Compliant with Regulation (EU) 2016/679 (GDPR / RGPD) and Organic Law 3/2018 (LOPDGDD).
This Privacy Policy describes how Prestige Expo S.L. processes personal data collected through this website, corporate communication channels, and associated digital platforms.

By using this Website or submitting personal data, you acknowledge that you have read and understood this Policy.
 

Complying with the Act 34/2002 of 11th July regarding Company Services for Information and Electronic Commerce, we inform you that:

Prestige Expo S.L.

CIF: B93300986

Registered Address: C/ Guadaiza, nº 25, Edif. Los Ángeles, C.P.: 29670, Marbella, Málaga

Email: [email protected]

Is the title owner of this website.

Internal contact for privacy matters: [email protected]

In compliance with Articles 12–14 GDPR, Prestige Expo may collect the following categories of personal data:

• Name and surname
• Email address
• Telephone number
• Country of residence
• Company or agency name
• Professional role or position
• Where required in connection with a purchase or sale transaction, we may collect bank
  account details and documentation or information necessary to comply with applicable
  anti-money laundering (AML) and counter-terrorist financing (CTF) obligations
   

• Buyer or collaborator inquiry details
• Project-related communication
• Documentation voluntarily uploaded (CVs, project proposals, press material)
   

• IP address, browser type, device identifiers
• Website navigation data
• Cookie-generated analytics

Tracking through tools such as:

• Google Analytics
• HubSpot
• Meta Pixel
• LinkedIn Insights Tag
• CookieScript configuration
   

• Email open rates
• Click-through behaviour
• Response patterns

(Processed via HubSpot under Article 6(1)(f) GDPR – legitimate interest in communication performance.)

Prestige Expo does not collect special categories of personal data (Article 9 GDPR) through this Website.

Data may be collected through the following channels:

• Contact and inquiry forms
• Newsletter subscription forms
• Collaboration or PR/Press contact forms
• Job application forms
• Upload fields for documentation
• HubSpot CRM contact entries
• Website cookies and tracking technologies
• Interaction with marketing emails sent by Prestige Expo

Data is collected either directly from the user or automatically through analytics tools, maintaining full compliance with Article 13 GDPR.

In accordance with Article 5 GDPR (purpose limitation), we process personal data for the following purposes:

• Responding to questions, inquiries, and collaboration requests
• Providing information about projects and corporate activity
   

• Coordinating with real estate agents, collaborators, press, and corporate partners
• Sending professional updates, newsletters, or invitations (only when compliant with Article 6)
   

• Managing candidates, reviewing CVs, and assessing applications

• Analysing website performance and improving user experience
• Monitoring metrics related to campaigns (HubSpot, Google Analytics)
   

• Monitoring unusual activities
• Preventing unauthorised access 
  (Article 6(1)(f) GDPR – legitimate interest)

• Providing marketing assets to authorised collaborators
• Controlling access to sensitive or restricted materials

Prestige Expo does not use personal data for automated decision-making or profiling that produces legal or significant effects (Articles 22 GDPR).

In compliance with Article 6 GDPR, data is processed under the following legal bases:

Required for:

• Newsletter subscription
• Marketing communications
• Cookie-based tracking (excluding strictly necessary cookies)
   

Applicable to:

• Collaboration agreements
• Professional inquiries
• Job applications
   

Prestige Expo’s legitimate interests include:

• Corporate communication
• Commercial development
• Security and fraud prevention
• Basic analytics for business performance
• Email interaction tracking within HubSpot

A balancing test ensures these interests do not override user rights.
 

In accordance with the principle of storage limitation (Article 5(1)(e) GDPR):

• Contact inquiries: retained until the request is resolved or interest ends
• Newsletter subscribers: kept until the user unsubscribes
• Job applications: retained for a reasonable recruitment period (max. 12 months), or sooner if requested
• CRM communication tracking: retained as long as the business relationship is active
• Cookies: per the durations set in our Cookies Policy
• Soft opt-in marketing contacts: maximum 12 months unless renewed
• The personal data provided will be stored as long as the contractual relationship is
  maintained, it is not requested to be deleted by the User and should not be deleted as it is
  necessary for the fulfillment of a legal obligation or for legal exercise of rights.

Data may be anonymised for statistical purposes.
 

Prestige Expo does not sell or transfer personal data to unrelated third parties.
Data may be shared with:
 

For internal corporate management:

• Prestige Expo Leisure
• Prestige Expo Hospitality
• Prestige Expo Real Estate
• Prestige Expo Marketing
• DEI HOMES, S.L.

All follow unified internal policies and confidentiality frameworks (Article 26 GDPR – joint controllership where applicable).
 

Under Article 28 GDPR, data may be processed by:

• HubSpot (CRM, Email Automation)
• Google Workspace (email, files)
• Microsoft Outlook/Office
• Hostinger (website hosting)
• CookieScript (cookie management)
• Analytics and performance tools explicitly mentioned in this Policy

Each provider operates under a signed Data Processing Agreement (DPA).
 

We do not share personal data with:

• Developers
• Architects
• Non-authorized agencies
• Non-contracted marketing entities
• Real estate networks without written consent
   

Transfers outside the EEA only occur where permitted by Chapter V GDPR.

• Google Workspace
• HubSpot (USA)
• Microsoft

These providers implement approved EU Standard Contractual Clauses and additional supplementary measures.

Hostinger servers are located within the EU or in jurisdictions with adequate protection (Article 45 GDPR).

No other international transfers are performed.
 

Users may exercise the following rights (Articles 15–22 GDPR and Articles 12–18 LOPDGDD):

• Access (obtain a copy of your data)
• Rectification (correct inaccurate data)
• Deletion / Right to erasure
• Limitation of processing
• Objection to processing
• Portability
• Withdraw consent at any time
• Not to be subject to automated decisions

Requests can be made by emailing:
[email protected]

Users also have the right to file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

Prestige Expo will respond to all requests within one month (extendable per Article 12(3) GDPR).
 

In compliance with Article 32 GDPR and the National Security Scheme (ENS) recommendations, Prestige Expo employs:

• Secure EU-based hosting infrastructure
• Encrypted communication (HTTPS/SSL)
• Access-restricted internal CRM systems
• Authentication and password control policies
• Data minimization practices
• Logging of internal access
• Incident response procedures
• Regular backup solutions
• Staff confidentiality and training

However, users must understand that no system is entirely immune to vulnerabilities.
 

Prestige Expo may update this Privacy Policy to comply with:

• Regulatory changes
• AEPD or EU supervisory authority guidance
• Functional modifications to the website or CRM systems

Any substantial change will be clearly communicated to affected users when legally required.

WHO DO NOT AGREE WITH THIS POLICY MUST NOT INTRODUCE ANY DATA INTO THIS WEBSITE OR ACCESS THE CONTENT OF THIS WEBSITE.