Privacy policy
Reference translation. The legally binding version is the Spanish original.
Last updated: 19 April 2026
1. Data controller
Colivea, a trading name owned by an individual registered under the Spanish self-employed workers regime (RETA), is responsible for the personal data provided through this website and operational communications. Full identification details are available to the competent authority and will be provided where legally justified or required.
- Activity: room rentals in shared flats
- Email: info@colivea.es
- Telephone: +34 681 870 093
- Postal location: Huelva, Spain
2. Data we collect
- Availability and application forms: name, email, phone, expected move-in date, duration and room preference.
- Contract: if a rental is formalised, identification documents, bank details needed for deposit settlement and relevant address information.
- Communications: operational emails and messages exchanged with you.
- First-party web analytics, with consent: pages viewed, time and duration, language, device resolution, traffic source and a browser session identifier stored in localStorage. We do not use Google Analytics or advertising trackers.
- Contractual portal activity: if you are a current tenant, access to your portal and private operational links may be associated with your account to provide support under the rental relationship.
Analytics records are kept for a maximum of two years and are then purged automatically. Raw private-link tokens and query strings are not included in analytics events.
3. Purposes
- respond to enquiries and rental applications;
- prepare and manage a rental contract where applicable;
- meet legal and tax obligations;
- send operational information such as receipts, notices and maintenance updates;
- improve the website using first-party analytics where consent has been given.
Commercial advertising is not sent without express consent.
4. Legal bases
- Article 6(1)(b) GDPR: steps before entering into a contract and performance of the contract.
- Article 6(1)(c) GDPR: compliance with legal obligations.
- Article 6(1)(a) GDPR: consent for optional analytics or any additional purpose requiring consent.
5. Retention
- Unsuccessful enquiry data: 12 months after the last contact.
- Contract data: six years after the contract ends.
- Tax records: for the period required by applicable tax law.
- First-party analytics: maximum two years.
6. Recipients
Data is not sold. It may be disclosed where necessary to:
- tax authorities and public bodies where required by law;
- Rentila and internal Colivea systems used to register enquiries, leads, contracts, receipts and incidents;
- tax and accounting advisers under confidentiality obligations;
- service providers acting under appropriate data-processing terms.
International transfers outside the European Economic Area are not made unless the provider offers the safeguards required by law.
7. Your rights
You may request access, correction, deletion, restriction, portability or objection by emailing info@colivea.es with “DATA” in the subject line.
If you believe your request has not been handled correctly, you may contact the Spanish Data Protection Agency (AEPD).
8. Security
Reasonable technical and organisational safeguards are used, including TLS encryption, restricted access, protected backups and password controls.
9. Changes
Updates will be published on this page with the relevant date.