Privacy policy

Who is responsible

Hugo Gutiérrez Colás, operating as Colás Abogados, is responsible for the personal data processing described here in connection with Spain Property Check. Contact info@colas-abogados.com or the address in the legal notice about your data or your rights.

What happens to your documents

The basic analysis reads PDFs, text files, photographs and the information you enter in your browser. The active case stays in page memory: document names and extracted text, property information, notes, construction descriptions and images. If you choose to add a coastal or flood screening, the tool locally transfers the cadastral reference and a summary of observations, source, date and limitations to this case, using temporary tab session storage or a channel between tabs of this website. It transfers no documents, images or owner names and asks you to review and accept the result before adding it. If you click “Request legal review”, a short case summary is temporarily kept in this tab’s sessionStorage to prefill the contact form. It contains no files or owner names, can be edited or removed before sending, and is not shared with the firm until you submit the form. Attached original PDFs can be included in the report you save on your device. You can generate and save this basic PDF without using AI or sending the case to an analysis server.

The purchase-cost calculator also runs in your browser. Its property values, buyer labels and shares, tax-benefit selections and confirmations, fees and financing amounts stay in page memory. If you use it within the property analysis, the budget forms part of the active case and can be included in the JSON case and PDF you download. Use generic buyer labels; the calculator does not need identity numbers or documents proving income or eligibility. It does not send the budget to the firm or to AI. Property fields shared with an optional AI request are covered by the separate notice below.

AI analysis is a separate, optional feature, available only when the service is enabled. The next section explains what is sent if you choose it. There are no customer accounts or cloud case storage. Loading a document or requesting AI analysis does not send the firm a contact enquiry or create a professional case file.

Only include information you are entitled to use. Remove unnecessary identity numbers, signatures, bank details and other personal data before adding documents or text. Selecting “New case” replaces the active case, but does not delete files already saved on your device.

If you choose AI analysis

When available, “Analyse with AI” lets you request an additional review. Before anything is sent for analysis, the tool shows information about the transfer, lets you review what will be sent and requires you to tick a confirmation box. Loading files or generating the basic PDF does not trigger this transfer. You may continue with the basic report without choosing AI.

The request contains only the readable text extracted from your documents, organised by page, together with property details, your descriptions of observed constructions, notes and official query results already recorded in the case. It does not send original PDFs, photographs, aerial images or other image files to the AI service. These files may still be included locally in your downloaded report.

Scanned or unreadable pages from which the tool cannot extract text are excluded from AI reading. An image can therefore appear in your PDF without the AI having examined it. Check the extraction warnings and the material to be sent; do not assume that a missing passage has been analysed. Redact unnecessary personal information before making the request.

The checkbox records your informed request for this optional service. It does not replace a lawful basis for processing information about other people or allow unrelated uses of their data.

Information about other people

Checking a property before a possible purchase may justify processing certain details of its owners or sellers on the basis of legitimate interests under Article 6(1)(f) GDPR. This requires the information to be necessary for that check and the interests and rights of the people concerned not to override that interest. Include only relevant personal data and redact the rest. People concerned may object on grounds relating to their particular situation. This does not authorise unrelated uses of the information.

Purposes and legal bases

• Providing the tool you request: the basic analysis organises your documents locally; optional AI processing is used only for the additional analysis you specifically request. Providing the requested tool is based on Article 6(1)(b) GDPR for the user’s own data necessary for that service. That basis does not authorise you to use other people’s documents without a lawful reason.
• Delivering and protecting the website: hosting requests include technical information such as IP address, requested URL, time and browser information. The basis is the legitimate interest in running a reliable website, enforcing reasonable usage limits, preventing misuse and resolving incidents, under Article 6(1)(f) GDPR.
• Answering you: if you contact the firm through the contact form, by email, telephone or WhatsApp, it receives the contact details and information you provide. Service enquiries are handled to take steps at your request before a possible professional engagement, under Article 6(1)(b). Other enquiries are handled on the legitimate interest in responding to the communication, under Article 6(1)(f). Applicable legal duties may require processing under Article 6(1)(c).

You can browse without supplying your name or contact details. Documents and property fields are optional, although a check may not be possible without the relevant information. The contact form asks for a first name, surname, email, enquiry subject and message; the telephone number is optional. These details are needed to identify and answer the enquiry. Confirming the privacy notice requests a response and is not consent to marketing. An email reply requires a usable reply address. The site does not subscribe you to marketing or collect payment details.

When you request official information

Clicking a Catastro query sends the cadastral reference to the Spanish Cadastre. Requesting an orthophoto or map sends coordinates or the geographic extent to IGN/PNOA and, for the cadastral overlay, Catastro. These services receive the query parameters and normal connection data such as your IP address. The requests do not include the contents of your documents or your photographs.

The standalone Coastal Restrictions Check sends the cadastral reference and selected language to our server on Cloudflare. The server requests public parcel and building geometry from Catastro and compares it with the available MITECO cartography. To display the orthophoto, it sends the map extent to IGN/PNOA. These official services receive the server connection for those requests. This coastal check does not call OpenAI or send documents, photographs or owner information to an AI provider. The application does not save a coastal case in a database; connection data may be processed by the hosting provider, and the map image may be cached temporarily in your browser. The PDF is generated in your browser.

These are optional requests to external official services, made when you use the corresponding controls. You may instead provide documents or images yourself. Opening an external source or a map link also takes you to another operator’s website, whose privacy information applies.

Hosting, recipients and international processing

The site is hosted on Cloudflare. If you request AI analysis, the selected text and case information pass through our service on Cloudflare to OpenAI, which returns the analysis. Our application does not put that content in a server database or write it to server logs. This is separate from the providers’ technical processing and retention described below.

Cloudflare handles traffic data to deliver and protect the site. It is a processor for certain customer data and an independent controller for some network and security purposes in its privacy policy. OpenAI processes the submitted content to provide the requested analysis under its Data Processing Addendum.

Processing by these providers may take place outside the European Economic Area. Their published agreements describe safeguards for restricted transfers, including standard contractual clauses or adequacy decisions where applicable: Cloudflare’s agreement and OpenAI’s agreement. This service does not promise processing exclusively within Europe. You may ask us about the safeguards applicable to your information.

If you submit the contact form, your first name, surname, optional telephone number, email, subject and message pass through our Cloudflare service and Cloudflare Email Service to the firm’s email, info@colas-abogados.com. A random request reference and the form language accompany the message. The firm and its email providers receive and manage that communication. The form does not attach the property case, documents or purchase budget and does not send the enquiry to OpenAI or another AI provider. You can instead contact the firm directly by email or telephone. Its communications providers process messages as needed to deliver and manage them. Information may also be disclosed when required by law. A professional engagement has its own data protection information. We do not sell your data.

Contacting us through WhatsApp

When you choose WhatsApp, you leave this website and use an external messaging service governed by its privacy policy. The link opens a generic greeting; it does not attach your case file or send a message automatically. The firm receives what you decide to send through that channel. You can also contact us by telephone or email.

How long information is kept

The application does not automatically save the active case to a server or to persistent browser storage. Closing, reloading or replacing the case can lose your work; browser recovery behaviour is managed by your browser. Save a copy if you want to keep it. Downloaded JSON cases and PDF reports remain where you save or share them until you delete them. They may contain personal data and images, and this tool does not password-protect them.

For AI requests and contact-form submissions, our usage-limit system keeps a pseudonymous identifier derived from the connection’s IP address, random request identifiers and usage counters for up to 48 hours. These usage records contain no document text, photographs, report content, enquiry message or purchase budget. They are not anonymous data. Cloudflare also processes the technical connection data needed to operate and protect its network.

We request AI responses without saving a retrievable response history. This is not a promise of zero retention: OpenAI may keep abuse-monitoring records for up to 30 days, with longer retention where law or protection against harm requires it; temporary processing caches can last up to 24 hours. API content is not used for model training by default, unless the API customer explicitly opts in. See OpenAI’s data controls.

Enquiries are kept as long as needed to answer them and for applicable legal retention or limitation periods. Cloudflare’s own technical and security retention follows the purposes and legal requirements in its privacy policy and, where relevant, its Turnstile privacy information. The 48-hour limit above applies to our usage controls, not to enquiries in the firm’s mailbox or all provider records. Email delivery also involves temporary processing and technical records at the mail providers. If Cloudflare’s Email preview feature is enabled for a sending domain, it retains copies of sent messages for approximately seven days, as explained in its email-service documentation. This is separate from the firm’s retention of enquiries.

Cases and reports are not published on this website or included in its sitemap for search engines. The analysis response is returned to your browser, not saved as a public report page. If you later publish or share a downloaded file, that copy follows the destination’s rules and your choices.

Your rights and complaints

You may request access, rectification, erasure, restriction, portability or object to processing, where the requirements for each right apply. In particular, you may object on grounds relating to your situation to processing based on legitimate interests. If a future activity relies on consent, you may withdraw it without affecting processing that was lawful before withdrawal.

Write to info@colas-abogados.com or the professional address with the request and enough information to identify the data concerned. We will request further identification only if reasonably needed. We normally respond within one month; any lawful extension will be explained within that period.

You may complain to the Spanish Data Protection Agency (AEPD), including if you consider that a request has not been properly handled. The firm cannot recover a browser-only case that you have not sent to it.

Automated output and updates

The basic tool applies rules to organise information and highlight issues. If you choose AI analysis when available, it also generates explanations and proposed checks from the text and information submitted. AI can misunderstand documents, omit matters or produce incorrect statements. Its conclusions must be checked against the original sources and reviewed by a qualified professional before you rely on them in a purchase.

The tool does not make decisions about people that have legal or similarly significant effects. Choosing AI does not mean that a lawyer has reviewed the result. If new processing, such as customer accounts or online payments, is introduced, we will update this information before it starts. See also our cookies and local storage information.