This policy explains how I handle your personal data when you use this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).

1. Data controller

• Controller: Mihael Zanjkovic
• Tax ID (NIF): Y6289529D
• Address: Carretera Provincial 291, 17244 Cassà de la Selva (Girona)
• Email: mihael.zanjkovic@safti.es
• Telephone: +34 681 07 31 69

2. What data I process and how I obtain it

I process the data you give me when you use the contact, valuation, home-search or enquiry forms on this website: your name, telephone number, email address, the content of your message and, if you request a valuation, the details of your property that you fill in on the form: street address and number, features, orientation, condition, installations, sale situation and the documents you have (only if you say you have them; I do not ask you to send them at that step). If you add photos (up to 10), they are prepared on your device (they are reduced in size and their hidden data, such as location, is removed) and sent together with the form so I can prepare your valuation. If you use the OMNIBUY™ home finder, I process your search details: area, type of property, budget, how you plan to finance it, timing and needs. In the calculators, the values you enter are processed in your browser and are not sent to any server; only the summary of your calculation is stored if you send the contact form that accompanies it.

The contact forms and calculators prepare a message that opens in your WhatsApp application (or your email): that data reaches me on WhatsApp when you press "send" in that application; in addition, when you submit the form, I store your name, contact details and message in a secure mailbox so as not to lose your request. The valuation and search forms, on the other hand, send your form (and your photos, in the case of a valuation) to a secure Cloudflare mailbox and I download them to my computer; afterwards they are deleted from the mailbox (they stay there for 30 days at most). Then, depending on what you choose, I suggest booking a video call or I message you on WhatsApp.

If you use the OMNIBUY™ home finder, I prepare a private page for you with your search criteria (area, type, budget, needs) and the matching portal listings, without your telephone number or email. It is not linked from the website or indexed by search engines, and it only opens with its own address, which includes your first name (for example, "name-omnibuy"); I share it with you, and anyone with the link can view it, so share it only with people you choose. It is updated every 2 days while the search lasts (up to 60 days) and deleted when it ends; in any case Cloudflare deletes it if it stops being updated.

3. Purposes and legal basis

• Handling your enquiry or contact request. Legal basis: your consent (Article 6.1.a GDPR), which you give by ticking the box on the form and sending the message.
• Preparing and carrying out the valuation of your property, the home search or any service you ask me for. Legal basis: taking pre-contractual steps at your request and, where applicable, performance of a contract (Article 6.1.b GDPR).
• Putting you in touch with independent professionals (lawyer, bank or mortgage broker, appraiser, renovation company) to study a purchase, only if you expressly authorise me in each case. Legal basis: your consent (Article 6.1.a GDPR).
• Complying with legal obligations that apply to real estate activity, such as anti-money-laundering obligations where relevant. Legal basis: legal obligation (Article 6.1.c GDPR).

• Sending you news by email (videos, articles and notices about my service), only if you tick the optional box. Legal basis: your consent (Article 6.1.a GDPR and Article 21 of the Spanish LSSI-CE). You can unsubscribe with one click from any email (link at the top and bottom); I keep your address on a do-not-contact (DNC) list only to honour that unsubscribe.
• Measuring opens and clicks of those emails with my own tracking links and image, to know which content interests you. Legal basis: your consent to receive news.
• Keeping a contact register (CRM) with your details, the forms you send and the actions I take (with date and time). Legal basis: pre-contractual steps at your request and legitimate interest in managing my business (Article 6.1.f GDPR).
• Creating custom audiences on Meta (Facebook and Instagram), only if you tick the specific box: I will upload your email and phone number encrypted (hashed) to show you my ads; Meta does not receive your data in clear. Legal basis: your consent; you can withdraw it by writing to mihael.zanjkovic@safti.es.

I will not send you commercial communications unless you have asked for them or expressly consented. I will email you about your search or valuation (for example, when there are new homes) because it is part of the service you requested, and also with an unsubscribe link. The valuation and search forms calculate in your browser a service priority (high, medium or low) from your answers about timing, relationship to the property and documentation (valuation) or about timing and financing (search), and include it in the message so that I can organise requests. It has no legal effect on you and does not significantly affect you, and no automated decisions are made about you: I always deal with you personally.

4. Retention

I will keep your data and photos on my computer and in my contact register for as long as necessary to prepare your valuation and handle your request, and while you keep your consent to receive news; after that, blocked for the periods in which legal liabilities may arise. Once those periods have passed, I will delete them. In the Cloudflare mailbox they stay only until they are downloaded and, in any case, for 30 days at most.

5. Recipients and processors

I do not pass your data on to third parties unless required by law or you expressly authorise it. If you authorise me to put you in touch with an independent professional (lawyer, bank or mortgage broker, appraiser, renovation company), I will only give them the data needed for that task; that professional is responsible for their own processing and may charge their own fees, which they will tell you before starting. To provide the service, providers acting as processors may be involved: the hosting and content delivery provider of the site (Cloudflare, Inc.), Google (Gmail and Google Drive, where I keep my contact register), Meta (only if you consent to custom audiences) and the messaging or email services you choose to contact me (for example, WhatsApp). If you book a video call with the Google appointment calendar, Google will process the data you enter in that booking under its own privacy policy.

6. International transfers

Some of these providers are established outside the European Economic Area (for example, in the United States). Where this is the case, the transfer relies on the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to mihael.zanjkovic@safti.es and stating the right you wish to exercise. If necessary, I may ask you to prove your identity.

If you believe I have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es; C/ Jorge Juan, 6, 28001 Madrid).

8. Security

I apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. The site is served over an encrypted connection (HTTPS).

9. Minors

This site is not aimed at children under 14. If you are under that age, do not give me your data without the consent of your parents or guardians.

10. Changes to this policy

I may update this policy to reflect legal or service changes. The version in force is the one published on this page. The Spanish version is the reference text in case of any discrepancy.

Last updated: 1 November 2026