Privacy Policy
A Legal Disclaimer
The Privacy Policy below represents the actual data protection practices of Malaga One Point. It has been prepared taking into account the applicable legislation, including the General Data Protection Regulation (GDPR), the Spanish Organic Law on Data Protection (LOPDGDD 3/2018) and the Spanish Information Society Services Law (LSSICE 34/2002). We recommend that you read this policy carefully. If you have any questions, contact us at office@creditinspain.com before using our forms or services.
Privacy Policy - The Basics
This Privacy Policy is a statement that discloses how Malaga One Point collects, uses, stores, shares and
protects the personal data of visitors and users of its website and contact forms.
It also includes our commitment to protecting your privacy and an explanation of the mechanisms we apply to keep your data secure.
Malaga One Point is a lead generation and general information service for international buyers interested
in property in Spain. We are not a bank, lender, mortgage intermediary, financial adviser, legal adviser or
tax adviser.
This policy applies to all data collected through:
- Our website: www.malagaonepoint.com
- Our contact and assessment forms (Typeform)
- Our email communications (Gmail)
Contact: office@creditinspain.com
Last updated: June 2026
What Information we collect
We collect the following categories of personal data when you complete our forms or contact us:
-
Identity data
-
First name and last name.
-
Contact data
-
Email address and mobile phone number.
-
Communication preferences
-
Preferred language and preferred contact channel.
-
Property search information
-
Country of residence, property type, estimated budget
-
and purchase timeline.
-
General financial context
-
Employment type, approximate monthly income range, approximate available savings and existing monthly loan payments.
Technical data
IP address and basic browsing data collected automatically via cookies when you visit our website.
All personal data is provided voluntarily by you.
You are not legally required to provide this information, but without it we cannot respond to your enquiry.
Why We Collect This Information
We collect your personal data for the following purposes and on the following legal bases:
To respond to your enquiryLegal basis: Performance of a contract or pre-contractual steps at your request (Art. 6.1.b GDPR).
We use your contact details and general information to respond to your request and manage your enquiry.
To share your details with a licensed professionalLegal basis: Your explicit consent (Art. 6.1.a GDPR).
Only when you have explicitly requested it, we share your contact details with an independent licensed professional in Spain. We do not do this without your prior knowledge and consent.
To send follow-up communicationsLegal basis: Your explicit consent (Art. 6.1.a GDPR).
With your consent, we may send you a follow-up message containing a link to a second information form as part of your ongoing enquiry process.
To comply with legal obligationsLegal basis: Compliance with applicable law (Art. 6.1.c GDPR).
We may process your data where required by a competent authority or applicable legislation.
We do not use your data for automated profiling, automated decision-making or credit scoring of any kind.
How We Share Your Information
We share your personal data only in the following specific circumstances:
With independent licensed professionals in SpainOnly when you have explicitly requested to be put in touch with a professional, and only with your prior knowledge and consent. Any subsequent relationship between you and that professional is entirely independent of Malaga One Point.
With our technology providersThe following companies process data on our behalf as data processors, under our instructions and in accordance with GDPR:
-
Typeform— online form collectiontypeform.com/privacy
-
HubSpot— contact and enquiry managementlegal.hubspot.com/privacy-policy
-
Make— workflow and email automationmake.com/en/privacy-notice
-
Google LLC— Gmail (email communications) and Google Sheets (data management)policies.google.com/privacy
HubSpot and Google LLC are based in the United States. All data transfers to these providers are carried out under Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR), ensuring your data receives the same level of protection as within the European Economic Area.
We do not sell, rent or share your personal data with any third party for advertising, marketing or any purpose unrelated to your enquiry.
How You Can Exercise Your Rights
Under GDPR and the Spanish Organic Law on Data Protection (LOPDGDD 3/2018), you have the following rights regarding your personal data:
Right of accessYou may request a copy of the personal data we hold about you at any time.
Right to rectificationYou may request that we correct any inaccurate or incomplete data we hold about you.
Right to erasureYou may request that we delete your personal data where there is no longer a legitimate reason for us to process it.
Right to restriction of processingYou may request that we temporarily stop processing your data while a dispute is being resolved.
Right to objectYou may object to the processing of your data where we rely on legitimate interest as our legal basis.
Right to data portabilityYou may request that we provide your data in a structured, machine-readable format.
Right to withdraw consentWhere processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
Right to lodge a complaintIf you believe your rights have not been respected, you may contact the Spanish Data Protection Agency:
Agencia Española de Protección de Datos (AEPD)
www.aepd.es
How to exercise your rights. Send an email to: office@creditinspain.com
Please state the right you wish to exercise and include your identifying details.
We will respond within 30 days as required by GDPR.
Minors
Our website and services are not directed at or intended for persons under 18 years of age.
We do not knowingly collect personal data from minors. By submitting our forms, you confirm that you are at least 18 years of age.
If you believe that we have inadvertently collected data from a person under 18, please contact us immediately at office@creditinspain.com and we will delete that data without delay.
Data Retention
We retain your personal data only for as long as necessary for the purposes described in this policy.
Active enquiries
We retain your data for the duration of your active enquiry with us.
After your last contactWe retain your data for a maximum of 24 months from your last interaction with us.
Legal obligations
Where required by applicable law, data may be retained in a blocked state for up to 6 years for legal limitation purposes only.
Withdrawal of consentIf you withdraw your consent, we will cease active processing of your data immediately, unless a legal obligation requires otherwise.
After the retention period, your data is permanently deleted or anonymised.
Cookies
Our website uses cookies in accordance with GDPR and the Spanish Information Society Services Law (LSSICE 34/2002).
A cookie is a small text file stored on your device when you visit our website. Cookies allow the website to remember certain information about your visit.
Technical cookies— No consent requiredThese are essential for the website to function correctly. They cannot be disabled without affecting the operation of the site.
Analytical cookies— Consent requiredThese help us understand how visitors use our website. We use Google Analytics (Google LLC, USA) for this purpose. These cookies are only activated with your consent.
We do not use advertising or behavioural tracking cookies.
For full details about the cookies we use and how to manage your preferences, please see our Cookie Policy.
Updates to This Policy
Malaga One Point may update this Privacy Policy at any time to reflect changes in our practices, technology or applicable law.
The current version is always the one published on this page, identified by the date of the last update shown at the top of this policy.
We recommend checking this page periodically.
If you have any questions about this Privacy Policy or the way we handle your personal data, please contact us at: