Privacy notice

This is a template that still needs to be reviewed and approved by the community’s legal adviser. It is not yet a final privacy notice.

This notice explains which personal data the owners’ community processes in this portal, why, and what your rights are. It applies to everyone with an account: owners, tenants, members of their households, the board, the property manager and companies working for the community.

Who is responsible for your data

Inma Diaz
CIF H21676630
Calle Tizziano, 6 Urb. Tamango Hill 29793 Torrox-Costa (Málaga)
+34952521053

For questions about your data, write to the contact above. In the portal you can also use My account → My data and privacy.

Why we process your data

To manage the owners’ community and its common property:

to give you an account and the access your apartment and your role allow, and to keep the register of apartments;
to share the community’s announcements, documents, minutes, finances and events with you;
to handle bookings of the common facilities, fault reports and your messages to the administration;
to look at concerns about the house rules and, when needed, ask a company to remind an owner of them;
to run working groups, ideas, polls and sign-ups for events;
to let the board, the management and the working groups talk to each other in an internal chat;
to send you emails and, if you switch them on, push notifications;
to keep the portal secure: login history, a log of administrative actions and encrypted backups.

Which data we process

Your name and the email address you log in with, your language and, if you add it, your phone number.
Which apartment you are linked to and in what capacity (for example owner or tenant), and your parking space.
What you do in the portal: bookings, fault reports and their photos, messages to the administration, posts in working groups, ideas, comments, votes and sign-ups for events.
Concerns about the house rules: what an owner writes, its photos and the apartment it is about. A concern about your apartment contains data about you; only the administration reads it.
Internal chat, only for people with a role such as the board, the management or a working group: the messages you write and the reactions you add (such as 👍), with your name and the time.
Ask Bayview: the questions asked, without the name of the person asking, for 90 days, to see which answers are missing and which are wrong.
Security information: your login history with time, network address and browser, and whether you use two-factor authentication, passkeys or push notifications on a device.

We do not ask for identity numbers, dates of birth or bank details.

Legal basis

We rely on these legal bases of the General Data Protection Regulation (Article 6):

legal obligation: the community’s duties under the Spanish Horizontal Property Act (Ley de Propiedad Horizontal), for example the register of owners, minutes and accounts;
legitimate interest: running the community and its services well and keeping the portal secure;
consent: optional features such as push notifications and, for each fault report, sharing your name and phone number with the company that does the repair. You can withdraw your consent at any time.
legitimate interest: information letters from the community to its residents by email. The box for them is ticked when you create an account; untick it if you do not want them. You can object and stop them at any time under My account or with the link in each letter.

Who can see your data

Only people who need it for their role in the community, for example the board or the property manager. Other residents do not see your bookings or your contact details.

A company that repairs a fault receives the description, the place and the photos of the report; your name and phone number only if you agree for that report.

When the administration passes on a concern about the house rules, the company that helps the community with this receives the apartment, the date, the place and the administration’s message – not the name of the person who wrote.

These service providers process data on the community’s behalf, under a data processing agreement:

the hosting provider of the portal and its database, in the European Union;
the email service that delivers the portal’s emails;
the storage of the encrypted backups, in the European Union;
Google Cloud, only if the administration has switched it on: Cloud Translation receives the texts written in the portal (announcements, events, working groups, the internal chat and the like) to translate them.
Cloudflare (Workers AI), only if the administration has switched it on: receives the questions asked in Ask Bayview and the community’s texts found for them, to suggest words to look for and to write an answer, and does not use them to train models.

Push notifications are optional. If you switch them on for a device, the portal sends short encrypted messages through the push service of the maker of your browser (Google, Apple, Mozilla or Microsoft). That service cannot read them, but it sees that a message is delivered. You can switch them off at any time under My account.

Your data is not sold and not used for advertising or analytics.

Transfers outside the European Union

Your data is stored in the European Union. Google Cloud Translation and the push services of browser makers may process data outside it; these companies are bound by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. The texts sent for translation contain no data about you unless someone wrote it in them.

How long we keep it

Only as long as necessary. The administration sets these periods; the ones in force now are:

your account while you are linked to an apartment or have a role; 730 days after your last link or login it is anonymised automatically;
the accounts of tenants are deleted automatically when their access ends (30 days after the account was created, unless the administration extends it);
login history: 365 days;
read notifications: 180 days; the record of emails sent: 365 days;
concerns about the house rules: 730 days after they are closed;
an invitation by email from the administration (the address and the language of the email): 90 days after the last one;
messages in the internal chat: until their writer or a chat administrator deletes them;
encrypted backups: at most 8 days;
records the community must keep by law, such as minutes and accounts: as long as the law requires. Bookings, fault reports and posts stay as part of the community’s history, without your name once your account is anonymised.

Your rights

You can ask to see your data, to have it corrected or erased, to restrict or object to its use, and to receive it in a file you can take elsewhere. Where we rely on your consent, you can withdraw it.

Under My account → My data and privacy you can download your data and make a request; the administration answers within one month.

You may also complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

Good to know

The portal takes no automated decisions about you and does not build profiles.

The portal only uses cookies it needs to work: Cookies

This notice was last updated on Tuesday, 27 October 2026.