Privacy policy

You are reading the English-language version of the privacy policy. This translation is merely an informative guide. The legally binding version that takes precedence in case of dispute is the original Spanish version of the privacy policy.

Last updated: 17 April 2026

The following text is a summary of the most important things you should know about your relationship with idealista:

Summarised version just in case you’re short on time:

I – As a User, Registered User or Individual Customer using our Website and Apps

• idealista will be responsible for processing the personal data you provide us with when you request any of our services. We will therefore process your data primarily to fulfil the contractual relationship created when you request a service from us.

• In addition, we will send you promotional communications about idealista products that are similar to those you have requested, for which we will take into account your consumption habits and preferences. We will do this because we have a legitimate interest in maintaining our relationship with you by informing you of new products that you can purchase. Nevertheless, you may unsubscribe from these communications at any time.
• If you have expressly requested a service provided by other companies or if you authorise us to do so, we will share your data with those companies so that they can provide the service to you.
• You may, at any time, access, rectify or erase your data, as well as exercise other rights (explained below).

II – As a Professional Client or representative thereof, who uses our Website and Apps or our tools for professionals

• idealista will be responsible for processing the personal data you provide us with in order to provide you with the service contracted with you or with the entity you represent.
• If you have contracted the service yourself, we will process your personal data to provide you with the service you have requested. However, if you have contracted the service on behalf of your company, we will need to process your data on the basis of our legitimate interest. We will do this because there is a legitimate interest (both your company’s and idealista’s) in managing the provision of the services.
• If you have expressly requested to contract a service offered by third party partners, your data may be shared with these companies so that they can provide the service requested by you or the company you represent.
• You may, at any time, access, rectify or erase your data, as well as exercise other rights (explained below).

It is important for you to know:

We always recommend that you read this entire Privacy Policy so that you know, in detail, what data we use for each service you request from us and how long we need to keep it.

In addition, this Privacy Policy may be modified by the unilateral decision of idealista, so we recommend that you consult it regularly.

Before clicking on the “Ok, we’re in” button, or equivalent, we will ask you to declare that you consent to the processing of your personal data by accepting this Privacy Policy.

Now, let’s get stuck in to the legal text, so you can rest assured that you know what we will (and won’t) do with your data. You can go grab a nice cup of tea, juice or coffee and put on your favourite music to make reading lighter.

Index

1. Data controller: who is in control of the processing of your data?
2. Data category: what personal data will we use?
3. Purposes of processing and legitimacy: for what purpose, and on what legal basis, may we process your data?
4. Recipients: to whom can we communicate them?
5. Data communication: where can we send your data?
6. Data retention period: how long will we process your data for?
7. Necessary and up-to-date information
8. Rights of data subjects
9. Confidentiality and security
10. Additional information on certain functionalities of the Website and Apps

1. Data controller: who is in control of the processing of your data?

idealista, S.A.U., with registered office in Madrid, Plaza de las Cortes 2, 5º (28014), and with Tax Identification Number A-82505660 (“idealista“) is the data controller for the personal data that you send through our website or our applications (“Website and Apps“). Amongst others, idealista is the company responsible for:

• idealista.com – real estate website, where you can search or advertise a property.
• idealista.com/maps – portal for market information.
• idealista.com/news – economic and sector news portal.
• idealista.com/tools – management tool for real estate professionals.
• idealista.com/data – data analysis services portal for the real estate sector.
• rentger.com– platform for rental management (you can see their Privacy Policy here).

• rentalia.com – platform for managing holiday rentals (you can consult its Privacy Policy here).

• certicalia.com – platform for requesting procedures related to the real estate sector (you can consult its Privacy Policy here).

• yaencontre.com – real estate website, where you can search for or advertise a property (you can check the Privacy Policy of this website here).

In the following clauses we provide you with information about your rights, as well as the use we will make of your personal data, when you browse our Website and Apps to search for information about published properties or to publish a property yourself (“User” or “Registered User“), whether you contract our services as a private individual (“Individual Customer“) or as a professional freelancer or representative of a company (“Professional Client “); all in accordance with the European General Data Protection Regulation (“GDPR“) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (“LOPDGDD”).

If you have any questions regarding the processing of your personal data, you can contact us at the following address privacidad@idealista.comor by calling 91 701 40 30 or by contacting our Data Protection Officer at the following address dpo@idealista.com.

Back to index ↑

2. Data category: what personal data will we use?

When you use our Website and Apps we may access to certain information and personal data of yours. We will explain throughout this text the type of personal information we will use in each case.

Category of personal data we may process:

• Identifying data: name and surname, identification document (National ID Card/passport/Foreign Resident Number (NIE)), profile picture, handwritten signature, voice (in case of phone contact and call recording and/or automatic transcription), and your user ID and password.
• Biometric data: stroke, pressure and speed of the electronic signature.
• Contact details: telephone number, contact e-mail (either tokenized or in its original format), and address for contact purposes.
• Personal characteristics: age, gender, profession, and your co-living preferences, when searching for a room (with or without online booking) or rental property.
• Economic and financial data: your card or bank account details and billing address when you purchase a paid service. You can also provide information about your income when qualifying your tenant profile.
• Interaction and browsing information: interaction, browsing on the Website and Apps, IP address, and audience data. For more information, you can also refer to section 10 of this Privacy Policy and our Cookie Policy.
• Commercial information or related to the services you contract: complete information about the properties you are going to advertise (including their physical address) and information derived from the contracted service (such as saved search filters).
• Information that particularly affects Professional Clients (legal entity): in the event that you contract any of our services as a Professional Client (legal entity), we will process the following information relating to the natural person(s) representing you: name, surname(s), National ID Card/passport/Foreign Resident Number (NIE), telephone number, contact email address and, in some cases, documents proving your representation.

Back to index ↑

3. Purposes of processing and legitimacy: for what purpose, and on what legal basis, may we process your data?

At idealista we will process your data for the following purposes:

3.A) Processing necessary for the provision of the services you request from us

There are a series of data that we request from you as “obligatory” because they are necessary to provide you with the services you request from us.

As for the list of these services we offer you, they include:

• Registration as a Registered User on the Website and Apps. You can create an account using your email address or by logging in through Google or Apple. If you choose the latter option, you will be redirected to the corresponding platform to complete authentication with your credentials. Based on that information, we will generate your account on our Website and Apps, using basic data such as your username. In certain cases, this username may be visible to other users within the Website and Apps, but no other information obtained from Google or Apple will be shared. You will always have the option to unlink your account whenever you wish from your profile settings.

Additionally, please note that your registration as a Registered User on the Website and Apps means you accept any transactional communication relating to its operation or to the operation of any other contracted service (these transactional communications will be related to the management and solution of possible technical incidents, notifications in the event of modification of the contracting conditions or for the management of any possible claim that you may need to make regarding the contracting of the services).

• Service to save and manage your searches as a User, whether you are registered or not.
• Service of publication of advertisements on the Website and Apps and, unless you indicate otherwise, on other portals owned by idealista (for example, yaencontre.com), where idealista is also responsible for the processing of your data.

If you wish to publish properties on our Website and Apps, we may request certain information in order to carry out a verification process (“Know Your Customer” or KYC) to ensure that you are a legitimate advertiser. This verification allows us to:

• • Fulfill our contractual obligations, ensuring that services are provided correctly.
  • Comply with applicable legal obligations, including those related to fraud prevention and other regulations in the digital and real estate sectors.
  • Protect our legitimate interest in ensuring the quality and proper functioning of the Website and Apps, preventing the publication of fraudulent listings or those that violate our terms of use.

This validation process may involve the request for additional documentation to verify your identity and the legitimacy of the listings published.

In addition, we will process your data to issue invoices for services rendered, if applicable.

• Online reservation service.
• Property valuation service.
• Multimedia services that help you to enhance your advertisement (pics&plan, video, virtual tour, 3D, etc.).
• Real estate export service.
• Energy efficiency certification application service, with the brand Certicalia.
• Support service to help you sell or rent your property if you are an Individual Customer.
• Advanced biometric handwritten electronic signature service, which can be used in:
  • Service for the creation and signing of the rental contract.
  • Provision of a signature service for Professional Clients, through idealista/tools, for their own customers, of documents related to the sale or rent of a property.

In both cases, we will act as data processor for the data included in the documentation to be signed. Here you can find the Data Processor Agreement that applies to the service creation and signing of the rental contract. The rights and obligations of Professional Clients deriving from the idealista/tools service are set out in the manager agreement signed when contracting idealista/tools.

• Duplicate service (DeDup), to identify duplicate advertisements from various Internet sources. In the provision of this service, links to third-party websites or web applications may be displayed. idealista has no control over and is not responsible for the content or regulatory compliance of these third-party websites or web applications; therefore, we recommend that you carefully review their privacy policies and terms of use.
• Monitoring of compliance with the terms and conditions of the website. This includes the monitoring of contact forms, chat, and other communication tools, as well as the general usage analysis of our platform. This oversight is carried out to ensure compliance with your contract with idealista and also, as we will explain later in this Privacy Policy, to detect and prevent inappropriate activities, ensure user security, and improve service quality.

Please note that, if you have requested these services from us we will use your identification data, financial data (in the case of charged services) and any information we may have about your property. We will also use your contact details to contact you by telephone, SMS or email (if you have provided any of these details), where necessary for the provision of these services.

Furthermore, within the framework of the contractual relationship, we may maintain telephone contact with you, recording calls to the extent necessary for the proper provision of the services; in other cases, recordings will be made on the legal basis indicated in point 3.B) below.

In some cases, such as the management of payments or refunds through the app, we may share information related to the services contracted with third parties such as Apple or Google (Android), to the extent necessary for proper processing.

For the contracting and provision of some services, it is necessary for idealista to share your personal data with third-party companies we collaborate with, so that they can fulfill your request; this is the case, for example, with our renovation calculator or the services offered by idealista/energy.

For these additional services, we will use your identification and contact details, as well as any information we may have about your property.

3.B) For the legitimate interest of idealista

We will now explain the different circumstances in which we may process your data on the basis of a legitimate interest:

If you are a Professional Client and you have contracted any of the services in section 3.A), on behalf of your company (legal entity)

We will process your identification and contact details in order to (i) formalise, including by means of electronic signature systems (our own or third parties’), the contractual relationship with the entity you represent; (ii) maintain communications with you that are necessary to provide the services to the entity you represent, or (iii) manage any request you make on their behalf.

In accordance with the GDPR, we have carried out what is known as a “balancing test“. This is an internal analysis to confirm that our legitimate interest does not harm the interests of data subjects in the protection of their personal data.

As a conclusion of this test, we understand that the legitimate interest of idealista prevails, due to the reciprocal interest in ensuring the correct representation and interrelation with a legal entity, in order to be able to responsibly manage the contractual relationship with it. This is done in compliance with article 19 of the LOPDGDD.

What data we process: your identification and contact details

If you are a Private or Professional Client

If you choose to become an advertiser on our Website and Apps, we may request additional information to carry out a verification process (“Know Your Customer” or KYC) in order to ensure that you are a legitimate advertiser. This processing is carried out to comply with our contractual and legal obligations, as well as to ensure the proper functioning of the Website and Apps. We have a legitimate interest in conducting this process as it is necessary to prevent fraud, ensure that advertisers are genuine, and comply with applicable regulations.

On the other hand, we will process your data to process any claims you may owe us for our services. This processing is necessary both to ensure compliance with our general terms and conditions of contract and to guarantee the solvency of the company in the face of potential debts.

Both processing activities (KYC and processing of claims) are carried out under a weighing test, from which it is understood that our interest in carrying out these activities prevails:

1. a) verify that you are a legitimate advertiser under the KYC process;
2. b) collect unpaid fees for the provision of our services;
3. c) enforce the general terms and conditions of our services; and
4. d) ensure that the company’s solvency is not jeopardised by these debts.

In this regard, we understand that we have a legitimate interest that does not affect your privacy, since this processing does not prejudice your fundamental rights and freedoms and, furthermore, we will only use the minimum data we need to verify your identity (KYC) and collect the amounts due.

What data we process: your identification, contact, financial data, as well as any other information necessary for the KYC verification process.

If you are a User (and you accept the use of analytical, preferences, automatic personalisation and advertising cookies)

idealista will be able to create profiles based on your behaviour. Specifically, in order to carry out this activity, idealista will process the data obtained from the observation of your browsing habits on the Website and Apps, as well as the monitoring and analysis of your behaviour when you browse in these environments. With this information, and that which belongs to idealista’s internal sources (i.e., which we obtain directly from you, without consulting any third party file or database; such as, for example, data that you provide when you contract any of our services), we will carry out an analysis of your interests to determine which of our products and services best fit your profile, in order to show you recommendations within the Website and Apps that match your preferences and sending you certain promotional communications. Under no circumstances will automated decisions be made on the basis of this profile that will have any legal or other significant effect on you.

This processing involves the previous acceptance of cookies in terms of consent, so idealista will process the personal data obtained from the use of analytical, preference, automatic personalisation and advertising cookies, provided that you have given your express consent to this effect through the cookie configuration panel. For more information, you can consult our Cookies Policy.

If you are a User or Registered User, we may also use your data to collaborate with third parties such as Google Ads, Meta, TikTok, and LinkedIn for audience creation and enhanced conversion tracking, provided that, beforehand, (i) you have given your consent for the use of cookies, or (ii) the data has been anonymized and shared in a “hashed” form, ensuring the privacy of your information at all times.

This processing will allow us to run advertising campaigns and offer relevant content on third-party platforms, based on your preferences and interactions on our Website and Apps. Such content may be related to idealista’s products and services that we believe are of interest to you, according to your browsing habits, with the goal of providing a more personalized and tailored advertising experience.

Additionally, to improve conversion tracking and evaluate the effectiveness of our campaigns, we may use certain interaction data from our Website and Apps, ensuring that it is encrypted and processed securely.

We have conducted a balancing test to ensure that this processing does not impact the fundamental rights of individuals. In this regard, the data is used in a limited, proportional manner, and solely for personalizing and improving the User experience. Of course, in the event that we use cookie data, we will ensure that we have the express consent of the User, in accordance with applicable legislation.

What data we process: your identification and contact details, personal characteristics, interaction and browsing information and commercial information.

If you are a User or Registered User, Individual Customer or Professional Client

We will send you promotional communications about idealista’s own products and services, which are related to those you have initially contracted, unless you exercise your right to object to this processing. You can opt out of receiving these communications at any time, for example, by clicking the unsubscribe link included in the emails.

In order to send you these communications we will take into account the information we save about you from our internal sources (due to the cookies you have authorised, your profile data created on the Website and Apps, the searches you have carried out, the properties you have marked as favourites or the contacts you have made with advertisers). This will allow us to send you communications adapted to your consumption habits and preferences; as well as to carry out quality surveys on the services you have contracted with idealista, in order to receive your assessment and improve our services.

In this case, we have also carried out a balancing test and, as a conclusion, we understand that our interest in carrying out this processing prevails to:

• be able to maintain the relationship with you by contracting new products;
• your assessment of the services provided; and
• make the appropriate improvements in relation to the suggestions you have made about the contracted services.

Therefore, we understand that we have a legitimate interest that does not affect your privacy, since only data that you yourself have provided us with, or that have been generated in the course of the contractual relationship (excluding data obtained from external sources), will be used for this processing.

What data we process: identification data, contact data, information related to the services you hire and commercial information.

For all Users

Prevention of malpractice:

Processing of your data to verify your identity, prevent abuses and frauds and maintain a secure and trusted environment for Users on the Website and Apps. This may involve the processing of your data after the cancellation of your account as a Registered User (for the period specified in Clause 6 below), as well as the review of internal messaging (chat) within the Web and Apps, as explained further below in point 10.b) of this Policy.

In the event that we detect any fraud attempt affecting your personal data, and unless there is a circumstance of public interest or other legal cause that prevents it, we will inform you of this, review the information available and, where appropriate, we may ask you for cooperation and additional information.

As in previous cases, we have also carried out a balancing test in this case to ensure that our fraud prevention interests do not prejudice the rights of our Users.

Therefore, our conclusion is that our interest prevails, as it is a necessary measure to ensure the security of our Users and to protect the integrity and functioning of the Website and Apps.

What data we process: identification data, contact data, data related to the services you have contracted.

Blurring of images in ads:

To ensure privacy and compliance with applicable regulations, we may apply blurring techniques to images included in ads that may contain sensitive information, such as vehicle license plates or people who have been accidentally captured. In general, such images are not permitted and may be removed from the Website and Apps. However, in cases where they are not removed, we may apply this anonymization technique to prevent the exposure of personal data.

What data we process: images contained in ads.

Call recording:

If you contact idealista by phone, the call may be recorded for quality assurance purposes. We will inform you at the beginning of each call about the recording.

We may record calls based on idealista’s legitimate interest to provide a quality service to all users and ensure efficient management of the contractual relationship with Professional and Private Clients, when applicable. Recordings help optimize the follow-up of contractual agreements, resolve incidents promptly, and maintain the quality of services provided. Calls may also be transcribed and processed using artificial intelligence tools for the automatic generation of notes and summaries, in order to improve service quality and operational efficiency. Under no circumstances will automated decisions be made that produce legal effects or significantly affect the data subject, as human intervention in the review of the generated information is always foreseen.

In compliance with applicable regulations, we have conducted a balancing test to ensure that this legitimate interest does not negatively affect the rights and freedoms of the individuals involved. This test has shown that the benefits derived from processing the recordings, in terms of operational efficiency and service quality, outweigh any potential impact on the fundamental rights of the individuals involved.

What data we process: identification data (voice).

Sending information to appraisal entities

In relation to the advertisements that you have published, we inform you that we will communicate the details of these advertisements, as well as the public information that we have collected from the Cadastre, related to the property, to appraisal entities, based on their legitimate interest in identifying comparable offers that adequately reflect the market situation.

What data we process: data related to the contracted service (information about the published properties).

3.C) Compliance with legal obligations

What data do we process?

Your identification, contact and financial data and information about the services you contract.

For what purpose?

To comply with the different legal obligations that may be required of us and if we are requested to do so by any Court or Tribunal, the State Security Forces or any other competent Public Authority or Administration.

3.D) By the express consent that you provide us with

If you expressly consent, we will process your data for the following purposes:

• If you are a User or Registered User, in the event that you select a property and want to be contacted by the advertiser, we will communicate your identification and contact details to the relevant Individual Customer or Professional Client. Please note that, in some cases, your email address will be sent in a tokenized form, meaning we will not share your real email but rather an encrypted version of it. This process is carried out to ensure greater security in the exchange of information, protect your personal data, and ensure that interactions between users are conducted in a controlled and secure manner.

We may also communicate to the advertiser the search filters you applied to find their property, in order to provide a more precise context and facilitate the connection. These filters may include, for example, the type of property, price range, location, and other search preferences you have set on our Website and Apps.

• In the event that you send us a request or make a complaint or query via e-mail or the contact form, we will process your contact and identification data in order to process them.
• In the case of documents that we ask you to sign using an advanced electronic signature, we will use your biometric signature, provided that you have explicitly authorised us to do so, in accordance with the provisions of art. 9.2.a) of the GDPR, as this is a special category of personal data.

• For the qualification of your tenant profile. As a user looking for a room (with or without online booking) or a rental property, we will share the tenant profile you have created (including your identifying, contact, personal, economic, and financial data) with the advertisers you specify.

• If you are a real estate professional, you will be able to participate in the webinars we organise if you authorise us to do so, using the registration form we will provide you with for this purpose.
• In the event that you are a Professional Client and are interested in collaborating in the mortgage brokerage activity carried out by Idealista, Credito Y Financiacion Sl. (“idealista/hipotecas“); or in the insurance mediation operated by Idealista World Agencia de Seguros Vinculada, S.L.U. (“idealista/insurance“), we may disclose your data to these group companies.
• If you are a Registered User, Individual Customer or Professional Client, we may contact you by telephone, SMS or email (if you have provided any of these details), to send you commercial communications that you have accepted and, in particular, to:
• Send you commercial communications related to other products offered by idealista (other than those you have contracted) or companies in its group: Aplicaciones Inmovilla, S.L.U., S.L.U., Avaibook On-line, S.L.U., idealista/seguros, BDMI or idealista/hipotecas.
• Send you special offers from companies that will help you in the process of selling/renting your properties (real estate agencies, developers, energy companies, insurance companies, consultants and valuers).
• Send you newsletters from idealista/news.
• Request your participation in surveys and market research.
• If you are a Registered User, Individual Customer or Professional Client, we may communicate your details to third party companies so that they can contact you by telephone, SMS or email (if you have provided any of these details), so that they can send you commercial communications about their products and services. In particular, we will require your consent to:
• Communicate your data to third parties in the real estate sector, energy companies, insurance companies, real estate companies, consultants, appraisers and other companies that do not belong to the idealista group so that they can send you commercial communications.
• Communicate your data to other companies in the same idealista group (mentioned above), in order to send you information related to their product and service offers, news and other commercial communications.

For the purposes set out in this section, we will use your identification and contact details, or the information specified above, to qualify your profile, where you have consented to this.

In any case, idealista will request specific consent for each of the purposes indicated above. In particular, in the case of commercial communications, if you are a Registered User or Individual Customer publishing on the website, you will provide us with this authorisation by ticking the box that appears on the registration form of your advertisement and which is displayed in the “Settings” section. If you are a Professional Client, by ticking the corresponding box when you contact us or when contracting any of our services.

In addition, we would like to inform you that idealista has collaboration agreements with certain companies that offer services that we believe may also be of interest to you, such as insurance sector products or a financial investment calculator. These third parties offer their services on our Website and Apps and provide you with forms so that you can contact them directly.

Back to index ↑

4. Target group: to whom can we communicate them?

We may disclose your data to third parties in the following cases:

(i) For section 3.A) above, if you are a Private or Professional Client:

• To the agencies you have selected to assist you in the sale and rental of your property, when you request the corresponding support service, if you are an Individual Customer.
• To collaborating companies you have selected, when you request any solar energy (or other energy solutions) or renovation services, so that they can contact you and process your request.
• If you are a Professional Client, to entities that own/manage real estate aggregators or portals, for the publication of your properties, when you request the export service to other portals.

(ii) For section 3.D) above (if you are a User, Registered User, Private or Professional Client):

• To the advertisers (Private or Professional Clients) you have contacted. For clarification purposes, we will communicate to these advertisers the contact details you have included in the corresponding form.
• To idealista/mortgages or idealista/insurance, when you are a Professional Client interested in becoming an external collaborator of one of them, and you expressly indicate it to us.
• To third parties in the real estate sector, energy companies, insurance companies, real estate companies, consultants, appraisers and other companies that do not belong to the idealista group when you have accepted this and for the purpose of sending you commercial communications.
• To other companies in the same group as idealista (mentioned above), in order to send you information on their product and services, news and other commercial communications, if you have accepted this.

(iii) For all other purposes:

Exceptionally, some of the idealista service providers referred to in the previous section may process your data in countries located outside the European Economic Area (“EEA“).

In any case, whenever we transfer personal data internationally, we will ensure that:

1. a) the transfer of data complies with applicable law; and
2. b) your data retain the same level of protection as in the EEA.

For this purpose, we will only use suppliers who: (i) are located in a country or territory that has been declared by the European Commission to have an adequate level of protection; or (ii) provide us with adequate safeguards, such as standard contractual clauses or an equivalent legal tool, which are sufficient to ensure that such third parties protect your data and provide you with rights and protections at the same level as in the EEA. This is without prejudice to the fact that we may also apply technical protections, such as encryption and pseudonymisation of your data, as appropriate.

If you are interested in learning about our providers currently operating outside the EEA, you can refer to the section on international data transfers.

Back to index ↑

5. Data communication where can we send your data?

Exceptionally, some of the idealista service providers referred to in the previous section may process your data in countries located outside the European Economic Area (“EEA“).

In any case, whenever we transfer personal data internationally, we will ensure that:

a) the transfer of data complies with applicable law; and

b) your data retain the same level of protection as in the EEA.

For this purpose, we will only use suppliers who: (i) are located in a country or territory that has been declared by the European Commission to have an adequate level of protection; or (ii) provide us with adequate safeguards, such as standard contractual clauses or an equivalent legal tool, which are sufficient to ensure that such third parties protect your data and provide you with rights and protections at the same level as in the EEA. This is without prejudice to the fact that we may also apply technical protections, such as encryption and pseudonymisation of your data, as appropriate.

If you are interested in learning about our providers currently operating outside the EEA, you can refer to the section on international data transfers.

Back to index ↑

6. Data retention period: how long will we process your data for?

Depending on each the purposes for which we process your data, the time period will be:

• During the contractual relationship. That is, for as long as you are a User, Private or Professional Client (applicable to the processing operations indicated in section 3.A), which are necessary for the provision of the services you request from us).
• Until the purpose for which your data were collected ends or you object to their processing on the grounds of legitimate interest (applicable to the processing operations indicated in section 3.B), unless there are compelling reasons justifying the processing (for example, in cases where it is necessary to prevent abuse or fraud on the Web and Apps, in which case we may retain your data for a period of up to 4 years).
• Until you revoke your consent (applicable to the processing operations indicated in section 3.D), based on the express consent provided.
• Until you request their erasure, in the legally permitted cases (applies to all the purposes described in section 3).
• For as long as you keep your account as Registered User on the Website and Apps, if you have requested the service for the creation and signing of the rental agreement. In the event that the rental contract is renewed or a new contract is formalized, the data will be retained for a period of 5 years, even if you are no longer a Registered User. If the contract is not renewed, the data will be retained for as long as you remain a Registered User and, in any case, for a minimum period of 5 years, to ensure compliance with applicable legal and contractual obligations.
• For a maximum period of one year from its registration, call recordings (referred to in section 3.B).

We inform you that your data will remain blocked at the end of the processing for which they are intended and during the legal limitation periods of obligations (maximum 6 years) defined for each purpose of processing, indicated in section 3.

If you are a Private Client who has used the property publication service, whether free or paid, and you request the deletion of your data, including your email or telephone number, we inform you that we will keep those data blocked (i.e. encrypted and associated with an internal identifier) for a maximum period of 2 years from the last of your publications, in order to prevent improper and/or fraudulent use of our free publication service. During this blocking period, we may carry out security checks to ensure the correct use and operation of our services.

Likewise, if you are a Professional Client, we inform you that we will keep your email and telephone number for a maximum period of 4 years from your last interaction with idealista, in order to prevent improper and/or fraudulent use of our services.

In both of the above cases, a balancing test has been carried out to confirm that idealista’s legitimate interest in exercising these controls does not harm the interests of the data subjects in the protection of their personal data. As a conclusion of this test, we consider that the legitimate interest of idealista prevails, as these measures are necessary to ensure the correct fulfilment of the conditions of our services, and for which the minimum essential data are used, so that no rights and freedoms of any kind are harmed.

Back to index ↑

7. Necessary and up-to-date information

There are mandatory fields in the forms without which we will not be able to provide you with our services. By clicking on the “Ok, we’re going in” button (or equivalent) incorporated in the above forms, you declare that the information and data you provide is accurate and truthful.

To ensure that the information provided is always up to date and does not contain errors, please remember to inform us, as soon as possible, of any modifications and corrections to your personal data that may occur via the following e-mail address privacidad@idealista.com. You can also update your telephone number or email address through your private area on the Website and Apps.

Back to index ↑

8. Rights of data subjects

We inform you that you may exercise the following rights:

1. Right to access your personal data to know whether they are subject to processing and the processing operations carried out with same;
2. Right of rectification of any inaccurate or incomplete personal data
3. The right to erasure of your personal data, where this is possible (without prejudice to cases where we are required by law to maintain the data blocked);
4. Right to request the limitation of processing of your personal data where the accuracy, legality or need for processing of the data is doubtful, in which case, we maintain the data blocked for defence of complaints.
5. The right to object to the processing of your personal data, when the legal basis that enables us to process it is our legitimate interest. idealista will cease processing your data unless it has compelling legitimate reasons or it is necessary for the defence against complaints.
6. The right to the portability of your data, which allows you to request the communication of your personal data to another company, in a structured, commonly used and machine-readable format, when the legal basis that enables us to process it is the existence of a contractual relationship or your consent, and provided that the processing of your data is carried out by automated means.
7. The right to revoke the consent given to idealista at any time.
8. The right not to be subject to automated individual decisions. This right allows you not to be subject to a decision based solely on the automated processing of your personal data which, as a result, has legal effects concerning you.

You may exercise your rights at any time and free of charge in the following ways:

a) From your private area on the Website and Apps. There you can unsubscribe from all previously accepted commercial communications or select and personalise the type of notifications you wish to receive from idealista.

b) In case you are unable to access the Website and Apps, you can send an email to privacidad@idealista.comindicating the right you wish to exercise and your identification details.

We also inform you that you have the right to submit a complaint to the Spanish Data Protection Agency if you consider that an infraction has been committed under data protection legislation with respect to the processing of your personal data.

Back to index ↑

9. Confidentiality and security

At idealista we take all reasonable efforts to maintain the confidentiality of personal information processed through the Website and Apps and, where appropriate, other idealista tools. We maintain strict levels of security to protect the personal data we process against accidental loss and against unauthorised access, processing or disclosure, taking into account the state of technology, the nature of the data and the risks to which it is exposed. However, we cannot be held responsible for the use you make of the data (including your username and password) that you use on idealista beyond our tools, Website and Apps.

Back to index ↑

10. Additional information on certain features of the Website and Apps

a) “Share listing” form

idealista will only process the e-mail address you include in the “Share listing” form. The processing will only consist of forwarding the selected listing and will end with it.

b) Use of contact form and internal messaging (chat) of idealista

To optimize your experience, idealista offers the message archiving service (sent or received) and internal messaging (chat) on the Web and Apps, through which Users, Registered Users, Professional and Private Clients can (i) initiate contact and continue their communications, and (ii) access and store the conversations held.

Please note that messages sent through the contact form and chat on the Website and Apps may be reviewed, in order to ensure compliance with the terms and conditions of our services and to help develop and improve them, as well as to prevent fraud or misuse or inappropriate use of our services. This review allows us, among other things, to identify any form of abuse, fraud, or violation of our usage policies, as well as detect communications that may pose a risk to the security of users or the integrity of the platform.

The legal basis for this monitoring activity is legitimate interest of of idealista, as we need to protect our services, the security of our users, and the quality of the Website and Apps. This type of intervention also helps maintain a trustworthy, secure, and transparent environment for all users and, ultimately, to improve our service offering.

This supervision will mostly be manual, without prejudice to our use of machine learning or artificial intelligence tools, which allow us to conduct more efficient analysis, proactively detect potential risks, and ensure accuracy in identifying suspicious or problematic activities. These tools complement manual analysis and help us manage a high volume of interactions, enhancing our ability to intervene and respond.

We reserve the right to block access to the messaging service if, at our discretion, we believe that communications may contain malicious content, spam, or pose a risk to Users, Private or Professional Clients. In such cases, we will inform you appropriately about the reasons for the intervention and the measures taken.

c) idealista’s chatbot

In certain sections of the Website and Apps, we may make a chatbot available to our Users in order to offer an automated assistance service (i.e., without human interaction), based on artificial intelligence. During its use, all the information that the User chooses to provide is collected with the aim of better understanding their queries and offering more accurate responses.

Users must limit themselves to providing only their own personal data. The information provided is used to create a contextual profile that allows the chatbot to deliver the service more effectively. This profile is retained for as long as necessary to fulfil the purpose for which the data was collected, in accordance with this Privacy Policy.

Conversations may be stored to improve future interactions, and their retention will likewise follow the provisions set out in this Privacy Policy.

d) Username registration and password. Two-step access with verification for added security

When you register on the Website and Apps you will register a username and password that will allow you to log in, at any time, as a “Registered User” and, therefore, manage your relationship with idealista. This password may be changed.

It is essential that you keep your password confidential at all times and do not make it available to third parties. It would be advisable not to use the same password for all your personal accounts so that, in the event that any third-party gains access to them in an unauthorised or illicit way, they cannot access the different accounts you have on different websites.

In addition, we offer you a system of two-step access with verification to reinforce security and ensure that no one can access your account without your consent. With the activation of the “two-step access”, every time we detect an access attempt from a device other than the usual one, we will send an SMS to your mobile, with a code that you will need to enter together with the password, in order to be able to enter. We do this to prevent identity theft and avoid fraud situations.

e) Information obtained from online identifiers or cookies

In the provision of our services, we will use software and/or third-party services to collect information while you browse or interact with the content of our website and Apps or of companies affiliated with, or participated in by, idealista, as well as information about the device you use.

The main purpose of collecting the information generated by cookies is to learn more about how you use and interact with the Website and Apps in order to improve your experience while using our services and to identify possible errors in the implementation of our Website and Apps. The information collected includes, among others:

• The IP address of your device.
• The screen size of the device you use.
• Device type (unique device identifier) and browser information.
• Geographical location.
• Favourite language used to display on our website.
• Pages visited.
• Date and time when the pages were visited.

Learn more about passively collected information in our Cookie Policy.

f) idealista/tools: what happens when you integrate your Google account with the idealista/tools software?

When you integrate your Google account with our idealista/tools software, we export relevant information to give you a better experience of our service.

g) idealista/tools: what data do we receive when you integrate with your Google Account?

Google user: we will receive all your data as a Google user, including, among others, your name, surname, email address and/or telephone number, as well as the communications that are encrypted in our databases.

Google Calendar: from your calendar we will export the information regarding the activities and events that are important for your business.

h) idealista/tools: who will have access to your data once you integrate with your Google account?

You, having completed the integration of your Google account, and we, idealista, as users at administrator level, as supervisors. We will only import information that is relevant for the integration with idealista/tools.

Thank you for reaching the end.

Back to index ↑