Last updated: April 2026
1. Identity of the Data Controller
The data controller for personal data collected through VivirDonde is:
2. Purpose of Data Processing
Your personal data will be used exclusively for the following purposes:
- Providing hyper-personalized neighborhood recommendations based on workplace, preferences, budget and lifestyle.
- Building and storing search profile history through user accounts.
- Technical operation of the cartographic recommender and financial simulation tools.
3. Legal Basis (Legitimacy)
The legal bases for processing your data are: (a) the explicit consent of the data subject (Art. 6.1.a GDPR) for registration, simulators and optional surveys; and (b) the legitimate interest of the controller (Art. 6.1.f GDPR) for internal tracking of service usage events (registrations, logins, wizard completions) for service improvement and account security purposes. The user may object to this processing at any time by contacting [email protected].
4. Categories of Data Collected
The types of data we collect with consent are as follows:
- Operational analytics data: Lifestyle preferences, click history and geolocation interactions or routes in Spain. Includes service usage events (registration, login, newsletter sign-up, alert creation, recommendation wizard usage) recorded in our database.
- Identification/Contact information: Name, Email Address (when creating accounts or linking OAuth gateways via Google).
- Pseudo-anonymized economic metrics: Financial inputs explicitly provided in simulation mode (debts, rents, estimated salary). No real bank files are connected via API in our current tool.
4c. Internal Service Analytics Data
Based on legitimate interest (Art. 6.1.f GDPR), we internally record the following usage data in our database to improve the service and ensure account security:
- Usage events: Event type (registration, login, newsletter sign-up, alert creation, wizard completion), with timestamp. No IP address is stored.
- Account data: Date of last login and cumulative login count (for security anomaly detection).
- Wizard progress: Step reached and, where applicable, the step at which the flow was abandoned, to improve the user experience.
- Language: User language preference and newsletter subscribers' language (for communications in the correct language).
Important: No IP addresses are stored. Income data is processed only as an anonymized range (e.g. '1500-2500€'), never as an exact figure. All data is held in our secure database and is not shared with third parties for advertising purposes.
4b. Anonymous Survey Data (Wizard)
When completing our recommendation wizard, and only if the user grants explicit consent via a specific checkbox, we collect the following data in a completely anonymous manner:
- Housing preferences: Property type, number of bedrooms/bathrooms, desired surface area, selected extras.
- Area preferences: Importance ratings given to safety, transport, leisure, etc.
- Anonymized income range: Only a range is stored (e.g. "1500-2500"), never the exact figure.
- Recommendation result: Name of the recommended neighborhood and match score.
- Optional demographic data: Age range, gender, nationality, current city and employment status. All completely voluntary.
- Technical metadata: Browser User-Agent (truncated). The IP address or any unique identifier is NOT stored.
This aggregated data is used exclusively to improve recommendation quality and analyze real estate market trends.
Explicit consent of the data subject (Art. 6.1.a GDPR), granted via checkbox in the wizard.
Anonymous survey data does not contain identifying information and therefore cannot be linked to a specific individual. It will be retained according to the periods indicated in section 5.
4d. Third-Party Services (Data Transfers)
To provide certain functionalities, VivirDonde uses the following third-party services that may receive user data:
- CartoCDN (CARTO): Provides map tiles for the interactive map. When viewing the map, your IP address is transmitted to CARTO servers to load cartographic imagery. CARTO does not receive any additional personal data. More information in CARTO's privacy policy (carto.com/privacy).
- Nominatim (OpenStreetMap): Geocoding service used to convert addresses entered by the user into geographic coordinates (in the recommendation wizard). The entered address is sent to OpenStreetMap Foundation servers. No additional personal data is transmitted. More information in OSMF's privacy policy (osmfoundation.org/wiki/Privacy_Policy).
- OpenRouteService (HeiGIT gGmbH, Germany): Routing service used to estimate real travel times in the recommendation wizard. After geocoding the user's addresses, only the geographic coordinates (latitude/longitude) are forwarded through an internal proxy; no personal identifier or original address is sent. Processing is based on the user's consent when using the wizard. More information in HeiGIT's privacy policy (openrouteservice.org/privacy).
5. Data Retention Periods
Registered user data will be retained for the period strictly necessary to fulfill the purpose for which it was collected, unless the user requests its deletion. Once the purpose has been fulfilled, the information will be blocked in accordance with legal documentary obligations (typically 5 years under Spanish accounting regulations).
6. Active User Rights (ARSLPO)
Any person has the right to obtain legal confirmation as to whether VivirDonde processes their personal data. Persons who provide their consent expressly enjoy the following rights:
- Right of Access.
- Right of Rectification of inaccurate records.
- Right to Erasure (Right to be Forgotten).
- Right to Data Portability.
- Right to Object.
- Right to Restriction of processing.
To exercise or claim these rights, simply send an email to [email protected]. Likewise, in the event of unjustified violations or obstacles, you have the legitimate right under Spanish law to file a complaint directly with the Spanish Data Protection Agency (AEPD) through the portal aepd.es.