Privacy Policy

1. Data Controller Identification

The entity responsible for processing your personal data on this website is: • Company Name: Nanta Alta, SLU • Registered Office: Encamp, Principality of Andorra • Email Address: info@nantaalta.com • Commercial Activity: Luxury Real Estate Development

2. Personal Data We Collect

We process only the personal data strictly required to deliver our services, facilitate buyer enquiries, and manage digital interactions. This includes:

• Contact Information: Your full name, email address, telephone number, and preferred language, provided voluntarily when submitting enquiry forms, requesting price lists, or downloading brochures.
• Scheduling & Meeting Data: Date and time preferences, connection choices, and notes entered when scheduling a consultation via our booking tool.
• Consent-Based Referral Data: Information regarding your interest in Andorran residency pathways, which may be forwarded to our legal partners, Andorra Resident, SLU, upon your explicit request.
• Technical & Interaction Data: IP addresses, browser types, language settings, and aggregated interaction metrics collected via essential and analytics cookies (subject to consent).
• Advertising & Performance Data: When you visit our website via a paid campaign or interact with our content on Meta platforms (Facebook, Instagram), technical identifiers and interaction metrics may be collected via the Meta Pixel to measure ad effectiveness and, subject to your marketing consent, deliver relevant luxury real estate advertisements.

3. Purposes of Data Processing

We process your personal information strictly for the following legitimate business purposes:

• Responding directly to your enquiries for information, brochures, and price lists regarding the 25 villas of Nanta Alta.
• Scheduling, confirming, and conducting live video consultations and bespoke presentations.
• Transmitting residency consultation requests to our legal partner, Andorra Resident, SLU, solely when you have given explicit consent for legal assistance.
• Anonymously analyzing website traffic, browsing patterns, and user engagement to optimize user experience.
• Running, measuring, and optimizing targeted advertising campaigns on Meta platforms (Facebook and Instagram), including website retargeting and audience building, exclusively where you have provided marketing consent.
• Complying with statutory, tax, and regulatory obligations applicable within the Principality of Andorra.

4. Legal Basis for Processing

We process your personal data in full compliance with GDPR and LQPD 29/2021 on the following legal bases:

• Consent (Art. 6.1.a GDPR / LQPD Art. 6.1.a): Freely given when you submit a form, schedule a consultation, or opt into analytics or marketing cookies.
• Performance of a Contract or Pre-contractual Steps (Art. 6.1.b GDPR / LQPD Art. 6.1.b): Applicable when providing official villa reservation documents or contracts at your request.
• Legitimate Interests (Art. 6.1.f GDPR / LQPD Art. 6.1.f): Necessary for digital infrastructure security, fraud prevention, and managing commercial relations with prospective buyers.

5. Data Retention Schedules

Your personal information is retained only for as long as necessary to fulfill the purposes for which it was gathered:

• Prospective Buyer & Enquiry Records: Retained for up to three (3) years from the last active contact, unless a formal reservation or purchase contract is executed.
• Consultation Call Logs: Deleted within twelve (12) months unless required for ongoing contractual follow-up.
• Analytics Data: Retained for up to twenty-six (26) months as configured in Google Analytics.
• Marketing & Pixel Data: Retained by Meta according to Meta's data retention standards (typically up to 180 days for custom audiences).

6. Data Sharing and Third-Party Disclosures

We do not sell, rent, or trade your personal data. We disclose relevant data only to the following trusted recipients:

• Trusted Service Providers: Sub-processors providing secure cloud hosting, newsletter delivery, and appointment scheduling under strict confidentiality agreements.
• Andorra Resident, SLU: Our official legal partners, ONLY upon your explicit consent, to advise on legal residency pathways in the Principality.
• Meta Platforms, Inc. / Meta Platforms Ireland Limited: Where you consent to marketing cookies, technical and interaction data is shared with Meta for advertising measurement, retargeting, and audience building. Meta operates as an independent data controller for this data under its own privacy policy. Transfers outside the EEA rely on Standard Contractual Clauses approved by the European Commission.
• Public Authorities: Competent authorities in Andorra or the European Union when strictly required by a court order or statutory legal mandate.

7. Your Legal Rights & Opt-Out

Under both the LQPD 29/2021 and the EU GDPR, you retain full ownership and control over your personal data. You may exercise any of the following rights free of charge:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Demand the correction of inaccurate or incomplete information.
• Right to Erasure (Right to be Forgotten): Request the deletion of your personal records when no longer necessary.
• Right to Restriction of Processing: Limit how we process your personal data under specific statutory circumstances.
• Right to Data Portability: Obtain your data in a structured, commonly used, and machine-readable format.
• Right to Object & Withdraw Consent: Object to processing for direct marketing or withdraw marketing consent at any time via our Cookie Preferences banner.
• Meta Advertising Opt-Out: You can withdraw marketing consent via our Cookie Preferences banner at any time. You may also manage how Meta uses data to show you ads directly in Meta Ad Preferences at facebook.com/adpreferences/ad_settings.

8. Technical and Organizational Security

Nanta Alta implements industry-standard physical, electronic, and procedural safeguards to protect your personal information against accidental loss, unauthorized access, alteration, or disclosure. All data transmissions are encrypted using modern SSL/TLS protocols.

9. Contact Information & Data Protection Officer

To exercise any of your statutory rights, withdraw consent, or submit questions regarding this Privacy Policy, please contact our Data Protection Officer at info@nantaalta.com. We are committed to responding to all legitimate requests within thirty (30) calendar days.