BALEARDATA · RIAPRO LLC
Privacy policy
Last updated: 29 October 2026
1. Data controller and contact
RIAPRO LLC is the identified controller of the personal data processed by Baleardata.
RIAPRO LLC
U.S. federal tax identification number (EIN): 30-1512282.
412 W 7th St, Clovis, NM 88101, United States.
Contact: legal@riapro.com.
To exercise your rights or ask how your data is used, put ‘Privacidad Baleardata’ (Baleardata privacy) in the subject line. You can also write to the postal address given.
2. What data is processed when you visit this website
The hosting provider receives the technical data needed to serve the pages: IP address, date and time, resource requested, browser information and request data. OVHcloud may keep operational, security and diagnostic logs.
The map requests images from OpenStreetMap's servers. When you load or move it, the provider receives your IP address, technical information about your browser, the origin baleardata.com and the map images requested. Those images correspond to the visible area and may make it possible to work out which area you are looking at. We do not send your email address or the content of the report to the map.
We do not request GPS location, camera or microphone access. Leaflet files, styles and scripts are hosted on the site itself. We do not install advertising analytics or audience-tracking tools, and we do not send queries to artificial intelligence providers.
Personal search and accounts are closed on the public website. Typing in the search box does not create a report or send a query to Catastro in this public version. The example does not contain data about any user's property.
3. If you write to us
We process your email address, the content of your message and the data needed to reply, handle an issue or deal with a rights request. We do not use a legal or privacy enquiry to sign you up for advertising.
Please avoid sending identity documents, financial information or other people's data unless necessary. If we need to verify your identity, we will only ask for information that is proportionate to the case.
4. Purposes and legal bases
| Purpose | Data | Legal basis under the GDPR |
|---|---|---|
| Serving and protecting the website | Technical request data and security logs | Legitimate interest in maintaining a functional and secure site, balanced against the visitor's rights |
| Displaying the street map | Technical data and the map area requested | Legitimate interest in providing the website's map context; the provider gives information about its own processing |
| Replying to an enquiry | Email and message | Legitimate interest in replying to the communication you requested; legal obligation where it concerns a right we must respond to |
| Handling rights requests or legal obligations | Information needed for the request | Compliance with an applicable legal obligation |
If purposes requiring consent are added, consent will be requested before they are activated. Consent is not presumed from visiting the website.
5. Hosting, map and recipients
OVHcloud provides the hosting and receives the requests needed to serve the website. The OpenStreetMap Foundation manages the map services used and applies its privacy policy. Links to other organisations open under their own policies; we do not control their pages.
We do not sell personal data. Communications are handled by the controller and by the providers needed to receive and reply to them. Information about the specific email providers will be given where relevant to a request. Data may also be disclosed to authorities where there is a legal obligation to do so.
6. International scope
RIAPRO LLC is identified as being in the United States. A communication you send to the company may be received or handled there. The corporate address does not, on its own, determine where each piece of data is stored or accessed from. OpenStreetMap reports a worldwide network of cache servers for map images: the server used depends on its distribution network at the time of the request. We do not guarantee that all map requests remain within the European Economic Area.
No claim is made that RIAPRO LLC participates in an adequacy framework, or that contractual clauses or any other safeguard exist that are not documented. You can request, by writing to legal@riapro.com information about the recipients and safeguards applicable to a specific processing activity. The review of safeguards also applies to current processing, not only to a future launch of accounts. The available documentation does not identify a representative in the European Union, nor does it establish an exemption; this point requires determining the actual establishment and the scope of the processing. This policy is not presented as proof that these requirements have been met.
7. How long information is kept
Technical logs follow the hosting provider's retention cycle and security and diagnostic needs. The provider's actual retention period is pending confirmation. If you request information about logs of your visit, we will ask the provider and tell you what can be verified; we do not state a period that has not been confirmed.
Communications are kept while the enquiry is being resolved and, if necessary, for the periods of applicable legal obligations or claims. They are then deleted, or kept with restricted access where evidence of an obligation must be retained. No copies of messages are made for marketing.
8. Your rights
Under the GDPR, you can request access, rectification, erasure, restriction, objection and, where applicable, portability. You can object to processing based on legitimate interest and withdraw consent without affecting the lawfulness of processing carried out before the withdrawal.
Send your request to legal@riapro.com, explaining the right and the data it relates to. You do not need to automatically attach a copy of your identity document. A reply will normally be given within one month; if a legal extension is needed due to the complexity or number of requests, you will be informed within that first month.
You can lodge a complaint with the competent data protection authority. In Spain, this is the Agencia Española de Protección de Datos.
9. Accounts and reports
Account access uses your email and single-use links that expire after 30 minutes. We store your email, access identifiers and orders so you can view your reports. Sales are not active yet.
Address and reference searches query public cadastral data. We do not retrieve protected owner data. Reviewed reports preserve retrieved facts, sources, dates and the approved version. Account and order records are stored on the OVH-hosted Baleardata server outside the public web directory. Emails are submitted to the hosting mail service for sending.
Account reports are private by default. If you enable a sharing link, anyone with that link can read the report; you can disable it. Disabling a link does not delete downloaded copies. Do not share account access links. An access link expiring does not automatically delete orders or reports.
10. Automated decisions and changes
The public website does not make automated decisions with legal or similarly significant effects on people. Questions or indicators about a property do not decide eligibility, access to housing, insurance or financing.
If the processing changes, this policy will be updated and you will be informed before any purposes requiring a new choice are applied.