Privacy Policy

Under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, the controller is RCG 2026 S.L., trading as RCG Finance, tax number B27679570, at Avinguda Antoni Gaudí, 20, 43840 Salou, Tarragona. Contact: info@rcgfinance.es or +34 623 80 33 98.

• Identity and contact data: name, surname, identification where required, email and telephone.
• Financial information: income, assets, liabilities and transaction details voluntarily supplied for a financing assessment.
• Appointment data: contact details, selected time, communication channel and information needed to manage the meeting.
• Technical and attribution data: entry page, form page, referring domain, approved UTM fields, device, approximate location, browser and performance metrics.
• Security data: hCaptcha may process IP and interaction signals to detect bots, fraud and abuse.
• Advertising measurement: only with consent, page, time, action, OpenAI click references and technical attribution identifiers. We do not manually send a name, email or telephone number to ChatGPT Ads.

• Enquiries: respond to information and contact requests on the basis of consent (Article 6(1)(a) GDPR).
• Service and assessment: analyse and structure property-finance transactions as contractual or pre-contractual measures (Article 6(1)(b)).
• Appointments: schedule, confirm and remind the user of a requested call or video meeting (Article 6(1)(b)).
• Legal compliance: meet obligations arising from applicable real-estate credit intermediation law (Article 6(1)(c)).
• Service improvement and security: aggregated analysis, fraud prevention and protection of the service on the basis of legitimate interest (Article 6(1)(f)).
• Campaign measurement: attribute conversions and evaluate advertising only with consent (Article 6(1)(a)). Consent can be withdrawn through cookie settings.

Data is retained for the period needed for its stated purpose and any resulting legal responsibilities, then deleted or anonymised unless the law requires further retention. Private appointment-management links cease to be usable after cancellation or completion.

Data is not disclosed without consent except where necessary to provide the requested service—such as relevant financial institutions, valuers or notaries—or to meet a legal obligation.

Service providers include Google Ireland Limited for calendar and video meetings; Supabase, Inc. for database hosting and server functions; Resend, Inc. for transactional email; Vercel Inc. for hosting, aggregated analytics and performance; Intuition Machines, Inc. for hCaptcha; and OpenAI for consented advertising conversion measurement.

Where processing occurs outside the European Economic Area, recognised safeguards such as standard contractual clauses or an adequacy decision are used where applicable.

You may contact info@rcgfinance.es with proof of identity to exercise access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Withdrawal does not affect prior lawful processing.

You may complain to the Spanish Data Protection Agency at aepd.es.

RCG Finance applies appropriate technical and organisational measures intended to protect personal data from loss, alteration, unauthorised access and unlawful processing.

Last updated: September 2026.