Privacy Policy
This policy explains what personal data we collect when you use the Amaris Villas pages, why, on what legal basis, who processes it for us, how long we keep it and what rights you have. It is written to describe what actually happens, not to cover every possibility.
1. Who is responsible for your data
Siesta Homes Group SL (trading as Siesta Homes), Spanish tax number (CIF) B93046357, registered office at C.C. La Alzambra, Oficina 3-4, Nueva Andalucía, 29660 Marbella (Málaga), Spain. Email info@siestahomes.com, telephone +34 952 828 443.
These pages are the pre-launch and reservation pages for the Amaris Villas development in Estepona: prelaunch.amarisvillas.es (the presentation page) and prelaunch.amarisvillas.es/reservation/ (the private dossier). The same policies apply to the other Siesta Homes project pages that link here (alma.siestahomes.com and 718guadalmina.siestahomes.com), with the differences noted in each section.
We have not appointed a data protection officer because we are not required to. Questions about this policy and requests about your data go to the email or postal address above, marked "Data protection".
2. What we collect, and when
We only collect what you give us or what your use of the pages produces. In order of how you meet it:
Registering for private access (presentation page)
- Your name and email address, typed into the form. The two boxes record that you accept this policy and want your access link and Amaris updates by email, and whether you also want to hear about future Siesta Homes projects.
- The source of your visit: the page you registered on, the campaign parameters in the link you arrived by (including the identifier of the advertisement that brought you, if any), the country your request came from and the type of device.
Reading the private dossier
- Your access link carries your email address, so that the dossier can open for you and we can see that a registered buyer has returned. We record when the dossier is opened under your address, which villa you select on the site plan, and which of the actions below you take. We do not record what you read on the page against your name beyond that.
Asking a question, requesting the Investor Pack, enquiring about villas 1 and 2, or requesting a reservation
- Name, email address, telephone number with country code, your message, the villa you chose and its listed price.
- For villas 1 and 2 (released by private enquiry): your answers to 4 questions about intended use, whether you have bought in Spain before, how you expect to finance, and when you would be ready to reserve.
Signing in as a returning buyer
- The email address you type, checked against our registration list so the dossier can reopen for you. Nothing else is returned or stored.
While we talk to you
- Notes made by our sales team about calls, messages, emails, viewings and what you told us you are looking for (for example nationality, budget range, intended use, how many of you will live there, what you liked). These notes exist so that the next person you speak to does not ask you the same questions again.
Measurement without personal data
- Our own, cookie-free measurement records how the pages are used: which sections are seen, how far people scroll, which buttons and films are used, how long a visit lasts. It uses a random identifier that lives only in your browser tab for the duration of the visit, and it does not store your IP address, your name or your email. It respects the Global Privacy Control signal if your browser sends it.
- If you accept cookies in the banner, Meta's pixel measures our advertising (see the Cookie Policy).
We do not ask for, and you should not send us, data about health, beliefs, politics or other special categories. If a message contains such information, we delete it from our notes.
3. Why we use it, and the legal basis
| Purpose | Data | Legal basis (GDPR art. 6) |
|---|---|---|
| Opening the private dossier for you and sending your access link | Name, email, registration source | Steps at your request before a possible contract (art. 6.1.b) and your consent to receive the link by email (6.1.a) |
| Answering questions, sending the Investor Pack or the villa 1 and 2 material, handling reservation requests, preparing a reservation and the private purchase contract | Contact details, villa, message, answers, notes | Steps at your request before a contract, and performance of the contract once signed (6.1.b) |
| Amaris updates by email: construction progress, availability, prices, the sales team's letters | Name, email, the villa you looked at | Your consent, given with the registration box (6.1.a). Withdraw it at any time with the link in every email |
| News about future Siesta Homes projects | Name, email | Your consent, given with the second, optional box (6.1.a) |
| Following up with people who have shown interest, and recording what was said so we do not repeat ourselves | Notes, stage of the conversation, who on our team looks after you | Our legitimate interest in selling the development to the people who asked about it (6.1.f), balanced by the fact that you asked and can tell us to stop at any time |
| Understanding how the pages work and which advertising brings serious buyers | Anonymous usage events; with your consent, Meta's measurement including which advertisement led to a qualified enquiry | Legitimate interest for the anonymous measurement (6.1.f); your consent for anything involving Meta (6.1.a) |
| Checks we are obliged to make when you reserve: identity, source of funds (Spanish anti-money-laundering law 10/2010), tax and consumer rules | Identity documents and financial information requested at that stage | Legal obligation (6.1.c) |
| Keeping the pages and our systems secure, and keeping evidence of consent | Server logs with masked email, timestamps, consent records | Legitimate interest (6.1.f) and legal obligation to demonstrate consent (6.1.c) |
We do not make decisions about you by automated means that have legal or similar effects. Our sales system does mark contacts by what they have done (for example "requested the Investor Pack") so that the team prioritises its follow-up; a person makes every decision.
4. Who receives your data
Your data is not sold and is not given to other developers or agencies. The following companies process it on our behalf, under contracts that bind them to our instructions:
| Provider | What they do for us | Where |
|---|---|---|
| Vercel Inc. | Hosts the pages, the forms and our database functions; keeps short technical logs | USA, EU-US Data Privacy Framework or standard contractual clauses |
| Neon, Inc. | The database behind our registration list, sales records and usage measurement | USA / EU regions, standard contractual clauses |
| MailerLite (UAB "MailerLite") | Sends the access link and the Amaris email series; stores your subscription and the villa you looked at | Lithuania (EU) |
| Resend, Inc. | Delivers our internal notification emails to the sales team when you ask a question or request a reservation | USA, standard contractual clauses |
| Meta Platforms Ireland Ltd. | Advertising measurement, only if you accepted cookies: the pixel on the page, and a server-side confirmation of qualified enquiries that carries your email, name and telephone in hashed (irreversible) form so that Meta can match it to its own records | Ireland (EU), with onward transfers to the USA under Meta's own safeguards |
| Google LLC (Google Fonts, YouTube) | Serves the typefaces on these pages and the embedded Siesta Homes film when you choose to play it. Google receives your IP address for that purpose | USA, EU-US Data Privacy Framework |
| Our sales team and collaborating agents | Sarah Shrewsbury and the Siesta Homes sales team see and record the conversation with you. If you came to us through an estate agent, that agent is told you have enquired, nothing more | Spain |
Lawyers, notaries, banks and the authorities receive data at the reservation and contract stage, in their own right and as the law requires. We will tell you at that point.
5. Transfers outside the European Economic Area
Some providers above are in the United States. Where a provider is certified under the EU-US Data Privacy Framework we rely on the European Commission's adequacy decision; otherwise we rely on the Commission's standard contractual clauses with the provider, with additional measures where needed. You can ask us for a copy of the safeguards in place.
6. How long we keep it
| Data | Kept for |
|---|---|
| Registration and email subscription | Until you unsubscribe or ask us to delete it, and in any case no longer than the marketing of the development plus 12 months. Unsubscribed addresses are kept on a suppression list so we do not write to you again |
| Questions, enquiries, reservation requests and sales notes | While the development is being sold and handed over, then for the limitation period of possible claims under Spanish law (generally 5 years, 15 years for contractual claims arising before 7 October 2015) |
| Reservation and contract documents, anti-money-laundering records | 10 years from the end of the business relationship, as the law requires |
| Consent records (what you ticked, when) | As long as the consent is relied on, plus the limitation period |
| Anonymous usage measurement | 24 months, then deleted |
| Technical server logs | Up to 30 days |
7. Your rights
You can ask us at any time to:
- Access the data we hold about you, and receive a copy.
- Correct anything inaccurate or incomplete.
- Delete your data, where we have no legal reason to keep it.
- Restrict how we use it while a question about it is settled.
- Receive the data you gave us in a common electronic format, or have it sent to another provider.
- Object to processing based on our legitimate interest, including follow-up by our sales team, and to any direct marketing. We will stop.
- Withdraw consent for emails (the link in every email, or a message to us) and for cookies (the "Cookie settings" link at the bottom of every page). Withdrawing does not affect what was done before.
Write to info@siestahomes.com or to the postal address above. We may ask you to confirm your identity. We answer within one month, extendable by two months for complex requests, and we will tell you if so. If you are not satisfied, you can complain to the Spanish data protection authority, Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or to the authority of the EU country where you live.
8. Children
These pages are for adults considering the purchase of a home. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, tell us and we will delete the record.
9. Security
Data travels encrypted (HTTPS). Access to our sales system is limited to named members of the team with individual credentials, and each of them sees only the contacts they are responsible for unless they manage the team. Email addresses in technical logs are masked. We keep a backup copy of registrations in our own database so that a problem at an email provider does not lose your request.
10. Changes to this policy
When we change how we use data we change this page and the date at the top, and where the change matters to you we tell you by email. Earlier versions are available on request.