Privacy policy

Who is responsible

Hugo Gutiérrez Colás, operating as Colás Abogados, is responsible for the personal data processing described here in connection with Spain Property Check. Contact info@colas-abogados.com or the address in the legal notice about your data or your rights.

What happens to your documents

The basic analysis reads PDFs, text files, photographs and the information you enter in your browser. The active case stays in page memory: document names and extracted text, property information, notes, construction descriptions and images. Attached original PDFs can be included in the report you save on your device. You can generate and save this basic PDF without using AI or sending the case to an analysis server.

AI analysis is a separate, optional feature, available only when the service is enabled. The next section explains what is sent if you choose it. There are no customer accounts or cloud case storage. Loading a document or requesting AI analysis does not send the firm a contact enquiry or create a professional case file.

Only include information you are entitled to use. Remove unnecessary identity numbers, signatures, bank details and other personal data before adding documents or text. Selecting “New case” replaces the active case, but does not delete files already saved on your device.

If you choose AI analysis

When available, “Analyse with AI” lets you request an additional review. Before anything is sent for analysis, the tool shows information about the transfer, lets you review what will be sent and requires you to tick a confirmation box. Loading files or generating the basic PDF does not trigger this transfer. You may continue with the basic report without choosing AI.

The request contains only the readable text extracted from your documents, organised by page, together with property details, your descriptions of observed constructions, notes and official query results already recorded in the case. It does not send original PDFs, photographs, aerial images or other image files to the AI service. These files may still be included locally in your downloaded report.

Scanned or unreadable pages from which the tool cannot extract text are excluded from AI reading. An image can therefore appear in your PDF without the AI having examined it. Check the extraction warnings and the material to be sent; do not assume that a missing passage has been analysed. Redact unnecessary personal information before making the request.

The checkbox records your informed request for this optional service. It does not replace a lawful basis for processing information about other people or allow unrelated uses of their data.

Information about other people

Checking a property before a possible purchase may justify processing certain details of its owners or sellers on the basis of legitimate interests under Article 6(1)(f) GDPR. This requires the information to be necessary for that check and the interests and rights of the people concerned not to override that interest. Include only relevant personal data and redact the rest. People concerned may object on grounds relating to their particular situation. This does not authorise unrelated uses of the information.

Purposes and legal bases

• Providing the tool you request: the basic analysis organises your documents locally; optional AI processing is used only for the additional analysis you specifically request. Providing the requested tool is based on Article 6(1)(b) GDPR for the user’s own data necessary for that service. That basis does not authorise you to use other people’s documents without a lawful reason.
• Delivering and protecting the website: hosting requests include technical information such as IP address, requested URL, time and browser information. The basis is the legitimate interest in running a reliable website, enforcing reasonable usage limits, preventing misuse and resolving incidents, under Article 6(1)(f) GDPR.
• Answering you: if you contact the firm by email, telephone or WhatsApp, it receives the contact details and information you provide. Service enquiries are handled to take steps at your request before a possible professional engagement, under Article 6(1)(b). Other enquiries are handled on the legitimate interest in responding to the communication, under Article 6(1)(f). Applicable legal duties may require processing under Article 6(1)(c).

You can browse without supplying your name or contact details. Documents and property fields are optional, although a check may not be possible without the relevant information. An email reply requires a usable reply address. The site does not subscribe you to marketing or collect payment details.

When you request official information

Clicking a Catastro query sends the cadastral reference to the Spanish Cadastre. Requesting an orthophoto or map sends coordinates or the geographic extent to IGN/PNOA and, for the cadastral overlay, Catastro. These services receive the query parameters and normal connection data such as your IP address. The requests do not include the contents of your documents or your photographs.

These are optional requests to external official services, made when you use the corresponding controls. You may instead provide documents or images yourself. Opening an external source or a map link also takes you to another operator’s website, whose privacy information applies.

Hosting, recipients and international processing

The site is hosted on Cloudflare. If you request AI analysis, the selected text and case information pass through our service on Cloudflare to OpenAI, which returns the analysis. Our application does not put that content in a server database or write it to server logs. This is separate from the providers’ technical processing and retention described below.

Cloudflare handles traffic data to deliver and protect the site. It is a processor for certain customer data and an independent controller for some network and security purposes in its privacy policy. OpenAI processes the submitted content to provide the requested analysis under its Data Processing Addendum.

Processing by these providers may take place outside the European Economic Area. Their published agreements describe safeguards for restricted transfers, including standard contractual clauses or adequacy decisions where applicable: Cloudflare’s agreement and OpenAI’s agreement. This service does not promise processing exclusively within Europe. You may ask us about the safeguards applicable to your information.

If you contact the firm, its communications providers process the message as needed to deliver and manage it. Information may also be disclosed when required by law. A professional engagement has its own data protection information. We do not sell your data.

Contacting us through WhatsApp

When you choose WhatsApp, you leave this website and use an external messaging service governed by its privacy policy. The link opens a generic greeting; it does not attach your case file or send a message automatically. The firm receives what you decide to send through that channel. You can also contact us by telephone or email.

How long information is kept

The application does not automatically save the active case to a server or to persistent browser storage. Closing, reloading or replacing the case can lose your work; browser recovery behaviour is managed by your browser. Save a copy if you want to keep it. Downloaded JSON cases and PDF reports remain where you save or share them until you delete them. They may contain personal data and images, and this tool does not password-protect them.

For AI requests, our usage-limit system keeps a pseudonymous identifier derived from the connection’s IP address, random request identifiers and usage counters for up to 48 hours. These records contain no document text, photographs or report content. They are not anonymous data. Cloudflare also processes the technical connection data needed to operate and protect its network.

We request AI responses without saving a retrievable response history. This is not a promise of zero retention: OpenAI may keep abuse-monitoring records for up to 30 days, with longer retention where law or protection against harm requires it; temporary processing caches can last up to 24 hours. API content is not used for model training by default, unless the API customer explicitly opts in. See OpenAI’s data controls.

Enquiries are kept as long as needed to answer them and for applicable legal retention or limitation periods. Cloudflare’s own technical and security retention follows the purposes and legal requirements in its privacy policy and, where relevant, its Turnstile privacy information. The 48-hour limit above applies to our usage-limit records, not to all provider records.

Cases and reports are not published on this website or included in its sitemap for search engines. The analysis response is returned to your browser, not saved as a public report page. If you later publish or share a downloaded file, that copy follows the destination’s rules and your choices.

Your rights and complaints

You may request access, rectification, erasure, restriction, portability or object to processing, where the requirements for each right apply. In particular, you may object on grounds relating to your situation to processing based on legitimate interests. If a future activity relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal.

Write to info@colas-abogados.com or the professional address with the request and enough information to identify the data concerned. We will request further identification only if reasonably needed. We normally respond within one month; any lawful extension will be explained within that period.

You may complain to the Spanish Data Protection Agency (AEPD), including if you consider that a request has not been properly handled. The firm cannot recover a browser-only case that you have not sent to it.

Automated output and updates

The basic tool applies rules to organise information and highlight issues. If you choose AI analysis when available, it also generates explanations and proposed checks from the text and information submitted. AI can misunderstand documents, omit matters or produce incorrect statements. Its conclusions must be checked against the original sources and reviewed by a qualified professional before you rely on them in a purchase.

The tool does not make decisions about people that have legal or similarly significant effects. Choosing AI does not mean that a lawyer has reviewed the result. If new processing, such as customer accounts or online payments, is introduced, we will update this information before it starts. See also our cookies and local storage information.