The controller is RIVENTIS ESTATES S.L., a Spanish limited company operating the website riventisestates.com.
CompanyRIVENTIS ESTATES S.L.
NIFB93901122
Registered officePaseo de Almería, 43, 04001 Almería, Spain
RegistryRegistro Mercantil de Almería, Section 8, Sheet AL-66938, Entry 1
Websitehttps://riventisestates.com
Registry particulars verified against BORME no. 154 of 12 August 2026, reference 374359. The company began operations on 5 August 2026.
Project and contact forms
Depending on the service selected, the website may collect a name, email address, company name, project or property location, approximate area, property or premises type, project stage, operating constraints, requested service and the details typed into free-text fields.
Newsletter form
The newsletter form requests an email address. Do not enter another person's address unless authorised to do so.
Technical information
When a website is requested, standard server and security logs may contain an IP address, date and time, requested URL, browser or device information, referring page and technical error data. This information is generally created automatically by network and hosting systems.
Information not requested
Do not send identity documents, financial account data, health information or other special-category data through a website form. If a later project stage requires regulated documentation, a separate and appropriate channel will be provided.
Project enquiriesReview the brief, reply, arrange a survey and prepare requested pre-contract information.Basis: steps requested before a contract, Article 6(1)(b) GDPR; where no contract is contemplated, legitimate interests in answering business correspondence, Article 6(1)(f).
Existing projectsAdminister instructions, records, compliance documents and communications.Basis: performance of a contract and related legal obligations, Articles 6(1)(b) and 6(1)(c) GDPR.
Project updatesSend requested regulatory and project-update emails.Basis: consent, Article 6(1)(a) GDPR. Consent may be withdrawn at any time without affecting earlier lawful processing.
Security and claimsProtect the website, investigate misuse and establish or defend legal claims.Basis: legitimate interests in operating a secure service and protecting legal rights, Article 6(1)(f) GDPR.
Fields marked as required are necessary to route and answer the request. If they are not provided, the form cannot be processed meaningfully. Providing additional narrative is optional.
Data is not kept indefinitely. The applicable period depends on why it was collected:
- Unsuccessful or preliminary enquiries: for the time reasonably needed to answer and follow up the request, then restricted or deleted unless the correspondence must be retained for a potential claim.
- Contract and project records: for the life of the project and afterwards for the statutory periods applying to contractual, tax, accounting, construction, warranty and liability records.
- Newsletter details: until consent is withdrawn or the service ends, subject to a minimal suppression record where needed to respect the opt-out.
- Technical logs: for the shortest period reasonably required for security, fault diagnosis and abuse prevention, unless an incident requires longer preservation.
When a retention period ends, data is deleted or anonymised, or access is restricted where Spanish law requires preservation.
Personal data is not sold. It may be accessed only where necessary by authorised company personnel and by suppliers supporting website hosting, email, security, document management or professional services under appropriate confidentiality and data-processing duties.
Information may also be disclosed where required to public authorities, courts, professional bodies, insurers or advisers, or where necessary to establish, exercise or defend legal claims.
Where a provider processes personal data outside the European Economic Area, the transfer must rely on an adequacy decision or another safeguard recognised by Chapter V GDPR, such as approved standard contractual clauses, together with any supplementary measures required for the circumstances.
No analytics or advertising platform is currently identified in the website code. This policy must be updated before such a platform is introduced.
Subject to the conditions in the GDPR, a data subject may request:
- Access to personal data and information about its processing.
- Rectification of inaccurate or incomplete data.
- Erasure where there is no continuing lawful reason to keep the data.
- Restriction of processing in the circumstances established by law.
- Objection to processing based on legitimate interests, including objection to direct marketing at any time.
- Portability of data provided by the individual where processing is automated and based on consent or contract.
- Withdrawal of consent at any time, without affecting processing already carried out lawfully.
Identity may be verified before a request is fulfilled. This protects personal data from being disclosed or altered at the request of an unauthorised person.
Consent preference
The website uses the browser's local storage under the key riventis_cookie_consent to remember whether the cookie banner was accepted or declined. This preference is functional and does not identify a person by name.
Analytics and advertising
The current website code does not include an analytics, behavioural advertising or social-media tracking platform. If that changes, the banner and this policy must be revised before non-essential tracking is activated.
OpenStreetMap on the Contact page
The Contact page embeds a map supplied by OpenStreetMap. Loading that page may send the visitor's IP address and standard browser request information to the map provider. OpenStreetMap operates under its own privacy information. Visitors may avoid loading the embedded map by not opening the Contact page, or may use the office address without interacting with the map.
Browser controls can clear local storage and block third-party content. Blocking some technical functions may affect the persistence of the privacy choice or the display of the map.
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, accidental loss, alteration or disclosure, taking account of the nature of the information and the risks of processing. No internet transmission or storage system can be guaranteed absolutely secure.
Individuals should provide accurate, current information and notify the company when relevant details change. If information about another person is supplied, the sender must have a lawful basis to do so and provide any required notice.
The website and construction services are not directed to children. A person under 14 should not submit personal data through the forms. If data concerning a child is discovered without an appropriate lawful basis, it will be removed where legally permitted.
This policy may be updated when website functions, suppliers or legal requirements change. The effective date at the top identifies the current public version. Material changes affecting an existing processing activity will be communicated through an appropriate channel where required.
Questions about this policy or a rights request may be sent to office@riventisestates.com or by post to RIVENTIS ESTATES S.L., Paseo de Almería, 43, 04001 Almería, Spain.