Privacy Policy
Last updated: 5 October 2026
This policy explains how we process your personal data under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018.
1. Data controller
- Controller: Sabox Real Estate
- Tax ID: B93153757
- Address: C.N. Puerta de Banús, Marbella (Málaga), España
- Contact: web25@sabox.es · +34 951 08 21 30
2. Data collected, purpose and legal basis
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form and property enquiry | Name, email, phone (optional), message and, where applicable, the property enquired about | Handle and answer your enquiry | Consent (Art. 6.1.a GDPR) |
| Valuation / sell form | Details you provide about yourself and your property | Manage your valuation request and contact you | Consent and pre-contractual measures at your request (Art. 6.1.a and 6.1.b GDPR) |
| Contact via WhatsApp, phone or email | Data you send through those channels | Handle your enquiry | Consent (Art. 6.1.a GDPR) |
| Web analytics (Google Analytics) | Cookie identifiers and anonymised browsing data | Measure which pages are visited | Consent (Art. 6.1.a GDPR) via the cookie banner |
We do not profile users or make automated decisions. Fields marked as mandatory are necessary to handle your request.
3. Recipients
- Resend, Inc. (sending emails generated by the forms), with possible transfers to the US covered by the EU-US Data Privacy Framework or standard contractual clauses.
- Google Ireland Ltd. / Google LLC (Google Analytics), only if you accept analytics cookies.
- Hosting and maintenance providers acting as data processors.
- We do not share your data with third parties unless legally required.
Some pages load maps and images from external services (e.g. OpenStreetMap map tiles), so your IP address may be visible to those providers when you view them.
4. Retention
We keep your data while handling your request and afterwards for the limitation periods of potential legal liabilities. Analytics data is kept for a maximum of 14 months.
5. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time, by writing to web25@sabox.es stating the right you wish to exercise. If you believe your data has been mishandled, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Security and minors
We apply appropriate technical and organisational measures to protect your data. This website is not aimed at children under 14.
7. Cookies
See the Cookie Policy.