Your data, handled the way we’d want our own handled.

The data controller is Sarah Katerina Kastlunger Pérez, NIF 74243897-N, with registered office at Calle Bazán 10, 03181 Torrevieja (Alicante), Spain. You can reach us at info@sarahkaterina.com.

We collect only what we need to deliver the service you ask for. Depending on the form you submit, that can include:

• Identity and contact details: name, email, phone.
• Tax-relevant property data: cadastral reference or IBI receipt, agreed purchase price, approximate purchase date, intended use of the property, type of seller, payment method.
• Buyer status: country of tax residence, personal situation (large-family, disability, etc.) when relevant to applicable bonifications.
• Booking metadata: chosen call slot, optional topic note, language preference.
• Technical metadata: IP address, browser/device, referring source — collected via Vercel hosting logs and Google Analytics 4 for traffic-quality measurement.

• To deliver the diagnostic, analysis or filing you have requested — legal basis: contract performance.
• To respond to enquiries and schedule discovery calls — legal basis: pre-contractual measures at your request.
• To meet our own legal obligations (invoicing, accounting, tax-record retention) — legal basis: legal obligation.
• To measure and improve site quality in aggregated form — legal basis: legitimate interest, balanced against your rights.

• Contact-form submissions and enquiry data: up to 24 months from your last interaction, unless you ask us to delete it earlier.
• Engagement files (intake, diagnostic, invoices): retained for as long as Spanish tax and accounting law requires (typically 6 years from the end of the tax year).
• Analytics: aggregated and rotated within 14 months (Google Analytics default).

We use a small set of trusted providers, each acting under a data-processing agreement compatible with the GDPR:

• Vercel Inc. — site hosting and edge routing.
• Google Ireland Ltd. — Google Workspace email, Calendar bookings, and aggregated Analytics.
• Stripe Payments Europe Ltd. — secure card payment processing. We never see or store your card details.
• Web3Forms (kvgartlan Ltd.) — form submission delivery to our inbox.

Under the GDPR you can ask us, at any time, to:

• Show you what data we hold about you.
• Correct anything that is inaccurate.
• Delete the data, where no legal duty obliges us to keep it.
• Restrict or object to certain processing.
• Receive the data in a portable format.
• Lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe we have not handled your data lawfully.

The fastest way to exercise any of these rights is to write to info@sarahkaterina.com. We reply within 30 days, usually much sooner.

We use a minimal set of cookies needed to keep the site working and to measure traffic in aggregate. You can decline non-essential cookies from the banner shown on your first visit. We do not run third-party advertising trackers on this site.

When this policy changes in a way that affects you, we will update the date below and — where required — let you know by email. Last updated: 11 May 2026.