ostaInvest ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our website and services at ostainvest.com.
We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you agree to the collection and use of information in accordance with this policy.
Contents
Data We Collect
We collect the following types of personal data:
Account Information
- • Name and email address
- • Password (encrypted)
- • Language preferences
Usage Data
- • Properties viewed and saved
- • Search queries and filters
- • Pages visited and time spent
Technical Data
- • IP address and browser type
- • Device information
- • Cookies and similar technologies
Payment Information
- • Billing address
- • Payment method
- • Transaction history
How We Use Your Data
We use your personal data for the following purposes:
- 1.Service Delivery: To provide our property search and analytics services
- 2.Personalization: To customize your experience and show relevant properties
- 3.Communication: To send service updates, alerts, and marketing (with consent)
- 4.Analytics: To improve our services and understand user behavior
- 5.Legal Compliance: To comply with legal obligations and protect our rights
Legal Basis for Processing
Under GDPR, we process your data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Providing our services | Contract performance |
| Processing payments | Contract performance |
| Marketing communications | Consent |
| Analytics and improvements | Legitimate interest |
| Fraud prevention | Legitimate interest |
| Legal compliance | Legal obligation |
Your Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
Right to Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your data ("right to be forgotten")
Right to Restrict
Limit how we process your data
Right to Portability
Receive your data in a machine-readable format
Right to Object
Object to processing based on legitimate interest
Right to Withdraw Consent
Withdraw consent at any time
Right to Complain
Lodge a complaint with a supervisory authority
To exercise any of these rights, please contact us at hello@ostainvest.com
Data Retention
We retain your personal data for the following periods:
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 30 days |
| Transaction records | 7 years (legal requirement) |
| Analytics data | 26 months |
| Marketing preferences | Until consent withdrawal |
| Support tickets | 3 years after resolution |
Data Sharing & Transfers
We may share your data with:
Service Providers
- • Render - Website hosting (EU servers)
- • Google Analytics - Usage analytics (with IP anonymization)
- • Sentry - Error tracking
International Transfers
Some of our service providers are based outside the EU/EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
We do not sell your personal data to third parties.
Data Protection Officer
For any questions about this Privacy Policy or to exercise your rights, contact our DPO:
Email: hello@ostainvest.com
Address: ostaInvest, Data Protection Officer, Spain
Supervisory Authority
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In Spain:
Agencia Española de Protección de Datos (AEPD)
www.aepd.es