One Living Estate
Privacy Policy
Last updated: 13 July 2026
One Living SL (trade name "One Living Estate") is committed to protecting the privacy and personal data of the users of its website (the "Website") and of everyone who contacts us or uses our real-estate services.
This Privacy Policy explains what personal data we collect, the purposes and legal bases for which we process it, how long we keep it, with whom we share it and the rights you may exercise. Our processing complies with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR"), Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights ("LOPDGDD") and Law 34/2002 on Information Society Services and Electronic Commerce ("LSSI-CE").
1. Data controller
The controller responsible for the processing of your personal data is:
- Company: One Living SL (trade name "One Living Estate")
- Registered office: N-340, Km 176, 29602 Marbella (Málaga), Spain
- CIF: (pending)
- Email: info@quantum23.com
- Telephone: +34 664 44 03 33
- No Data Protection Officer has been appointed. You may address any privacy matter to info@quantum23.com.
2. Personal data we collect
Depending on how you interact with us, we may process the following categories of personal data:
- Contact form and enquiries: name, surname, email address, telephone number, message content, country and property preferences you choose to share.
- Newsletter sign-up: email address and the record of your consent.
- Browsing and technical data: information collected automatically through cookies and similar technologies (for example IP address, device and browser type, and navigation data), as described in our Cookies Policy.
- We do not knowingly collect special categories of personal data (for example data revealing health, ethnicity, religion or political opinions). Please do not include such information in your communications with us.
3. Purposes of processing
We process your personal data for the following purposes:
- To respond to your enquiries and requests, and to provide the real-estate services you ask for.
- To manage the client and prospect relationship, including property matching and follow-up on properties that may interest you.
- To send newsletters and commercial communications about our properties and services where you have consented.
- To ensure the security of the Website and to carry out statistical and analytics activities.
- To comply with the legal obligations to which we are subject.
4. Legal bases for processing
The legal bases on which we rely to process your personal data are the following:
| Purpose | Legal basis |
|---|---|
| Sending newsletters and commercial communications; use of optional (analytics/advertising) cookies | Your consent (Article 6(1)(a) GDPR) |
| Responding to enquiries and providing the requested real-estate services | Performance of a contract or pre-contractual steps taken at your request (Article 6(1)(b) GDPR) |
| Website security, improvement of our services and B2B professional contact | Our legitimate interest (Article 6(1)(f) GDPR) |
| Compliance with accounting, tax and anti-money-laundering (AML) obligations | Compliance with a legal obligation (Article 6(1)(c) GDPR) |
5. Data retention
We keep your personal data only for as long as necessary to fulfil the purpose for which it was collected.
Once that purpose has been fulfilled, we retain the data, duly blocked, for the periods required by law (for example to meet commercial, accounting and tax obligations), after which it is securely erased.
Data processed on the basis of your consent is kept until you withdraw that consent.
6. Recipients of your data
We may share your personal data with the following categories of recipients:
- Technology providers acting as data processors under data-processing agreements pursuant to Article 28 GDPR, including hosting, CRM, email-delivery and web-analytics providers.
- Collaborating real-estate agencies and financial or legal partners, only where relevant to the service you have requested and where lawful to do so.
- Public authorities, bodies and courts, where we are legally required to disclose the data.
- We do not sell your personal data to third parties.
7. International transfers
As a general rule, your personal data is processed within the European Economic Area (EEA).
Where a service provider processes data outside the EEA, we carry out such international transfers only where there is an adequacy decision by the European Commission, Standard Contractual Clauses, or another valid safeguard under Chapter V GDPR that guarantees an adequate level of protection.
8. Your rights
You may exercise the following rights in relation to your personal data:
- Access to your personal data.
- Rectification of inaccurate or incomplete data.
- Erasure of your data when it is no longer necessary.
- Restriction of processing in the cases provided for by law.
- Portability of your data to another controller.
- Objection to the processing of your data.
- Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
8.1. How to exercise your rights
You may exercise your rights by writing to info@quantum23.com, indicating the right you wish to exercise and attaching a copy of an identity document or equivalent proof of identity.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, if you consider that the processing of your data does not comply with applicable law.
9. Automated decisions, profiling and Artificial Intelligence
We may use AI-assisted tools to help us draft communications, qualify and match enquiries, and analyse the property market, always under human supervision.
We do not take decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing within the meaning of Article 22 GDPR.
We do not use your personal data to train third-party AI models without a valid legal basis and appropriate safeguards.
You may at any time request human intervention, express your point of view and contest any assessment relating to you.
10. Security measures
We apply the appropriate technical and organisational measures required by Article 32 GDPR to guarantee a level of security appropriate to the risk, and to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure or access.
11. Minors
The Website and our services are directed to adults. Minors must not provide personal data through the Website.
Under Spanish law, the processing of a minor's personal data based on consent is lawful only where the minor is at least 14 years old; below that age, the consent of a parent or legal guardian is required.
12. Changes to this Privacy Policy
We may update this Privacy Policy to reflect legislative, technical or organisational changes. Any new version will be published on the Website with its corresponding "last updated" date. We recommend that you review it periodically.