Privacy Policy

Who is responsible for your data

The data controller for this website is 360 MNGMT, S.L., trading as 360 Mngmt, with tax identification number B16708059 and registered address at Calle Lila 9, 29604 Marbella, Málaga, Spain.

For anything to do with your personal data, whether questions, requests or complaints, write to us at info@360mngmt.org. We answer every message.

What we collect

We only collect what you choose to give us, plus the minimum our website needs to work safely.

• Enquiry form: your name, email address, and (if you provide them) your phone number, the location, size and type of your property, whether you already rent it out, a link to an existing listing, your budget, timeframe, preferred areas, any message you write, and any property images you upload.
• Newsletter: your email address, and which page you signed up from.
• Technical and security data: your browser's user agent string, and a one-way hashed version of your IP address used purely to rate-limit our forms and block automated abuse. We do not store your raw IP address in our own records.

We do not run advertising or analytics tracking on this site, and we do not build profiles of visitors. See our Cookie Policy for details.

Why we use it, and on what legal basis

• To answer your enquiry and discuss our services. Legal basis: your consent, given when you tick the consent box on the form, and our steps taken at your request before entering into a contract.
• To provide property management services if you go on to become a client. Legal basis: performance of our contract with you.
• To send you our blog newsletter. Legal basis: your consent. You can withdraw it at any time.
• To keep the site secure and free of spam. Legal basis: our legitimate interest in protecting our systems and our inbox from automated abuse.
• To meet our accounting and legal obligations where they apply. Legal basis: compliance with a legal obligation.

Who we share it with

We never sell your data and we never share it for advertising. We do rely on a small number of service providers who process data on our behalf, under contract:

• Our website hosting and database provider, which stores enquiries, newsletter sign-ups and uploaded images.
• Our email delivery provider, which sends enquiry notifications to our own inbox.
• A spreadsheet service we use internally to track incoming enquiries.
• Cloudflare, which provides the bot-protection challenge on our forms.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

How long we keep it

• Enquiries and any uploaded property images: up to 24 months from your last contact with us, unless you become a client or ask us to delete them sooner.
• Client records: for the duration of our relationship and then for as long as Spanish tax and commercial law requires.
• Newsletter sign-ups: until you unsubscribe or ask us to remove you.
• Hashed IP records used for spam protection: 48 hours.

Your rights

Under the GDPR you can ask us at any time to:

• Access the personal data we hold about you, and receive a copy of it.
• Rectify anything that is inaccurate or incomplete.
• Erase your data, where we have no overriding reason to keep it.
• Restrict how we process it while a question about it is resolved.
• Receive your data in a portable, machine-readable format, or have it sent to another provider.
• Object to processing we carry out on the basis of legitimate interest.
• Withdraw consent at any time, without affecting anything we did before you withdrew it.

Write to info@360mngmt.org to exercise any of these. We may ask you to confirm your identity first. If you are not happy with how we have handled your request, you have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), www.aepd.es.

Security

This site is served over HTTPS. Uploaded property images are held in private storage that is not publicly browsable. Our forms are protected by rate limiting and an automated bot check. Access to enquiry data is limited to the people at 360 Mngmt who need it.

Children

This website is aimed at property owners and buyers. We do not knowingly collect data from anyone under 14, the age of digital consent in Spain.

Changes to this policy

If we change how we handle personal data, we will update this page and the "last updated" date at the top. The current version always lives at https://360mngmt.org/privacy.