Privacy policy

Last updated: 21 October 2026

This page explains, in plain English, what personal data MUURA collects through this website, why, on what legal basis, how long it is kept and what your rights are. It follows the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection and the guarantee of digital rights (LOPDGDD).

Who is responsible

The data controller is MUURA – Real Estate & Design by MUURA, operated by Jeremy van Oorschot, Carrer Ceramista Joan Daifa 2, Ibiza, Illes Balears. Contact: jeremy@bymuura.com.

What we collect

We collect only what you give us through the forms on this website and in the conversations that follow:

• Contact and enquiry forms: your name, email address, phone number and your message.
• Free valuation form: in addition, details of your property (type, area, approximate plot and built size, number of bedrooms, timing, whether you would consider an off-market sale), any photos you choose to upload, and anything you write in the message field. The exact address is only needed once a visit is arranged.
• Buyer brief form: in addition, your budget range, the type of property and areas you are interested in, the number of bedrooms, your timing and what matters most to you.
• Correspondence: what you share with us afterwards by email, phone or WhatsApp.

We do not collect special categories of data (such as health or political opinions) and we ask you not to include them in your messages.

Why we use it

• To answer your enquiry and to keep in touch with you about it.
• To prepare a valuation of your property and to advise you on your options.
• To search for a property that fits your brief, and to tell you about properties that may suit you, including properties that are not publicly listed.
• To arrange viewings, visits and meetings, and to carry out a sale or purchase you ask us to handle.
• To keep the records the law requires of us, including under anti-money-laundering rules, where a transaction goes ahead.

We do not use your data for automated decision-making or profiling, and we do not send newsletters or marketing emails unless you have asked for them.

Legal basis

• Your consent (article 6.1.a GDPR), which you give by ticking the box on a form. You can withdraw it at any time by writing to us; this does not affect what was done before.
• Steps taken at your request before entering into a contract, and the contract itself (article 6.1.b GDPR): preparing a valuation, searching for a property, arranging viewings, and handling a sale or purchase.
• Legal obligations (article 6.1.c GDPR): record-keeping that Spanish law requires of a real estate agency.
• Our legitimate interest (article 6.1.f GDPR) in keeping a record of our correspondence with you and in protecting this website against spam and abuse.

How long we keep it

Form submissions and our correspondence with you are kept for as long as we are in contact about your enquiry and for two years after our last exchange, after which they are deleted, unless you ask us to delete them sooner or a longer period is required by law. Where a transaction takes place, the records of it are kept for the period Spanish tax, commercial and anti-money-laundering law requires.

Who receives it

Your data stays with MUURA. We do not sell it and we do not pass it to third parties for their own marketing. It is handled by the following providers on our behalf, under contracts that bind them to confidentiality:

• Our website hosting provider, which stores the website and the form submissions.
• Our email provider, which also hosts our mailboxes and through which form notifications and our correspondence travel.
• Google (Google Ireland Ltd.), which provides the analytics described under Cookies below.
• WhatsApp (Meta Platforms Ireland Ltd.), if you choose to contact us there. WhatsApp’s own privacy policy applies to that service.

In the course of a sale or purchase, and only with your agreement, we may share the information needed with the other party, their agent, your lawyer, a notary or a bank. If any provider processes data outside the European Economic Area, we make sure that the transfer is covered by an adequacy decision or the standard contractual clauses approved by the European Commission.

Your rights

You have the right to ask us for access to the personal data we hold about you, to have it corrected, to have it deleted, to limit how we use it, to object to our use of it, and to receive it in a portable format. You can also withdraw your consent at any time.

To exercise any of these rights, write to jeremy@bymuura.com or to the postal address above. We may ask you to confirm your identity. We will reply within one month.

If you believe your data has not been handled correctly, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es. We would appreciate the chance to resolve any concern with you first.

Cookies

This website uses the cookies it needs to work, such as those that remember your preferences and keep the forms secure. It also uses Google Analytics, which sets cookies to give us anonymous statistics about how the site is used, and cookies from embedded services such as maps where a page includes them. You can control or delete cookies through your browser settings.

Security

We take reasonable technical and organisational measures to protect your data: the site is served over HTTPS, access to form submissions is limited to the people who need it, and we keep no more data than we need.

Changes to this policy

If we change this policy, the new version will be published on this page with its date. Where a change affects you materially, we will tell you directly where we can.