Privacy policy
Last updated: 3 September 2026
1. Who controls your data
The data controller is the company operating the real estate agency CENTURY 21 Synergy, registered office Ke Štvanici 656/3, Prague 8 – Karlín, Czech Republic, company ID [to be completed], registered in the commercial register kept by [to be completed] (the “controller” or “we”).
For any privacy matter, contact us at synergy@century21.cz or at the registered office.
2. What data we process
- Identification and contact data: name, surname, e-mail, phone and, where relevant, address.
- Data about your enquiry: preferred area, property type, budget, time frame and any notes you give us.
- Data required to complete a purchase: if a specific transaction goes ahead — date of birth, ID document number, Spanish NIE tax number, bank details. Spanish notaries and anti-money-laundering legislation require these.
- Technical data: IP address, browser type and cookie data — see the separate Cookie policy.
3. Why, and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Handling your enquiry and sending property offers | Steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR) | 3 years from last contact |
| Arranging viewings and negotiations with the Spanish partner | Performance of a contract (Art. 6(1)(b) GDPR) | Duration of cooperation + 4 years |
| Newsletter about new listings | Your consent (Art. 6(1)(a) GDPR) | Until consent is withdrawn |
| Legal obligations (AML, accounting, archiving) | Legal obligation (Art. 6(1)(c) GDPR) | 5–10 years by law |
| Protection of our legal claims | Legitimate interest (Art. 6(1)(f) GDPR) | Until the claim is time-barred |
4. Who we share data with
So that viewings and negotiations in Spain can take place, we pass your contact details and enquiry to our partner CENTURY 21 office on the Costa del Sol. The transfer takes place within the European Economic Area, so no additional safeguards for third-country transfers are needed.
Other recipients may include:
- the CENTURY 21 franchisor in the Czech Republic and the operator of its CRM system;
- hosting, e-mail and analytics providers;
- lawyers, notaries and tax advisers if a specific transaction goes ahead;
- public authorities where required by law.
We do not sell your data and we do not pass it to third parties for their own marketing.
5. Your rights
- the right of access to your data and to a copy of it;
- the right to rectification of inaccurate data;
- the right to erasure (“right to be forgotten”) where no other legal ground for processing applies;
- the right to restriction of processing;
- the right to data portability;
- the right to object to processing based on legitimate interest;
- the right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
- the right to lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.
To exercise your rights, e-mail synergy@century21.cz. We will reply within one month at the latest.
6. Security
Data is kept in secured systems with controlled access. Only agents and administrative staff who need the data for their work have access to it, and they are bound by confidentiality.
7. Changes to this policy
We may update this policy. The current version is always available on this page with the date of the last change. We will inform you of material changes by e-mail.