Last updated: 28 July 2026
This page is for you if your name appears in a document supplied to us by a Casa Connecta customer — for example because you are the seller of a property that someone is having organised through us. You are not a customer yourself and did not give us your data directly. This page explains what data that involves, why we process it, and what rights you have.
Casa Connecta B.V. is registered in the Netherlands under KVK number 42040615. Registered address: Sint Janstraat 30, 4901 LT Oosterhout, The Netherlands. Casa Connecta B.V. is the data controller for the data this page covers. Questions or a request: [email protected] — we reply within one working day.
Our customers are buying a property in Spain and have us organise their own purchase documents, so that they and their own adviser have a checkable overview. Documents such as the nota simple (an extract from the Spanish land registry) and the purchase deed also name other parties to the transaction, usually the seller. Once such a document reaches us, we become the controller for that mention, even though we did not obtain the data from you.
Your name, as it appears in the document naming you as owner, seller, or another party to the transaction. Spanish property documents of this kind typically also carry an identification number (DNI or NIE). We do not record that number separately as a field in our own case file structure; the original document in which it appears is stored as supplied, within the retention period below. We never process a copy of your identity document and never process special category personal data (such as health, race, or political opinion).
Solely through our customer, the buyer of the property. That customer received the documents themselves in the course of the purchase, for example from an estate agent, a notary, or the land registry. We do not request this data directly from you or from any other source.
Purpose: organising our customer's purchase documents, so that presence, legibility, and literal differences between documents become visible to the customer and their own adviser. We never assess the property, the contract, or any party, and we render no legal, financial, or technical judgment. Legal basis: legitimate interest (Article 6(1)(f) GDPR) in being able to provide this service to our customer. Your data is not used for any other purpose, not enriched with other sources, and not shared with third parties beyond what is listed below.
Cloudflare, for storing the document (proven EU jurisdiction). Once AI-assisted extraction has been built: Anthropic, to support recognising and comparing data across documents. Anthropic processes in the United States for this, under standard contractual clauses; more detail is in our privacy policy.
The document and the data derived from it are kept for ninety to 365 days, depending on the product our customer chose, and deleted afterwards. A shared access link to the case file expires no later than thirty days after creation, and in any case when the case file itself is deleted.
The GDPR generally requires us to inform you directly when we process data about you that did not come from you. Article 14(5)(b) GDPR allows an exception where that proves impossible or would involve disproportionate effort, provided we take appropriate measures instead, including making this information public. We have no direct contact channel with you: we only receive the document from our customer, not your email address or phone number. The only address we know is that of the property itself, and that is an unreliable channel for reaching you personally (you are, after all, leaving that property), and using it would itself require a new use of your data unrelated to the purpose for which the document was supplied. This page is the substitute measure the law requires in that case.
Under the GDPR you have the right to access, correct, delete, restrict the processing of, and receive a copy of your data. You also have a specific right to object to this processing, precisely because it rests on legitimate interest: if you object, we will stop processing your data unless we have compelling legitimate grounds that override your interests. To exercise any of these rights, email [email protected] with a description of the document in which your data appears, so we can identify it. We reply within one working day and complete a request within one month.
You can lodge a complaint with a supervisory authority. In the Netherlands: Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl. In Spain: Agencia Española de Protección de Datos (AEPD), aepd.es.
For material changes, we update the date at the top of this page.
