YOUR INFORMATION
Privacy, made clear.
Last updated: 30 October 2026
When you enquire about a listing, your details go to the professional advertising it. This notice explains how Overleo handles enquiries, professional accounts and portfolio connections.
Who is responsible?
Schellhammer Brokerage, S.L. is responsible for the personal information Overleo processes to operate this portal and handle enquiries. The professional named on a listing is responsible for their own subsequent use of information you send them.
Contact our privacy team to ask about your information or exercise your data-protection rights:
Registered address: CC San Roque Club, Local 3D, 11360 San Roque, Cádiz, Spain.
Professional accounts and portfolio connections
When you register as an agency or business broker, we collect your contact name, business name, website, email address, telephone number and account credentials. We use these details to create and secure your account, verify your email, review your application and provide the professional dashboard you request. Account and verification emails are service messages, not marketing subscriptions.
If you connect a portfolio, we store the private feed connection, listing information, your confirmation that you may advertise the listings and photographs, your description preferences and the outcome of our review. Feed credentials and application records are restricted to authorised account and portal administration functions; feed credentials are not displayed on public listings. Choosing enhanced descriptions records your preference and does not itself rewrite your listings.
Professional account and application records are kept while needed to provide the account, review the application and resolve related support or security matters. You can request correction or closure through our privacy contact above. The 12-month enquiry cleanup described below applies to buyer enquiry records, not automatically to professional accounts.
When you send an enquiry
We collect your name, email address, message and, if supplied, telephone number. We record the listing and agency concerned, the time of your agreement to share the enquiry, and whether the email notification was submitted to our mail system.
Your name, email and message are needed to submit an enquiry. A telephone number is optional. Please avoid including identity documents, payment details or sensitive personal information in the message.
Why we use it
With your consent, we store your enquiry and forward it to the agency or business broker named on the listing so they can respond. Submitting an enquiry does not subscribe you to marketing or send your details to unrelated advertisers. You may withdraw your consent by contacting us; this does not affect processing already carried out lawfully.
We also process limited technical information to prevent spam, investigate abuse and keep the service secure. We rely on our legitimate interest in protecting visitors and the portal for these security purposes.
Who receives your information?
The listing professional receives your enquiry and contact details. Authorised Overleo administrators can access the stored enquiry to support its handling. Hosting, email and security service providers process information needed to operate their services. We may also disclose information where legally required.
We use Sys4net (GRUPO SYS4NET, S.L.) for website hosting and Mailgun for automated email delivery. Our Mailgun sending domain is configured in its EU region. Cloudflare Turnstile provides the security checks on enquiry and registration forms.
These providers process the information needed to deliver their services. For further information, see Sys4net’s service and data-processing terms, Mailgun’s data-protection information and Cloudflare’s Turnstile Privacy Addendum.
International processing
Mailgun and Cloudflare operate internationally. Mailgun’s EU sending region does not mean that all account information or all security services are processed exclusively in the European Economic Area. Their published data-protection terms describe the safeguards used for international transfers, including standard contractual clauses where applicable. You can contact us for information about safeguards relevant to your enquiry.
Spam protection
Our enquiry and registration forms use Cloudflare Turnstile to distinguish legitimate visitors from automated abuse. Cloudflare processes technical browser and network information for this check. Overleo validates the security response before accepting an enquiry and uses a short-lived, keyed hash of the connection address to limit repeated attempts.
Read Cloudflare’s privacy policy for information about its processing.
Telephone and WhatsApp
Clicking a telephone or WhatsApp link connects you directly with the listing professional. WhatsApp operates under its own privacy terms. An enquiry made through those channels is not automatically recorded in Overleo’s enquiry inbox.
How long we keep information
We retain Overleo’s database copy of an enquiry for 12 months from submission, then delete it through our scheduled cleanup. If an enquiry is needed for an unresolved complaint, a legal claim or a legal obligation, we retain it with restricted access for as long as that purpose requires and review the need for retention. Once the exception ends, an expired enquiry becomes eligible for cleanup.
Agencies are responsible for retention of copies they receive. Email messages, delivery logs and hosting backups are separate from the portal database and follow their own retention arrangements.
Your choices and rights
You may request access, correction, erasure, restriction or portability of your information where applicable, and object to processing based on legitimate interests. You may withdraw consent at any time. Contact our confirmed privacy address above to make a request. For information held separately by an advertiser, contact that professional directly.
You can complain to the Spanish Data Protection Agency (AEPD) or your competent supervisory authority.
Cookies and changes
Overleo uses technical services to operate the website and protect enquiry forms. Cloudflare Turnstile checks browser and network signals to detect automated abuse. WordPress uses authentication cookies when authorised users sign in. You can manage stored cookies through your browser settings; blocking essential technologies may affect sign-in or security checks.
We do not use email open pixels or click tracking in our Mailgun configuration. We will update this notice when the service or its providers change.