Privacy
How we handle your data.
La Otra Vida is a small publication about buying property in rural Spain. We collect the minimum data needed to send you the newsletter, deliver the buyer's guide, hold a booked call, and keep the site online. Nothing is sold, rented, or shared for advertising. This page explains what we hold, why we hold it, and how to get rid of it.
1. Who we are
La Otra Vida is operated by Sep as a sole proprietor (autónomo) based in Andalucía, Spain. Under the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law on Data Protection (LOPDGDD), Sep is the Data Controller for any personal data processed through this site, the newsletter, and any booked call.
All data-protection enquiries go to a single address: hello@otravidacasa.com. Replies usually arrive within 48 hours and always within the 30-day statutory window.
2. What we collect, and why
Newsletter signup and buyer's guide
When you sign up via the form on the site, we collect your first name and email address, the timestamp of the signup, and the IP that submitted it.
- Why: to email you the 2026 Buyer's Guide PDF and the weekly Saturday letter, and to prove you opted in if asked.
- Legal basis: your explicit consent, given by submitting the form (GDPR Art. 6.1.a).
- Processor: Beehiiv hosts the mailing list and sends every email on our behalf.
- How to withdraw: click "unsubscribe" in any email, or write to us. Withdrawal stops the newsletter immediately and removes you from active sending within seven days.
Booking a call
When you book a free intro call, we collect your name, email, the time slot you picked, and anything you type into the booking notes.
- Why: to hold the call, send the confirmation and reminder, and prepare for what you want to discuss.
- Legal basis: your consent and the performance of the free pre-sales conversation you requested (GDPR Art. 6.1.a and 6.1.b).
- Processor: Cal.com runs the scheduling.
Analytics — only after you accept
We use Google Analytics 4 (measurement ID
G-EH9FHHDJMZ) to understand how the site is used in
aggregate — which pages are read, how visitors arrive, which CTAs
work. The tag is delivered through Cloudflare Zaraz and is only
loaded after you accept the "Analytics" purpose in the consent
banner.
- What it collects: pseudonymous device and usage data — pages viewed, approximate city-level location derived from IP, device type and browser, referring URL, and on-page events.
- Cookies it sets:
_gaand_ga_*in your browser, used to distinguish visitors and sessions. - Legal basis: your consent, given through the banner (GDPR Art. 6.1.a; LSSI-CE Art. 22; ePrivacy Directive).
- If you decline: the analytics tag is not loaded, no cookies are set, and your visit is not measured.
Server logs
The site is served through Cloudflare's network. Cloudflare may log your IP address, user-agent, the URL you requested, the referring page, and the timestamp as part of standard edge logging.
- Why: to keep the site available, block obvious abuse (bots, brute-force attempts, DDoS), and diagnose outages.
- Legal basis: our legitimate interest in running a secure site, balanced against the minimal nature of the data (GDPR Art. 6.1.f).
- Retention: short-term, as set out in Cloudflare's privacy policy — typically days to a few weeks.
3. Cookies and consent
On your first visit, a consent banner appears, powered by Cloudflare Zaraz. Strictly necessary functionality runs without consent. Anything else only runs if you accept the relevant purpose.
The banner presents one optional category:
- Analytics — Google Analytics 4. Off by default. If you accept, the tag loads and the cookies described above are set.
We do not use any advertising, retargeting, or social-media tracking cookies. There is no Meta Pixel, no LinkedIn Insight tag, no TikTok pixel, no Google Ads tag. We do not share data with ad networks.
You can change your mind at any time using the link in the site footer — that reopens the same Zaraz banner so you can grant or revoke individual purposes. You can also clear cookies directly in your browser; the banner will then ask again on your next visit.
4. Who else sees the data (processors and sub-processors)
We use a small set of vendors. Each one only sees what is needed for its specific job, and each is bound by a data-processing agreement (or equivalent contractual terms) as required by GDPR Art. 28.
- Beehiiv — newsletter list hosting and email delivery. Privacy policy · DPA.
- Cal.com — call scheduling. Privacy policy · DPA.
- Google LLC — Google Analytics 4 measurement. Privacy policy · Processor terms.
- Cloudflare, Inc. — hosting, CDN, and Zaraz tag manager. Privacy policy · DPA.
Beehiiv, Cal.com, Google, and Cloudflare are all headquartered outside the EU. Personal data transferred to them leaves the European Economic Area. We rely on the European Commission's Standard Contractual Clauses (Decision 2021/914), and where applicable the EU–US Data Privacy Framework, as the transfer safeguard required by GDPR Chapter V. Copies of the relevant agreements are available on request to hello@otravidacasa.com.
If we ever add a new processor that touches your personal data, we will list it here before turning it on.
5. How long we keep things
- Newsletter subscribers: retained for as long as you stay subscribed. After unsubscribe, your record is removed from active sending within seven days. A minimal suppression-list entry (email only) is kept indefinitely so we don't accidentally email you again.
- Buyer's guide signups who never confirm: deleted after 90 days of inactivity.
- Booked calls: calendar entries kept for 24 months for follow-up; notes you submitted to the booking are deleted with the entry.
- Email correspondence: kept for up to 36 months unless the conversation is plainly ongoing.
- Analytics data: Google Analytics 4 is configured with the default 14-month user and event data retention. After that window, individual-level data is automatically deleted from GA4; only aggregated reports remain.
- Server logs (Cloudflare): short-term retention controlled by Cloudflare, typically days to a few weeks.
6. Your rights under GDPR
You have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — correct anything that's wrong or incomplete.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to pause processing while a question is resolved.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest (the server-log clause above).
- Withdraw consent — at any time, with no effect on processing already done. For the newsletter, the unsubscribe link does this. For analytics, the Cookie settings link does this.
To exercise any of these rights, write to hello@otravidacasa.com. We will respond within 30 days, and usually much faster. There is no fee unless the request is repetitive or excessive.
If you are not satisfied with our response, you have the right to lodge a complaint with the Spanish supervisory authority — the Agencia Española de Protección de Datos (AEPD), www.aepd.es — or with the supervisory authority in your own EU country of residence.
7. Security
Traffic to and from the site is encrypted with TLS. Newsletter, calendar, and analytics data live with vendors that maintain industry-standard security practices (encryption at rest, access controls, breach notification). No system is perfectly secure; in the unlikely event of a personal-data breach affecting you, we will notify the AEPD within 72 hours where required by GDPR Art. 33 and notify you directly where the breach is likely to result in a high risk to your rights.
8. Children
The site is written for adults considering a property purchase. We do not knowingly collect data from anyone under 14 — the digital age of consent in Spain. If you believe a child has submitted data through the site, write to hello@otravidacasa.com and we will delete it.
9. Automated decision-making
We do not use your data to make automated decisions that produce legal or similarly significant effects on you. There is no profiling, no scoring, no AI-driven ranking of subscribers.
10. Changes to this policy
If we change this page in a substantive way — adding a new processor, changing legal bases, extending retention — we will update the "Last updated" date at the top, and, for material changes affecting current subscribers, send a short note in the next Saturday letter so you have a chance to read it. The current version is always the one published here.
11. Contact
Any question, request, complaint, or correction — hello@otravidacasa.com. Read and replied to personally.