Privacy Policy

Privacy Policy

This Privacy Policy explains how we collect, store, use, and protect personal data received through allincosta.com, in accordance with applicable data protection laws and the General Data Protection Regulation (GDPR).

Legal Framework

• Act CXII of 2011 on Informational Self-Determination and Freedom of Information
• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)

Purposes and Legal Bases

Data Sharing with Qualified Partners

By becoming an ALLinCOSTA member in any capacity (AC Prime, AC Prestige, AC Elite, or AC Collective), or by requesting services through our platform, you consent to ALLinCOSTA sharing relevant personal data — including your name, contact details, and service preferences — with our carefully selected Qualified Partners exclusively for the purpose of delivering the services you have requested or that are included in your membership. ALLinCOSTA will only share the minimum necessary data required to fulfil your service request. Our Qualified Partners are bound by confidentiality and are not permitted to use your data for any purpose other than delivering the requested service. You may withdraw this consent at any time by contacting us at hello@allincosta.com, though this may affect our ability to provide certain membership services.

Data Collected via the Contact Form

Depending on the selected form type, we collect the following data: • Common (all types): form type, name, email address, phone number. • Customer: country, preferred location in Costa del Sol (optional), selected services. • Partner: company name, office location(s), business service description. • Community: community name, president name (optional), location, number of units. • Consents: mandatory consent to data processing; optional consent for marketing.

Consent Declaration via Contact Form

When submitting the contact form, users actively give their consent by checking the relevant box. This consent serves as the legal basis for processing under Article 6(1)(a) of the GDPR and can be withdrawn at any time by contacting hello@allincosta.com.

Marketing Communications

If you subscribe to receive marketing updates, we will process your name and email address for direct marketing purposes based on your explicit consent. You may withdraw consent at any time via the "Unsubscribe" link in any marketing email or by contacting us directly.

Server Logs

For security and diagnostics, our server may log IP addresses, browser type, and timestamps. Logs are automatically deleted within 90 days.

Data Retention

We retain personal data only as long as necessary to fulfill communication or service requests and legal obligations. Contact form messages are deleted within 3 months unless continued communication requires otherwise. Marketing data is retained until consent is withdrawn.

Data Security

Personal data is stored on secure servers. We use technical and organizational measures to prevent unauthorized access, disclosure, alteration, or destruction of personal information.

Cookies and Analytics

We do not use cookies, tracking tools, or analytics on this website.

Children's Data

Our services are not directed to individuals under the age of 16, and we do not knowingly collect data from minors.

Rights of Data Subjects

• Right to be informed about the collection and use of data
• Right to access your data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing

Exercising Your Rights / Right to Lodge a Complaint

Contact us at hello@allincosta.com. We will respond within 30 days. If you believe your data has been processed unlawfully, you may lodge a complaint with the Agencia Española de Protección de Datos (AEPD).