Last updated: 6 October 2026
This privacy policy explains which personal data is processed when you visit arend.casa, send a message through the contact form, or use the client portal at hub.arend.casa, and why. All processing complies with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
1. Data controller
The party responsible for processing your data is:
- Name: Arend Jan Steenhuisen
- Address: Carrer Major 4, 17251 Calonge, Spain
- Email: hola@arend.casa
2. What data we process
When you send a message
The contact form asks for your name, your email address, optionally your phone number, and your message. We also note the language of the page you sent it from, so we can answer in that language.
When you visit the website
Our hosting provider processes your IP address to deliver the pages to you; that is how the internet works. When you send the contact form, your IP address and email address are also used briefly to limit how many messages can be sent from one sender, which protects the form against spam. If a message is held back as possible spam, the email address it came from is recorded in the server log.
This website does not use analytics, advertising or tracking of any kind, and places no cookies.
If you are a client
Clients get an account on the client portal. There we keep your name and email address, the details of the property search or assignment, and the documents, reports and records that belong to it. You sign in with a one-time code sent to your email address.
Newsletter
If you have separately signed up for our newsletter, we keep your email address and name for that purpose. Sending a message through the contact form does not put you on the newsletter.
3. Why, and on what legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Answering your message and following up on it, including the confirmation email you receive | Name, email address, phone number, message, language | Steps taken at your request before a possible agreement (Art. 6.1.b), and our legitimate interest in answering you (Art. 6.1.f) |
| Protecting the contact form against spam and abuse | IP address, email address | Legitimate interest (Art. 6.1.f) |
| Carrying out an assignment through the client portal | Account details, assignment details, documents and records | Performance of the agreement (Art. 6.1.b) and legal obligations such as keeping financial records (Art. 6.1.c) |
| Newsletter, only if you signed up for it | Email address, name | Consent (Art. 6.1.a) |
You can withdraw your consent for the newsletter at any time, using the link in every newsletter or by emailing us.
4. Recipients and processors
We do not sell your data or share it with third parties for their own purposes. We use the following processors, who process data on our behalf under a data processing agreement:
- Vercel Inc. (United States): hosting of this website and the client portal.
- Resend (United States): sending the emails from the contact form and the client portal, such as the notification of your message, your confirmation and sign-in codes.
- Neon (database hosted in the EU): storing enquiries and client records for the client portal.
- Brevo (Sendinblue SAS, France): sending the newsletter, only if you signed up for it. Brevo is based in the EU.
- Selva Digital: building and maintaining the website and the client portal.
Where data is transferred to or accessible from the United States, this is covered by the EU-U.S. Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission's Standard Contractual Clauses.
5. Retention period
- Messages from the contact form: as long as needed to answer and follow up. If your message leads to an assignment, it becomes part of the client file. If it does not, we delete it no later than two years after our last contact.
- Client files: for the duration of the assignment, and afterwards for as long as tax and accounting law requires us to keep the records.
- Spam protection: the counters per IP address and email address exist only in the server's memory and are gone within an hour.
- Server logs: kept by our hosting provider for a limited period, no longer than 30 days.
- Newsletter: until you unsubscribe.
6. Your rights
Under the GDPR you have the right to:
- Access your data
- Correct inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Withdraw your consent at any time
You can exercise these rights by emailing hola@arend.casa. You also have the right to lodge a complaint with a supervisory authority, in Spain the Spanish Data Protection Agency (AEPD).
7. Cookies
This website places no cookies. The client portal uses a few strictly necessary cookies to keep clients signed in. The cookie policy has the details.
8. Changes
We may update this privacy policy from time to time. The most recent version will always be on this page, with the date of the last change shown at the top.