Privacy Policy

1. Data Controller Identity

The responsible entity for processing your personal data on this website is: • Company Name: Nanta Alta, SLU • Registered Office: Encamp, Principality of Andorra • Email Address: info@nantaalta.com • Business Activity: Luxury Real Estate Development

2. Personal Data We Collect

We process only the personal data that is strictly necessary for our interactions with you. This includes:

• Contact Details: Your name, email address, telephone number, and spoken language preference, provided voluntarily when you request information, a brochure, or a price list.
• Scheduling Data: Date and time preferences, connection options, and notes provided when scheduling a video consultation via our scheduling tools.
• Consent-Based Referrals: Information indicating whether you wish to explore Andorran residency pathways, which may involve referral to our designated legal partners, Andorra Resident.
• Technical Data: IP addresses, browser types, language settings, and user interaction details collected through essential and analytical cookies (subject to consent).

3. Purposes of Data Processing

We process your personal data for the following legitimate business purposes:

• Responding to requests for information, brochures, and pricing lists regarding Nanta Alta villas.
• Scheduling, confirming, and conducting live video presentations and consultation calls.
• Forwarding residency inquiries to our legal partners, Andorra Resident, when you explicitly request assistance on residency pathways.
• Analyzing website traffic, navigation patterns, and user engagement anonymously to improve our design and user experience.
• Complying with statutory, legal, tax, or regulatory obligations in force in the Principality of Andorra.

4. Legal Basis for Processing

We process data under the following legitimate bases defined by the GDPR and LQPD 29/2021:

• Consent (Art. 6.1.a GDPR / LQPD Art. 6.1.a): Given freely when you submit a contact form, schedule a call, or opt into analytical cookies.
• Contractual Performance (Art. 6.1.b GDPR / LQPD Art. 6.1.b): Applicable when taking necessary pre-contractual steps at your request (such as providing formal pricing plans or sales contracts).
• Legitimate Interest (Art. 6.1.f GDPR / LQPD Art. 6.1.f): For security, service maintenance, anti-fraud measures, and general relationship management with prospective high-net-worth buyers.

5. Data Retention Periods

Your personal data will only be kept for as long as necessary to achieve the purposes for which it was collected:

• Prospect and Inquiry Data: Kept for a maximum of three (3) years from the last active communication, unless a reservation or sales agreement is executed, in which case files are retained for the duration of the development and corresponding statutory warranty periods.
• Consultation Call Logs: Deleted within twelve (12) months unless required for onward transactional follow-ups.
• Cookies and Analytics Data: Retained up to twenty-six (26) months as configured in Google Analytics.

6. Data Transfers and Third Parties

We do not sell, rent, or lease your personal database to third parties. We only share relevant data with:

• Trusted Service Providers: Subprocessors including secure cloud hosting, newsletter dispatch systems, and scheduling modules which operate under strict confidentiality clauses.
• Andorra Resident, SLU: Our official legal partners, ONLY upon your explicit consent, to advise you on legal residency pathways in the Principality.
• Public Authorities: Competent authorities in Andorra or the European Union if required by a legal mandate or judicial subpoena.

7. Your Legal Rights

Under both LQPD 29/2021 and GDPR, you possess absolute control over your personal data. You are entitled to the following rights, which you can invoke at any time free of charge:

• Right of Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Demand that we correct inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request that we delete your data when it is no longer needed.
• Right to Restrict Processing: Limit how we process your data under specific conditions.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Oppose the processing of your data for direct marketing or legitimate interest grounds.

8. Technical Security Measures

Nanta Alta utilizes highly robust, modern physical, technical, and organizational security protocols to shield your personal data from loss, unauthorized access, alterative modifications, or disclosure. All data transmissions are encrypted using Secure Socket Layer (SSL/TLS) protocols, database backups are protected with enterprise-grade access control, and internal access is limited strictly to authorized personnel.

9. How to Exercise Your Rights & Contact Us

To exercise any of your rights (such as demanding data deletion), or to submit an inquiry about our privacy framework, please email our designated Data Protection Officer at info@nantaalta.com. We are legally bound to reply to your request within thirty (30) days.