DATA PROTECTION
Privacy Policy
Last updated: 22 July 2026
1. Data controller
Data controller: Feng Yu
Project name: FENG Real Estate Advisory
Location: Castelldefels, Barcelona, Spain
Email:
hola@fengadvisory.com
2. Personal information that may be collected
When a person uses the contact form or communicates by email, WhatsApp or WeChat, the following information may be collected:
- Name.
- Email address.
- Telephone number or WhatsApp or WeChat identifier.
- Area of interest selected in the form.
- Any other information voluntarily included in the message.
Please do not send identity documents, banking information, medical information or other sensitive personal information through the initial contact form.
3. Purpose of processing
Information submitted will be used only to:
- Respond to the message received.
- Maintain the initial communication requested by the sender.
- Understand the general nature of the enquiry.
- Provide information about the future launch of FENG, only where the person has expressly requested it.
Submission of the form does not create a professional, contractual, agency, representation or advisory relationship.
Personal information will not be used for recurring marketing, commercial profiling or disclosure to third parties for advertising purposes without an additional appropriate legal basis.
4. Legal basis
Processing is based on the consent of the person contacting the website, expressed by voluntarily submitting the form or initiating communication by email, WhatsApp or WeChat.
Consent may be withdrawn at any time by writing to hola@fengadvisory.com .
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
5. Retention period
Personal information will be kept for as long as necessary to respond to the message and maintain the context of the initial communication.
When the communication has ended and the information is no longer needed, it will be deleted as part of periodic reviews, unless applicable law requires continued retention or there is a reasonable need to retain it in relation to potential liability.
6. Recipients and technology providers
Personal information will not be sold or disclosed to third parties for commercial marketing purposes.
Technology providers may process information on behalf of the data controller in order to operate the website, including hosting, forms, email and communications services.
This website uses Netlify for website hosting and form submissions. Netlify may process information submitted through the contact form as a technology provider supporting the operation of the website.
Email, WhatsApp or WeChat services may also process information where the person chooses to communicate through those channels. Each provider applies its own terms and privacy policy.
7. International data transfers
Some technology providers may process information in countries outside the European Economic Area.
Where applicable, such transfers should be made using the mechanisms and safeguards required under European data protection law.
8. Data protection rights
Where applicable, a person may request:
- Access to their personal information.
- Correction of inaccurate information.
- Deletion of their personal information.
- Restriction of processing.
- Objection to processing.
- Data portability.
To exercise these rights, write to hola@fengadvisory.com , explaining which right is being exercised and providing the information necessary to verify identity.
A complaint may also be submitted to the Spanish Data Protection Agency if a person believes that their information has not been handled in accordance with applicable law.
9. Security
Reasonable measures are applied to reduce the risk of unauthorised access, loss, alteration or improper disclosure of personal information.
However, no electronic transmission or storage system can guarantee absolute security.
10. Information relating to third parties
A person providing personal information about someone else should ensure that they have sufficient authority to do so and that the other person has been informed about this Privacy Policy.
11. Children
The contact form is not specifically intended for children.
Personal information relating to a child should not be submitted without the appropriate authorisation of their parent or legal guardian.
12. Updates to this policy
This Privacy Policy may be updated to reflect legal, technical or project-related changes.
The date of the latest update will appear at the top of this page.