Last updated: 26 April 2026

1. Data Controller

  • Controller: AM STRATEGIC CAPITAL S.L. (trading as GC Grup)
  • Tax ID (NIF): B22991525
  • Registered address: C/ Riera Ginjolers, 133-137, Casa 6, 17480 Roses (Girona), Spain
  • Contact email: info@gc-grup.com

All enquiries relating to the processing of personal data are handled via info@gc-grup.com.

2. Personal Data We Collect

Through contact forms, user registration, WhatsApp conversations and service requests, we may collect the following personal data:

  • Full name
  • Email address
  • Phone number and, in the case of WhatsApp, the account identifier
  • Content of messages exchanged with our team
  • Property search preferences (area, budget, requirements)
  • Financial data required for mortgage management (provided voluntarily)
  • IP address, browsing data and cookies (see Cookie Policy)

3. Purposes of Processing

The personal data collected are used for the following purposes:

  • Managing enquiries submitted via forms and WhatsApp, including initial automated responses for qualification purposes.
  • Providing the requested real estate, investment and financing services.
  • Sending commercial communications related to our services (only with prior consent).
  • Managing access to the registered user panel.
  • Fulfilling applicable legal obligations.
  • Carrying out statistical analysis to improve our services and measure the effectiveness of our advertising campaigns.

4. Legal Basis for Processing

Processing is carried out on the following legal bases:

  • Consent: By submitting a form, registering as a user or initiating a WhatsApp conversation with us.
  • Performance of a contract: For the provision of the real estate, investment or financing services requested.
  • Legitimate interest: For service improvement, fraud prevention and advertising effectiveness measurement using aggregated data.
  • Legal obligation: For compliance with tax regulations, anti-money laundering requirements and other legal obligations applicable to the real estate and financial sectors.

5. Recipients and Data Processors

To deliver our services and operate this website, GC Grup uses providers acting as data processors under contract and with GDPR-compliant guarantees:

  • Heroku (Salesforce): application and database hosting (EU region).
  • Cloudinary: image and document storage and delivery.
  • Namecheap PrivateEmail: corporate email service.
  • Meta Platforms (WhatsApp Business, Facebook, Instagram): messaging channel and advertising.
  • Google (Google Analytics 4, Google Ads, Google Tag Manager): digital measurement and advertising.

Some of these providers may transfer data outside the EU/EEA, covered by the Standard Contractual Clauses approved by the European Commission or equivalent adequacy decisions.

6. Retention Periods

  • Contact enquiries and WhatsApp conversations: 12 months from the last communication.
  • Contractual data: For the duration of the contractual relationship and up to 5 years after its termination.
  • Tax data: 4 years, in accordance with Spanish tax regulations.
  • Commercial communications: Until the user withdraws consent.

6a. Data Protection Officer

In accordance with Article 37 of the GDPR, GC Grup has assessed the nature, scope, context and purposes of its processing activities and has determined that the appointment of a Data Protection Officer (DPO) is not mandatory. All data protection enquiries and rights requests are handled through info@gc-grup.com.

7. Your Rights

Under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), you have the right to:

  • Access: Request information about the personal data we process about you.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request the deletion of your personal data.
  • Objection: Object to the processing of your data for certain purposes.
  • Restriction: Request the restriction of processing in certain circumstances.
  • Portability: Receive your data in a structured, commonly used format.
  • Withdrawal of consent: At any time, without retroactive effect.

To exercise these rights, please send an email to info@gc-grup.com enclosing a copy of your identity document.

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — AEPD) at www.aepd.es.

8. Mobile application (iOS)

The GC Grup iOS application reuses the account and services of the website. In connection with the use of the app, the following additional data may be processed:

  • Push notification identifier (APNs token): generated by the device and associated with the user's account in order to send notifications related to enquiries, opportunities and operations. Only used if the user accepts notifications.
  • Device technical data: operating system version, device model and app version, for support and diagnostic purposes.
  • Session cookies: the app reuses the website's session cookies to keep the user authenticated.

The app does not collect background location data, contacts, and does not access the camera or photo library of the device unless the user expressly authorises it to upload documents or images to an operation.

The user may disable push notifications at any time from iOS system Settings and request the deletion of their account by sending an email to info@gc-grup.com.

9. Data Protection Contact

For any enquiry relating to the processing of your personal data, please contact us at:

  • Email: info@gc-grup.com
  • Postal address: AM STRATEGIC CAPITAL S.L. — C/ Riera Ginjolers, 133-137, Casa 6, 17480 Roses (Girona), Spain