Home · Privacy policy
Privacy policy
How we process the personal data you provide, for what purpose, for how long and what rights you have over it.
Last updated
October 2026
TG Global Invest is committed to protecting the privacy of those who visit this website and of those who contact us through it. This policy explains what personal data we process, for what purpose, for how long and what rights you have over it.
This policy has been prepared in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018, of 5 December, on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
1. Data controller
- Controller: Magnesio Finance 2025, S.L., trading as TG Global Invest
- Tax ID (NIF/CIF): B23940471
- Registered office: Avinguda Rei Jaume I, local 104 — Santa Ponsa, Calvià (Illes Balears, Spain)
- Contact address: Carrer Sant Jaume n.º 11, 1 — 07012 Palma de Mallorca (Illes Balears, Spain)
- Email: titangroup.gi@gmail.com
- Telephone: +34 653 339 315
2. What data we process
2.1. Data you provide to us
Through the contact form we collect:
| Data | Status |
|---|---|
| Type of situation or enquiry | Required |
| Name | Required |
| Email address | Required |
| Company or institution | Optional |
| Telephone | Optional |
| Location of the asset or project | Optional |
| Project description | Required |
| Acceptance of this policy | Required |
We also process the data you provide if you contact us by email or by telephone.
Important. In the project description field, we ask that you do not include special categories of personal data (health, political opinions, trade union membership, ethnic origin, biometric data) or identity or financial documentation. If the transaction requires that kind of information, we will request it later through a secure channel and with appropriate safeguards.
2.2. Browsing data
The web server automatically records technical data (IP address, browser type, pages visited, date and time) in the system logs, for security and operational reasons. These logs are not used to build profiles or for analytics.
This website does not use analytics tools, advertising pixels or social media buttons. Regarding cookies, please see the Cookie policy.
2.3. Third-party data you provide to us
If in your enquiry you provide us with data about other people (partners, representatives, co-owners, advisers), you warrant that you have previously informed them of the content of this policy and that you are entitled to disclose their data to us. Please limit yourself to strictly necessary data.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| To handle your enquiry and reply to you | Pre-contractual measures taken at the data subject's request (art. 6.1.b GDPR) and, where applicable, your consent (art. 6.1.a) |
| To assess the feasibility of the proposed transaction and put you in contact with the appropriate parties | Pre-contractual measures and performance of a contract (art. 6.1.b GDPR) |
| To manage the contractual relationship and the transaction | Performance of a contract (art. 6.1.b GDPR) |
| To comply with customer due diligence obligations on the prevention of money laundering | Compliance with a legal obligation (art. 6.1.c GDPR), Spanish Act 10/2010, of 28 April |
| To comply with accounting, tax and commercial obligations | Compliance with a legal obligation (art. 6.1.c GDPR) |
| To respond to requests from authorities and to bring or defend claims | Legal obligation and legitimate interest (arts. 6.1.c and 6.1.f GDPR) |
| To send you communications about services similar to those contracted | Legitimate interest (art. 6.1.f GDPR), with a right to object in every communication |
| To send you other commercial communications | Your consent (art. 6.1.a GDPR), revocable at any time |
On the prevention of money laundering. Professional intermediation in the purchase and sale of real estate is included among the obliged entities listed in article 2.1 of Spanish Act 10/2010, of 28 April, on the prevention of money laundering and terrorist financing. Where a transaction falls within its scope, we will be legally obliged to identify the parties involved, establish the source of funds and retain supporting documentation. These obligations are mandatory and do not depend on your consent, and complying with them may involve reporting information to the Spanish Executive Service of the Commission for the Prevention of Money Laundering (SEPBLAC) without it being possible to inform you beforehand.
4. How long we keep your data
| Case | Period |
|---|---|
| Enquiries that do not lead to a contractual relationship | 1 year from the last contact |
| Client and transaction data | For the duration of the relationship and, thereafter, the limitation period for any resulting actions (generally 5 years; 15 years for personal actions predating the 2015 reform) |
| Documentation subject to Act 10/2010 (prevention of money laundering) | 10 years, in accordance with article 25 of that Act |
| Accounting and tax documentation | The periods laid down in commercial and tax legislation (generally 6 years commercial and 4 years tax, extendable) |
| Data processed with your consent for communications | Until you withdraw your consent |
Once these periods have elapsed, the data is deleted or blocked, remaining available solely to judges, courts, the Public Prosecutor's Office and the competent authorities until any potential liabilities have lapsed.
5. Who we share your data with
Your data may be disclosed to:
- Financial institutions, owners, investors or companies involved in the transaction, only where necessary to deal with your request and, where the nature of the transaction so requires, after a non-disclosure agreement (NDA) has been signed.
- Independent professionals (lawyers, tax advisers, architects, engineers, notaries, registries) whose involvement is necessary.
- Public authorities where there is a legal obligation, including SEPBLAC under Act 10/2010.
- Service providers acting as data processors (web hosting, email, IT maintenance, advisory services), with whom the contracts required by article 28 GDPR have been signed.
We do not sell or disclose your data to third parties for advertising purposes.
6. International data transfers
We do not carry out international data transfers. The fonts and all other resources on this website are served from our own server, so your browsing does not generate any connection with third countries or external providers.
Should any transfer become necessary in the future, you will be informed in advance and the safeguards set out in Chapter V GDPR will be applied.
Please note that, given the controller's activity, parties established outside the European Economic Area may be involved in specific transactions. In such cases you will be specifically informed before any disclosure of data.
7. Your rights
You may exercise the following rights at any time:
- Access: to know what data of yours we process.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to request deletion where the data is no longer necessary.
- Objection: to object to certain processing, including the sending of commercial communications.
- Restriction: to request restriction of processing in the cases provided for.
- Portability: to receive your data in a structured format or have it transmitted to another controller.
- To withdraw consent given, without affecting the lawfulness of prior processing.
How to exercise them: write to titangroup.gi@gmail.com or to our contact address (Carrer Sant Jaume n.º 11, 1 — 07012 Palma de Mallorca), stating the right you are exercising and enclosing a copy of a document proving your identity. Exercising these rights is free of charge.
Please note that the rights of erasure and objection are not absolute: we will not be able to act on them where there is a legal obligation to retain the data, notably that of article 25 of Act 10/2010.
Complaint to the supervisory authority. If you consider that we have not dealt with your request properly, you may lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan 6, 28001 Madrid — www.aepd.es).
8. Information security
We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with article 32 GDPR, including encryption of communications by means of a TLS certificate, access control and restriction of processing to staff who need it.
The data you send us through the form is not stored in the website's database: it is sent directly by email to the controller's contact address.
No security measure is infallible. We recommend that you do not send particularly sensitive documentation by form or by ordinary email; where it is necessary, we will agree an appropriate channel with you.
9. Accuracy of data
You are responsible for the accuracy and currency of the data you provide to us and undertake to notify us of any change. We shall not be liable for the consequences of inaccurate, incomplete or out-of-date data provided by you.
10. Minors
This website and the services it offers are not aimed at children under 14, and we do not knowingly collect their data. If we detect that we have processed a minor's data without the corresponding authorisation, we will delete it.
11. Changes to this policy
We may update this policy to adapt it to regulatory changes or to new processing activities. The version in force is the one published on this website, stating the date it was last updated. If the changes are substantial, we will notify you through the contact details you have provided.