Legal
Privacy policy
Last updated: September 28, 2026
This policy explains what personal data I collect through this website, what I use it for and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).
1. Data controller
- Controller: Veronica Lilian Vaccarezza Cruz
- Tax ID (NIF): 55055236K
- Address: Calle Gorrión 15, 38632 Palm-Mar, Arona (Santa Cruz de Tenerife), España
- Contact email: veronica.cruz@mortgagedirectsl.com
2. What data I process
When you fill in the contact form, I process:
- First and last name.
- Email and phone number.
- The language you prefer to be assisted in.
- The date and time you gave your consent.
If a partner referred you
If an estate agency, a lawyer or another professional referred you, I do not receive your details from you but from that person. In that case I process your first and last name, email, phone number, country of tax residence, type of income, preferred language and any comments the partner adds about your plans. When submitting the form, the partner confirms that they have told you they will share your details with me and that they have your consent to do so.
When I first contact you, I will tell you who gave me your details. If you would rather not go ahead, just tell me and I will delete them. If I do not hear from you within 30 days, they are deleted automatically; I only keep a record of the referral (who made it, when and what they declared). I also process the partner’s contact details to manage the referral and keep them updated.
In addition, for security and to prevent misuse of the form, the IP address it is sent from is processed temporarily; it is not stored with your contact details. If you accept analytics cookies, Google Analytics collects information about your visit (see the cookie policy).
I do not ask for special categories of data. Please do not include them in the form.
3. What I use it for
To contact you and respond to your request for information about mortgage advice. I do not make automated decisions or build profiles with your data, and I will not send you marketing communications unless you expressly ask me to.
4. Legal basis
Your consent (Art. 6(1)(a) GDPR), which you give by ticking the box on the form. You can withdraw it at any time, without affecting the lawfulness of prior processing.
If a partner referred you, the legal basis is the consent you gave them to share your details with me for this purpose (Art. 6.1.a GDPR). You can withdraw it at any time by writing to me.
If you later decide to hire my services, I will process the data needed to take pre-contractual steps and perform the contract (Art. 6(1)(b) GDPR).
For analytics and external content cookies, the legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the cookie settings.
5. Mortgage advisory services
Mortgage advisory and credit intermediation services are provided through Mortgage Direct S.L.U., an independent mortgage credit intermediary registered with the Banco de España under number D108 (certification ACI/24/0056). When you request advice, your details are shared with Mortgage Direct S.L.U. so that your request can be handled, and it processes them in accordance with its own privacy policy.
6. How long I keep it
For as long as needed to handle your request. If we do not start a professional relationship, I delete it no later than 12 months after your last contact. If you hire my services, I will keep it for the duration of the relationship and, afterwards, for the periods required by law.
7. Who it is shared with
Apart from Mortgage Direct S.L.U. (see section 5), I do not share your data with third parties unless required by law. If you decide to go ahead, I will only share it with lenders, notaries or other professionals involved in your purchase with your express authorisation.
For the website to work, I use providers that process data on my behalf under a data processing agreement:
- Neon: database storage, on servers in the European Union (Frankfurt).
- Resend: sending notification emails, from its European Union region (Ireland).
- Vercel: website hosting.
- Cloudinary: hosting and optimisation of the website's images and videos. It does not set cookies.
- Calendly: booking of meetings, only if you use the calendar.
- Google: website statistics (Google Analytics) and embedded videos and maps (YouTube, Google Maps), only if you accept the corresponding cookies.
Some of these providers are US companies. Any international data transfer is carried out with the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to veronica.cruz@mortgagedirectsl.com. I will reply within one month at most.
If you believe I have not processed your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security
I apply technical and organisational measures to protect your data: encrypted connections (HTTPS), password-restricted access to the management panel and storage with providers that offer security guarantees.
10. Cookies
This website uses necessary cookies and, only with your consent, analytics cookies (Google Analytics) and external content cookies (YouTube, Google Maps). More information in the cookie policy.