Last updated: Thursday July 05th 2026

1. Data Controller

In accordance with Regulation (EU) 2016/679 (GDPR) and the applicable data protection legislation, the controller responsible for processing personal data is:

Owner: Ingrid Maraya Román Soza

Trading Name: DomZula

Tax ID: 07298184P

Registered Address:

Email: info@domzula.com

Phone: (+34) 609 528 092

2. Purpose of Processing

The personal data provided by users may be processed for the following purposes:

• Manage user registration and access to the platform.
• Manage profiles for property owners, buyers, sellers, landlords, tenants, and other users.
• Publish, edit, and manage property listings.
• Handle enquiries, property viewings, valuations, property acquisition requests, and other requests.
• Facilitate communication between users and DomZula.
• Manage payments, subscriptions, or contracted services where applicable.
• Send communications related to the requested services.
• Respond to enquiries submitted through contact forms.
• Comply with applicable legal obligations.
• Improve the quality of our services, platform security, and user experience.
• Prevent fraudulent activities or uses that violate the platform's Terms of Use.

3. Legal Basis for Processing

The processing of personal data is based on one or more of the following legal grounds:

• The user's consent.
• The performance of a contract or pre-contractual measures.
• Compliance with legal obligations.
• The legitimate interests of the data controller where applicable.

4. Categories of Personal Data Collected

Depending on how the platform is used, we may process the following categories of personal data:

• Full name.
• Email address.
• Telephone number.
• Postal address.
• Billing information.
• Photographs.
• Documents voluntarily provided by the user.
• Property listing information.
• Messages exchanged through the platform.
• IP address.
• Device and browser information.
• Browsing data.
• Cookies and similar technologies.
• Any other information voluntarily provided by the user.

5. Data Retention

Personal data will be retained for as long as necessary to fulfil the purposes for which it was collected.

Once the relationship with the user has ended, the data may be retained in a restricted form for the periods required by applicable law to comply with legal obligations or resolve potential claims.

6. Data Recipients

As a general rule, personal data will not be disclosed to third parties unless required by law or necessary for the provision of the requested services.

To operate the platform, we may use technology providers acting as data processors, including:

• Google Analytics.
• Google reCAPTCHA.
• Stripe.
• Smartlook.
• Google Calendar.
• Google Contacts.
• Amazon Web Services (AWS).
• Cloudflare.

Each provider will process personal data solely for the purpose of delivering the contracted services and in accordance with applicable data protection legislation.

7. International Data Transfers

Some technology providers may process personal data outside the European Economic Area (EEA).

Where this occurs, such transfers will only take place where appropriate safeguards are in place in accordance with Regulation (EU) 2016/679, including the use of Standard Contractual Clauses approved by the European Commission or other legally recognised transfer mechanisms.

8. Your Rights

Users may exercise the following rights at any time:

• Right of access.
• Right to rectification.
• Right to erasure.
• Right to object.
• Right to restriction of processing.
• Right to data portability.
• Right to withdraw consent where processing is based on consent.

To exercise any of these rights, please contact:

info@domzula.com

Where necessary to verify the identity of the requester, additional documentation may be requested.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority in their country.

9. Information Security

DomZula implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure, taking into account the current state of technology, the nature of the processed data, and the associated risks.

10. Minors

The services provided through this website are not intended for minors unless expressly stated otherwise.

Where legally required, the consent of a parent or legal guardian will be obtained before processing the personal data of a minor.

11. Changes to this Privacy Policy

DomZula reserves the right to modify this Privacy Policy to reflect legal, technical, operational, or organisational changes.

Any updates will be published on this page together with the date of the latest revision.