Version v1 · effective April 2026
Personal Data Processing Policy
1. Data controller
The controller of your personal data is Nova Tenerife a.s., registered office Veverkova 2707/1, 301 00 Plzeň, Czech Republic.
Contact for personal data matters: david@novatenerife.eu
2. What data we process and why
When you submit the “Send me the guide” form we process:
- email address,
- indicative budget (optional category),
- wording and version of your consent, date and submission IP address,
- technical data (user-agent, traffic source / UTM parameters).
Purpose: (a) sending the PDF guide, (b) — if you provide the second consent — sending further investment tips, news and offers relating to property in Tenerife.
When you submit the “Contact us” form we process:
- first and last name,
- email address,
- phone number (optional),
- area of interest and the content of your message,
- wording and version of your consent, date and submission IP address,
- technical data (user-agent, traffic source / UTM parameters).
Purpose: (a) handling your enquiry and follow-up communication, (b) — if you provide the second (voluntary) consent — later contact with relevant investment offers.
3. Legal basis
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR and in accordance with Act No. 480/2004 Coll. on certain information society services (for marketing emails). Consent is voluntary and may be withdrawn at any time.
4. Retention period
We retain your data for 5 years from the last contact or until you withdraw consent (by clicking the unsubscribe link in an email or messaging our contact address). After that period the data is securely deleted.
5. Recipients
We process data internally. To run the website and send emails we use the following categories of processors: cloud storage and database providers (Supabase / Lovable Cloud), email infrastructure providers and analytics providers (Google Tag Manager). We do not share your data with third parties for their own marketing.
6. Your rights
In connection with the processing you have the right to:
- access your data and obtain a copy,
- have inaccurate data corrected,
- erasure (“right to be forgotten”) and restriction of processing,
- object to processing for direct-marketing purposes,
- data portability,
- withdraw consent at any time (without affecting the lawfulness of prior processing),
- lodge a complaint with the supervisory authority — the Czech Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
7. Security
Data is transmitted encrypted (HTTPS) and stored in a secured database with permission-controlled access. We implement appropriate technical and organisational measures.
8. Changes
This policy may be updated. The current version is always available on this page; version and date are stated at the top of the document.