Legal information
Privacy policy
What personal data is processed through this website, for what purpose and what rights you can exercise. This does not replace legal advice. While legal owner, tax ID and full address are pending confirmation, this text should be reviewed with advisers before being treated as final.
Last updated October 2026.
Data controller
Trading name: hoclau.
The legal controller (registered identity distinct from the trading name) appears in the section below once confirmed.
Privacy contact and rights requests: info@hoclau.com (inbox connected to form delivery in the current server configuration).
Phone: +34 661 58 32 63.
Reference location: Barcelona, España.
Data we collect
We only process data you voluntarily provide when using the forms or contacting us.
- Homepage form (initial valuation): property address or area (free text or address suggestions if autocomplete is active) and property count band; on the next step, name, email and phone if you continue the request.
- Free quote form: name, email, phone, location, profile type, number of properties, listing link if provided, services of interest and message.
- Contact form: name, email, optional phone and message.
- Minimal technical data linked to submission (date, form type and source) when the server processes the request.
Purposes and legal bases
- Handling your enquiry or information request: pre-contractual measures at the data subject’s request (Art. 6(1)(b) GDPR) and, when you tick the privacy box, consent (Art. 6(1)(a) GDPR).
- Preparing a proposal or quote for property management: pre-contractual measures (Art. 6(1)(b) GDPR).
- Keeping a draft of the first valuation step in your browser (sessionStorage): legitimate interest in making the form easier without forcing you to re-enter data in the same tab (Art. 6(1)(f) GDPR), with minimal impact.
- Remembering your cookie preference (localStorage): compliance with privacy and consent obligations (Art. 6(1)(c) GDPR).
What we do not collect on this website
We do not ask for guest data, identity documents or specially protected information through these forms.
There is no marketing newsletter or profile-based advertising in this version of the website.
We do not use third-party analytics or advertising cookies.
If homepage address autocomplete is configured, typed queries are sent in a limited way to hoclau’s server and from there to the Google Places API to show suggestions. We do not request device location. If no key is configured or the service fails, the field works as free text only.
Recipients and processors
Form data is processed on the website server. Email requests are delivered to info@hoclau.com, according to server configuration (MAIL_TO variable).
In the current setup, sending may use SMTP (mail server for the domain configured on the server). That mail provider acts as processor or infrastructure provider under the applicable contract.
Alternatively, if other routes are configured on the server, a transactional email service (Resend, Inc.) or a webhook (URL set in environment variables) may receive data to deliver it to the hoclau team.
If no delivery route is configured, the form states that sending is not active and data is not emailed from the server.
Website hosting depends on the provider where the application is deployed. That provider may process technical log data for the infrastructure.
We do not sell or share your data with third parties for their own commercial purposes.
When address autocomplete is active, Google (Google LLC) may process what you type in the field as processor or Places API provider, under its terms.
International transfers
If a mail or hosting provider uses servers outside the European Economic Area, transfer will rely on GDPR safeguards (standard contractual clauses or other mechanisms under the current contract).
You can request details of the specific safeguards by writing to info@hoclau.com.
Retention periods
- Enquiries and requests with no later contract: as long as needed to handle them and, as a guide, up to 24 months from the last interaction, unless a different legal obligation applies.
- Contractual or advanced pre-contractual relationship: for the relationship and applicable limitation or record-keeping periods.
- Cookie preference: up to 365 days from your choice, under the cookie policy.
- sessionStorage drafts: until you close the browser tab.
Your rights
You may request access, rectification, erasure, objection, restriction of processing and portability where applicable, and withdraw consent when processing is based on it.
To exercise them, write to info@hoclau.com stating your request and a way to identify you. We will respond within legal time limits.
If you believe processing does not comply with the law, you may complain to the Spanish Data Protection Agency (www.aepd.es).
Minors
The forms are aimed at owners and professionals who manage properties, not at children under 14.
