Privacy
Last updated: 20 October 2026. This notice applies to the website at porta-nova-estates.com.
1. Data controller and contact
PORTA NOVA ESTATES, SLU, Calle Bellamar 11, Puerta C, 07610 Palma, Illes Balears, Spain. For privacy enquiries: info@porta-nova-estates.com, telephone +34 630 985 596.
2. Website access and hosting
The website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When the website is accessed, technically necessary connection data is processed, in particular the IP address, time, requested file, browser information and response status. The purposes are to deliver, troubleshoot and protect the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable operation. Technical logs are retained only as long as necessary for operation, troubleshooting and, where applicable, investigating specific security incidents.
3. Your enquiry
When you contact us by form, email or telephone, we process your contact details and the content of your enquiry. Name, email address and message are required in the form; other project details are optional. Without the required details, an enquiry submitted through the form cannot be processed. Please do not send sensitive personal information that is unnecessary for your enquiry.
Contract-related enquiries are handled on the basis of Article 6(1)(b) GDPR. Other enquiries are handled under Article 6(1)(f) GDPR, with the legitimate interest of responding to your message. Transmission is encrypted; your enquiry is sent by email to our company mailbox. Hosting and email providers receive data to the extent necessary to deliver their technical services. Sending an enquiry does not in itself result in your data being used for advertising.
Our mailbox is accessible to the employees responsible for handling enquiries. We use Microsoft Outlook (Office 365) to process emails. Outlook versions with cloud synchronisation may involve Microsoft additionally processing email content and associated account data. Provider information is available in the Microsoft privacy statement.
Where necessary for the planning or execution you have requested, we share the required contact, property and project details with the tradespeople and architects involved. For enquiries and contracts with individuals, the basis is Article 6(1)(b) GDPR; for company contacts, Article 6(1)(f) GDPR applies, with the interest of administering the contractual relationship. The role of each party depends on the activities they actually perform.
We process complaints and the information needed for them to fulfil our legal obligations (Article 6(1)(c) GDPR) and, where applicable, to establish or defend legal claims (Article 6(1)(f) GDPR). Competent authorities or legal advisers receive the necessary information where required.
We retain enquiries for as long as their handling or the performance of any resulting contract requires. They are then deleted unless statutory retention duties or legitimate requirements to establish or defend claims prevent this. In those cases, further use is restricted to that purpose.
4. Technical protection and cookies
When sending an enquiry, the contact form uses a necessary session cookie (PNECONTACT) to protect against forged requests. It is not an advertising or analytics cookie and is set as a session cookie. To limit abusive submissions, the form server temporarily processes an identifier derived from the IP address and timestamps. Counters apply to a 15-minute window; expired entries are removed on the next form submission. The legal basis is Article 6(1)(f) GDPR, our interest in protecting the form from abuse. The website does not embed analytics, advertising, map or social media services. Images, scripts and styling are loaded from our own webspace.
When you select a language, we save that preference under pne-language in your browser's local storage so that it can be used on later visits. The preference remains until you change it or clear your browser data, and is not used for advertising or analytics. With no saved preference, the website starts in English.
5. Your rights
Subject to the applicable legal requirements, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing is based on consent, you may withdraw that consent for the future. Please contact us using the details above.
You may also lodge a complaint with a data protection supervisory authority, in particular Spain's Agencia Española de Protección de Datos (AEPD). No automated decision-making, including profiling, takes place in connection with this website. Web hosting and the company mailbox at ALL-INKL operate in Germany. Further email processing in Outlook is separate: when Microsoft cloud features are used, data may also be processed outside the European Economic Area. The applicable safeguards depend on the Microsoft service and contract used; Microsoft's privacy notices explain its transfer mechanisms. This information does not constitute consent to a data transfer.