This page explains how GR Estates ("we", "us", "our") handles your personal data and uses cookies on grestates.com. We are committed to protecting your privacy in line with the EU General Data Protection Regulation (GDPR) and Spanish data-protection law (LOPDGDD).
Privacy Policy
Who we are (data controller)
GR Estates
C/ Churruca 2, Edif. Astigi Bajo 2, 29640 Fuengirola (Málaga), Spain
Email: booking@grestates.com · Tel: +34 657 902 018
What data we collect
- Information you give us — your name, email, phone number and the details of your enquiry when you contact us through a form, by email, or via WhatsApp.
- Information collected automatically — if you consent to analytics or marketing cookies, technical and usage data such as your approximate location, device and browser, pages viewed and how you reached the site.
Why we use it and our legal basis
- To respond to your enquiries and provide the property information you request — on the basis of your request and our legitimate interest in serving prospective clients.
- To improve our website and marketing (analytics and advertising) — only with your consent, which you give through the cookie banner and can withdraw at any time.
- To meet legal obligations — for example tax and anti-money-laundering requirements where a transaction proceeds.
Enquiries by WhatsApp
When you message us on WhatsApp you are first answered by Charlie, our AI assistant — see AI transparency below — and a member of our team takes over whenever you ask or whenever the enquiry needs a person. WhatsApp/Meta processes the message in line with its own terms and privacy policy; we use the information only to answer you and follow up on your enquiry.
Who we share data with
We do not sell your personal data. We share it only with service providers who help us run the business, such as Google (Google Analytics and Google Ads, used only with your consent). These providers act as our processors under contract. Some may process data outside the EEA under appropriate safeguards (such as the EU–US Data Privacy Framework or standard contractual clauses).
How long we keep it
We keep enquiry data for as long as needed to deal with your request and our ongoing relationship, and thereafter only as required by law. Analytics data is retained according to the settings in Google Analytics.
Your rights
You have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any of these, email booking@grestates.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
Cookie Policy
What cookies are
Cookies and similar technologies are small files stored on your device that help a website function and understand how it is used. We group ours into three categories.
Consent — you are in control
We use Google Consent Mode. When you first visit, all non-essential cookies are switched off by default until you choose. You can Accept all, Reject non-essential, or Manage preferences to allow analytics and marketing separately. You can change your choice at any time using the "Cookies" link in the site footer, or by clearing your browser storage.
The cookies we use
| Category | Purpose | Examples |
|---|---|---|
| Essential (always on) | Needed for the site to work and to remember your privacy choice. Set no marketing data. | Consent choice, dark-mode & language preference (stored locally on your device) |
| Analytics (with consent) | Help us understand how visitors use the site so we can improve it, via Google Analytics 4. | _ga, _ga_ZM1Z4Y52BK |
| Marketing (with consent) | Measure and improve our advertising, via Google Ads. | _gcl_au and related Google Ads cookies |
These services are provided by Google. You can read more in Google's Privacy Policy and Google's cookie information.
Managing cookies in your browser
Beyond our banner, you can block or delete cookies through your browser settings. Note that blocking essential storage may stop parts of the site from working.
AI transparency
We use artificial intelligence in a few clearly defined places. This section explains where, and what it means for you. It is published in line with Article 50 of Regulation (EU) 2024/1689 (the EU Artificial Intelligence Act).
Charlie, our WhatsApp assistant
When you message our WhatsApp number, you are talking to Charlie, an AI assistant — not a person. Charlie tells you this at the start of every conversation, and will confirm it plainly if you ask at any point.
Charlie can check real availability, share property details and answer questions from our own data. Charlie cannot quote a rental price, negotiate, confirm a booking or a sale, or take a payment — those are always handled by a member of our team. A human reviews and completes every booking and every sale.
You can always reach a person, and you never have to use Charlie at all. Ask at any point in the conversation and we will hand you to Andrea (rentals) or Jaime (sales). Our traditional ways of working are unchanged and fully staffed: call us on +34 657 902 018, email booking@grestates.com, or visit the office at C/ Churruca 2, Fuengirola. AI was added alongside those routes in 2026 — it has not replaced them, and you are never obliged to deal with an automated system to do business with us.
AI-assisted content
Some of the editorial content on this site — blog articles, area hubs and city guides — is drafted with AI assistance and reviewed by our team before publication. Pages that were produced this way carry a note at the foot of the article. Property listings and descriptions come from our own records and from our partner feeds.
Translation
This site is published in eleven languages. Property descriptions are machine-translated at the point we add a property to our database. If anything reads oddly in your language, the English or Spanish version is the reference — and please tell us.
What we do not do
We do not use AI to assess your creditworthiness, your ability to pay, or your suitability as a tenant or buyer. We do not use facial recognition, emotion detection or biometric analysis of any kind. We do not make automated decisions that produce legal effects for you or similarly significantly affect you within the meaning of Article 22 GDPR.
Your rights
You have the right to know when you are interacting with an AI system, to ask for a human instead, and to exercise all of your data-protection rights set out above in respect of anything you tell Charlie. To raise a concern about our use of AI, email booking@grestates.com. In Spain, the supervisory authority for artificial intelligence is the Agencia Española de Supervisión de la Inteligencia Artificial (AESIA), and for personal data the Agencia Española de Protección de Datos (AEPD).
Note: this policy is provided in good faith as a general template and does not constitute legal advice. We recommend having it reviewed by a qualified data-protection professional for your specific circumstances. Questions? Email booking@grestates.com.
A Spanish-language version of this policy will be published alongside our Spanish site pages.