Computers, paper
2. Data Storage
-
Process Activities: Data stored in the IT system
-
Data Processed: Same as above
-
Participants: Employees
-
Technologies: Accounting software and digital systems
3. Data Use and Processing
-
Process Activities: Maintenance of commercial relationships
-
Data Processed: Same as above
-
Participants: Company employees and consultants
-
Technologies: Accounting software and digital systems
4. Transfers and Disclosures
-
Data Processed: Full name, tax ID (NIF/NIE), mailing address, banking data
-
Participants: Company employees
-
Technologies: Paper, email
5. Data Destruction
-
Process Activities: Paper shredding, deletion of digital data, or contracting a specialized company
-
Data Processed: Same as above
-
Participants: Employees
-
Technologies: Paper shredders, digital data deletion tools, or external data destruction services
Security Measures of the Data Controller
The applicable security measures are outlined in the document titled “Security Measures”.