Privacy Policy

1 Purpose

This Privacy Policy establishes the basis for which the Bilbao River Company processes personal data provided by clients during the course of its relationship with them.

2 Contact information of the data controller

Regardless of the company belonging to or collaborating with it, Bilbao River Company will act as the data controller of your personal data. Their contact information is as follows:

Email address:

3 Data capture

The Personal Data processed by Bilbao River Company have been provided by you or your legal representative acting as data subject.

Through this policy, the Client guarantees that the Personal Data provided are true and accurate, and undertakes to notify of any change or modification thereof.

4 Main purpose of data processing

As the data controller, Bilbao River Company will process your Personal Data with the purpose of managing the sale of real estate to their clients. In addition, once the sale is complete, your data will be processed for after-sales service and incident management offered by Bilbao River Company.

Likewise, data may be ceded to other banking entities with the purpose of these organisations being able to contact you so they can subrogate the developer loan offered, if you so choose.

The client is informed that their data will only be ceded to a third party when the after-sales service involves a third party, as may be the case with different trades. In addition, they are informed that the personal information ceded to a third party is limited to information that is strictly necessary to provide the service, and we require that they not use personal data for any other purpose.

Likewise, if necessary, the Bilbao River company will use your personal data to comply with compulsory Law 10/2010, dated 28 April, on the prevention of money laundering and the financing of terrorism.

5 Basis for processing

The legal basis for processing is founded essentially on the consent of the client or their legal representative or, in some cases, on legal obligations. If express consent is necessary, the Client will be informed of the need for express consent, and what they will have to do to provide this prior to processing. At any time, the Client will have the right to withdrawal their consent in applicable cases resulting from the application of the provisions of the following section 8 corresponding to consent withdrawal

6 Data recipients

The main recipient of personal data is the Bilbao River Company as data controller.

In addition, they may cede the Client’s personal data as long as it is necessary for Eslora within the framework of their activities, or if legally required. In these cases, essential data can be ceded to the following recipients:

7 Data storage period

The personal data provided will be stored for the period necessary to execute the purposes described in this policy, and as long as deletion is not requested or consent is not withdrawn by the data subjects, in which case personal data will be locked for the period necessary to comply with a legal obligation, or to formulate, exercise, and defend against claims that may arise from the treatment thereof.

8 Client rights

The Data Controllers agree to respect Personal Data confidentiality and guarantee clients can exercise their rights.

As a Client, you have a right to access your personal data, request the rectification of inaccurate data or, where applicable, request that your data be deleted when these are no longer necessary for the purposes for which they were originally gathered, among other reasons.

Under certain circumstances, you may request restriction of the processing of your data, in which case your data will only be held for the purposes of exercising or defending complaints.

Furthermore, you may object to the processing of your data under certain circumstances and for reasons related to your particular situation. If objecting, the Company will cease to process your data unless opposition cannot be accepted due to legitimate reasons, or for the purposes of exercising or defending against legal complaints.

The client will also have the right to withdraw their consent at any time, without prejudice to the lawfulness of processing based on the consent originally provided. In such case, processing after the revocation of consent based on other legal reasons other than consent will also not be affected.

Under certain circumstances, clients may have the right to receive the personal data pertaining to them that they have provided to the Company in a structured, commonly-used, machine-readable format that can be transferred to another data controller.

Likewise, clients will have the right to not be the subject of a decision based solely on automated data processing.

They may exercise their rights to access, amend, delete, and oppose at any time by writing to the following email address

On the other hand, clients will have the right to file a claim before a control authority, such as the AEPD, and take appropriate legal actions, particularly when they have not been satisfied by the exercising of their rights.

9 Other processing

The Company agrees to inform the client at all times if data processing that is different or new to those stipulated in section 4 of this Privacy Policy takes place in any case.

Client communication channels will be the official ones provided by the company at all times.