Data Protection Policy (GDPR).

1. Data Controller

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD), you are informed that personal data provided will be processed by:

• Controller: Marsal Company Trade Logistics S.L.
• Trade Name: House Manager Cantabria
• GDPR Contact Email: info@housemanagercantabria.com
• Operational Location: Cantabria, Spain.

2. Purpose of Data Processing

Data collected through the custom property evaluation form (name, email, phone, location, property type, square meters, and custom amenities) is processed exclusively for the following purposes:

1. Real-time calculation and preparation of a tailored wealth management and maintenance proposal.
2. Generation of the bespoke PDF proposal document and its delivery to the client via email.
3. Pre-contractual communication and technical consultation by the dedicated House Manager.
4. Recording explicit client consent and IP security traceability to prevent fraudulent submissions.

3. Legal Basis for Processing

The lawful basis for processing your data is your explicit consent given by checking the mandatory acceptance box on our inquiry form, as well as the application of pre-contractual measures (Article 6.1.a and 6.1.b of the GDPR) initiated directly by the user.

4. Data Recipients & Infrastructure

Your personal data will never be transferred to unauthorized third parties except where legally required. To provide our technical service, we use verified infrastructure providers operating under strict confidentiality contracts and GDPR compliance:

• Vercel Inc.: Hosting and serverless infrastructure (SOC2/GDPR certified).
• Sanity AS: Encrypted cloud database for storage of proposals and technical records.
• SMTP/Mail Services: Secure transit mail servers with TLS/SSL encryption in transit.

5. Data Retention Period

Data provided for proposal estimates will be retained for the period strictly necessary to formalize the commercial proposal or for a maximum of 12 months, unless the client enters into a service contract, in which case data will be retained for the duration of the agreement and applicable legal audit periods.