Legal
Privacy Policy
Last updated: 7 June 2026
Tribeca Living Nordics is a private real estate advisory. Discretion is the foundation of how we work — with our clients, and with anyone who contacts us. This policy explains, plainly, what personal data we collect through this website, why, and what your rights are.
1. Who is responsible for your data
The data controller is Tribeca Living Nordics Real Estate SL (CIF B93558237), C/ Nuestra Señora de Gracia 26, Centro Gracia Offices, 29602 Marbella, Málaga, Spain. Registered at [REGISTRY].
For anything relating to your personal data, write to contact@tribecalivingnordics.es.
2. What we collect and why
Enquiries. When you contact us through the form, by email, or by phone, we process the details you provide — name, email address, phone number, the nature of your enquiry, and your message — in order to respond and, where relevant, to advise you. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to enquiries (Art. 6(1)(f)).
Newsletter. If you subscribe, we process your email address to send you our updates. We use double opt-in: no subscription is active until you confirm it. Legal basis: your consent (Art. 6(1)(a)), which you may withdraw at any time via the unsubscribe link in every email.
Website usage. With your consent, we use statistics and marketing cookies to understand how the site is used and to measure our communication. Details are in the Cookie Policy. Legal basis: consent (Art. 6(1)(a)). Without consent, only technically necessary processing takes place (e.g. server logs kept briefly for security).
Client relationships. If you become a client, we process the data needed to provide our advisory services and to meet legal obligations, including Spanish anti-money-laundering rules applicable to real estate transactions. This is governed by the engagement documentation you receive at that stage.
3. Who we share data with
We do not sell personal data, and we do not share it with third parties for their own marketing. We use a small number of service providers who process data on our instructions under data processing agreements: our CRM provider (HubSpot), our hosting provider (Hostinger, on servers within the EU), and — subject to your cookie consent — Google and Meta for measurement and advertising.
Where providers process data outside the EEA (for example in the United States), transfers rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
4. How long we keep data
Enquiries that do not lead to an engagement: up to 24 months from our last exchange, so we can pick up the conversation where it left off.
Newsletter data: until you unsubscribe.
Client files: for the duration of the engagement and thereafter as required by Spanish commercial, tax, and anti-money-laundering law.
Consent records: for as long as the consent is relied upon and as evidence thereafter.
5. Your rights
You may request access to your data, rectification, erasure, restriction of processing, and a portable copy; you may object to processing based on legitimate interest; and you may withdraw any consent at any time, without affecting prior processing.
Write to contact@tribecalivingnordics.es — we respond within one month. You also have the right to lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (aepd.es), or with the supervisory authority of your own country of residence — for visitors in Norway, Datatilsynet (datatilsynet.no).
6. Security
We apply appropriate technical and organisational measures — encrypted connections (TLS), access controls, and contractual safeguards with our providers — proportionate to the nature of the data we hold.
7. Changes
We will update this policy when our processing changes, and the date above will reflect the current version. Material changes will be highlighted on this page.