Legal
Privacy Policy
Last updated:
Karen Yelin is committed to protecting your personal data. This Privacy Policy explains what personal information I collect, how I use it, and what rights you have in relation to it — in full compliance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law (Ley Orgánica 3/2018, LOPDGDD).
Data Controller
The data controller responsible for your personal information is:
Company: Karen Yelin
Address: La Zagaleta, Benahavís, 29679 Málaga, España
Email: karen@karenyelin.com
Phone: +34 629 58 10 54
Website: www.karenyelin.com
Data I Collect
When you complete the contact form on my website, I collect the following categories of personal data:
- ✦Identity data: Your full name.
- ✦Contact data: Email address and telephone / WhatsApp number.
- ✦Preference data: Preferred contact language and approximate property budget range.
- ✦Communication data: Any message or inquiry you voluntarily include.
- ✦Technical data: IP address, browser type, device type, operating system, referring URL, and pages visited — collected automatically via cookies and analytics tools.
- ✦Usage data: Information about how you interact with my landing page (scroll depth, time on page, clicks).
I do not knowingly collect data from children under the age of 16. My services are directed exclusively at adults with the legal capacity to enter into property transactions.
How I Collect Your Data
I collect personal data through the following means:
Direct submission
When you complete and submit the consultation request form on this landing page, you directly provide me with your name, email, phone number, language preference, budget range, and any message you choose to include.
Automated collection
When you visit my website, certain technical and usage data is collected automatically through cookies, Google Analytics, and Google Ads conversion tracking technologies embedded in my pages.
Third-party advertising platforms
If you arrive at my page via a Google Ads campaign, Google may share aggregated or anonymised signals (such as ad interaction events) with me through my Google Tag Manager dataLayer, to help me measure the effectiveness of my advertising.
Why I Use Your Data
I process your personal data for the following specific purposes, each with a defined legal basis under GDPR:
| Purpose | Legal Basis |
|---|---|
| To respond to your consultation request and contact you about available properties in La Zagaleta and the Marbella area | Contractual necessity / Legitimate interest |
| To match your stated budget and preferences to off-market or listed properties | Legitimate interest |
| To follow up on your inquiry via email, phone, or WhatsApp in your preferred language | Consent / Legitimate interest |
| To measure the performance of my Google Ads campaigns and improve ad targeting | Consent (cookie) |
| To analyse visitor behaviour on my website and improve user experience | Consent (cookie) |
| To comply with applicable legal and regulatory obligations | Legal obligation |
I will never use your data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your consent.
How Long I Retain Your Data
- ✦Contact form data (name, email, phone, message) is retained for 24 months from the date of submission, or until you request deletion, whichever comes first.
- ✦Active client data is retained for the duration of my business relationship and for up to 5 years afterwards to comply with Spanish tax and commercial law obligations.
- ✦Analytics and cookie data is retained in accordance with Google Analytics retention settings (default: 26 months).
Once the applicable retention period expires, I will securely delete or anonymise your personal data so that it can no longer be associated with you.
Sharing Your Data with Third Parties
I do not sell, rent, or trade your personal data. I may share data with the following trusted third-party processors strictly to operate my services:
Google LLC (Google Ads & Analytics)
I use Google Ads conversion tracking and Google Analytics 4 to measure advertising performance. Google may process your IP address and behavioural data on servers in the United States under Google's standard contractual clauses. You can opt out at myaccount.google.com or via Google's opt-out tool.
WhatsApp / Meta Platforms
If you choose to contact me via WhatsApp using the button on my site, your message will be processed by Meta Platforms, Inc. under their own privacy policy. I do not share your form data with WhatsApp automatically.
Email / CRM providers
I may use email service providers to manage and respond to your inquiries. These providers act as data processors and are contractually bound to process your data only on my instructions.
I may also disclose your data to competent authorities or courts if required to do so by law.
Your GDPR Data Rights
Under GDPR and Spanish data protection law, you have the following rights regarding your personal data. You may exercise any of them free of charge by contacting me at karen@karenyelin.com. I will respond within one month.
Request a copy of the personal data I hold about you.
Request correction of any inaccurate or incomplete data I hold.
Request deletion of your personal data (the "right to be forgotten"), subject to legal obligations.
Request that I limit how I use your data in certain circumstances.
Request your data in a structured, machine-readable format to transfer to another controller.
Object to processing based on legitimate interests or for direct marketing purposes at any time.
Where processing is based on consent, withdraw it at any time without affecting prior lawfulness.
Object to automated decision-making or profiling that has significant effects on you.
International Data Transfers
Karen Yelin stores and processes your data primarily within the European Economic Area (EEA). However, some of my third-party service providers (including Google LLC) are based in the United States.
Where personal data is transferred outside the EEA, I ensure adequate safeguards are in place, including:
- ✦Use of Standard Contractual Clauses (SCCs) approved by the European Commission.
- ✦Transfer to countries recognised as providing an adequate level of protection under EU adequacy decisions.
Changes to This Policy
I review this Privacy Policy regularly and will post any updates on this page. When I make material changes, I will update the "Last updated" date at the top of this document.
I encourage you to review this policy periodically. Continued use of my website after changes have been posted constitutes your acknowledgement of the updated policy.
How to Contact Me
If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how I handle your personal data, please contact me:
Have questions about a property instead?
