Privacy
This policy describes the processing of personal data under European regulation 2016/679 (GDPR) and Spanish organic law 3/2018.
The data controller
DOMIVARO SERVICIOS S.L., CIF B-53123451, Urbanización Pisnella 45, 03111 Busot, Alicante, Spain.
Contact: contact@domivaro.com, or by telephone on +34 611 42 08 73.
Given the size of the business and the nature of the processing, appointing a data protection officer is not required under article 37 of the GDPR. Requests are handled directly by the management.
What we collect and why
Through the contact form: your name, your email address, your telephone if you give it, the town where the property is, and how you describe it. This is used only to reply to you and to prepare the free check visit.
As a client: the data needed to perform the contract and to invoice, together with the visit reports and their photographs.
No data is sold, rented or passed to a third party for commercial purposes. No automated chasing is sent.
Legal basis
For the form: your consent, article 6.1.a. For clients: performance of the contract, article 6.1.b, and Spanish accounting obligations, article 6.1.c.
How long we keep it
Enquiries that go no further are deleted after 12 months. Contract data and reports are kept for the duration of the contract, then 6 years under Spanish accounting and tax obligations.
Recipients and transfers
Data is shared only with the people who come to your house and, where relevant, with the tradesman you approved for a specific repair.
If the company were sold, they could pass to the buyer, who would then be bound by this same policy. The site is hosted by Vercel Inc. The servers used are located in the European Union. Form data is stored in the European Union, in Ireland. Technical handling of the request may transit through the point of presence closest to the visitor, under the host's data processing agreement.
Accounting is handled by a firm established in Spain, bound by a processor agreement under article 28 of the GDPR.
Requests sent through the form are stored with Supabase, a database host in the European Union region, bound by a processor agreement under article 28 of the GDPR. The internal notification for each enquiry is delivered through Brevo (Sendinblue SAS, France), bound by an article 28 data processing agreement.
Trackers
This site sets no advertising tracker and uses no third party audience measurement. Only a local technical marker may be written in your browser, to remember that you declined the language suggestion. It never leaves your device.
Vercel Inc. and Supabase Inc. are established in the United States. Any transfer to that country is covered by the standard contractual clauses adopted by the European Commission. A copy of those safeguards is provided on request at contact@domivaro.com.
If you write to us on WhatsApp, the exchange passes through that service, operated by Meta Platforms Ireland Limited, under its own policy. Please do not give the exact address of the property or an access code there: email and telephone remain available for anything sensitive.
Publishing client reviews: if you authorise it in writing, we publish your review with your first name, your town and how long you have been a client. Legal basis: your consent, article 6.1.a. You can withdraw it at any time, and the review is taken down within 72 hours.
The photographs attached to reports carry the date, the time and the coordinates of the point of capture. Those coordinates are kept in the same encrypted environment as the report, are never linked to the key register, and are deleted with the report.
Security
Visit reports and their photographs are stored encrypted. Access is named and limited to the 2 partners. Physical keys follow the protocol set out in the legal notice.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability. Exercise it with a simple message to the address above; the answer comes within one month.
Where processing rests on your consent, you can withdraw it at any time with a simple message, without affecting the lawfulness of processing carried out before the withdrawal. The fields marked as required in the form are needed in order to reply: without them the enquiry cannot be handled.
You may also contact the Agencia Española de Protección de Datos, the supervisory authority in Spain.
Last updated: 4 August 2026.