Data controller
Roccabox is the data controller for personal data collected through this platform. Contact: [email protected].
What we collect
- If you submit a lead form: the data you enter (typically name, contact channel, property of interest).
- If you generate a smart link: the contact identifier used (WhatsApp number or email) and the link engagement record (opens, dwell, page section interest).
- If you talk to the AI assistant: the conversation log, used to improve the answer and to inform the assigned Roccabox specialist on follow-up.
- If you browse anonymously: aggregated page-view counts. No personally identifiable third-party fingerprinting.
Why we hold it (legal basis)
- To answer your enquiry and follow up on it — performance of pre-contractual measures at your request (GDPR Art. 6(1)(b)).
- To improve our service and the quality of the AI assistant — legitimate interest (Art. 6(1)(f)), balanced against your rights and freedoms.
- Where you have given explicit consent (e.g. to receive periodic property alerts), consent (Art. 6(1)(a)).
How long we keep it
Enquiry data: retained while the enquiry is active and for a reasonable period afterwards (typically 24 months), in case you return. Smart-link engagement: retained while the link is active and for 12 months afterwards. Anonymous page-view aggregates: indefinitely, aggregated. You can request earlier deletion at any time.
Who we share it with
We do not sell your data. We share only with: (a) the assigned Roccabox specialist; (b) where you explicitly request, an independent Spanish abogado, gestor, asesor fiscal, or mortgage broker; (c) infrastructure providers under contract (hosting, transactional email) that are themselves GDPR-compliant.
Your rights under GDPR
You have the right to access, rectify, erase, restrict, port, and object to processing of your data. Contact [email protected] to exercise any of these. We respond within one month. You also have the right to lodge a complaint with the Spanish data-protection authority (Agencia Española de Protección de Datos).
Cookies
We use a minimal set of cookies — strictly necessary for the site to function and for our own first-party analytics (no third-party advertising cookies). When you arrive, you'll see a consent banner allowing you to accept or reject non-essential cookies. Your choice persists for 12 months.