Back to Mardi

Data Protection – Promotional Websites

Last updated: September 10, 2025

1. Data Controller

Evoost Real Tech S.L., with Tax ID B16420051 and registered office at Calle Jovellanos, 10 BAJO IZQ – 33206 Gijón (Asturias), is the entity responsible for the processing of personal data collected through this website and external channels that refer to this policy. Contact email: protecciondedatos@evoost.ai

2. Categories of Personal Data Collected

We may process the following categories of personal data:

  • Identification data: name, surnames
  • Contact data: email, telephone number
  • Location data or area of interest
  • Data related to profile and motivation to purchase a property
  • Navigation and web interaction data
  • Recordings or transcriptions generated by voice assistants
  • Conversations through instant messaging (such as WhatsApp Business)
  • Online identifiers, IP and browsing habits collected through cookies

3. Data Source

Data is collected through:

  • Contact forms on the website
  • Automated service channels managed by Evoost, such as:
    • Virtual voice assistant
    • Conversational agent integrated into the web
    • Instant messaging channel (WhatsApp Business)
  • Commercial actions or events
  • Cookies and similar technologies (see section 13)

In the case of external channels such as WhatsApp, the user may also be subject to WhatsApp’s privacy policy.

4. Purpose of Processing

Data will be processed for the following purposes:

  • Attend inquiries and interests about real estate developments
  • Management of information and commercial communications
  • Perform segmentation and commercial qualification of users
  • Conduct statistical analysis and internal market studies
  • Communicate data to Mardi Waterfront LLC, for commercial follow-up and/or the reservation and sale process of properties
  • Analyze user behavior on the site using analytics tools such as Google Analytics

5. Legal Basis for Processing

Data processing is based on:

  • Express consent of the user
  • Legitimate interest of the controller to maintain communications with people interested in the developments
  • Execution of pre-contractual measures requested by the interested party

6. Data Recipients

Data may be communicated to:

  • The developer Mardi Waterfront LLC, as an independent manager, for commercial management purposes
  • Providers acting as data processors, including:
    • Communication sending platforms
    • Automated customer service tools and CRM
    • Analytics services (such as Google Analytics)
    • External messaging services (such as WhatsApp Business)

When the user interacts through WhatsApp or accesses content analyzed by Google Analytics, their data may also be processed according to their respective privacy policies, available at:

  • Google – Privacy Policy
  • WhatsApp – Privacy Policy

7. International Data Transfers

In some cases, data may be processed outside the European Economic Area, for example by analytics or communication services. In such cases, appropriate measures will be applied, such as:

  • Standard contractual clauses approved by the European Commission
  • Adherence to the EU-U.S. data protection framework
  • Complementary security mechanisms, such as encryption or pseudonymization

8. Retention Periods

Data will be retained:

  • While there is an active relationship with the user or until they request deletion
  • Up to 5 years from the last commercial contact
  • During periods required by legal obligations

9. User Rights

The user has the right to:

  • Access their data, rectify or delete it
  • Request restriction or object to processing
  • Exercise the right to portability
  • Withdraw consent at any time
  • File a complaint with the Spanish Data Protection Agency (www.aepd.es)

To exercise these rights, you may contact:

  • Email: protecciondedatos@evoost.ai
  • Address: Calle Jovellanos, 10 BAJO IZQ – 33206 Gijón (Asturias)

10. Security Measures

Appropriate technical and organizational measures have been adopted to protect personal data against unauthorized access, loss, alteration or destruction, in accordance with Article 32 of the GDPR.

11. Mandatory Nature of Requested Data

All fields marked with an asterisk (*) in the forms are mandatory. The absence of this data may prevent the user’s request from being properly attended to.

12. Changes to Privacy Policy

This policy may be updated as a result of legal or technical changes. Any modification will be notified by a notice on the website.

Last update: June 30, 2025

13. Use of Cookies

This website uses technical, analytical and advertising cookies, both its own and those of third parties. These include Google Analytics cookies, which process personal data such as IP address, session identifiers, pages visited and browsing time. This information is used for statistical purposes, to improve the service and personalize the content shown to the user. The use of Google Analytics implies data processing by Google, according to its privacy policy. For more information, consult our [Cookie Policy].