Privacy Policy: Our Privacy Policy outlines how Azahar Realty Estate (“we,” “us,” or “our”) collects, uses, discloses, and manages personal data on our website. This includes information about:
- The data controller (us) responsible for processing personal data.
- Types of personal data we collect, such as name, email, phone number, and address.
- Purposes of data collection, including property inquiries, newsletter subscriptions, and account management.
- Legal basis for processing personal data, such as consent, contractual necessity, or legitimate interests.
- Data retention periods and criteria for determining the duration of data storage.
- Rights of data subjects, including the right to access, rectify, erase, or restrict the processing of their personal data.
- Procedures for submitting data subject requests and contacting us for inquiries or complaints.
- Information about international data transfers, if applicable, including the legal mechanisms used to ensure data protection.
- Updates to the Privacy Policy and notification procedures for significant changes.
Cookie Policy: Our Cookie Policy explains the types of cookies and tracking technologies used on our website, their purposes, and how users can manage their preferences. This includes:
- Explanation of essential, functional, analytical, and advertising cookies.
- Purpose of each cookie category and its impact on user experience.
- Options for users to control cookie settings through browser preferences or cookie consent banners.
- Information about third-party cookies and tracking technologies used for analytics, advertising, or social media integration.
- Links to external resources for more information on managing cookies and tracking technologies.
Consent Mechanisms: We obtain consent from users before collecting or processing their personal data through interactive consent mechanisms, such as:
- Checkboxes for users to indicate their consent before submitting forms or engaging with certain features.
- Clear and conspicuous language explaining the purpose of data collection and processing.
- Options for users to withdraw consent at any time through accessible channels.
Data Subject Rights: We respect the rights of data subjects under GDPR and provide clear instructions for exercising these rights, including:
- How to submit requests to access, rectify, erase, or restrict the processing of personal data.
- Verification procedures to confirm the identity of data subjects and prevent unauthorized access to personal data.
- Timelines for responding to data subject requests and procedures for handling complex or extensive requests.
Data Security Measures: We implement robust security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction, including:
- Encryption protocols to secure data transmission and storage.
- Access controls and authentication mechanisms to restrict data access to authorized personnel.
- Regular security assessments and audits to identify and address vulnerabilities.
- Employee training programs to raise awareness of data security best practices and compliance requirements.
Third-Party Data Processors: We may share personal data with trusted third-party service providers who assist us in website operation, marketing, or customer service. These third parties are contractually obligated to:
- Process personal data only for specified purposes and in accordance with our instructions.
- Implement appropriate security measures to protect personal data.
- Comply with GDPR and other applicable data protection laws.
- Notify us promptly in case of data breaches or security incidents affecting personal data.
Data Breach Notification: In the event of a data breach involving personal data, we have established procedures to:
- Detect and assess the severity of the breach promptly.
- Notify affected individuals and relevant supervisory authorities within the required timeframe.
- Provide clear and timely information about the nature of the breach, the affected data subjects, and the measures taken to mitigate risks and prevent future incidents.
Children’s Data: We do not knowingly collect personal data from individuals under the age of [specified age] without parental consent. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete such information from our records promptly.
International Data Transfers: If we transfer personal data outside the European Economic Area (EEA), we ensure that adequate safeguards are in place to protect the data, such as:
- Standard contractual clauses approved by the European Commission.
- Binding corporate rules or certification mechanisms.
- Adequacy decisions from the European Commission for countries deemed to provide an adequate level of data protection.
Updates and Review: We regularly review and update our GDPR-related documentation to ensure compliance with evolving regulatory requirements and changes in our data processing activities. Any updates to our privacy policy, cookie policy, or other relevant documents will be communicated to users through our website or other appropriate channels.
