This Privacy Policy explains how personal data is processed when you visit rentalspit.com and its subdomains (the "Website") or use the RentalsPit platform (the "Platform"). Cookies and similar technologies are described separately in our Cookies Policy: https://rentalspit.com/cookies-policy.
RentalsPit is a professional information and communication platform that connects property owners, property management companies, brokers and travellers. RentalsPit does not process bookings, does not accept payments and is not a party to any agreement between users (see our Terms of Use).
| Item | Details |
|---|---|
| Controller | FinSurfing SLU, operator of the RentalsPit Platform |
| Registration number (NRT) | L-718077-A |
| Registered office | Avinguda de Tarragona 113, 3, 8, 5D, AD500 Andorra la Vella, Principality of Andorra |
| Privacy contact | [email protected] |
| General contact | [email protected] |
| EU representative (Art. 27 GDPR) | Name, address in Spain, email of the EU representative |
| Data Protection Officer | Not appointed, as it is not mandatory for our processing. All privacy requests are handled at the privacy contact above. |
FinSurfing SLU is established in Andorra and processes personal data in accordance with Andorran Qualified Law 29/2021 of 28 October on the protection of personal data. Because the Platform offers services to people in the European Union, in particular in Spain, we also apply Regulation (EU) 2016/679 (the "GDPR"), Spanish Organic Law 3/2018 (LOPDGDD) and Spanish Law 34/2002 on information society services (LSSI).
The European Commission has recognised that Andorra ensures an adequate level of protection of personal data (Decision 2010/625/EU). Data sent from the EU to us in Andorra therefore does not require additional safeguards.
The Platform is intended for adults. We do not knowingly process data of persons under 18.
| Category | Examples |
|---|---|
| Account data | Email address, password (stored only in encrypted/hashed form), selected role, interface language |
| Owner profile | Name, phone number, address, languages spoken, tax identification number (where requested) |
| Broker profile | Name, phone number, languages spoken, commission terms |
| Management company profile | Company name, legal form, year founded, logo, website, social media links, offices, service areas, number of properties under management, management fee, average yield, contact person, business phone and email |
| Property listings and portfolio | Address and map location, photos, description, characteristics, expected management terms, links to external websites or promo codes |
| Offers and interactions | Offers sent and received, proposed fees and commissions, status of offers (new, accepted, rejected), date and time of actions |
| Communications | Content of messages sent through the contact form, by email or messenger, and our replies |
Please do not upload data of other people that you have no right to share, such as guest details, identity documents or photos where people can be recognised.
| Purpose | Data | Legal basis (GDPR / Law 29/2021) |
|---|---|---|
| Create and manage your account, authenticate you, restore access | Account data, security data | Performance of the contract — Terms of Use (Art. 6(1)(b)) |
| Publish your profile, listings and portfolio in the Platform catalogues | Profile data, listings | Performance of the contract (Art. 6(1)(b)) |
| Transmit offers between management companies, owners and brokers | Offers and interactions, profile data | Performance of the contract (Art. 6(1)(b)) |
| Disclose contact details between the parties after an offer is accepted | Name, phone, email, company name | Performance of the contract (Art. 6(1)(b)). Contacts are disclosed only after the relevant user accepts the offer. |
| Moderate and verify profiles and listings, prevent fraud, fake profiles and misuse | Profile data, listings, security data, public sources | Legitimate interest in keeping the Platform reliable and safe (Art. 6(1)(f)) |
| Send service emails (registration, moderation results, new offers, password reset) | Account data | Performance of the contract (Art. 6(1)(b)) |
| Answer requests sent through the contact form, email or messengers | Name, email, message | Steps at your request (Art. 6(1)(b)) or legitimate interest in answering enquiries (Art. 6(1)(f)) |
| Inform real estate professionals about the Platform (B2B outreach) | Business contact data from public sources | Legitimate interest in developing B2B relations with market professionals (Art. 6(1)(f); Art. 19 LOPDGDD). See section 6. |
| Send news and updates about the Platform to registered users | Email, role, language | Legitimate interest (Art. 6(1)(f); Art. 21.2 LSSI). You can object at any time with one click. |
| Keep the Website secure, stable and working correctly | Technical and security data | Legitimate interest (Art. 6(1)(f)) |
| Website analytics and improvement | Cookie data | Consent (Art. 6(1)(a)), given through the cookie banner |
| Comply with legal obligations and respond to lawful requests of authorities | Data required by law | Legal obligation (Art. 6(1)(c)) |
| Establish, exercise or defend legal claims | Relevant records | Legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interest, we have assessed that our interest is not overridden by your rights. You can request information about this assessment and object to the processing (section 10).
Providing account and profile data is necessary to use the Platform: without it we cannot create your account or publish your profile. Fields marked as optional may be left empty.
If you work for a company in the real estate or property management sector, we may send you information about RentalsPit to your business contact details.
We use providers that process data on our behalf under data processing agreements and only on our instructions:
| Provider type | Purpose | Provider / location |
|---|---|---|
| Hosting and database | Operation of the Website and Platform | Name of hosting provider, country |
| Content delivery and security | Delivery of pages, protection against attacks and spam, email address protection | Cloudflare, Inc. (EU / USA) |
| Maps and address autocomplete | Address search and map display in forms and listings | Google Ireland Ltd / Google LLC (EU / USA) |
| Transactional email | Sending service emails | Name of email service, country |
| B2B email outreach | Sending and tracking outreach messages, managing unsubscribes | Name of outreach tool, country |
| Analytics (only with consent) | Website statistics | Google Analytics 4 — keep only if installed |
| AI tools | Drafting replies to enquiries, preparing and translating content | Name of AI provider, country |
We do not sell personal data.
Our primary processing takes place in Andorra, which has an adequacy decision of the European Commission. Some providers (for example Cloudflare, Google and AI providers) may process data in the United States or other countries. In such cases we ensure that:
You can request information on the safeguards applied using the privacy contact.
| Data | Retention period |
|---|---|
| Account, profile, listings | While your account is active. After deletion of the account — removed or anonymised within 30 days; backup copies are overwritten within a further 90 days. |
| Offers, accepted offers and contact disclosure records | For the life of the account and then up to 3 years, to handle possible disputes and claims |
| Moderation, verification and fraud prevention records | Up to 3 years after the relevant event |
| Contact form and correspondence | Up to 12 months after the enquiry is closed, unless it becomes part of a contractual relationship |
| B2B outreach contacts | Until unsubscribe or objection, or 24 months after the last interaction |
| Suppression (unsubscribe) list | For as long as we carry out outreach, so that your choice is respected |
| Server and security logs | Up to 12 months |
| Cookies | As indicated in the Cookies Policy |
Data may be kept longer only where required by law or needed for a pending claim.