Privacy Policy
The protection of your data and a transparent approach to legal regulations are important to us. On this page, you will find all information about the terms of use of this website and our privacy policy.
1. INFORMATION FOR USERS
In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we inform you that your personal data will be processed in compliance with current regulations.
Data Controller:
- Company name: Kerstin Swift-Swift Balear
- VAT/NIE Number: Y5251653-P
- Registered address: Calle D´Heredero, 14, 07014 Palma de Mallorca, España
- Phone number: +34 971 103 870
- Email for privacy matters: info@swiftbalear.com
2. PURPOSE OF DATA PROCESSING
Personal data we collect through contact forms, property inquiries, newsletter registrations, or other interactions is processed for the following purposes:
- To respond to property information requests or general inquiries.
- To send commercial communications related to real estate services (only with prior consent).
- To manage contractual or pre-contractual relationships (e.g. property reservations or sales).
- To analyze user behavior and improve the browsing experience (via cookies – see Cookie Policy below).
3. LEGAL BASIS FOR PROCESSING
We process your data based on the following lawful grounds:
- Your explicit consent (Art. 6.1.a GDPR).
- The performance of a contract or pre-contractual measures (Art. 6.1.b GDPR).
- Compliance with legal obligations (Art. 6.1.c GDPR).
4. DATA RETENTION
We will retain your data:
- For as long as the business relationship remains active.
- Until you request deletion of your data.
- For the time required to comply with tax or legal obligations.
5. DATA SHARING
Your data will not be passed on to third parties unless there is a legal obligation or it is necessary to provide services (e.g. web hosting providers, tax consultants, legal service providers, etc.).
6. USER RIGHTS
You have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Delete your data when it is no longer needed.
- Restriction of processing,
- Objection to certain processing,
- Data portability, where technically feasible.
To exercise your rights, you may contact us at: info@swiftbalear.com or in writing to: Kerstin Swift-Swift Balear Calle D´Heredero, 14, 07014 Palma de Mallorca, España with a copy of your ID or other valid identification.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD – www.aepd.es) if you believe that your rights have been violated.
7. Processing of your user data by Google
Google Tag Manager
We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. 
Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create user profiles, stores cookies, or perform independent analyses. It is used solely to manage and display the tools integrated through it. However, Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.
The use of Google Tag Manager is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on its website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be revoked at any time.
Google Analytics 4
If you have given your consent, this website uses Google Analytics 4, a web analysis service provided by Google LLC. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). 
Type and purpose of processing
Google Analytics uses cookies that enable analysis of your use of our website. The information collected through cookies about your use of this website is usually transferred to a Google server in the USA and stored there. 
In Google Analytics 4, IP address anonymization is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your website visit, your user behavior is recorded in the form of “events.” Events can include:
- Page views
- First time visiting the website
- Start of the session
- Websites visited
- Your “click path”, interaction with the website
- Scrolls (whenever a user scrolls to the end of the page (90%))
- Clicks on external links
- internal search queries
- Interaction with videos
- File downloads
- ads viewed / clicked
- Language setting
Also recorded:
- Your approximate location (region)
- Date and time of visit
- Your IP address (in abbreviated form)
- technical information about your browser and the devices you use (e.g. language settings, screen resolution)
- Your internet provider
- the referrer URL (from which website/advertising medium you came to this website)
Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website. 
Recipient
Recipients of the data are/can be
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
- Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
- Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Third country transfer
For the USA, the European Commission adopted its adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and transfer to third countries (e.g., Singapore) cannot be completely ruled out, we have also concluded the EU Standard Contractual Clauses with the provider.  
Storage period
The data we send and linked to cookies is automatically deleted after two months. The maximum lifespan of Google Analytics cookies is two years. Data that has reached its retention period is automatically deleted once a month.  
Legal basis
The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) (1) TTDSG.     
Revocation
You can revoke your consent at any time with future effect by accessing the Cookie Settings button and changing your selection there. The legality of the processing carried out on the basis of your consent until the revocation remains unaffected. 
You can also prevent cookies from being saved by selecting the appropriate settings in your browser software. However, if you configure your browser to reject all cookies, some functionality on this and other websites may be restricted. Furthermore, you can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by selecting the appropriate settings in your browser.
a. Do not consent to the setting of cookies or
b. Download and install the browser add-on to deactivate Google Analytics HERE.
Further information on Google Analytics’ terms of use and Google’s privacy policy can be found at
  https://marketingplatform.google.com/about/analytics/terms/de/
  
and at https://policies.google.com/?hl=de
.
8. Wordfence
This site uses the WordPress plugin WordFence for security purposes. The provider is Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA. This plugin protects the website from attempts by third parties to gain unauthorized access to the website and thereby obtain personal data, embed malware on the website, or engage in other illegal activities.
To use the WordFence security plugin, it is necessary to save your IP address. This information is also transmitted to a Defiant server in the USA and stored there. The provider of this site has no influence on this data transmission.
Defiant has applied for certification under the EU-US Privacy Shield (as of June 6, 2018). The Privacy Shield is an agreement between the European Union (EU) and the United States designed to ensure compliance with European data protection standards in the United States.
WordFence is used to increase the security of this website and thus also the security of website users. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
More information on how we handle user data can be found at
  https://www.wordfence.com/blog/2018/05/wordfence-is-gdpr-compliant/
  
and in Defiant’s privacy policy: https://www.wordfence.com/privacy-policy/
