Privacy policy
Last updated: 19 May 2026
Aira Real Estate, S.L. processes personal data of investors, contacts and website users in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Data controller
- Controller:
- Aira Real Estate, S.L.
- Address:
- Calle de Piamonte 23, 28004 Madrid
- Privacy contact:
- info@airarealestate.com
2. What data we process and why
| Category / purpose | Legal basis |
|---|---|
| Contact data submitted by email, to handle enquiries. | Consent and legitimate interest (Art. 6.1.a and 6.1.f GDPR). |
| Data of investors and their representatives, to manage the relationship, investor communications and reporting. | Performance of a contract and pre-contractual steps (Art. 6.1.b GDPR). |
| Identity and financial data for identity verification and anti-money-laundering (KYC/AML). | Legal obligation (Art. 6.1.c GDPR; Law 10/2010). |
| Browsing data and cookies. | Consent (see Cookie policy). |
3. Retention
We retain data for the duration of the relationship and thereafter for the legally required periods, including those under tax, commercial and anti-money-laundering rules. Once those periods elapse, data is deleted or anonymised.
4. Recipients and processors
We do not share data with third parties except where legally required. To provide the service we rely on providers acting as processors, bound by the obligations of Article 28 GDPR:
- Airtable (Formagrid, Inc.) — CRM and investor relationship management.
- Google (Google Workspace) — email and office tools.
International transfers
Airtable and Google are located in the United States. International data transfers are covered by the EU-US Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission.
5. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@airarealestate.com, proving your identity. If you believe the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
6. Security and source of data
We apply appropriate technical and organisational measures to protect the data. Data is obtained from the data subject or, where applicable, from the investing entity they represent.