Privacy Policy
Last updated: 26 August 2026
1. Who is responsible for your personal data?
The data controller is:
Solkysten Homes S.L.
NIF: B22592406
EU VAT number: ESB22592406
Registered in the Commercial Registry of Málaga (Registro Mercantil de Málaga), company sheet MA-190759, entry 1.
Address: Avenida del Higuerón 80 D, 29640 Fuengirola, Málaga, Spain
Email: post@solkysten.no
This policy applies to solkysten.no, solkusten.se, solkysten.es and Solkysten services that link to it.
2. Personal data we collect
Depending on how you use the services, we may collect:
Information you provide
- name, email address, telephone number and preferred language;
- account and sign-in information;
- property preferences, budget, desired areas and planned purchase timing;
- consultation, viewing and contact requests;
- messages and communication history;
- favourites, saved searches and notification preferences;
- rental-booking information, guest details and booking references;
- payment and refund information, excluding full card details processed by Stripe;
- seller, landlord and property-management information;
- newsletter and marketing preferences;
- information submitted through website forms;
- testimonials, photographs or videos where separately agreed; and
- information needed to respond to a rights request, complaint or legal obligation.
Please do not send identity documents, financial information or other sensitive information unless we have requested it through an appropriate secure channel.
Information collected automatically
We may collect IP address, device and browser information, approximate location, language, timestamps, pages viewed, interactions, referral information, security logs and cookie or consent identifiers.
Information received from other sources
We may receive information from identity providers, Rental Ninja, Stripe, landlords, sellers, developers, estate agents, property-feed providers, marketing platforms and professional advisers where permitted by law.
3. Why we use personal data
| Purpose | Typical data | Legal basis |
|---|---|---|
| Provide accounts, favourites, saved searches and requested services | Account, contact and preference data | Performance of a contract or steps requested before a contract |
| Respond to enquiries and arrange consultations or viewings | Contact details, messages and property preferences | Steps requested before a contract and legitimate interests in customer service |
| Support property searches and introductions | Preferences, communications and relevant property information | Steps requested before a contract and legitimate interests |
| Administer rental bookings, payments, deposits and refunds | Booking, guest, payment-reference and communication data | Performance of a contract and legal obligations |
| Provide Property Management services | Owner, property, booking and service information | Performance of a contract and legal obligations |
| Send requested alerts and service messages | Contact details, account data and saved-search settings | Performance of a contract or requested service |
| Send newsletters and promotional communications | Contact details, language and marketing preferences | Consent, or another lawful basis where specifically permitted |
| Measure and improve website performance | Device, usage and analytics data | Consent where required for analytics technology; otherwise legitimate interests for strictly necessary operational measurement |
| Personalise and measure advertising | Cookie identifiers, interactions and campaign data | Consent |
| Prevent fraud, misuse and security incidents | Account, technical and log data | Legitimate interests and legal obligations |
| Maintain legal, accounting and transaction records | Booking, payment, invoice and communication data | Legal obligations and establishment or defence of legal claims |
| Create, translate and quality-check content using AI-assisted tools | Property, editorial and limited operational content | Legitimate interests or performance of a requested service, with data minimisation |
Where processing is based on consent, you may withdraw consent at any time without affecting processing already carried out lawfully.
4. AI-assisted processing
Solkysten may use approved AI services to prepare translations, property descriptions, area guides, magazine content, quality checks and related workflows.
Personal data must be limited to what is necessary for the specific task. Payment-card details, passwords and identity documents must not be submitted to AI services. AI-generated or AI-assisted content may be reviewed, corrected or replaced.
We do not use solely automated decision-making that produces legal or similarly significant effects for website users.
5. Who receives personal data?
Where necessary for the purposes described above, data may be shared with:
- Amazon Web Services and AWS Amplify for hosting, infrastructure, authentication, storage and logs;
- HubSpot for CRM, customer communication, forms, marketing and reporting;
- Google services, including Analytics, Ads, Tag Manager, Maps, Search Console and identity services;
- Apple for Apple Sign-In;
- Cloudinary for image and media delivery or processing;
- OpenAI or another approved AI provider for configured content and quality-control workflows;
- Rental Ninja for rental inventory, booking and property-management workflows;
- Stripe for card payments, deposits and refunds;
- Revolut for receipt and administration of funds;
- Resales Online and REDSP for property inventory and related provider data;
- FINN.no and other approved property-marketing channels;
- email, telephone, SMS, WhatsApp, internal collaboration, security, analytics and technical-service providers;
- landlords, sellers, developers, estate agents and professional advisers when necessary to handle your request; and
- courts, regulators, tax authorities, law enforcement or other authorities where required by law.
Each recipient receives only the information reasonably necessary for its role. Some recipients act as Solkysten's processors, while others are independent controllers under their own privacy terms.
6. International transfers
Some service providers may process personal data outside Spain or the European Economic Area. Where required, Solkysten uses an adequacy decision, approved contractual safeguards such as the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism.
You may contact us for information about the safeguards relevant to a specific transfer.
7. How long we retain personal data
We retain personal data only for as long as required for the purpose for which it was collected and for applicable legal, accounting, tax, fraud-prevention and claims periods.
The intended retention framework is:
| Data | Intended period |
|---|---|
| Account and saved items | While the account remains active, followed by a limited deletion and backup period |
| Property enquiries and buyer preferences | For as long as needed to handle the enquiry and requested follow-up, followed only by the period needed for legal obligations or legitimate business records |
| Marketing data | Until consent is withdrawn or the contact is removed under the marketing-retention rules; a minimal suppression record may be retained |
| Rental bookings, payments and refunds | For the statutory accounting, tax and claims period |
| Property Management records | For the agreement and the applicable legal and claims period |
| Security and technical logs | For the limited period necessary for security, troubleshooting and legal obligations |
| Consent records | For as long as needed to demonstrate the consent and deal with legal claims |
| Rights requests and complaints | For the time needed to handle the matter and applicable claims period |
Personal data is deleted or anonymised when it is no longer required.
8. Marketing communications
Where required, we send marketing communications only with consent. Every marketing email will provide a straightforward way to unsubscribe. Service messages about an account, enquiry or booking are not marketing and may still be sent where necessary.
Withdrawing marketing consent does not automatically delete an account or active booking.
9. Contact forms and communications
When you submit a website form, we use the information to respond to your request, provide the requested service and record relevant follow-up in our CRM where appropriate.
We may communicate with you by email, telephone, SMS or WhatsApp, depending on the contact details and preferences you provide. Relevant communications may be retained in our CRM or business systems when needed to manage an enquiry, viewing, booking, customer relationship, complaint or legal obligation.
Ordinary email, SMS and WhatsApp should not be used to send passwords, full payment-card details, identity documents or other sensitive or confidential information unless Solkysten has specifically requested the information and provided an appropriate secure method.
10. Cookies and similar technology
Strictly necessary technologies may be used to provide security, authentication, language settings, consent management and requested functionality. Analytics, advertising and other non-essential technologies are activated only after consent where required.
More information and current choices are available in the Cookie Policy and the website's cookie-settings control.
11. Your rights
Subject to applicable conditions, you may request:
- access to your personal data;
- correction of inaccurate or incomplete data;
- deletion of personal data;
- restriction of processing;
- objection to processing based on legitimate interests or direct marketing;
- portability of data you provided;
- withdrawal of consent; and
- information about safeguards for international transfers.
Send requests to post@solkysten.no. We may need to verify your identity before completing a request.
We will respond without undue delay and normally within one month of receiving a valid request. This period may be extended where permitted by law for particularly complex or numerous requests, in which case we will inform you.
You may lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos (AEPD), at www.aepd.es, or with the supervisory authority in your country of residence.
12. Security
We use technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse or alteration. No online service can guarantee absolute security. Please contact us promptly if you suspect unauthorised use of your account or personal data.
13. Children
The services are intended for adults seeking property, rental or related services. We do not knowingly offer accounts or marketing services to children.
14. Third-party websites
External websites and services have their own privacy practices. This policy does not govern processing carried out independently by a seller, landlord, developer, external estate agent or third-party platform after you leave Solkysten's services.
15. Changes to this policy
We may update this policy when services, providers or legal requirements change. The current version and effective date will be published on the website. Material changes will be communicated where required.
16. Contact
For privacy questions or rights requests:
Solkysten Homes S.L.
Avenida del Higueron 80 D
29640 Fuengirola, Málaga, Spain
Email: post@solkysten.no
17. Version history
- 26 August 2026: Initial multilingual publication version.