Privacy policy
Last updated: 27 September 2026
Vitrina VIP is a portal for homes and home services in Spain, available on the web (vitrinavip.com) and on the iPhone and Android apps. This policy explains what personal data we process, why, who we share it with, and how you can exercise your rights.
Who processes your data
The data controller is Vitrina VIP, owner of the vitrinavip.com website and the “Vitrina Luxe” apps. For any privacy-related matters, you can write to us at [email protected].
What data we process
- Account data: name, email address, encrypted password, language and, if you add it, phone number. If you sign in with Google or Apple, we receive that account’s identifier, your name and your email.
- Business data, if you register an agency, developer or service company: trading name, description, logo, contact details and service area.
- Content you publish: listings with photos, description, price, address and map location; services, portfolio, reviews and any documents you upload.
- Communications: messages with other users, viewing requests, quotes and offers.
- Technical data: IP address, device and browser type, access and error logs, and your device’s push notification identifier.
- Preferences: favourites, saved searches, alerts, and language, currency and theme settings.
We do not access your device location or your contacts. The apps only use the camera or your photos when you choose to upload an image, and the microphone when you use voice search (speech recognition is handled by your phone’s operating system).
Why we use it and the legal basis
- To provide the service you request: your account, publishing listings, connecting buyers, tenants, owners and professionals, and managing your dashboard (performance of a contract).
- To send you notices about your account, messages, viewings and alerts by email, SMS or push notifications (performance of a contract; you can disable notifications).
- To automatically translate listing and profile texts into the portal’s languages (legitimate interest in helping your listing reach more people).
- To maintain security, prevent fraud and fake listings, and comply with legal obligations (legitimate interest and legal obligation).
- To measure usage of the service in aggregate to improve it (legitimate interest).
What is public
Listings, business profiles, reviews and portfolios are public. In a private individual’s listing, we only show your phone number or email if you enable it; otherwise, interested parties can message you via the portal chat. The exact address is only shown if you choose to show the exact location.
Who we share data with
We do not sell your data. We use providers who process it on our behalf and only to deliver the service:
- Hetzner Online GmbH (Germany): servers and databases, within the European Union.
- Resend (email) and Twilio (verification SMS).
- Apple Push Notification service and Google Firebase Cloud Messaging (push notifications).
- Google and Apple, only if you sign in with their accounts.
- OpenAI, to automatically translate the texts you publish (we do not send your email or phone number).
- OpenStreetMap, to display maps and search addresses.
Some of these providers may process data outside the European Economic Area; in that case, they do so with GDPR safeguards (standard contractual clauses or adequacy decisions).
How long we keep data
While your account is active. If you delete it, we delete or anonymise your personal data within a maximum of 30 days, except where we must retain it due to a legal obligation (for example, invoices) or to resolve claims. Technical logs are retained only for as long as needed for service security.
Your rights
You can access your data, correct it, download it, object to processing, restrict it, or request deletion by writing to [email protected] or from your account. You can also file a complaint with the Spanish Data Protection Agency (aepd.es).
Delete your account
You can delete your account and data at any time from the app (Profile › Privacy & data) or on the web:
Minors
Vitrina VIP is intended for people aged 18 and over. We do not knowingly collect data from minors.
Security
All connections are encrypted (HTTPS). Passwords are stored encrypted, messages are stored encrypted, and you can enable two-step verification.
Cookies
The website uses essential technical cookies for session, security and your language and theme preferences. We do not use third-party advertising cookies.
Changes
If we make significant changes to this policy, we will notify you in the app or by email before they take effect.