Last updated: 16 March 2026
1. Data Controller
Marcel Shah, operating as a self-employed professional (trabajador autónomo) under the trade name Ankor Business, with address in Costa Blanca, Alicante, Spain, is the data controller responsible for your personal data.
Contact: info@ankorbusiness.com | +34 628 893 863
2. Data We Collect
We collect the following categories of personal data:
- Data you provide voluntarily: name, email address, phone number, and message content submitted through our contact and enquiry forms.
- Data collected automatically: IP address, browser type, device information, pages visited, referring URLs, and session duration, collected through cookies and analytics tools (see our Cookie Policy).
- Data from third-party tools: usage and interaction data collected by Google Analytics and our CRM platform to manage client relationships and improve our services.
3. Purpose of Processing
We process your personal data for the following purposes:
- Responding to your enquiries about business listings
- Managing our business brokerage services and facilitating transactions between buyers and sellers
- Sending relevant communications about new listings or market updates (only with your consent)
- Analysing website traffic and user behaviour to improve our services
- Managing client relationships through our CRM system
- Complying with legal and regulatory obligations
4. Legal Basis
We process your data on the following legal grounds under Article 6 of the GDPR:
- Consent (Art. 6.1.a) — when you submit a contact or enquiry form
- Contractual necessity (Art. 6.1.b) — to provide brokerage services you have requested
- Legitimate interest (Art. 6.1.f) — website security, analytics, and service improvement
- Legal obligation (Art. 6.1.c) — compliance with Spanish tax and commercial law
5. Data Sharing
We do not sell your personal data. We may share your data with the following categories of recipients, all of whom are bound by appropriate data protection agreements:
- Professional advisors (lawyers, accountants, notaries) as necessary for brokerage transactions
- Web hosting and infrastructure providers
- Google Analytics (website usage analytics)
- CRM platform provider (client relationship management)
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described above:
- Contact form enquiries: 3 years, unless you request earlier deletion
- Client transaction data: retained as required by Spanish tax law (minimum 4 years)
- Analytics data: anonymised and retained according to Google Analytics default settings
7. Your Rights
Under the GDPR and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD), you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Request erasure of your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, contact us at info@ankorbusiness.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
8. International Transfers
Your data is primarily processed within the European Economic Area (EEA). Some third-party service providers (such as Google) may process data outside the EEA. In such cases, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses or adequacy decisions by the European Commission.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. These include SSL/TLS encryption, secure hosting, and access controls.
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
11. Contact
For any questions about this privacy policy or our data practices:
Marcel Shah — Ankor Business
Email: info@ankorbusiness.com
Phone: +34 628 893 863