Skip to main content
VivirDonde

Privacy Policy

Last updated: April 2026

1. Identity of the Data Controller

The data controller for personal data collected through VivirDonde is:

2. Purpose of Data Processing

Your personal data will be used exclusively for the following purposes:

  • Providing hyper-personalized neighborhood recommendations based on workplace, preferences, budget and lifestyle.
  • Building and storing search profile history through user accounts.
  • Technical operation of the cartographic recommender and financial simulation tools.
  • Sending the emails you ask for: your account confirmation, and price-change alerts if you subscribe to them (you can unsubscribe from any of those emails).

3. Legal Basis (Legitimacy)

The legal bases for processing your data are: (a) the explicit consent of the data subject (Art. 6.1.a GDPR) for registration, simulators and optional surveys; and (b) the legitimate interest of the controller (Art. 6.1.f GDPR) for internal tracking of service usage events (registrations, logins, wizard completions) for service improvement and account security purposes. The user may object to this processing at any time by contacting [email protected].

4. Categories of Data Collected

The types of data we collect with consent are as follows:

  • Operational analytics data: Lifestyle preferences, click history and geolocation interactions or routes in Spain. Includes service usage events (registration, login, newsletter sign-up, alert creation, recommendation wizard usage) recorded in our database.
  • Identification/Contact information: Name and email address when you create an account, either with email and password (the password is stored hashed with bcrypt, never in plain text) or with your Google account.
  • Pseudo-anonymized economic metrics: Financial inputs explicitly provided in simulation mode (debts, rents, estimated salary). No real bank files are connected via API in our current tool.

4c. Internal Service Analytics Data

Based on legitimate interest (Art. 6.1.f GDPR), we internally record the following usage data in our database to improve the service and ensure account security:

  • Usage events: Event type (registration, login, newsletter sign-up, alert creation, wizard completion), with timestamp. No IP address is stored.
  • Account data: Date of last login and cumulative login count (for security anomaly detection).
  • Wizard progress: Step reached and, where applicable, the step at which the flow was abandoned, to improve the user experience.
  • Language: User language preference and newsletter subscribers' language (for communications in the correct language).

Important: No IP addresses are stored. In the recommender's anonymous questionnaire, income is stored only as a range (e.g. '1500-2500 €'), never as an exact figure. If you have an account and enter your income or debts in your profile, those figures ARE stored as entered, linked to your account, because we use them to calculate your budget; you can delete them any time by clearing the field or deleting your account. All data is held in our secure database and is not shared with third parties for advertising purposes.

4b. Anonymous Survey Data (Wizard)

When completing our recommendation wizard, and only if the user grants explicit consent via a specific checkbox, we collect the following data in a completely anonymous manner:

  • Housing preferences: Property type, number of bedrooms/bathrooms, desired surface, floor, condition of the property and selected extras.
  • Area preferences: Importance scores given to safety, transport, nightlife, etc. If you say where you work, only an approximate area of about 1 km (rounded coordinates) is stored, never the address; answers from before September 2026 may include the address as typed. That location is deleted after 12 months.
  • Anonymized income range: Only a range is stored (e.g. "1500-2500"), never the exact figure.
  • Recommendation result: Name of the recommended neighborhood and match score.
  • Optional demographic data: Age range, gender, nationality, current city and employment status. All completely voluntary.
  • Technical metadata: Browser User-Agent (truncated). The IP address is NOT stored. Each answer carries a random identifier kept for 24 hours in a technical cookie (survey_token) only so the last step of the wizard can be completed; it is not linked to your account or your email.

This aggregated data is used exclusively to improve recommendation quality and analyze real estate market trends.

Explicit consent of the data subject (Art. 6.1.a GDPR), granted via checkbox in the wizard.

Anonymous survey data does not contain identifying information and therefore cannot be linked to a specific individual. It will be retained according to the periods indicated in section 5.

4d. Third-Party Services (Data Transfers)

To provide certain functionalities, VivirDonde uses the following third-party services that may receive user data:

  • OpenStreetMap Foundation (tile.openstreetmap.org): Provides map tiles for the interactive map. When viewing the map, your IP address is transmitted to OpenStreetMap servers to load cartographic imagery. No additional personal data is transmitted. More information in OSMF's privacy policy (osmfoundation.org/wiki/Privacy_Policy).
  • Nominatim (OpenStreetMap): Geocoding service used to convert addresses entered by the user into geographic coordinates (in the recommendation wizard). The entered address is sent to OpenStreetMap Foundation servers. No additional personal data is transmitted. More information in OSMF's privacy policy (osmfoundation.org/wiki/Privacy_Policy).
  • OpenRouteService (HeiGIT gGmbH, Germany): Routing service used to estimate real travel times in the recommendation wizard. After geocoding the user's addresses, only the geographic coordinates (latitude/longitude) are forwarded through an internal proxy; no personal identifier or original address is sent. Processing is based on the user's consent when using the wizard. More information in HeiGIT's privacy policy (openrouteservice.org/privacy).
  • Resend (Resend, Inc., USA): the provider that sends the site's emails (confirmations and price alerts). It receives your email address and the message content solely to deliver it. More information at resend.com/legal/privacy-policy.

5. Data Retention Periods

Registered user data will be retained for the period strictly necessary to fulfill the purpose for which it was collected, unless the user requests its deletion. Once the purpose has been fulfilled, the information will be blocked in accordance with legal documentary obligations (typically 5 years under Spanish accounting regulations).

6. Active User Rights (ARSLPO)

Any person has the right to obtain legal confirmation as to whether VivirDonde processes their personal data. Persons who provide their consent expressly enjoy the following rights:

  • Right of Access.
  • Right of Rectification of inaccurate records.
  • Right to Erasure (Right to be Forgotten).
  • Right to Data Portability.
  • Right to Object.
  • Right to Restriction of processing.

To exercise or claim these rights, simply send an email to [email protected]. Likewise, in the event of unjustified violations or obstacles, you have the legitimate right under Spanish law to file a complaint directly with the Spanish Data Protection Agency (AEPD) through the portal aepd.es.