Privacy notice
1. Who we are
The data controller is Baaslahendus OÜ, a company established in Tallinn, Estonia, operating the NordiHomes buyer-side property sourcing service for properties in Spain (including the Costa Blanca).
Registry code: 16525532
Registered / postal address: Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 7, 10145
You can contact us at info@nordihomes.com or via the WhatsApp number published on this website.
2. What data we collect
We only collect data that you provide to us, or that is technically generated when you use the website, as described below. We do not buy marketing lists for this service.
Property enquiry (lead form)
If you use the “Get matching property deals” form, we collect:
- your email address;
- the property interest or listing you selected (if any);
- your goal (for example renovate and resell, buy to rent, a home for yourself, or still exploring);
- your stated budget range;
- your preferred area;
- when you would like to buy;
- the fact and time of your consent to be contacted and to receive property deals by email.
Partner application form
If you apply to join our professional network, we collect the details you submit, including:
- your role (real estate agent, renovation contractor or property lawyer);
- full name, company or practice, business email, and optional phone or WhatsApp number;
- areas you cover, languages spoken, optional website or portfolio, and any additional information you provide;
- profession-specific answers, such as registration or licence details, experience, services offered, insurance, capacity, viewing or sourcing support, and commercial terms or pricing;
- the fact of your consent to be contacted about the application.
WhatsApp and email contact
If you message us on WhatsApp or email info@nordihomes.com, we receive the information you send, which typically includes your phone number or email address, your name if shown by the service, and the content of your message.
Website operation
Our website forms do not ask for payment card data. A hidden anti-spam field may be submitted by automated bots; we do not use it to collect information about genuine visitors. Our hosting provider may keep standard server logs (such as IP address, date and time, requested page and browser type) in order to operate and secure the website.
3. Purposes and legal bases
We use personal data only for the following purposes, under the legal bases in Article 6 of the GDPR:
- Responding to property enquiries and taking steps at your request before a contract — to review your criteria, contact you about matching opportunities, and provide our buyer-side sourcing service. Legal basis: steps prior to entering into a contract (Article 6(1)(b)).
- Sending marketing emails about matching property deals — only if you have ticked the consent box on the lead form. Legal basis: consent (Article 6(1)(a)). You may withdraw consent at any time, using the unsubscribe link in our emails or by contacting us. Withdrawal does not affect the lawfulness of processing before you withdrew consent.
- Reviewing partner applications and, where relevant, managing a professional relationship — to assess whether we may work with you and to contact you about the application. Legal basis: our legitimate interests in building and operating a trusted local professional network (Article 6(1)(f)). You may object to this processing as described below.
- Operating, securing and improving the website — including preventing spam and abuse. Legal basis: legitimate interests (Article 6(1)(f)).
- Legal compliance and establishing, exercising or defending legal claims, where necessary. Legal basis: legal obligation (Article 6(1)(c)) and/or legitimate interests (Article 6(1)(f)).
4. Who we share data with
We do not sell your personal data. We share it only with service providers who process it on our instructions, or where we must do so by law:
- Brevo (Sendinblue SAS), an email marketing provider established in the European Union, which stores consented lead contacts, list membership (including budget-based lists) and related attributes so we can email you property deals and manage unsubscribes;
- our website hosting provider, which stores the website and may process form submissions and server logs;
- email transmission services used to deliver enquiry and partner-application notifications to info@nordihomes.com and to send replies to you;
- WhatsApp, if you choose to contact us through that service — your message is also processed by WhatsApp under its own terms and privacy policy;
- professional advisers or public authorities if we are legally required to disclose information, or if it is necessary to establish, exercise or defend legal claims.
If we later work with a local agent, contractor or lawyer on your specific search, we will only share the details needed for that purpose, and we will be transparent with you about it.
5. How long we keep data
- Lead / enquiry contacts: we keep them for 24 months after our last contact with you, unless you unsubscribe or ask us to delete your data earlier. If you unsubscribe from marketing emails, we stop sending those emails and may keep your email address on a suppression list so that we do not message you again by mistake.
- Partner applications: we keep them for 24 months after our last contact, or for as long as needed to manage an ongoing professional relationship and for a reasonable period afterwards.
- WhatsApp and email correspondence: for as long as needed to handle your request and for up to 24 months after the last message, unless a longer period is required for a contract or legal claim.
- Server logs: only for a short, security-related period in line with our hosting provider’s standard practice.
We may keep data longer if we are required to do so by law, or if we need it to establish, exercise or defend legal claims.
6. Your rights
Subject to the conditions in the GDPR, you have the right to:
- access your personal data and obtain a copy;
- have inaccurate data rectified and incomplete data completed;
- ask us to erase your data;
- object to processing based on legitimate interests;
- restrict processing in certain cases;
- receive your data in a structured, commonly used and machine-readable format and transmit it to another controller (data portability), where the legal basis is consent or contract and the processing is carried out by automated means;
- withdraw consent at any time, where processing is based on consent;
- unsubscribe from marketing emails at any time, using the unsubscribe link in those emails or by writing to us.
To exercise these rights, email info@nordihomes.com. We may need to verify your identity before fulfilling a request.
7. How to complain
If you have a concern, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
- Website: www.aki.ee
- You may also contact the data protection authority in your country of residence in the EEA.
8. Cookies and similar technologies
After reviewing the website’s own HTML, JavaScript and PHP, we do not currently set cookies, and we do not use analytics tools, advertising pixels, or similar tracking technologies on this site. The site’s scripts do not write to document.cookie, local storage or session storage, and the form handlers do not start a PHP session.
If you follow a link to a third-party service such as WhatsApp or your email provider, that service may set its own cookies or process data under its own privacy policy. We do not control those technologies.
If we later introduce cookies that are not strictly necessary, we will update this notice and, where required, ask for your consent.
9. International transfers
We aim to process personal data in the European Union / European Economic Area. Brevo (Sendinblue SAS) is established in the EU. Our company is established in Estonia.
If a service provider nevertheless transfers data outside the EEA, we will rely on a valid transfer mechanism, such as an adequacy decision of the European Commission or standard contractual clauses, together with any supplementary measures that are required.
10. Updates to this notice
We may update this privacy notice from time to time, for example if our processing changes or the law requires it. The “Last updated” date at the top of this page will change when we do so. The current version will always be available at this page.
11. Contact
For privacy questions or requests:
- Email: info@nordihomes.com
- Controller: Baaslahendus OÜ, Tallinn, Estonia, operating NordiHomes
- Registry code: 16525532
- Address: Harju maakond, Tallinn, Kesklinna linnaosa, Tornimäe tn 7, 10145