At Carna Real Estate & Consulting, we take your privacy and data security seriously. This privacy statement outlines how we collect, use, and protect your personal information in accordance with the General Data Protection Regulation (GDPR).

1. Data Controller

Carna Real Estate & Consulting acts as the data controller for the personal data collected through our website and services. You can contact us for any GDPR-related queries or concerns.

2. Data Collection

We collect and process personal data for legitimate business purposes, such as providing real estate and consulting services, responding to inquiries, and improving our services. The types of personal data we may collect include:

• Name, contact information, and job title.
• Property preferences and requirements.
• Financial information for transactions.
• Communication history with us.
• Cookies and website usage data.

3. Lawful Basis

We process personal data based on the following lawful bases:

• Contractual necessity: To fulfill our obligations when providing services.
• Consent: When required, we obtain explicit consent before processing personal data.
• Legitimate interests: To improve our services and communicate with you.
• Legal obligations: To comply with legal requirements.

4. Data Security

We have implemented robust security measures to safeguard your personal data against unauthorized access, disclosure, or alteration. These measures include encryption, access controls, and regular security assessments.

5. Data Sharing

We may share your personal data with trusted third parties, such as real estate partners, legal advisors, and financial institutions, only when necessary to ful fill the purposes for which it was collected. We ensure that these third parties also adhere to GDPR regulations.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by applicable laws. We have defined data retention policies in place to ensure compliance.

7. Your Rights

As a data subject, you have the following rights:

• The right to access your personal data.
• The right to rectify inaccuracies in your personal data.
• The right to erase your personal data (in certain circumstances).
• The right to restrict processing (in certain circumstances).
• The right to data portability.
• The right to object to processing.
• The right to withdraw consent (if processing is based on consent).

To exercise your rights or request more information about your data, please contact us.

8. Cookies

We use cookies and similar technologies on our website. For more details about how we use cookies and how you can manage your preferences, please refer to our Cookie Policy.

9. Changes to this Policy

We may update this GDPR description from time to time to reflect changes in our practices or legal requirements. The most recent version will always be available on our website.

By using our website and services, you consent to the practices described in this GDPR description. If you do not agree with the terms outlined here, please refrain from using our services and website.

We are committed to protecting your privacy and data. If you have any questions or concerns regarding GDPR compliance or your personal data, please do not hesitate to contact us. Your trust is important to us, and we will do our utmost to address your inquiries and maintain your privacy.

Last Updated: 26/12/2023