Privacy Policy

Last updated: 6 November 2026

Your privacy matters to us. This privacy policy explains how we collect, use, store and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Norwegian law.

This is an English translation of our Norwegian privacy policy. Where the two differ, the Norwegian version applies.

1. Who we are

We are Las Colinas Nordic AS, and we are the controller of your personal data. If you have questions about how we handle your data, you can contact us at:

• Company name: Las Colinas Nordic AS
• Company registration number: 935 328 063
• Address: Ankerveien 36B, 0785 Oslo, Norway
• Email: post@lascolinas.no
• Telephone: +47 40 10 55 80

2. What personal data we collect

We collect the following types of personal data:

• Contact details: Name, email address, telephone number
• Usage data: Information about how you use our website, including IP address, browser type, operating system, pages visited, time of visit and referral sources
• Device data: Screen resolution, device type and language settings
• Communications: Emails, chat history or other correspondence you have with us
• Form data: Information you provide in contact forms, surveys or enquiry forms
• Property and transaction details: Information about the property you are considering or purchasing, including the Nota Simple where relevant, and the completion date
• Payment information: (where applicable) for processing transactions
• Advertising data: Information about which adverts you have seen or clicked, and actions you took after seeing an advert

3. How we use your personal data

We use your data for the following purposes:

• To deliver our services and respond to your enquiries
• For marketing and advertising, where you have given consent
• To measure the effect of our advertising campaigns on Meta (Facebook and Instagram) and Google
• To show you relevant adverts on social media and search engines
• To analyse and improve our website and services
• To create advertising audiences (including lookalike audiences)
• To avoid showing adverts to people already in contact with us
• To assess and arrange mortgage financing, where you ask for help with this and have given consent
• To comply with legal requirements

4. Legal basis for processing your data

We process your personal data on the following legal bases:

• Consent (GDPR art. 6(1)(a)): for marketing cookies, tracking pixels, newsletters, advertising targeting, and the transfer of data to our financing partner. You may withdraw your consent at any time.
• Contract (GDPR art. 6(1)(b)): for delivering services you have requested
• Legal obligation (GDPR art. 6(1)(c)): for complying with laws and regulations
• Legitimate interest (GDPR art. 6(1)(f)): for necessary analytics cookies, security and service improvement. We have assessed that our interest does not override your rights.

5. Sharing of personal data

We share personal data with the following categories of recipient:

Advertising platforms

• Meta Platforms Ireland Limited. We use Meta Pixel and the Meta Conversions API to measure advertising performance and build audiences on Facebook and Instagram. Meta receives hashed (encrypted) contact details and information about your actions on the website. Meta acts as a joint controller for certain types of data. See Meta's privacy policy: www.facebook.com/privacy/policy
• Google Ireland Limited. We use Google Analytics 4, Google Ads and Google Tag Manager for analytics and advertising measurement. Google receives usage data and advertising interactions. See Google's privacy policy: policies.google.com/privacy

Marketing and CRM tools

• HubSpot Inc. We use HubSpot for customer relationship management, email communication and website forms. HubSpot stores contact details and communication history. See HubSpot's privacy policy: legal.hubspot.com/privacy-policy

Financing partner

• MBF Dreams S.L., trading as Habeno. NIF B67866657, Marbella, Spain. Habeno is a mortgage intermediary licensed and supervised by the Banco de España.

  If you want help assessing or arranging mortgage financing, we transfer data about you to Habeno. We transfer your name, contact details, details of the property (including the Nota Simple where relevant) and the completion date. The purpose is to assess and arrange mortgage financing.

  The legal basis is consent under GDPR art. 6(1)(a). Your consent is obtained before any data is transferred. You may withdraw your consent at any time by contacting us at post@lascolinas.no. Withdrawal stops any further transfer, but does not affect the lawfulness of processing that has already taken place.

  Once the data has been transferred, Habeno acts as an independent controller of its own processing of that data.

  Habeno's own privacy policy is available from us on request, or directly from Habeno.

Other recipients

• Suppliers and partners who help us deliver services (for example payment providers, IT services)
• Public authorities, where we are required to do so by law
• In the event of a business transfer, where personal data may pass to a new owner

All third parties we work with are required to process your data in accordance with GDPR.

6. Transfers outside the EU and EEA

Some of our processors may transfer personal data to countries outside the EU and EEA:

• HubSpot and Google may transfer data to the USA. Transfers are made under the EU Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework.
• Meta processes data primarily within the EU and EEA through Meta Platforms Ireland Limited.
• Habeno (MBF Dreams S.L.) is established in Spain and processes the data within the EU and EEA.

We ensure that all transfers have an adequate level of protection in accordance with GDPR Chapter V.

7. Storage and deletion of data

We store personal data only for as long as it is necessary for the purpose it was collected for. In practice:

• Contact details: Deleted after 12 months of inactivity
• Accounting records: Retained for 5 years in accordance with the Norwegian Bookkeeping Act
• Marketing consents: Deleted immediately on withdrawal
• Advertising and cookie data: Deleted in line with the retention periods set out in the cookie tables below
• CRM data (HubSpot): Retained for as long as the client relationship is active, then for 12 months
• Data transferred to Habeno: Habeno is an independent controller and sets its own retention period. Details are available from Habeno, or from us on request.

8. Your rights

You have the following rights under GDPR:

• Access: You may request a copy of your data
• Rectification: You may request correction of inaccurate data
• Erasure: You may request deletion of your data (with certain exceptions)
• Restriction: You may request that we restrict processing of your data
• Portability: You may request that your data is transferred to another service provider
• Objection: You may object to the use of your data for marketing
• Withdrawal of consent: You may withdraw consent you have given at any time

To exercise your rights, contact us at post@lascolinas.no.

9. Cookies and tracking technologies

We use cookies and similar technologies on our website. Cookies are small text files stored on your device when you visit the site.

Consent

We use Google Consent Mode V2 to manage your cookie consent. Marketing and analytics cookies are activated only after you have given consent. You may change your settings at any time through the cookie banner on the website.

Cookie categories

Necessary cookies. Required for the website to function. No consent needed.

Cookie	Provider	Purpose	Duration
__hs_cookie_cat_pref	HubSpot	Stores your cookie preferences	6 months
__cf_bm	Cloudflare (HubSpot)	Protection against automated traffic	30 minutes
_cfuvid	Cloudflare (HubSpot)	Security, distinguishes visitors	Session
_GRECAPTCHA	Google reCAPTCHA	Protects the forms against abuse	6 months

Analytics cookies. Help us understand how visitors use the site. Consent required.

Cookie	Provider	Purpose	Duration
_ga	Google Analytics	Distinguishes unique users	13 months
_ga_*	Google Analytics	Maintains session state (GA4)	13 months
__hstc	HubSpot	Tracks visitors over time	6 months
hubspotutk	HubSpot	Identifies visitors for form submissions	6 months
__hssc	HubSpot	Tracks sessions	30 minutes
__hssrc	HubSpot	Detects a new session	Session

Marketing cookies. Used to show relevant adverts and measure advertising performance. Consent required.

Cookie	Provider	Purpose	Duration
_fbp	Meta (Facebook)	Identifies browsers for ad targeting	3 months
_fbc	Meta (Facebook)	Tracks clicks from Facebook adverts	3 months
fr	Meta (Facebook)	Ad delivery and measurement	3 months

Tracking pixels

Meta Pixel. We use Meta Pixel (pixel ID: 1687702625487709) on our website to:

• Measure the effect of adverts we run on Facebook and Instagram
• Build audiences for advertising (retargeting)
• Optimise ad delivery
• Track actions such as page views, contact form submissions and property views

Meta Pixel is activated only when you have consented to marketing cookies.

Meta Conversions API (CAPI). In addition to Meta Pixel, we use server side tracking through the Meta Conversions API. This sends anonymised event data directly from our server to Meta, and includes a hashed (encrypted) email address if you have completed a form. The purpose is accurate measurement, including for users with ad blockers or restricted cookies.

How to manage cookies

• You can change your consent settings through the cookie banner on the website
• You can delete cookies through your browser settings
• You can opt out of Meta's personalised adverts at: www.facebook.com/adpreferences
• You can opt out of Google's personalised adverts at: adssettings.google.com

10. Security measures

We take data security seriously and have put measures in place to protect your personal data, including:

• Encryption of sensitive data (SSL/TLS)
• Restricted access to personal data
• Regular security reviews
• Hashing (SHA-256) of personal data before transfer to advertising platforms
• Use of Google Consent Mode V2 to respect your consent choices

11. Changes to this privacy policy

We may update this policy as needed. Material changes will be notified by email or on our website. Changes will be published on this page with an updated date.

12. Contact

If you have questions about how we handle your data, contact us at:

• Email: post@lascolinas.no
• Telephone: +47 40 10 55 80
• Address: Ankerveien 36B, 0785 Oslo, Norway

If you believe we have not complied with GDPR, you may complain to the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no

Important information

The information provided is for general guidance and may contain errors or be incomplete in certain situations. We accept no liability for inaccuracies or changes. For full peace of mind, buyers are always advised to seek advice from their own independent legal, tax and financial advisors before making a decision.

Las Colinas Nordic AS

post@lascolinas.no / +47 40 10 55 80