Privacy policy

1. Who the controller is

Controller

Andreu Cortada Sindreu · Architect and project manager

Tax ID

38859307W

Address

Carrer Mendel, 4, baixos · 08034 Barcelona

Contact email

info@elrecer-albons.com

Project

El Recer · Carrer de la Creu, 2, Albons (17136)

If you have any question about what we do with your data, write to info@elrecer-albons.com and we will explain it.

2. What data we collect and what for

What you give us in the form: name, email address and, if you wish, phone and any message you write.

And three more things that are stored automatically, so that we can prove you gave us permission to write to you: the date and time of your sign-up, the language you were browsing in and a cryptographic digest of your IP address —an irreversible code, never the IP in the clear— plus the exact text of the box you ticked. Nothing else: we do not attach which browser you use or where you had been before.

Separately, the site counts visits anonymously and in aggregate. It runs on a separate path and is never combined with what you give us in the form: we explain it in section 8.

We use it to:

• Send you updates on the state of the project when there are any.
• Answer your questions about the homes.

We do not profile you, we make no automated decisions about you and we send you no third-party advertising.

Giving us your data is voluntary: you are not obliged to and nothing happens if you do not. That said, without a name and an email we cannot write to you —those are the two essential fields—; phone and message only help us answer you better.

3. On what legal basis

To write to you, your consent (art. 6.1.a GDPR), which you give by ticking the box on the form. It is voluntary and you may withdraw it whenever you like, without affecting the validity of processing carried out beforehand.

The text you accepted (version 2026-08-11.1):
I agree to be contacted with news about the project and answers to my questions, in accordance with the privacy policy. I can unsubscribe at any time.

There is one exception we should explain: the cryptographic digest of the IP and the submission limit that stops bots flooding the form are not based on your consent, but on our legitimate interest in keeping the service standing and being able to evidence consent (art. 6.1.f). They apply to everyone who presses «send», before and regardless of the box. You may object by writing to us, although we could then not process the submission.

4. How long we keep it

We keep your data while the project is being marketed and you want to receive updates. When the development closes —or earlier, if you unsubscribe— we delete your contact details.

The exception is the evidence of consent —the text you accepted, the version and the date—, which we keep blocked for 3 years so that we can evidence that you gave it. We do not use it for anything else or to contact you again.

5. Who else has access

We do not sell or transfer your data. Only the providers we need for this to work have access, each under a data processing agreement (art. 28 GDPR) and unable to use it for their own purposes:

• Vercel — Website hosting, running the form and counting visits (Web Analytics). Location: US company (Vercel Inc.); the site and the form run in Frankfurt (Germany). Processing agreement in force, with the standard contractual clauses included. It also covers visit counting, not just hosting.
• Neon (Databricks) — Database where sign-ups and evidence of consent are stored. Location: Data is stored in Germany (Frankfurt); US company (Databricks, Inc.), with an infrastructure sub-processor in the US. Processing agreement in force, within the terms of service. The data is stored in Germany, but the company is American and so is part of its infrastructure, which keeps an international transfer in play.
• Resend — Sending the notice to the developer and the confirmation email to whoever signs up. Location: Ireland (infrastructure); US company. Processing agreement in force, with the standard contractual clauses included. The infrastructure that moves the email is already European. To send you the confirmation, your name and address pass through it; the notice the developer receives carries no data of yours.

When someone signs up, the mailbox of whoever runs the development receives a notice that does not contain your data: it only says there is a new sign-up. Your data stays in the database, and whoever needs to consult it goes in with a key. That is why the provider of that mailbox does not appear on this list: it never touches anything of yours.

Your data is stored in Germany, in Frankfurt, and the form runs there too. Notification emails go out from Ireland. Where your data rests, then, is inside the European Union.

The honest caveat: all three companies are American, even though the servers where everything is stored and runs are European. On top of that, the company that provides our database relies on an infrastructure provider in the United States. That keeps an international transfer in play in legal terms, covered by the standard contractual clauses built into the processing agreements. We tell you so you know, not because anything is hidden: none of these companies does anything with your data on its own account.

6. Your rights

You may exercise at any time the rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent. Write to info@elrecer-albons.com saying what you want. We will reply within one month at most.

If you think we have not done it well, you may complain to the Spanish Data Protection Agency (aepd.es) or the Catalan Data Protection Authority (apdcat.gencat.cat).

7. What we store on your device

Two things, both ours and neither for advertising. The law (art. 22.2 LSSI) speaks not only of cookies but of any storage on your device, so here is the full list:

Neither of them tracks you or requires your consent: one delivers what you asked for —the site in your language— and the other merely avoids repeating a notice you have already read. You can delete them whenever you like from your browser, without being locked out of anything.

No advertising pixel, no social media button, no third-party cookie. Even the fonts are served from our own domain. The only thing we measure is the visit count we explain next, and that stores nothing on your device.

8. How we count visits

We use Vercel Web Analytics to know how many people come to the site and which pages they look at. It is cookieless analytics: it neither stores nor reads anything on your device, which is why it does not appear in the table above.

For each visit we record the page, the country, the operating system, the browser, the device type and, if you arrived by clicking a link, where you came from. So as not to count you twice on the same day, Vercel generates a code from the incoming request at the server; that code expires daily and cannot recognise you the next day or on any other site.

We see all of it aggregated: figures and lists, never people. We cannot tell that a particular visit is you, nor tie it to any data you have given us in the form. It is processed by Vercel, already listed in section 5.

The legal basis is our legitimate interest (art. 6.1.f GDPR) in knowing whether the site works and whether it is worth keeping. Since it stores nothing on your device, art. 22.2 LSSI does not require us to ask your permission —which is why you will find no cookie banner. Even so, you may object by writing to info@elrecer-albons.com, and any tracker blocker stops the collection on its own.

9. Security

We always serve the site encrypted and apply security headers. We never store your IP address in the clear: we keep only a salted cryptographic digest, so that we can evidence when you gave consent without needing to identify you by your connection.

10. Minimum age

The form is addressed to those over 14 years old, the age from which one can consent to the processing of one’s own data (art. 7 LOPDGDD). We ask for no proof of age: it would be disproportionate for requesting information about a house. If we realise we have collected data from someone younger, we delete it.

11. Changes to this policy

You are reading version 2026-08-11.1, updated on August 11, 2026. If we change anything that affects you —who the controller is, what we use the data for, or who has access— updating this page will not be enough: we will tell you before the change takes effect, and if necessary we will ask your permission again.