Privacy Policy

Last updated: 29 August 2026

Data controller

The data controller is Viktor Mytelskyi, a self-employed professional in Spain operating the commercial brand HESPA (Home & Estate Services in Spain), NIF Z0379678E.

Calle Joven Pura, 75, Bloque 5, piso 4, puerta C, 03183 Torrevieja, Alicante, Spain

For privacy requests, email contact@hespa.eu.

Data we process

Depending on how you contact HESPA, this may include your name, email address, telephone or WhatsApp number, preferred language, property requirements, budget, location preferences, message content, and practical details needed to respond to your enquiry.

How enquiries are received

• Contact and property enquiry forms: the website directs enquiries to the confirmed Google Form.
• Email: information you send to contact@hespa.eu is processed to answer and manage your enquiry.
• WhatsApp: messages sent through the HESPA WhatsApp link are processed to respond and continue the conversation you initiated.

Purposes and lawful bases

• To respond to questions and take steps you request before entering into a service arrangement: steps at your request before a contract and, where applicable, performance of a contract.
• To manage communications, coordinate requested services and maintain appropriate business records: legitimate interests in operating and documenting the business.
• To meet tax, accounting or other legal duties: compliance with legal obligations.
• Where processing depends on consent, such as information you voluntarily provide for a specific purpose: consent, which may be withdrawn at any time without affecting earlier lawful processing.

Recipients and service providers

Personal data is not sold. It may be shared only where needed with service providers or trusted registered real-estate, legal, technical or other partner specialists involved in an enquiry, or where required by law. Only relevant information is shared for the applicable purpose.

Google Forms and, where applicable, Google Sheets may process form information under Google’s own terms and privacy practices. WhatsApp may process account, device and message-related data under its own terms and privacy practices. Use of these services can involve processing outside the European Economic Area subject to the safeguards used by the relevant provider.

Retention

Enquiry information is kept only for as long as reasonably necessary to respond, follow up and maintain appropriate business records. Unsuccessful or inactive enquiries are normally reviewed for deletion or anonymisation within 24 months after the last meaningful contact. Information connected with a service, transaction, legal duty or dispute may be retained longer for the applicable statutory or necessary period.

Your rights

Subject to applicable law, you may request access to, rectification or erasure of your personal data; restriction of processing; data portability; or object to processing based on legitimate interests. You may withdraw consent where consent is the lawful basis.

Send requests to contact@hespa.eu. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.

Security and required information

Reasonable organisational and technical measures are used to protect personal data. Please do not send passwords, full payment-card details or unnecessary identity-document scans through general enquiry channels. If information is required to handle an enquiry or requested service, HESPA will explain what is needed; without it, the request may not be possible to complete.

Updates

This policy may be updated when the website, service providers or legal requirements change. The current version is published on this page.