Privacy Policy
Last updated: May 2026
1. Who We Are
Casa on the Costa is a lifestyle and interiors website documenting a slow renovation in southern Spain. For the purposes of EU data protection law — including the General Data Protection Regulation (GDPR) and Spain's Ley Orgánica 3/2018 de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD) — the data controller is: Casa on the Costa www.casaonthecosta.com Spain For any privacy-related questions, please get in touch via the contact form on the website.
2. What Data We Collect and Why
2.1 When you use Carmen, our AI agent
Our website includes an AI-powered conversational agent named Carmen. When you interact with Carmen: The content of your conversation is processed in order to generate responses. Conversation content may be temporarily stored to maintain context within a single session. If you submit a brand or partnership enquiry through Carmen, the information you share — including your name, brand name, and the nature of your enquiry — is collected and stored so that we can follow up with you. Legal basis: Legitimate interest (general conversations); contract performance and consent (partnership enquiries).
2.2 When you contact us
If you use a contact form, send an email, or submit an enquiry through the website, we collect the information you provide — typically your name, email address, and message content. Legal basis: Legitimate interest in responding to communications.
2.3 Website analytics
We may use anonymised or privacy-respecting analytics tools to understand how visitors use the website. Where analytics tools are used, we will ensure they comply with GDPR and, where required, obtain your consent via a cookie banner. Legal basis: Consent (where required); legitimate interest (for aggregated, non-identifiable data).
2.4 Cookies
Our website may use cookies for essential functionality and, with your consent, for analytics. You will be informed of any non-essential cookies via a consent mechanism when you first visit the site. You can withdraw consent at any time by adjusting your browser settings.
3. AI Agent Disclosure
Carmen is an artificial intelligence assistant, not a human. Under the EU AI Act and applicable transparency requirements, we are required to inform you of this clearly. Carmen is designed to assist visitors with interior design ideas and to gather initial information from brands interested in partnership. Any information shared with Carmen that relates to a partnership enquiry will be reviewed by a real person before any response or commitment is made. Carmen does not make automated decisions that produce legal or similarly significant effects.
4. How We Use Your Data
We use the personal data we collect only for the purposes for which it was collected: — To respond to enquiries and messages — To follow up on brand or partnership enquiries submitted through Carmen — To improve the website and understand how it is used — To comply with legal obligations We do not sell your personal data. We do not use your data for automated profiling or targeted advertising.
5. Third-Party Services
We use a small number of trusted third-party services to operate this website. Where these services process personal data on our behalf, they do so under data processing agreements and are required to handle data in accordance with GDPR. Current third-party processors may include: — Base44 (website and agent hosting) — Analytics provider (where applicable) — Email service provider (for contact and enquiry management) Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.
6. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purpose for which it was collected: — General website enquiries and messages: up to 2 years — Brand and partnership enquiry data: up to 3 years, or until the enquiry is resolved — Analytics data: as per the analytics provider's retention policy (typically 12–26 months) — Cookie consent records: up to 1 year
7. Your Rights Under GDPR
As a data subject under EU and Spanish law, you have the following rights: — Right of access — you can request a copy of the personal data we hold about you — Right to rectification — you can ask us to correct inaccurate data — Right to erasure — you can request that we delete your personal data, subject to legal obligations — Right to restriction of processing — you can ask us to limit how we use your data — Right to data portability — you can request your data in a structured, machine-readable format — Right to object — you can object to processing based on legitimate interest — Right to withdraw consent — where processing is based on consent, you can withdraw it at any time To exercise any of these rights, please contact us through the website. We will respond within one month in accordance with Article 12 GDPR. You also have the right to lodge a complaint with the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.
8. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.
9. Children's Privacy
This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this policy periodically. Continued use of the website after any changes constitutes acceptance of the updated policy.
11. Contact
For any questions, concerns, or requests relating to this Privacy Policy or the way we handle your data, please get in touch via the contact page at www.casaonthecosta.com. We aim to respond to all privacy-related requests within 30 days.
Casa on the Costa · www.casaonthecosta.com · Spain