Skip to main content
EKEI

EKEI · Information

Privacy Policy

How EKEI handles personal information.

The information EKEI collects through this website, why it is used and the choices available to each individual.

01

Data controller

EKEI REAL ESTATE, S.L.U., trading as EKEI, is the controller of personal information collected through this website. Its registered office is Calle Navalperal 3, 28035 Madrid, Spain and its tax identification number is B88697206.

Privacy enquiries and requests to exercise data protection rights may be sent to comercial@ekei.com.

02

Information collected

When a user submits the contact form, EKEI collects the selected inquiry type, name, email address, optional company name and message. The form also includes an empty anti-spam field that legitimate users do not complete.

The website and its infrastructure process limited technical information required to deliver and secure the service. This may include IP address, request time, browser or device information, referring page, security events, verification tokens and server logs.

Users should only provide information that is relevant to their enquiry and that they are entitled to disclose.

03

Purposes and legal bases

Personal information is processed only for the purposes and on the legal bases described below. Consent is not used as a catch-all basis for processing an enquiry and will only be requested for an additional purpose where it is legally required.

  • Review, route and respond to an enquiry, and take steps requested before a possible contract or professional relationship. The basis is the requested pre-contractual action and EKEI's legitimate interest in managing relevant business communications.
  • Maintain proportionate records of enquiries, decisions and subsequent communications. The basis is EKEI's legitimate interest in organising its activity, maintaining continuity and establishing, exercising or defending legal claims.
  • Protect the contact channel, verify legitimate submissions and prevent fraud, spam or misuse. The basis is EKEI's legitimate interest in network and information security.
  • Comply with accounting, tax, regulatory, judicial or other legal requirements. The basis is compliance with the applicable legal obligation.

04

Required and optional information

Inquiry type, name, email address and message are required so that EKEI can understand and answer the request. Company name is optional. If required information is not provided, EKEI may be unable to review or respond to the enquiry.

05

Recipients and service providers

Information may be accessed by authorised EKEI personnel and professional advisers where necessary for the enquiry. Lexinto Group does not receive or access contact-form information. Information may also be disclosed to courts, regulators, law enforcement bodies or other public authorities when required by law.

EKEI does not sell or rent personal information. Service providers process information on EKEI's behalf only to provide the relevant technical or professional service and under the applicable contractual safeguards.

  • Vercel Inc.: website hosting, delivery and technical request processing.
  • Cloudflare, Inc. (Turnstile): browser and submission signals used to distinguish legitimate enquiries from automated abuse.
  • Plus Five Five, Inc. (Resend): delivery of contact-form messages by email.
  • Payload and the production database provider: storage and administration of contact enquiries.
  • EKEI's mailbox, IT support and professional advisers: receipt, support and review of enquiries where necessary.

06

International transfers

Some technical providers are based in or process information from the United States or other countries outside the European Economic Area. Where a transfer is not covered by an adequacy decision, EKEI will rely on an applicable safeguard, such as the European Commission's Standard Contractual Clauses, together with supplementary measures where required.

Resend's data processing terms incorporate the European Commission's Standard Contractual Clauses for relevant transfers. The safeguards applicable to each production provider must be reviewed as part of EKEI's supplier and data protection governance.

07

Retention

An enquiry is retained for as long as necessary to review and respond to it. If it leads to an active business or contractual relationship, relevant information may be retained for the duration of that relationship and afterwards for the periods needed to meet legal, accounting and tax obligations or to establish, exercise or defend legal claims.

Enquiries that do not progress are periodically reviewed and deleted or anonymised when they are no longer reasonably required. Technical and security logs are retained according to the production provider's configured retention period and only for as long as needed for operation, security and incident investigation.

When information is subject to a legal retention duty or a potential claim, it may be restricted and kept only for the applicable limitation period before secure deletion or anonymisation.

08

Data protection rights

Individuals may request access to their personal information, rectification of inaccurate data, erasure, restriction of processing, data portability where applicable, or object to processing based on legitimate interests. Where processing relies on consent, consent may be withdrawn at any time without affecting earlier lawful processing. Requests should be sent to comercial@ekei.com.

EKEI may request information reasonably necessary to verify the identity of the person making a request. Individuals also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

09

Security and confidentiality

EKEI applies proportionate technical and organisational measures intended to protect personal information against unauthorised access, loss, alteration or disclosure. Access is limited according to role and need.

No internet transmission or storage system can be guaranteed to be completely secure. Users should not include identity documents, bank details, special-category data or other unnecessary confidential information in the contact form.

10

Minors

The website and contact form are intended for professional and adult audiences and are not directed at children. EKEI does not knowingly request personal information from minors through this channel.

11

Automated decisions

EKEI does not use contact-form information to make decisions based solely on automated processing that produce legal or similarly significant effects. Cloudflare Turnstile performs an automated security assessment to help identify abusive submissions, but it does not make a legal or similarly significant decision about the individual.

12

Cookies and browser storage

The current website does not use advertising or analytics cookies. It uses a session-storage key to remember, during the current browser session, whether the introductory animation has already been shown. This information is not used to identify a user, build a profile or track activity across websites.

Cloudflare Turnstile processes browser and device signals for security verification. The current integration does not enable Turnstile pre-clearance. If analytics, advertising or other non-essential storage technologies are introduced, this policy and the website's consent controls will be updated before those technologies are activated where consent is required.

13

Changes to this policy

EKEI may update this Privacy Policy to reflect changes in law, technology, providers or processing activities. Material changes will be presented through an appropriate notice when required. The version published on this page applies from the last-updated date shown above.