Privacy Policy
1. Data controller
EL FORTIN CONSTRUCCIONES Y PATRIMONIO S.L. (“El Fortín”) is the controller of personal data processed through this website.
- CIF: B22792923
- Registered office: Camino Valencia nº 31, 46190 Riba-roja de Túria, Valencia, Spain
- Email: info@elfortincapital.com
Processing follows Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD), and Law 34/2002 (LSSI-CE).
2. Data we process
Contact and booking data: when you submit the enquiry form, or choose email, WhatsApp, or Google Calendar, we may receive the name, contact details, question, unit interest, and meeting information you provide. Enquiries sent through the form are stored in our own database and a copy is forwarded to us by email so we can reply.
Abuse prevention: when you submit the form we store a salted, irreversible hash of your IP address, never the address itself, solely to limit automated submissions.
First-party website usage data:
- Pseudonymous visit and page-version identifiers
- Sections viewed, how far down the page you read, and approximate active time
- Campaign parameters from the URL, including
utm_*and Google click identifiers - Broad device and referrer categories
- CTA, question-selection, and contact-channel events
- Whether an enquiry form was started, sent successfully, or failed to send
We do not use fingerprinting, keystroke capture, or heatmap recordings.
Google Ads conversion measurement: on our advertising landing pages we load the Google Ads tag so that a completed enquiry can be counted against the advertisement that brought you. The tag runs under Google Consent Mode: advertising and analytics storage stay denied until you accept analytics, and the conversion is reported only after your enquiry has actually been stored. We do not use Google Analytics, and we do not tag your clicks on the WhatsApp, email, calendar, or deal-sheet links.
3. Purposes
- Respond to enquiries and arrange meetings
- Take pre-contractual steps requested by a prospective buyer
- Measure and improve the landing page and advertising campaigns
- Attribute meetings and commercial outcomes to campaigns
- Maintain records required for the commercial relationship and legal obligations
4. Legal bases
- Your consent for non-essential storage and campaign analytics
- Pre-contractual steps taken at your request when you contact us or book a meeting
- Legitimate interests in securing the service and maintaining limited business records, balanced against your rights
- Compliance with legal obligations where applicable
5. Providers and recipients
We do not sell personal data. Depending on the channel you choose, data may be processed by:
- Cloudflare, for hosting, security, database, and first-party analytics infrastructure
- Google Fonts, CARTO, and OpenStreetMap, for fonts and mapping displayed on the page
- Google Calendar and Google Meet, for appointment scheduling and meetings
- Make (Celonis), when you submit the enquiry form, to receive the note so we can reply
- WhatsApp, when you initiate a WhatsApp conversation
- Your and our email providers, when you contact us by email
- Google Ads, for campaign delivery and, where permitted, conversion measurement
Legal, notarial, tax, financial, and technical advisers may receive relevant information when required for a potential transaction.
6. Retention
- Pseudonymous website events: up to 24 months
- Contact, meeting, and commercial records: for the duration of the relationship and applicable legal retention periods, or until deletion is validly requested
- Campaign cost records: up to 36 months
- Private-tool access logs: up to 12 months
7. Your rights
You may request access, rectification, erasure, restriction, objection, or portability, and withdraw consent at any time where processing relies on consent. Contact info@elfortincapital.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
8. Cookies and similar technologies
The site uses first-party local and session storage to retain a pseudonymous visit identifier and campaign parameters. These technologies support campaign attribution and are not required for the page or contact links to function. We do not use Google Analytics.
Our advertising landing pages also load the Google Ads conversion tag under Google Consent Mode. Until you accept analytics it is not permitted to store advertising cookies or identifiers; a completed enquiry may still be reported to Google without cookies so that conversions can be estimated in aggregate.
You can accept or reject non-essential analytics through the consent controls provided on the landing page and change your choice later.
9. International transfers
Some providers may process data outside the European Economic Area. Where this occurs, we rely on an adequacy decision, Standard Contractual Clauses, or another safeguard permitted by the GDPR.
10. Security
We apply technical and organisational safeguards appropriate to the risk. Private analytics and lead-management tools are restricted to authorised operators.
11. Changes
We may update this notice. The published version and date are the ones in force.