Privacy Policy

In compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (GDPR), and Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), it is reported that the data controller of your personal data is Aurifinance (hereinafter, "the Owner"), with its registered office at C/Joan Daurer 1, 07007 Palma, Balearic Islands. Users can contact the data controller directly, effectively, and free of charge through the email address info@aurifinance.com. This entity guarantees the protection of privacy and the security of confidential information provided by users, applying rigorous regulatory compliance protocols regarding the protection of financial and personal data.

Due to the technical and specific nature of real estate credit intermediation services, the Owner requires to process a wide amalgam of personal data to guarantee the viability of financial operations. These categories include:

• Identifying and Contact Data: Full name, National Identity Document (DNI/NIE), habitual residence address, telephone numbers, and email addresses.
• Personal Characteristics and Family Context Data: Date of birth, nationality, marital status, matrimonial economic regime, number of dependents, and residence situation (ownership, rent, or family home).
• Economic, Financial, and Insurance Data: Payrolls, income tax returns, pension certificates, bank statements from recent months reflecting balances, movements, and savings, as well as detailed information on current debts, loans, credit cards, and other contracted financial obligations.
• Employment Situation Data: Detailed profession, position held, type of contract (permanent, self-employed, temporary), seniority in the company, and updated working life.
• Property and Registry Data: Cadastral references, projected purchase price, load status via Simple Informative Note, and appraisal reports if any.

The personal data processed by Aurifinance comes, for the most part, from the information provided directly by the interested party themselves by submitting web forms or complementary documentation. However, to ensure the veracity of the information and fraud prevention, the Owner may obtain information from legitimate external sources such as:

• Public Registries: Consultations to the Property Registry, Cadastre, and other official databases.
• Patrimonial Solvency Files: Data verification in files of compliance or non-compliance with monetary obligations (such as ASNEF, CIRBE, or Badexcug) in order to assess the solvency and credit risk of the interested party.
• Third Entities: Data provided by appraisal companies or by the banking entities themselves with which the operation is processed.

Aurifinance will process your personal data lawfully, fairly, and transparently for the following purposes:

• Comprehensive Intermediation Management: Processing the application, carrying out financial viability studies, and presenting the operation to financial entities to obtain mortgage proposals.
• Financial Profiling: Analysis of the user's economic profile using algorithms and manual review to determine their banking scoring and select the products that best fit their solvency.
• Administrative and Follow-up Communications: Electronic contact (email, SMS, WhatsApp) or telephone contact to inform about the progress of the procedures, request documentary clarifications, or coordinate the signing before a notary.
• Prevention of Money Laundering: Identity verification and control of the origin of funds in strict compliance with Law 10/2010 and SEPBLAC regulations.
• Customer Service: Management of inquiries, complaints, or claims sent through support channels.

The legal basis that legitimizes each of the processing activities carried out by Aurifinance is as follows:

• Contractual or Pre-contractual Execution: The processing is essential for the application of measures at the request of the interested party (viability study) or for the execution of the intermediation contract.
• Legal Obligation: Processing derived from compliance with Law 5/2019 regulating real estate credit contracts and Law 10/2010 on the prevention of money laundering.
• Legitimate Interest: Conducting satisfaction surveys, our own commercial prospecting, and internal improvement of risk analysis processes.
• Explicit Consent: For the processing of special category data (such as health for linked insurance) or for the transfer of data to commercial partners unrelated to the mortgage operation.

For the proper provision of the service, your data may be necessarily communicated to the following recipients:

• Financial and Banking Entities: Communication of your complete file so that the entities can carry out the study and, where appropriate, approve the granting of the requested loan.
• Approved Appraisal Companies: For the technical valuation of the real estate guarantee.
• Notaries and Registries: Necessary professionals for making the contract public and its registry registration.
• Agencies and Public Administrations: Tax processing and formalization of deeds before the Tax Agency or Bank of Spain when legally required.
Aurifinance commits not to sell, rent, or transfer your personal data to third parties outside the mortgage operation without previously obtaining your express and informed consent.

Aurifinance carries out its main activity within the European Economic Area (EEA). In the event that technology service providers (such as cloud storage or communication tools) whose servers are located outside the EEA are used, the Owner guarantees that such transfers are carried out under the protection of adequacy decisions of the European Commission or by signing Standard Contractual Clauses (SCCs) that ensure a level of protection equivalent to the European standard.

Personal data will be kept as long as the commercial intermediation relationship remains valid. Once the management is completed or in case of withdrawal of the application, Aurifinance will keep the data duly blocked during the limitation periods of the legal responsibilities derived from the processing. In particular, according to the money laundering prevention regulations, documentation may be kept for a period of up to 10 years to address possible audits or requirements of the competent supervisory authorities.

The user is guaranteed the exercise of their rights at any time and completely free of charge. These rights include:

• Access: Consult what personal data we process.
• Rectification: Request the correction of inaccurate or incomplete data.
• Erasure: Request the deletion of your data when it is no longer necessary for the purposes collected.
• Opposition and Restriction: Oppose certain processing or request the temporary suspension of data use.
• Portability: Receive your data in a structured electronic format for transmission to another controller.
To exercise these rights, you must send a written request to info@aurifinance.com, indicating the right you wish to exercise and providing a copy of your ID or equivalent document to verify your identity.

Aurifinance has implemented the necessary technical and organizational security measures to guarantee an appropriate level of security for the risk of the processed data. This includes the use of SSL/TLS encryption protocols for data traffic on the web, storage of financial documentation on restricted-access servers, redundant backup systems, and strict confidentiality agreements with all employees and external collaborators involved in the mortgage process.

Filling in the fields marked as mandatory in our forms is strictly necessary to process your request. Refusal to provide such data will make it impossible for Aurifinance to carry out the mortgage viability study or provide any intermediation service. The user guarantees that the data provided is true, accurate, and updated, being solely responsible for any damage or harm, direct or indirect, that could be caused to Aurifinance or any third party as a result of communicating false or incomplete data.

Aurifinance reserves the right to modify or update this Privacy Policy to adapt it to legislative or jurisprudential developments or to changes in the commercial practices of the sector. Any change will be published on this website with an express indication of the date of its last update. We recommend you review this section periodically to be properly informed about the processing of your personal data. If you have any additional questions, you can write to us at info@aurifinance.com.