Privacy and cookies

Andalusia Casa | AndalusiaCasa.com | Updated: 2 October 2026

This page explains how we process personal data when you visit AndalusiaCasa.com, when we handle enquiries, and when we send property offers and related updates if you subscribe to receive them.

1 Who is responsible for your personal data

Andalusia Casa is the trading name under which this website is operated by REMOTE WEEKS s.r.o., company identification number (IČO): 067 54 813, with its registered office at Sluneční 1249, 252 10 Mníšek pod Brdy, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File 288331 (referred to below as “we” or the “controller”).

You can contact us with questions about personal data or requests to exercise your rights by email at info@andalusiacasa.com or by writing to our registered office shown above.

2 Questions and property enquiries

If you contact us through a form or by email, we process your email address, the content of your message and any other information you choose to provide, such as your name, telephone number or property requirements. We use this information to handle your enquiry and for follow-up communication relating to your request.

If you ask us to take steps towards entering into a contract with us, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR: our legitimate interest in responding to messages addressed to us and managing related communication. We rely on the same legitimate interest for proportionate retention of completed correspondence. Sending an enquiry alone does not subscribe you to marketing communications. If you actively choose to receive property offers and updates in the form and then confirm the subscription by email, section 3 applies.

We retain the information while handling your enquiry and then for no more than 12 months from the last substantive communication, unless a specific record needs to be retained for longer for the reasons described in section 5. Without contact details, we cannot reply; without information essential to your enquiry, we may be unable to handle it. Providing information for an ordinary enquiry is not a statutory obligation.

3 Property offers and updates

If you expressly subscribe through a newsletter form or the optional marketing choice in the contact form, we process your email address and a record of your signup and confirmation of consent so that we can send you selected property offers in Andalusia and related updates under the Andalusia Casa brand. These are marketing communications from the company identified in section 1.

The legal basis is your consent under Article 6(1)(a) GDPR. Marketing communications are also sent on the basis of your prior consent under section 7(2) of Czech Act No. 480/2004 Coll. You first confirm your subscription through a link in a confirmation email; we do not send you offers or updates before you confirm.

You can withdraw your consent at any time, free of charge, using the “Unsubscribe” link in every marketing communication or by emailing info@andalusiacasa.com. Withdrawal does not affect the lawfulness of processing before consent was withdrawn. Subscribing is voluntary and is not a condition of having your enquiry handled or using other services.

We retain information used for sending communications until you withdraw consent. At least once every 24 months, we review whether the subscription still serves its original purpose and whether further retention is necessary. Unconfirmed signups are deleted within 30 days at the latest.

We normally retain a limited record needed to demonstrate consent and its withdrawal for 3 years from the last marketing communication sent, on the basis of our legitimate interest in demonstrating lawful sending and protecting our rights. The record includes the email address, the date and method of signup and confirmation, and the wording or version of the consent. Where a specific dispute arises, section 5 applies.

After you unsubscribe, we may retain your email address in a separate suppression list only to the extent necessary to respect your unsubscribe request. The legal basis is our legitimate interest in preventing further unauthorised contact. We do not use this list to send offers.

4 Website visits and technical data

When the website loads and operates, technical data are processed, particularly your IP address, the time of the request, the address of the page visited, and browser, network or device information. This information is used to deliver content, maintain operation and security, and resolve errors. For our own processing, the legal basis is our legitimate interest in a functioning and secure website under Article 6(1)(f) GDPR.

Squarespace processes some data on our behalf to operate and host the website, process forms, manage contacts and maintain subscriber records. For certain technical Site Usage Information - such as IP addresses, browser, network and device details and interactions with the website - Squarespace states in its terms that it acts as an independent controller. Squarespace’s own Privacy Policy applies to that processing. We do not use these technical data for individual visitor profiling.

For the launch version of the website, Squarespace is configured to restrict non-essential cookies and we do not use Google Analytics or Meta Pixel. On the live website, tested in a clean incognito session, we observed the Squarespace technical cookie “crumb” and cookies associated with Google reCAPTCHA. No other material Local Storage or Session Storage entries were observed in a fresh session.

5 Protecting our rights and further retention

If a particular part of our correspondence or another record is needed to establish or defend a legal claim, we retain only the information relating to that claim, for as long as necessary in view of its nature, the applicable limitation period and any proceedings. The legal basis is our legitimate interest in protecting our rights under Article 6(1)(f) GDPR. We review the need for further retention at least annually; when the reason for retention ends, we delete the information.

This page covers website visits, enquiries and subscriptions to updates. If you later enter into a contract with us or we need to collect additional information, we will provide information about that processing when we collect it. Before using your data for a new purpose, we will inform you about that purpose and the related processing.

6 Who can access the information

People authorised to act on behalf of the controller can access the information to the extent needed to handle enquiries, manage subscriptions and operate the website. We use the following main service providers:

·       Squarespace Ireland Limited: website platform and hosting, processing of website forms, storage of contacts and subscribers, subscription confirmation and - where we use this function - delivery of email campaigns. Squarespace’s Data Processing Addendum applies to data processed on our instructions. Squarespace may act as an independent controller for certain technical Site Usage Information.

·       Web4U s.r.o.: provider of the info@andalusiacasa.com email mailbox used to receive and handle enquiries and related correspondence.

·       Google: Google reCAPTCHA is used through Squarespace to protect forms and newsletter sign-ups against spam, automated attacks and abuse. As part of this security function, technical information about the device, browser, network and interaction with the form may be processed. Google states that, from 2 April 2026, it acts as a processor for customer data processed by reCAPTCHA.

If handling your specific property enquiry requires sharing information with an estate agency or another professional in Spain, we will tell you who will receive it, why and on what legal basis before sharing it. Subscribing to updates does not authorise us to share your contact details with partner agencies for their own marketing.

We may also disclose personal data to public authorities to the extent necessary where a legal obligation requires us to do so under Article 6(1)(c) GDPR.

7 Transfers outside the European Economic Area

Squarespace Ireland Limited is established in the European Economic Area, but its services may involve processing by Squarespace group companies or other processors in the United States or other countries outside the EEA. Squarespace states in its Data Processing Addendum that Squarespace, Inc. is certified under the EU-U.S. Data Privacy Framework and that, for transfers not covered by an adequacy decision, it uses the applicable Standard Contractual Clauses and other safeguards required by Chapter V GDPR.

In connection with Google reCAPTCHA, personal data may be processed using Google infrastructure outside the EEA. Google states that reCAPTCHA is subject to the Google Cloud Data Processing Addendum and the applicable contractual safeguards for international data transfers. You can request information about the safeguards used by Squarespace or Google by contacting info@andalusiacasa.com.

Current Squarespace documentation is available at www.squarespace.com/dpa and www.squarespace.com/privacy. Current information from Google about reCAPTCHA and data processing is available in Google Cloud’s reCAPTCHA documentation.

8 Cookies and similar technologies

Cookies are small files stored in your browser. Other technologies, such as local storage, may serve a similar function. Their purpose and how they are used are what matters.

We do not use Google Analytics or Meta Pixel and our live-site test did not identify marketing or analytics cookies set by us. We use technical and security features provided by Squarespace and Google reCAPTCHA. Google reCAPTCHA is used to protect forms and subscriptions against spam, automated attacks and abuse.

Technically necessary storage or access required to provide functions expressly requested by you, secure forms or transmit communications may be used without consent under section 89(3) of Czech Act No. 127/2005 Coll. Where personal data are also involved, processing for operation, security and abuse prevention relies on the legitimate interest described in section 4.

The cookies below were observed during a check of the website on 2 October 2026.

You can also manage cookies in your browser settings. Blocking technical or security cookies may limit some website or form functions. If we introduce optional analytics or marketing cookies in future, we will offer an appropriate consent choice before using them, provide a way to change or withdraw that choice, and update this page.

9 Your rights

Subject to the conditions in the GDPR, you have the right to request access to your personal data and a copy, correction of inaccurate data, completion of incomplete data, erasure or restriction of processing. The right to data portability applies to information you have provided to us that we process by automated means on the basis of consent or a contract, where the conditions in Article 20 GDPR are met.

Where we process data on the basis of a legitimate interest, you may object on grounds relating to your particular situation. You may object at any time to processing for direct marketing; we will then stop processing your data for that purpose. You can withdraw consent at any time as described in section 3.

You can send a request concerning your personal data to info@andalusiacasa.com.

You also have the right to lodge a complaint with the Czech Office for Personal Data Protection, www.uoou.gov.cz.

10 Automated decision making and changes

We do not use automated decision making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

The current version of this information is available on this page. If the purpose or manner of processing changes and we need to inform you individually or obtain new consent, we will do so before carrying out the relevant new processing.