Skip to main content

Privacy Policy

Last updated: 25 May 2026

Data We Collect

We collect personal data you provide when creating an account or completing your profile (full name, email address, phone number, national tax ID such as NIF/NIE/CIF, postal address and, in the case of companies, registered name and tax identification number). We also collect information about your property searches, the assets you view, the agreements you sign (NDAs, letters of interest, sales mandates) and the messages you exchange with other users through the platform. In addition, we record technical data such as your IP address, browser type and version, operating system, access timestamps and pages visited, collected automatically through strictly necessary cookies and server logs.

How We Use Your Data

Your data is used to provide and improve our professional real estate marketplace services, manage your account and authenticate you securely, facilitate communication and the signing of agreements between buyers, sellers and agents, generate and store the legal documents associated with each transaction (NDAs, mandates, LOIs, agreements), send transactional notifications related to your activity and comply with applicable accounting, tax and anti-money-laundering obligations. The legal bases for processing are the performance of the contract with the user (Art. 6.1.b GDPR), compliance with legal obligations (Art. 6.1.c GDPR) and, where applicable, the legitimate interest of real-mp in operating the platform securely and preventing fraud (Art. 6.1.f GDPR).

Data Sharing

We do not sell or rent your personal data to third parties for commercial purposes. We share information only with: (i) the parties directly involved in the real estate transactions you initiate (agents, sellers and buyers as applicable), strictly to the extent necessary to complete the transaction; (ii) service providers acting as data processors who help us operate the platform (cloud hosting, transactional email delivery, PDF generation, file storage), all of them bound by data-processing agreements compliant with Article 28 GDPR; and (iii) public authorities, courts and tribunals when required by applicable law. We retain your data for as long as necessary to provide the service and, thereafter, for the mandatory retention periods set by law (typically 6 years for accounting and commercial documentation).

Your Rights

Under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Digital Rights, you have the right to access your personal data, rectify inaccurate data, request its deletion when it is no longer necessary, object to certain processing activities, request the restriction of processing and request its portability to another controller. You may also withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, please email info@real-mp.com attaching a copy of an identification document. If you believe that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Data Protection Officer

We have appointed a Data Protection Officer (DPO) as the single point of contact for any matter relating to the processing of your personal data and the exercise of the rights granted to you by the GDPR. You can reach the DPO by email at info@real-mp.com, clearly stating "Attn. DPO" in the subject line. The DPO oversees GDPR and LOPDGDD compliance at real-mp and acts as the liaison with the Spanish Data Protection Agency.

Sub-processors

To deliver the service we rely on the following providers, all of them bound by data-processing agreements compliant with Article 28 GDPR: Supabase (PostgreSQL database + storage, EU-West), Resend (transactional and newsletter email, EU/US under Standard Contractual Clauses), Vercel (hosting of the Next.js application, EU), Google Analytics (aggregate measurement with Consent Mode v2 + IP anonymization, EU/US under the EU-US Data Privacy Framework), Google Maps Platform (Street View facade imagery, EU/US under the same framework), OpenStreetMap (basemap tiles for `/explore` and geocoding via Nominatim, EU), PNOA (aerial orthophotography — Spanish National Geographic Institute, EU) and Catastro (cadastral references — Spanish Ministry of Finance, EU). The list is updated whenever providers are added or replaced; any change is published on this page before taking effect.

Contact

For any privacy-related inquiries or to exercise your rights, please email info@real-mp.com or write to real-mp, Barcelona, Spain. We will respond to your request within one month of receipt, in accordance with Article 12 GDPR. If your request is particularly complex or you have submitted several, we may extend this period by a further two months, informing you of the reasons in advance. real-mp acts as the Data Controller for the personal data collected through the platform.

Privacy policy | real-mp